last executing test programs: 15.062019887s ago: executing program 3 (id=2483): r0 = socket$kcm(0x29, 0x4, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x4, 0x0, &(0x7f0000000100)="e0b9547e", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc040ca1800004000000000000000010003a0e0037000f001e0bbc82a91401eb", 0x2e}], 0x1}, 0x0) r5 = gettid() perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xd, 0x8, 0x8, 0x5, 0x0, 0x80000000, 0x2002, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffafe5, 0x0, @perf_config_ext={0x100000000, 0xfffffffffffff819}, 0x2000, 0x1, 0x0, 0x5, 0x2, 0x2, 0x8001, 0x0, 0xd2, 0x0, 0xfb}, r5, 0x3, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r6, 0x29, 0x15, &(0x7f0000000100), 0x3d) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f0000001ec0)=""/4083, 0xff3}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000180)=""/240, 0xf0}], 0x4}, 0x100) sendmsg$inet(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x1}, 0x28) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="c00e020023000b02d25a806f8c6394f90724fc60040f03004700000005", 0x1d}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000040000511d25a80648c63940d0324fc60040035400c0002", 0x1b}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33) 13.229800597s ago: executing program 3 (id=2485): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006400002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x1, 0x1}], 0x10}, 0x1) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000061) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x84, 0x6, 0xff, 0x3, 0x0, 0x4, 0x102, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000200), 0x4}, 0x110000, 0xc000000000000000, 0x2, 0x5, 0x7, 0x5, 0x6, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$kcm(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x40047452, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3b) 12.650163794s ago: executing program 3 (id=2490): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d71, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYRES32], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0xc}, 0x94) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f086dd47e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 12.454470276s ago: executing program 3 (id=2492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socketpair(0x23, 0x2, 0x0, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x2000000000000041, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000000c0)='mm_page_alloc\x00', r2, 0x0, 0x7}, 0xd) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 12.289550577s ago: executing program 3 (id=2493): r0 = socket$kcm(0x29, 0x4, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x4, 0x0, &(0x7f0000000100)="e0b9547e", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc040ca1800004000000000000000010003a0e0037000f001e0bbc82a91401eb", 0x2e}], 0x1}, 0x0) r5 = gettid() perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xd, 0x8, 0x8, 0x5, 0x0, 0x80000000, 0x2002, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffafe5, 0x0, @perf_config_ext={0x100000000, 0xfffffffffffff819}, 0x2000, 0x1, 0x0, 0x5, 0x2, 0x2, 0x8001, 0x0, 0xd2, 0x0, 0xfb}, r5, 0x3, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r6, 0x29, 0x15, &(0x7f0000000100), 0x3d) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f0000001ec0)=""/4083, 0xff3}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000180)=""/240, 0xf0}], 0x4}, 0x100) sendmsg$inet(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x1}, 0x28) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="c00e020023000b02d25a806f8c6394f90724fc60040f03004700000005", 0x1d}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000040000511d25a80648c63940d0324fc60040035400c0002", 0x1b}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33) 11.677907284s ago: executing program 3 (id=2496): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$kcm(0x2, 0x5, 0x84) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x9, &(0x7f00000001c0), 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002200)={@fallback, 0xffffffffffffffff, 0x16, 0x30}, 0x20) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r6, r5}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000140)={r0, r5}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r7}, 0x18) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r1}, 0x4) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, 0x0) 3.65959294s ago: executing program 1 (id=2537): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x2, 0x0, 0x0, 0x9, 0x660b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307b82, 0x1, @perf_bp={&(0x7f0000000300), 0x9}, 0x8000, 0x5, 0x800, 0x3, 0x9, 0x6, 0x2, 0x0, 0x1, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, r2, 0xa) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8], 0x9a) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x44080) sendmsg(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x8a7, 0x1}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000780), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800f800000600000000000000000000181100000e7b1b50cae525a4c826cd70d59c5b336c6886c80642d7a4cc5ff350d96c9cc324f4094079ac18d4b19fd94b0000000000000003a115811f370414f82424b8fda4789d4895b29c6ff9", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1d}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={r6}, 0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r7, 0x400454e2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.231942605s ago: executing program 1 (id=2540): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006400002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x1, 0x1}], 0x10}, 0x1) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000061) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x84, 0x6, 0xff, 0x3, 0x0, 0x4, 0x102, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000200), 0x4}, 0x110000, 0xc000000000000000, 0x2, 0x5, 0x7, 0x5, 0x6, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) r4 = socket$kcm(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x40047452, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3b) 2.989505848s ago: executing program 2 (id=2542): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x1000, 0xc2, &(0x7f0000000380)=""/194, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x2, 0x3, 0x6, 0x1a}], 0x10, 0x5ba2}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x9fe, 0x452}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x80000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x7d, 0xa, 0x5, 0x4, 0x0, 0x5, 0x2000, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x1, @perf_bp={&(0x7f0000000240), 0x4}, 0x3, 0x2, 0x2400, 0xc, 0x2, 0x80, 0x3, 0x0, 0x157, 0x0, 0x8}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040), 0x4) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2062) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2000, 0x20800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800cac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 2.090993668s ago: executing program 1 (id=2544): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x18, 0x1, 0x1, "fd3d"}], 0x18}, 0x1) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000061) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x8, 0x1, 0x40000, 0x0, 0xffff}, 0x0, 0x200, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0xbbc7739c8c4950e6, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x100000007f, 0x442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x1000000200, 0x4, 0x9, 0x0, 0x400000a, 0xf, 0x0, 0x5, 0x0, 0x63}, 0x0, 0x1, r5, 0x1) r6 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x84, 0x6, 0xff, 0x3, 0x0, 0x4, 0x102, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000200), 0x4}, 0x110000, 0xc000000000000000, 0x2, 0x5, 0x7, 0x5, 0x6, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xf7) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000290000000400000002"], 0x50) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x40047452, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x3b) 2.036545578s ago: executing program 0 (id=2545): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e10000000000000000008500000053000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) (async) r2 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x3, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 32) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) (async) r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000040), 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000e00)='cpuset.mems\x00', 0x2, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00}, 0x94) (async) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB='N-N:N/8'], 0x6a) (async) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe, 0x0, &(0x7f0000000440)="0000000000000060145b4ebeada5", 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) 2.005477808s ago: executing program 2 (id=2546): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 1.84160117s ago: executing program 1 (id=2547): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x2, 0x0, 0x0, 0x9, 0x660b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307b82, 0x1, @perf_bp={&(0x7f0000000300), 0x9}, 0x8000, 0x5, 0x800, 0x3, 0x9, 0x6, 0x2, 0x0, 0x1, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, r2, 0xa) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8], 0x9a) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x44080) sendmsg(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x8a7, 0x1}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000780), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800f800000600000000000000000000181100000e7b1b50cae525a4c826cd70d59c5b336c6886c80642d7a4cc5ff350d96c9cc324f4094079ac18d4b19fd94b0000000000000003a115811f370414f82424b8fda4789d4895b29c6ff9", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1d}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={r6}, 0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r7, 0x400454e2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.84108583s ago: executing program 2 (id=2548): r0 = socket$kcm(0x29, 0x4, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc040ca1800004000000000000000010003a0e0037000f001e0bbc82a91401eb", 0x2e}], 0x1}, 0x0) r5 = gettid() perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xd, 0x8, 0x8, 0x5, 0x0, 0x80000000, 0x2002, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffafe5, 0x0, @perf_config_ext={0x100000000, 0xfffffffffffff819}, 0x2000, 0x1, 0x0, 0x5, 0x2, 0x2, 0x8001, 0x0, 0xd2, 0x0, 0xfb}, r5, 0x3, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r6, 0x29, 0x15, &(0x7f0000000100), 0x3d) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f0000001ec0)=""/4083, 0xff3}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000180)=""/240, 0xf0}], 0x4}, 0x100) sendmsg$inet(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x1}, 0x28) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="c00e020023000b02d25a806f8c6394f90724fc60040f03004700000005", 0x1d}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000040000511d25a80648c63940d0324fc60040035400c0002", 0x1b}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33) 1.82773948s ago: executing program 0 (id=2549): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000c4003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000001040)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 1.586805293s ago: executing program 0 (id=2550): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, 0x0, 0x1) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x40000061) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x8, 0x1, 0x40000, 0x0, 0xffff}, 0x0, 0x200, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x1, r2, 0x1) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x84, 0x6, 0xff, 0x3, 0x0, 0x4, 0x102, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000200), 0x4}, 0x110000, 0xc000000000000000, 0x2, 0x5, 0x7, 0x5, 0x6, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 1.524420403s ago: executing program 1 (id=2551): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006400002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x1, 0x1}], 0x10}, 0x1) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000061) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x84, 0x6, 0xff, 0x3, 0x0, 0x4, 0x102, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000200), 0x4}, 0x110000, 0xc000000000000000, 0x2, 0x5, 0x7, 0x5, 0x6, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) r4 = socket$kcm(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x40047452, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3b) 1.410743774s ago: executing program 0 (id=2552): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280), 0xffffffffffffff4b) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x2000002, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000bc0)={&(0x7f0000000200)=@phonet, 0x80, &(0x7f0000000a80)=[{0x0}, {&(0x7f0000000940)=""/159, 0x9f}, {&(0x7f0000000a00)=""/121, 0x79}, {&(0x7f0000000580)=""/26, 0x1a}], 0x4}, 0x0) 1.359705645s ago: executing program 2 (id=2553): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000480)) r0 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d71, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x8c0}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) 1.018111059s ago: executing program 2 (id=2554): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x18, 0x1, 0x1, "fd3d"}], 0x18}, 0x1) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000061) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x8, 0x1, 0x40000, 0x0, 0xffff}, 0x0, 0x200, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0xbbc7739c8c4950e6, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x100000007f, 0x442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x1000000200, 0x4, 0x9, 0x0, 0x400000a, 0xf, 0x0, 0x5, 0x0, 0x63}, 0x0, 0x1, r5, 0x1) r6 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x84, 0x6, 0xff, 0x3, 0x0, 0x4, 0x102, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000200), 0x4}, 0x110000, 0xc000000000000000, 0x2, 0x5, 0x7, 0x5, 0x6, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xf7) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000290000000400000002"], 0x50) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x40047452, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x3b) 977.216869ms ago: executing program 1 (id=2555): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x1000, 0xc2, &(0x7f0000000380)=""/194, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x2, 0x3, 0x6, 0x1a}], 0x10, 0x5ba2}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x9fe, 0x452}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x80000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x7d, 0xa, 0x5, 0x4, 0x0, 0x5, 0x2000, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x1, @perf_bp={&(0x7f0000000240), 0x4}, 0x3, 0x2, 0x2400, 0xc, 0x2, 0x80, 0x3, 0x0, 0x157, 0x0, 0x8}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040), 0x4) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2062) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2000, 0x20800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800cac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 455.870605ms ago: executing program 2 (id=2556): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1700000007000000ec04009ac0f9ab6fe04969e50000ff000000000000", @ANYRES32=0x1, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 273.768027ms ago: executing program 0 (id=2557): r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty=0x4000}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000) 0s ago: executing program 0 (id=2558): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) (fail_nth: 4) kernel console output (not intermixed with test programs): entered forwarding state [ 423.576691][T10844] bridge0: entered promiscuous mode [ 423.585541][T10843] netlink: 'syz.1.1789': attribute type 29 has an invalid length. [ 423.604038][T10847] netlink: 'syz.1.1789': attribute type 29 has an invalid length. [ 423.634772][T10848] netlink: 'syz.3.1787': attribute type 29 has an invalid length. [ 423.735234][T10850] delete_channel: no stack [ 424.444838][T10859] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1792'. [ 424.546515][T10868] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1795'. [ 424.678288][T10868] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1795'. [ 424.695458][T10870] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1795'. [ 424.715281][T10870] tc_dump_action: action bad kind [ 424.720807][T10866] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1795'. [ 424.870121][T10871] delete_channel: no stack [ 424.877086][T10876] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.884345][T10876] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.915171][T10876] bridge0: left promiscuous mode [ 425.175565][T10895] validate_nla: 2 callbacks suppressed [ 425.175591][T10895] netlink: 'syz.3.1806': attribute type 10 has an invalid length. [ 425.192101][T10890] delete_channel: no stack [ 425.272123][T10902] netlink: 'syz.1.1808': attribute type 29 has an invalid length. [ 425.288898][T10902] netlink: 'syz.1.1808': attribute type 29 has an invalid length. [ 425.380864][T10401] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 425.418555][T10902] netlink: 'syz.1.1808': attribute type 29 has an invalid length. [ 425.504481][T10902] netlink: 'syz.1.1808': attribute type 29 has an invalid length. [ 425.625593][T10907] netlink: 'syz.1.1808': attribute type 29 has an invalid length. [ 425.915015][T10911] tc_dump_action: action bad kind [ 426.191454][T10919] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.198775][T10919] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.211757][T10919] bridge0: left promiscuous mode [ 426.217184][T10912] delete_channel: no stack [ 426.517103][T10928] FAULT_INJECTION: forcing a failure. [ 426.517103][T10928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.573320][T10928] CPU: 0 PID: 10928 Comm: syz.3.1815 Not tainted syzkaller #0 [ 426.580858][T10928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 426.590962][T10928] Call Trace: [ 426.594276][T10928] [ 426.597237][T10928] dump_stack_lvl+0x16c/0x230 [ 426.601973][T10928] ? show_regs_print_info+0x20/0x20 [ 426.607229][T10928] ? load_image+0x3b0/0x3b0 [ 426.611789][T10928] ? __might_fault+0xaa/0x120 [ 426.616506][T10928] ? __lock_acquire+0x7c80/0x7c80 [ 426.621570][T10928] should_fail_ex+0x39d/0x4d0 [ 426.626288][T10928] _copy_from_iter+0x1d3/0x1290 [ 426.631163][T10928] ? __might_fault+0xaa/0x120 [ 426.635877][T10928] ? _copy_from_iter+0x248/0x1290 [ 426.640914][T10928] ? __virt_addr_valid+0x18c/0x540 [ 426.646041][T10928] ? __lock_acquire+0x7c80/0x7c80 [ 426.651077][T10928] ? copyout_mc+0x70/0x70 [ 426.655430][T10928] ? copyout_mc+0x70/0x70 [ 426.659788][T10928] ? __virt_addr_valid+0x18c/0x540 [ 426.664930][T10928] ? page_copy_sane+0x16a/0x270 [ 426.669808][T10928] copy_page_from_iter+0x7b/0x100 [ 426.674861][T10928] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 426.680700][T10928] unix_stream_sendmsg+0x549/0xba0 [ 426.685868][T10928] ? unix_show_fdinfo+0x270/0x270 [ 426.690899][T10928] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 426.697601][T10928] ? aa_sock_msg_perm+0x94/0x150 [ 426.702559][T10928] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 426.707862][T10928] ? security_socket_sendmsg+0x80/0xa0 [ 426.713333][T10928] ? unix_show_fdinfo+0x270/0x270 [ 426.718370][T10928] ____sys_sendmsg+0x5bf/0x950 [ 426.723166][T10928] ? __asan_memset+0x22/0x40 [ 426.727784][T10928] ? __sys_sendmsg_sock+0x30/0x30 [ 426.732820][T10928] ? __import_iovec+0x5f2/0x860 [ 426.737707][T10928] ? import_iovec+0x73/0xa0 [ 426.742231][T10928] ___sys_sendmsg+0x220/0x290 [ 426.746928][T10928] ? __sys_sendmsg+0x270/0x270 [ 426.751756][T10928] ? __lock_acquire+0x7c80/0x7c80 [ 426.756853][T10928] __se_sys_sendmsg+0x1a5/0x270 [ 426.761717][T10928] ? perf_trace_preemptirq_template+0x281/0x340 [ 426.767976][T10928] ? __x64_sys_sendmsg+0x80/0x80 [ 426.772962][T10928] ? lockdep_hardirqs_on+0x98/0x150 [ 426.778179][T10928] do_syscall_64+0x55/0xb0 [ 426.782609][T10928] ? clear_bhb_loop+0x40/0x90 [ 426.787291][T10928] ? clear_bhb_loop+0x40/0x90 [ 426.791988][T10928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.797895][T10928] RIP: 0033:0x7fd76bb8efc9 [ 426.802319][T10928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.821943][T10928] RSP: 002b:00007fd76ca95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.830375][T10928] RAX: ffffffffffffffda RBX: 00007fd76bde6090 RCX: 00007fd76bb8efc9 [ 426.838360][T10928] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 426.846338][T10928] RBP: 00007fd76ca95090 R08: 0000000000000000 R09: 0000000000000000 [ 426.854312][T10928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 426.862287][T10928] R13: 00007fd76bde6128 R14: 00007fd76bde6090 R15: 00007ffe02d9e828 [ 426.870303][T10928] [ 427.106599][T10933] delete_channel: no stack [ 427.110718][ T3465] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 427.175756][T10940] FAULT_INJECTION: forcing a failure. [ 427.175756][T10940] name failslab, interval 1, probability 0, space 0, times 0 [ 427.200186][T10940] CPU: 1 PID: 10940 Comm: syz.0.1820 Not tainted syzkaller #0 [ 427.207691][T10940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 427.217771][T10940] Call Trace: [ 427.221062][T10940] [ 427.224002][T10940] dump_stack_lvl+0x16c/0x230 [ 427.228713][T10940] ? show_regs_print_info+0x20/0x20 [ 427.233934][T10940] ? load_image+0x3b0/0x3b0 [ 427.238472][T10940] should_fail_ex+0x39d/0x4d0 [ 427.243265][T10940] should_failslab+0x9/0x20 [ 427.247786][T10940] slab_pre_alloc_hook+0x59/0x310 [ 427.252845][T10940] kmem_cache_alloc+0x5a/0x2e0 [ 427.257629][T10940] ? dst_alloc+0x105/0x170 [ 427.262062][T10940] dst_alloc+0x105/0x170 [ 427.266321][T10940] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 427.272404][T10940] ? ip_route_output_key_hash_rcu+0x1351/0x2360 [ 427.278664][T10940] ? ip_route_output_key_hash+0x12f/0x340 [ 427.284483][T10940] ip_route_output_key_hash+0x20b/0x340 [ 427.290047][T10940] ? ip_route_input_rcu+0x3010/0x3010 [ 427.295446][T10940] ? __lock_acquire+0x7c80/0x7c80 [ 427.300484][T10940] ? tomoyo_check_acl+0x37c/0x3f0 [ 427.305535][T10940] ip_route_output_flow+0x2a/0x150 [ 427.310671][T10940] ? security_sk_classify_flow+0x7b/0x90 [ 427.316328][T10940] raw_sendmsg+0x1093/0x1950 [ 427.320959][T10940] ? compat_raw_ioctl+0x70/0x70 [ 427.325862][T10940] ? aa_sk_perm+0x7fc/0x930 [ 427.330393][T10940] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 427.336840][T10940] ? sock_rps_record_flow+0x19/0x400 [ 427.342150][T10940] ? inet_send_prepare+0x260/0x260 [ 427.347285][T10940] ? inet_sendmsg+0x7c/0x2f0 [ 427.351894][T10940] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 427.357200][T10940] ? security_socket_sendmsg+0x80/0xa0 [ 427.362677][T10940] ? inet_send_prepare+0x260/0x260 [ 427.367823][T10940] ____sys_sendmsg+0x5bf/0x950 [ 427.372623][T10940] ? __asan_memset+0x22/0x40 [ 427.377244][T10940] ? __sys_sendmsg_sock+0x30/0x30 [ 427.382290][T10940] ? __import_iovec+0x3fa/0x860 [ 427.387163][T10940] ? import_iovec+0x73/0xa0 [ 427.391685][T10940] ___sys_sendmsg+0x220/0x290 [ 427.396374][T10940] ? __sys_sendmsg+0x270/0x270 [ 427.401152][T10940] ? __lock_acquire+0x7c80/0x7c80 [ 427.406195][T10940] __se_sys_sendmsg+0x1a5/0x270 [ 427.411050][T10940] ? __x64_sys_sendmsg+0x80/0x80 [ 427.415999][T10940] ? lockdep_hardirqs_on+0x98/0x150 [ 427.421195][T10940] do_syscall_64+0x55/0xb0 [ 427.425701][T10940] ? clear_bhb_loop+0x40/0x90 [ 427.430370][T10940] ? clear_bhb_loop+0x40/0x90 [ 427.435050][T10940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 427.440936][T10940] RIP: 0033:0x7fc342d8efc9 [ 427.445344][T10940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.464954][T10940] RSP: 002b:00007fc340ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.473361][T10940] RAX: ffffffffffffffda RBX: 00007fc342fe5fa0 RCX: 00007fc342d8efc9 [ 427.481326][T10940] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003 [ 427.489288][T10940] RBP: 00007fc340ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 427.497260][T10940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.505224][T10940] R13: 00007fc342fe6038 R14: 00007fc342fe5fa0 R15: 00007fff9e8798d8 [ 427.513203][T10940] [ 427.583319][T10947] __nla_validate_parse: 6 callbacks suppressed [ 427.583356][T10947] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1822'. [ 427.667513][T10947] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1822'. [ 427.799844][T10950] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1823'. [ 427.814943][T10946] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1822'. [ 427.964261][T10947] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1822'. [ 428.003816][T10947] tc_dump_action: action bad kind [ 428.013010][T10951] delete_channel: no stack [ 428.783178][T10963] delete_channel: no stack [ 429.152983][T10985] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1835'. [ 429.732801][T10975] delete_channel: no stack [ 430.219390][T10974] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1833'. [ 430.232257][T10985] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1835'. [ 430.255161][T10986] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1835'. [ 430.286190][ T3465] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 430.294762][T10986] tc_dump_action: action bad kind [ 430.325475][T10989] FAULT_INJECTION: forcing a failure. [ 430.325475][T10989] name failslab, interval 1, probability 0, space 0, times 0 [ 430.338593][T10989] CPU: 0 PID: 10989 Comm: syz.2.1836 Not tainted syzkaller #0 [ 430.346074][T10989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 430.356152][T10989] Call Trace: [ 430.359449][T10989] [ 430.362400][T10989] dump_stack_lvl+0x16c/0x230 [ 430.367105][T10989] ? lock_chain_count+0x20/0x20 [ 430.371985][T10989] ? show_regs_print_info+0x20/0x20 [ 430.377214][T10989] ? load_image+0x3b0/0x3b0 [ 430.381767][T10989] should_fail_ex+0x39d/0x4d0 [ 430.386480][T10989] should_failslab+0x9/0x20 [ 430.391015][T10989] slab_pre_alloc_hook+0x59/0x310 [ 430.396335][T10989] kmem_cache_alloc+0x5a/0x2e0 [ 430.401121][T10989] ? __inet_hash_connect+0x828/0x18d0 [ 430.406637][T10989] __inet_hash_connect+0x828/0x18d0 [ 430.411862][T10989] ? inet_hash_connect+0x130/0x130 [ 430.416995][T10989] ? inet_bhash2_reset_saddr+0x80/0x80 [ 430.422472][T10989] tcp_v4_connect+0xca6/0x18d0 [ 430.427253][T10989] ? __stack_depot_save+0x1f/0x630 [ 430.432373][T10989] ? tcp_twsk_unique+0x990/0x990 [ 430.437313][T10989] __inet_stream_connect+0x2a8/0xe60 [ 430.442609][T10989] ? inet_dgram_connect+0x360/0x360 [ 430.447817][T10989] tcp_sendmsg_fastopen+0x3a7/0x5d0 [ 430.453020][T10989] tcp_sendmsg_locked+0x4555/0x4af0 [ 430.458213][T10989] ? verify_lock_unused+0x140/0x140 [ 430.463418][T10989] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 430.469141][T10989] ? mark_lock+0x94/0x320 [ 430.473466][T10989] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 430.479438][T10989] ? lock_chain_count+0x20/0x20 [ 430.484287][T10989] ? tcp_set_state+0x650/0x650 [ 430.489051][T10989] ? do_raw_spin_unlock+0x121/0x230 [ 430.494252][T10989] tcp_sendmsg+0x2f/0x50 [ 430.498520][T10989] smc_sendmsg+0x24b/0x4d0 [ 430.502934][T10989] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 430.508214][T10989] ? security_socket_sendmsg+0x80/0xa0 [ 430.513664][T10989] ? smc_getsockopt+0x370/0x370 [ 430.518510][T10989] ____sys_sendmsg+0x5bf/0x950 [ 430.523278][T10989] ? __asan_memset+0x22/0x40 [ 430.527897][T10989] ? __sys_sendmsg_sock+0x30/0x30 [ 430.532919][T10989] ? __import_iovec+0x3fa/0x860 [ 430.537776][T10989] ? import_iovec+0x73/0xa0 [ 430.542276][T10989] ___sys_sendmsg+0x220/0x290 [ 430.546957][T10989] ? __sys_sendmsg+0x270/0x270 [ 430.551733][T10989] ? __lock_acquire+0x7c80/0x7c80 [ 430.556772][T10989] __se_sys_sendmsg+0x1a5/0x270 [ 430.561622][T10989] ? perf_trace_preemptirq_template+0x281/0x340 [ 430.567865][T10989] ? __x64_sys_sendmsg+0x80/0x80 [ 430.572812][T10989] ? lockdep_hardirqs_on+0x98/0x150 [ 430.578015][T10989] do_syscall_64+0x55/0xb0 [ 430.582426][T10989] ? clear_bhb_loop+0x40/0x90 [ 430.587098][T10989] ? clear_bhb_loop+0x40/0x90 [ 430.591776][T10989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.597678][T10989] RIP: 0033:0x7f5b3718efc9 [ 430.602088][T10989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.621692][T10989] RSP: 002b:00007f5b380b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.630112][T10989] RAX: ffffffffffffffda RBX: 00007f5b373e5fa0 RCX: 00007f5b3718efc9 [ 430.638083][T10989] RDX: 000000003406c012 RSI: 0000200000000680 RDI: 0000000000000004 [ 430.646047][T10989] RBP: 00007f5b380b4090 R08: 0000000000000000 R09: 0000000000000000 [ 430.654008][T10989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.661968][T10989] R13: 00007f5b373e6038 R14: 00007f5b373e5fa0 R15: 00007ffe01298588 [ 430.669947][T10989] [ 430.843708][T10994] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1838'. [ 431.195423][T11005] delete_channel: no stack [ 431.236806][T11009] ref_ctr_offset mismatch. inode: 0x982 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 431.280263][T11012] ref_ctr_offset mismatch. inode: 0x982 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 431.371801][T11014] delete_channel: no stack [ 431.584096][T11027] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 431.590646][T11027] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 431.627353][T11021] netlink: 'syz.1.1849': attribute type 1 has an invalid length. [ 431.654315][T11021] netlink: 'syz.1.1849': attribute type 3 has an invalid length. [ 431.816953][T11040] netlink: 'syz.3.1853': attribute type 10 has an invalid length. [ 431.980659][T11045] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.987976][T11045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.995606][T11045] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.002785][T11045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.042198][T11045] bridge0: entered promiscuous mode [ 432.191780][T11047] tc_dump_action: action bad kind [ 433.264875][T11071] netlink: 'syz.0.1864': attribute type 10 has an invalid length. [ 433.273110][T11071] __nla_validate_parse: 6 callbacks suppressed [ 433.273144][T11071] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1864'. [ 433.332271][T11059] delete_channel: no stack [ 433.781524][T11090] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1860'. [ 433.798796][T11090] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1860'. [ 433.808893][T11086] delete_channel: no stack [ 433.825213][T11089] netlink: 'syz.2.1863': attribute type 1 has an invalid length. [ 433.844475][T11089] netlink: 'syz.2.1863': attribute type 3 has an invalid length. [ 433.845428][T11084] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1860'. [ 433.863113][T11089] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1863'. [ 433.891576][T11084] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1860'. [ 433.944193][T11084] tc_dump_action: action bad kind [ 434.082556][T11099] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1866'. [ 434.385509][T11102] delete_channel: no stack [ 434.440912][T11112] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.448242][T11112] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.467792][T11112] bridge0: left promiscuous mode [ 434.512565][T11112] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.519855][T11112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.527444][T11112] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.534700][T11112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.552148][T11112] bridge0: entered promiscuous mode [ 434.559107][T11119] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1870'. [ 434.587377][T11119] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1870'. [ 434.614294][T11115] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1870'. [ 434.656650][T11121] tc_dump_action: action bad kind [ 434.754550][T11127] netlink: 'syz.3.1873': attribute type 10 has an invalid length. [ 434.944421][T11133] netlink: 'syz.2.1877': attribute type 1 has an invalid length. [ 434.953821][T11133] netlink: 'syz.2.1877': attribute type 3 has an invalid length. [ 434.966880][T11128] delete_channel: no stack [ 435.322815][T11137] tc_dump_action: action bad kind [ 435.353873][T11141] delete_channel: no stack [ 436.139429][T11150] syz.3.1883[11150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 436.309579][T11160] netlink: 'syz.1.1888': attribute type 10 has an invalid length. [ 436.456407][T11163] delete_channel: no stack [ 436.759521][T11175] tc_dump_action: action bad kind [ 437.418383][T11182] delete_channel: no stack [ 437.889625][T11194] validate_nla: 2 callbacks suppressed [ 437.889671][T11194] netlink: 'syz.0.1900': attribute type 10 has an invalid length. [ 437.975521][T11195] delete_channel: no stack [ 438.036901][T11200] netlink: 'syz.1.1903': attribute type 1 has an invalid length. [ 438.055648][T11200] netlink: 'syz.1.1903': attribute type 3 has an invalid length. [ 438.219904][T11209] tc_dump_action: action bad kind [ 438.415838][T11214] delete_channel: no stack [ 438.758768][T11220] __nla_validate_parse: 25 callbacks suppressed [ 438.758904][T11220] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1909'. [ 438.759381][T11225] FAULT_INJECTION: forcing a failure. [ 438.759381][T11225] name failslab, interval 1, probability 0, space 0, times 0 [ 438.836044][T11225] CPU: 0 PID: 11225 Comm: syz.0.1910 Not tainted syzkaller #0 [ 438.843854][T11225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 438.853950][T11225] Call Trace: [ 438.857271][T11225] [ 438.860338][T11225] dump_stack_lvl+0x16c/0x230 [ 438.865075][T11225] ? show_regs_print_info+0x20/0x20 [ 438.870330][T11225] ? load_image+0x3b0/0x3b0 [ 438.874893][T11225] ? __might_sleep+0xe0/0xe0 [ 438.879534][T11225] ? __lock_acquire+0x7c80/0x7c80 [ 438.884628][T11225] should_fail_ex+0x39d/0x4d0 [ 438.889377][T11225] should_failslab+0x9/0x20 [ 438.893926][T11225] slab_pre_alloc_hook+0x59/0x310 [ 438.899016][T11225] kmem_cache_alloc_node+0x60/0x330 [ 438.904265][T11225] ? __alloc_skb+0x108/0x2c0 [ 438.908932][T11225] __alloc_skb+0x108/0x2c0 [ 438.913422][T11225] tipc_msg_build+0x14d/0xe80 [ 438.918165][T11225] ? tipc_node_find+0x3b1/0x470 [ 438.923066][T11225] ? tipc_node_find+0xb4/0x470 [ 438.927882][T11225] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 438.934010][T11225] ? tipc_nametbl_lookup_anycast+0xce/0x1020 [ 438.940027][T11225] ? tipc_nametbl_lookup_anycast+0x541/0x1020 [ 438.946127][T11225] __tipc_sendmsg+0x171c/0x2940 [ 438.951013][T11225] ? __perf_event_overflow+0x4f8/0x630 [ 438.956495][T11225] ? rht_unlock+0x1c0/0x1c0 [ 438.961052][T11225] ? perf_swevent_event+0x553/0x5c0 [ 438.966270][T11225] ? perf_tp_event+0x13a0/0x13a0 [ 438.971239][T11225] ? perf_tp_event+0x12d7/0x13a0 [ 438.976195][T11225] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 438.982001][T11225] ? mark_lock+0x94/0x320 [ 438.986363][T11225] ? trace_irq_disable+0xbf/0xe0 [ 438.991360][T11225] ? aa_label_sk_perm+0x3ec/0x500 [ 438.996445][T11225] ? wait_woken+0x180/0x180 [ 439.001014][T11225] __tipc_sendstream+0x101f/0x1260 [ 439.006157][T11225] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 439.011919][T11225] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 439.017916][T11225] ? lock_chain_count+0x20/0x20 [ 439.022789][T11225] ? tsk_advance_rx_queue+0x310/0x310 [ 439.028173][T11225] ? __local_bh_enable_ip+0x12e/0x1c0 [ 439.033551][T11225] ? _local_bh_enable+0xa0/0xa0 [ 439.038428][T11225] tipc_send_packet+0x7c/0x90 [ 439.043111][T11225] ? tipc_sk_send_ack+0x580/0x580 [ 439.048147][T11225] ____sys_sendmsg+0x5bf/0x950 [ 439.052941][T11225] ? __asan_memset+0x22/0x40 [ 439.057541][T11225] ? __sys_sendmsg_sock+0x30/0x30 [ 439.062598][T11225] ? __import_iovec+0x3fa/0x860 [ 439.067498][T11225] ? import_iovec+0x73/0xa0 [ 439.072034][T11225] ___sys_sendmsg+0x220/0x290 [ 439.076745][T11225] ? __sys_sendmsg+0x270/0x270 [ 439.081536][T11225] ? perf_trace_preemptirq_template+0x281/0x340 [ 439.087886][T11225] __se_sys_sendmsg+0x1a5/0x270 [ 439.092759][T11225] ? perf_trace_preemptirq_template+0x281/0x340 [ 439.099033][T11225] ? __x64_sys_sendmsg+0x80/0x80 [ 439.104021][T11225] ? lockdep_hardirqs_on+0x98/0x150 [ 439.109241][T11225] do_syscall_64+0x55/0xb0 [ 439.113697][T11225] ? clear_bhb_loop+0x40/0x90 [ 439.118405][T11225] ? clear_bhb_loop+0x40/0x90 [ 439.123113][T11225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.129029][T11225] RIP: 0033:0x7fc342d8efc9 [ 439.133457][T11225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.153078][T11225] RSP: 002b:00007fc340ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.161509][T11225] RAX: ffffffffffffffda RBX: 00007fc342fe5fa0 RCX: 00007fc342d8efc9 [ 439.169487][T11225] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000006 [ 439.177902][T11225] RBP: 00007fc340ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 439.185884][T11225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.193872][T11225] R13: 00007fc342fe6038 R14: 00007fc342fe5fa0 R15: 00007fff9e8798d8 [ 439.201924][T11225] [ 439.262039][T11229] netlink: 'syz.2.1911': attribute type 10 has an invalid length. [ 439.281599][T11229] dummy0: entered promiscuous mode [ 439.290731][T11229] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 439.466267][T11232] delete_channel: no stack [ 439.502473][T11239] netlink: 'syz.3.1916': attribute type 10 has an invalid length. [ 439.515376][T11239] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1916'. [ 439.669274][T11241] netlink: 'syz.2.1917': attribute type 1 has an invalid length. [ 439.681203][T11241] netlink: 'syz.2.1917': attribute type 3 has an invalid length. [ 439.690865][T11241] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1917'. [ 439.725267][T11246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1919'. [ 439.753365][T11246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1919'. [ 439.772841][T11251] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1919'. [ 439.788871][T11251] tc_dump_action: action bad kind [ 439.800516][T11245] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1919'. [ 439.875232][T11256] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 439.881913][T11256] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 439.901704][T11248] delete_channel: no stack [ 440.072450][T11267] netlink: 'syz.2.1923': attribute type 29 has an invalid length. [ 440.080976][T11267] netlink: 'syz.2.1923': attribute type 29 has an invalid length. [ 440.102940][T11267] netlink: 'syz.2.1923': attribute type 29 has an invalid length. [ 440.575841][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.582621][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.053237][T11268] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1924'. [ 441.252428][T11275] delete_channel: no stack [ 441.341755][T11284] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1930'. [ 441.380823][T11286] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1931'. [ 441.465430][T11288] tc_dump_action: action bad kind [ 441.566424][T11289] delete_channel: no stack [ 441.668948][T11301] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 441.675431][T11301] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 442.924882][T11321] validate_nla: 4 callbacks suppressed [ 442.924921][T11321] netlink: 'syz.2.1943': attribute type 1 has an invalid length. [ 442.945496][T11321] netlink: 'syz.2.1943': attribute type 3 has an invalid length. [ 442.984245][T11318] delete_channel: no stack [ 443.027864][T11323] netlink: 'syz.0.1944': attribute type 10 has an invalid length. [ 443.127693][T11325] tc_dump_action: action bad kind [ 443.156994][T11326] delete_channel: no stack [ 443.266875][T11334] FAULT_INJECTION: forcing a failure. [ 443.266875][T11334] name failslab, interval 1, probability 0, space 0, times 0 [ 443.294412][T11334] CPU: 1 PID: 11334 Comm: syz.0.1948 Not tainted syzkaller #0 [ 443.301948][T11334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 443.312037][T11334] Call Trace: [ 443.315335][T11334] [ 443.318291][T11334] dump_stack_lvl+0x16c/0x230 [ 443.323003][T11334] ? sctp_sendmsg+0x155c/0x27e0 [ 443.327893][T11334] ? ___sys_sendmsg+0x220/0x290 [ 443.332886][T11334] ? show_regs_print_info+0x20/0x20 [ 443.338134][T11334] ? load_image+0x3b0/0x3b0 [ 443.342707][T11334] should_fail_ex+0x39d/0x4d0 [ 443.347450][T11334] should_failslab+0x9/0x20 [ 443.351983][T11334] slab_pre_alloc_hook+0x59/0x310 [ 443.357048][T11334] ? sctp_add_bind_addr+0x8c/0x360 [ 443.362190][T11334] __kmem_cache_alloc_node+0x53/0x260 [ 443.367607][T11334] ? sctp_add_bind_addr+0x8c/0x360 [ 443.372752][T11334] kmalloc_trace+0x2a/0xe0 [ 443.377281][T11334] sctp_add_bind_addr+0x8c/0x360 [ 443.382244][T11334] sctp_copy_local_addr_list+0x30c/0x4e0 [ 443.387900][T11334] ? sctp_copy_local_addr_list+0x9c/0x4e0 [ 443.393642][T11334] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 443.399726][T11334] ? sctp_v6_is_any+0x64/0x70 [ 443.404421][T11334] ? sctp_copy_one_addr+0x8c/0x350 [ 443.409545][T11334] sctp_bind_addr_copy+0xb3/0x3c0 [ 443.414583][T11334] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 443.420920][T11334] sctp_connect_new_asoc+0x2da/0x690 [ 443.426223][T11334] ? __sctp_connect+0xd20/0xd20 [ 443.431074][T11334] ? __local_bh_enable_ip+0x12e/0x1c0 [ 443.436454][T11334] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 443.442006][T11334] ? security_sctp_bind_connect+0x89/0xb0 [ 443.447734][T11334] sctp_sendmsg+0x155c/0x27e0 [ 443.452445][T11334] ? sctp_getsockopt+0xb60/0xb60 [ 443.457405][T11334] ? aa_sk_perm+0x7fc/0x930 [ 443.461931][T11334] ? aa_af_perm+0x2b0/0x2b0 [ 443.466435][T11334] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 443.472861][T11334] ? sock_rps_record_flow+0x19/0x400 [ 443.478149][T11334] ? inet_send_prepare+0x260/0x260 [ 443.483261][T11334] ? inet_sendmsg+0xe9/0x2f0 [ 443.487853][T11334] ? inet_send_prepare+0x260/0x260 [ 443.492962][T11334] ____sys_sendmsg+0x5bf/0x950 [ 443.497745][T11334] ? __asan_memset+0x22/0x40 [ 443.502350][T11334] ? __sys_sendmsg_sock+0x30/0x30 [ 443.507378][T11334] ? __import_iovec+0x5f2/0x860 [ 443.512247][T11334] ? import_iovec+0x73/0xa0 [ 443.516762][T11334] ___sys_sendmsg+0x220/0x290 [ 443.521449][T11334] ? __sys_sendmsg+0x270/0x270 [ 443.526249][T11334] ? __lock_acquire+0x7c80/0x7c80 [ 443.531310][T11334] __se_sys_sendmsg+0x1a5/0x270 [ 443.536169][T11334] ? __x64_sys_sendmsg+0x80/0x80 [ 443.541133][T11334] ? lockdep_hardirqs_on+0x98/0x150 [ 443.546337][T11334] do_syscall_64+0x55/0xb0 [ 443.550753][T11334] ? clear_bhb_loop+0x40/0x90 [ 443.555435][T11334] ? clear_bhb_loop+0x40/0x90 [ 443.560111][T11334] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.566000][T11334] RIP: 0033:0x7fc342d8efc9 [ 443.570416][T11334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.590023][T11334] RSP: 002b:00007fc340ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.598443][T11334] RAX: ffffffffffffffda RBX: 00007fc342fe5fa0 RCX: 00007fc342d8efc9 [ 443.606415][T11334] RDX: 00000000000000c9 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 443.614385][T11334] RBP: 00007fc340ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 443.622357][T11334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.630328][T11334] R13: 00007fc342fe6038 R14: 00007fc342fe5fa0 R15: 00007fff9e8798d8 [ 443.638325][T11334] [ 443.859516][T11345] __nla_validate_parse: 13 callbacks suppressed [ 443.859536][T11345] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1953'. [ 443.886239][T11340] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 443.892810][T11340] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 444.611563][T11352] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1955'. [ 444.655305][T11354] netlink: 'syz.0.1955': attribute type 1 has an invalid length. [ 444.694784][T11354] netlink: 'syz.0.1955': attribute type 3 has an invalid length. [ 444.735534][T11354] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1955'. [ 444.773767][T11362] netlink: 'syz.1.1957': attribute type 10 has an invalid length. [ 444.782178][T11362] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1957'. [ 444.799622][T11359] delete_channel: no stack [ 444.978042][T11363] delete_channel: no stack [ 444.982888][T11371] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1960'. [ 445.003261][T11371] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1960'. [ 445.019538][T11371] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1960'. [ 445.038636][T11371] tc_dump_action: action bad kind [ 445.051285][T11368] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1960'. [ 445.291227][T11385] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 445.297860][T11385] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 446.166177][T11383] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1965'. [ 446.603361][T11399] netlink: 'syz.0.1971': attribute type 10 has an invalid length. [ 446.624904][T11395] delete_channel: no stack [ 446.637484][T11399] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1971'. [ 446.686522][T11400] netlink: 'syz.3.1968': attribute type 1 has an invalid length. [ 446.694302][T11400] netlink: 'syz.3.1968': attribute type 3 has an invalid length. [ 446.977481][T11411] FAULT_INJECTION: forcing a failure. [ 446.977481][T11411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.991869][T11411] CPU: 0 PID: 11411 Comm: syz.1.1974 Not tainted syzkaller #0 [ 446.999359][T11411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 447.009420][T11411] Call Trace: [ 447.012696][T11411] [ 447.015621][T11411] dump_stack_lvl+0x16c/0x230 [ 447.020298][T11411] ? show_regs_print_info+0x20/0x20 [ 447.025487][T11411] ? load_image+0x3b0/0x3b0 [ 447.029984][T11411] ? __might_fault+0xaa/0x120 [ 447.034650][T11411] ? __lock_acquire+0x7c80/0x7c80 [ 447.039681][T11411] should_fail_ex+0x39d/0x4d0 [ 447.044354][T11411] _copy_to_user+0x2f/0xa0 [ 447.048761][T11411] finalize_log+0xe2/0x150 [ 447.053173][T11411] ? btf_parse_struct_metas+0xe10/0xe10 [ 447.058708][T11411] ? btf_check_type_tags+0x674/0x680 [ 447.063993][T11411] btf_new_fd+0x702/0x980 [ 447.068328][T11411] ? bpf_btf_show_fdinfo+0x80/0x80 [ 447.073437][T11411] ? capable+0x88/0xe0 [ 447.077501][T11411] __sys_bpf+0x60e/0x800 [ 447.081744][T11411] ? bpf_link_show_fdinfo+0x350/0x350 [ 447.087120][T11411] ? lock_chain_count+0x20/0x20 [ 447.091968][T11411] __x64_sys_bpf+0x7c/0x90 [ 447.096375][T11411] do_syscall_64+0x55/0xb0 [ 447.100785][T11411] ? clear_bhb_loop+0x40/0x90 [ 447.105452][T11411] ? clear_bhb_loop+0x40/0x90 [ 447.110120][T11411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.116004][T11411] RIP: 0033:0x7f068498efc9 [ 447.120409][T11411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.140097][T11411] RSP: 002b:00007f068584c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 447.148509][T11411] RAX: ffffffffffffffda RBX: 00007f0684be5fa0 RCX: 00007f068498efc9 [ 447.156475][T11411] RDX: 0000000000000028 RSI: 0000200000000240 RDI: 0000000000000012 [ 447.164434][T11411] RBP: 00007f068584c090 R08: 0000000000000000 R09: 0000000000000000 [ 447.172396][T11411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 447.180362][T11411] R13: 00007f0684be6038 R14: 00007f0684be5fa0 R15: 00007ffde264e608 [ 447.188351][T11411] [ 447.198327][T11405] delete_channel: no stack [ 447.284416][T11409] tc_dump_action: action bad kind [ 447.346091][T11420] netlink: 'syz.3.1979': attribute type 6 has an invalid length. [ 447.449902][T11425] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 447.456415][T11425] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 448.464875][T11437] netlink: 'syz.0.1983': attribute type 10 has an invalid length. [ 448.578928][T11439] delete_channel: no stack [ 448.637669][T11442] netlink: 'syz.1.1985': attribute type 1 has an invalid length. [ 448.647605][T11442] netlink: 'syz.1.1985': attribute type 3 has an invalid length. [ 448.890381][T11449] delete_channel: no stack [ 448.914606][T11455] __nla_validate_parse: 11 callbacks suppressed [ 448.914624][T11455] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1989'. [ 448.957265][T11455] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1989'. [ 448.974611][T11452] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1989'. [ 448.990457][T11455] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1989'. [ 449.000719][T11455] tc_dump_action: action bad kind [ 449.202894][T11468] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 449.209528][T11468] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 449.709847][T11467] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1995'. [ 449.920339][T11476] netlink: 'syz.3.1997': attribute type 10 has an invalid length. [ 449.979180][T11476] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1997'. [ 450.009583][T11480] delete_channel: no stack [ 450.333732][T11488] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2000'. [ 450.369444][T11488] netlink: 'syz.2.2000': attribute type 1 has an invalid length. [ 450.378627][T11488] netlink: 'syz.2.2000': attribute type 3 has an invalid length. [ 450.391406][T11488] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2000'. [ 450.446253][T11489] delete_channel: no stack [ 450.473017][T11495] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2002'. [ 450.504782][T11495] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2002'. [ 450.541210][T11493] tc_dump_action: action bad kind [ 450.782431][T11508] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 450.788962][T11508] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 450.848283][T11510] delete_channel: no stack [ 450.913665][T11515] netlink: 'syz.3.2010': attribute type 10 has an invalid length. [ 452.065265][T11529] delete_channel: no stack [ 452.153524][T11538] tc_dump_action: action bad kind [ 452.195927][T11540] delete_channel: no stack [ 452.320732][T11548] netlink: 'syz.2.2021': attribute type 10 has an invalid length. [ 452.464193][T11558] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 452.470748][T11558] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 454.689640][T11579] delete_channel: no stack [ 455.109779][T11571] __nla_validate_parse: 11 callbacks suppressed [ 455.109795][T11571] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2027'. [ 455.285260][T11584] FAULT_INJECTION: forcing a failure. [ 455.285260][T11584] name failslab, interval 1, probability 0, space 0, times 0 [ 455.293375][T11592] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2031'. [ 455.300507][T11584] CPU: 0 PID: 11584 Comm: syz.2.2030 Not tainted syzkaller #0 [ 455.307553][T11592] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2031'. [ 455.314680][T11584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 455.314694][T11584] Call Trace: [ 455.314702][T11584] [ 455.314710][T11584] dump_stack_lvl+0x16c/0x230 [ 455.314737][T11584] ? show_regs_print_info+0x20/0x20 [ 455.314758][T11584] ? load_image+0x3b0/0x3b0 [ 455.326124][T11587] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2031'. [ 455.333740][T11584] ? __might_sleep+0xe0/0xe0 [ 455.333770][T11584] ? __lock_acquire+0x7c80/0x7c80 [ 455.333794][T11584] should_fail_ex+0x39d/0x4d0 [ 455.343108][T11592] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2031'. [ 455.344750][T11584] should_failslab+0x9/0x20 [ 455.344777][T11584] slab_pre_alloc_hook+0x59/0x310 [ 455.344801][T11584] ? call_usermodehelper_setup+0x8e/0x260 [ 455.350696][T11592] tc_dump_action: action bad kind [ 455.354476][T11584] __kmem_cache_alloc_node+0x53/0x260 [ 455.354510][T11584] ? call_usermodehelper_setup+0x8e/0x260 [ 455.418227][T11584] kmalloc_trace+0x2a/0xe0 [ 455.422650][T11584] call_usermodehelper_setup+0x8e/0x260 [ 455.428187][T11584] ? __request_module+0x5b0/0x5b0 [ 455.433203][T11584] __request_module+0x390/0x5b0 [ 455.438039][T11584] ? end_current_label_crit_section+0x170/0x170 [ 455.444269][T11584] ? module_enforce_rwx_sections+0x150/0x150 [ 455.450235][T11584] ? apparmor_capable+0x137/0x1a0 [ 455.455268][T11584] ? capable+0x88/0xe0 [ 455.459340][T11584] ? dev_load+0x21/0x1f0 [ 455.463589][T11584] devinet_ioctl+0x13a/0x1c60 [ 455.468259][T11584] ? __might_fault+0xc6/0x120 [ 455.472922][T11584] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 455.478026][T11584] ? _copy_from_user+0xa5/0xe0 [ 455.482782][T11584] ? get_user_ifreq+0x12b/0x180 [ 455.487625][T11584] inet_ioctl+0x3c1/0x4c0 [ 455.491944][T11584] ? inet_shutdown+0x370/0x370 [ 455.496734][T11584] sock_do_ioctl+0xd7/0x2f0 [ 455.501228][T11584] ? sock_show_fdinfo+0xb0/0xb0 [ 455.506101][T11584] sock_ioctl+0x623/0x7a0 [ 455.510435][T11584] ? sock_poll+0x3d0/0x3d0 [ 455.514840][T11584] ? bpf_lsm_file_ioctl+0x9/0x10 [ 455.519762][T11584] ? security_file_ioctl+0x80/0xa0 [ 455.524867][T11584] ? sock_poll+0x3d0/0x3d0 [ 455.529271][T11584] __se_sys_ioctl+0xfd/0x170 [ 455.533852][T11584] do_syscall_64+0x55/0xb0 [ 455.538254][T11584] ? clear_bhb_loop+0x40/0x90 [ 455.542916][T11584] ? clear_bhb_loop+0x40/0x90 [ 455.547594][T11584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.553472][T11584] RIP: 0033:0x7f5b3718efc9 [ 455.557888][T11584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.577519][T11584] RSP: 002b:00007f5b380b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 455.585954][T11584] RAX: ffffffffffffffda RBX: 00007f5b373e5fa0 RCX: 00007f5b3718efc9 [ 455.593928][T11584] RDX: 0000200000000040 RSI: 0000000000008918 RDI: 0000000000000005 [ 455.601895][T11584] RBP: 00007f5b380b4090 R08: 0000000000000000 R09: 0000000000000000 [ 455.609875][T11584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.617856][T11584] R13: 00007f5b373e6038 R14: 00007f5b373e5fa0 R15: 00007ffe01298588 [ 455.625844][T11584] [ 455.725656][T11588] delete_channel: no stack [ 455.902102][T11604] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 455.908626][T11604] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 456.080166][T11608] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2039'. [ 456.220131][T11611] delete_channel: no stack [ 456.396234][T11613] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2040'. [ 456.510003][T10409] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 457.205872][T11636] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2045'. [ 457.221817][T11636] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2045'. [ 457.232684][T11632] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2045'. [ 457.257351][T11632] tc_dump_action: action bad kind [ 457.339871][T11635] delete_channel: no stack [ 457.375859][T11642] FAULT_INJECTION: forcing a failure. [ 457.375859][T11642] name failslab, interval 1, probability 0, space 0, times 0 [ 457.410987][T11642] CPU: 0 PID: 11642 Comm: syz.3.2049 Not tainted syzkaller #0 [ 457.418513][T11642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 457.428602][T11642] Call Trace: [ 457.431945][T11642] [ 457.434903][T11642] dump_stack_lvl+0x16c/0x230 [ 457.439626][T11642] ? show_regs_print_info+0x20/0x20 [ 457.444863][T11642] ? load_image+0x3b0/0x3b0 [ 457.449416][T11642] ? __might_sleep+0xe0/0xe0 [ 457.454044][T11642] ? __lock_acquire+0x7c80/0x7c80 [ 457.459115][T11642] should_fail_ex+0x39d/0x4d0 [ 457.463836][T11642] should_failslab+0x9/0x20 [ 457.468371][T11642] slab_pre_alloc_hook+0x59/0x310 [ 457.473421][T11642] ? find_css_set+0x9ba/0x1540 [ 457.478190][T11642] __kmem_cache_alloc_node+0x53/0x260 [ 457.483569][T11642] ? find_css_set+0x9ba/0x1540 [ 457.488326][T11642] kmalloc_trace+0x2a/0xe0 [ 457.492743][T11642] find_css_set+0x9ba/0x1540 [ 457.497337][T11642] ? trace_event_raw_event_lock+0x230/0x230 [ 457.503226][T11642] ? cgroup_migrate_prepare_dst+0x6f0/0x6f0 [ 457.509125][T11642] ? mark_lock+0x94/0x320 [ 457.513488][T11642] cgroup_migrate_prepare_dst+0x130/0x6f0 [ 457.519237][T11642] cgroup_attach_task+0x527/0x830 [ 457.524268][T11642] ? proc_nr_inodes+0x230/0x230 [ 457.529120][T11642] ? cgroup_attach_task+0x1f3/0x830 [ 457.534312][T11642] ? cgroup_migrate_execute+0xf30/0xf30 [ 457.539862][T11642] ? cgroup_attach_permissions+0x4eb/0x9d0 [ 457.545668][T11642] ? revert_creds+0xae/0xc0 [ 457.550169][T11642] __cgroup_procs_write+0x23a/0x350 [ 457.555371][T11642] cgroup_procs_write+0x27/0x50 [ 457.560216][T11642] ? cgroup_procs_next+0xa0/0xa0 [ 457.565152][T11642] cgroup_file_write+0x2fc/0x660 [ 457.570084][T11642] ? read_lock_is_recursive+0x20/0x20 [ 457.575460][T11642] ? cgroup_seqfile_stop+0xd0/0xd0 [ 457.580579][T11642] ? cgroup_seqfile_stop+0xd0/0xd0 [ 457.585768][T11642] kernfs_fop_write_iter+0x3b6/0x520 [ 457.591061][T11642] vfs_write+0x43b/0x940 [ 457.595307][T11642] ? file_end_write+0x250/0x250 [ 457.600154][T11642] ? __fget_files+0x44a/0x4d0 [ 457.604836][T11642] ? __fdget_pos+0x2a3/0x330 [ 457.609415][T11642] ? ksys_write+0x75/0x250 [ 457.613824][T11642] ksys_write+0x147/0x250 [ 457.618156][T11642] ? __ia32_sys_read+0x90/0x90 [ 457.622929][T11642] ? lockdep_hardirqs_on+0x98/0x150 [ 457.628130][T11642] do_syscall_64+0x55/0xb0 [ 457.632542][T11642] ? clear_bhb_loop+0x40/0x90 [ 457.637220][T11642] ? clear_bhb_loop+0x40/0x90 [ 457.641931][T11642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.647816][T11642] RIP: 0033:0x7fd76bb8efc9 [ 457.652221][T11642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.671829][T11642] RSP: 002b:00007fd76cab6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 457.680254][T11642] RAX: ffffffffffffffda RBX: 00007fd76bde5fa0 RCX: 00007fd76bb8efc9 [ 457.688229][T11642] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 000000000000000d [ 457.696196][T11642] RBP: 00007fd76cab6090 R08: 0000000000000000 R09: 0000000000000000 [ 457.704165][T11642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.712156][T11642] R13: 00007fd76bde6038 R14: 00007fd76bde5fa0 R15: 00007ffe02d9e828 [ 457.720160][T11642] [ 457.871653][T11645] delete_channel: no stack [ 457.906395][T11652] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 457.912845][T11652] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 458.029019][T11658] tap0: tun_chr_ioctl cmd 1074025677 [ 458.049235][T11658] tap0: linktype set to 270 [ 458.115267][T11664] tap0: tun_chr_ioctl cmd 1074025673 [ 458.227320][T11658] tap0: tun_chr_ioctl cmd 1074025677 [ 458.261773][T11658] tap0: linktype set to 270 [ 458.552233][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 459.111796][T11679] tc_dump_action: action bad kind [ 459.167486][T11675] delete_channel: no stack [ 459.351813][T11686] delete_channel: no stack [ 459.526086][T11699] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 459.532556][T11699] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 460.766606][T11717] __nla_validate_parse: 9 callbacks suppressed [ 460.766622][T11717] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2072'. [ 460.798648][T11717] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2072'. [ 460.804393][T11712] delete_channel: no stack [ 460.810623][T11713] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2072'. [ 460.824479][T11717] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2072'. [ 460.840897][T11717] tc_dump_action: action bad kind [ 460.943159][T11725] netlink: 'syz.2.2077': attribute type 21 has an invalid length. [ 460.951880][T11725] netlink: 'syz.2.2077': attribute type 1 has an invalid length. [ 460.959742][T11725] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2077'. [ 461.092999][T11727] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2079'. [ 461.175351][T11728] delete_channel: no stack [ 461.267679][T11739] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 461.274289][T11739] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 461.696515][T11751] delete_channel: no stack [ 461.712817][T11757] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2087'. [ 461.725900][ T2882] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 461.734996][T11757] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2087'. [ 461.756429][T11754] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2087'. [ 461.832452][T11754] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2087'. [ 461.862897][T11754] tc_dump_action: action bad kind [ 462.156086][T11770] delete_channel: no stack [ 462.539044][T11779] delete_channel: no stack [ 463.142119][T11787] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 463.148779][T11787] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 463.210314][T11785] tc_dump_action: action bad kind [ 463.659957][T11803] delete_channel: no stack [ 463.909031][T11810] delete_channel: no stack [ 464.553597][T11821] tc_dump_action: action bad kind [ 465.269334][T11836] delete_channel: no stack [ 465.294218][T11841] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 465.300711][T11841] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 465.876813][T11859] delete_channel: no stack [ 465.895084][T11864] __nla_validate_parse: 14 callbacks suppressed [ 465.895102][T11864] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2124'. [ 465.942579][T11864] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2124'. [ 465.976546][T11868] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2124'. [ 466.011468][T11868] tc_dump_action: action bad kind [ 466.041140][T11871] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2127'. [ 466.066003][T11863] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2124'. [ 466.732061][T11883] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2132'. [ 466.799040][T11879] delete_channel: no stack [ 467.023423][T11895] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 467.029953][T11895] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 467.090923][T11894] delete_channel: no stack [ 467.195861][T11906] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2139'. [ 467.222606][T11906] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2139'. [ 467.243180][T11901] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2139'. [ 467.297547][T11906] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2139'. [ 467.325134][T11906] tc_dump_action: action bad kind [ 467.908141][T11920] delete_channel: no stack [ 467.964514][T11923] netlink: 'syz.2.2144': attribute type 2 has an invalid length. [ 468.223580][T11928] delete_channel: no stack [ 468.368646][T11934] FAULT_INJECTION: forcing a failure. [ 468.368646][T11934] name failslab, interval 1, probability 0, space 0, times 0 [ 468.421516][T11934] CPU: 0 PID: 11934 Comm: syz.3.2150 Not tainted syzkaller #0 [ 468.429036][T11934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 468.439118][T11934] Call Trace: [ 468.442413][T11934] [ 468.445364][T11934] dump_stack_lvl+0x16c/0x230 [ 468.450066][T11934] ? show_regs_print_info+0x20/0x20 [ 468.455289][T11934] ? load_image+0x3b0/0x3b0 [ 468.459814][T11934] ? fib_rules_unregister+0x340/0x340 [ 468.465210][T11934] should_fail_ex+0x39d/0x4d0 [ 468.469913][T11934] should_failslab+0x9/0x20 [ 468.474439][T11934] slab_pre_alloc_hook+0x59/0x310 [ 468.479484][T11934] ? find_exception+0x17a/0xa00 [ 468.484354][T11934] kmem_cache_alloc+0x5a/0x2e0 [ 468.489139][T11934] ? dst_alloc+0x105/0x170 [ 468.493575][T11934] dst_alloc+0x105/0x170 [ 468.497840][T11934] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 468.503930][T11934] ? ip_route_output_key_hash_rcu+0x1251/0x2360 [ 468.510206][T11934] ? ip_route_output_key_hash+0x12f/0x340 [ 468.515952][T11934] ip_route_output_key_hash+0x20b/0x340 [ 468.521528][T11934] ? ip_route_input_rcu+0x3010/0x3010 [ 468.526929][T11934] ? __lock_acquire+0x7c80/0x7c80 [ 468.531972][T11934] ? tomoyo_check_acl+0x37c/0x3f0 [ 468.537024][T11934] ip_route_output_flow+0x2a/0x150 [ 468.542157][T11934] ? security_sk_classify_flow+0x7b/0x90 [ 468.547809][T11934] raw_sendmsg+0x1093/0x1950 [ 468.552435][T11934] ? compat_raw_ioctl+0x70/0x70 [ 468.557321][T11934] ? aa_sk_perm+0x7fc/0x930 [ 468.561854][T11934] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 468.568292][T11934] ? sock_rps_record_flow+0x19/0x400 [ 468.573596][T11934] ? inet_send_prepare+0x260/0x260 [ 468.578726][T11934] ? inet_sendmsg+0x7c/0x2f0 [ 468.583332][T11934] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 468.588636][T11934] ? security_socket_sendmsg+0x80/0xa0 [ 468.594120][T11934] ? inet_send_prepare+0x260/0x260 [ 468.599252][T11934] ____sys_sendmsg+0x5bf/0x950 [ 468.604047][T11934] ? __asan_memset+0x22/0x40 [ 468.608665][T11934] ? __sys_sendmsg_sock+0x30/0x30 [ 468.613711][T11934] ? __import_iovec+0x3fa/0x860 [ 468.618596][T11934] ? import_iovec+0x73/0xa0 [ 468.623134][T11934] ___sys_sendmsg+0x220/0x290 [ 468.627842][T11934] ? __sys_sendmsg+0x270/0x270 [ 468.632654][T11934] ? __lock_acquire+0x7c80/0x7c80 [ 468.637726][T11934] __se_sys_sendmsg+0x1a5/0x270 [ 468.642604][T11934] ? __x64_sys_sendmsg+0x80/0x80 [ 468.647586][T11934] ? lockdep_hardirqs_on+0x98/0x150 [ 468.652808][T11934] do_syscall_64+0x55/0xb0 [ 468.657250][T11934] ? clear_bhb_loop+0x40/0x90 [ 468.661946][T11934] ? clear_bhb_loop+0x40/0x90 [ 468.666641][T11934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.672551][T11934] RIP: 0033:0x7fd76bb8efc9 [ 468.677069][T11934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.696799][T11934] RSP: 002b:00007fd76cab6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.705245][T11934] RAX: ffffffffffffffda RBX: 00007fd76bde5fa0 RCX: 00007fd76bb8efc9 [ 468.713248][T11934] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003 [ 468.721334][T11934] RBP: 00007fd76cab6090 R08: 0000000000000000 R09: 0000000000000000 [ 468.729503][T11934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.737495][T11934] R13: 00007fd76bde6038 R14: 00007fd76bde5fa0 R15: 00007ffe02d9e828 [ 468.745509][T11934] [ 469.089650][T11948] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 469.096136][T11948] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 469.179263][T11952] tc_dump_action: action bad kind [ 469.760777][T11966] delete_channel: no stack [ 469.872641][T11973] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 470.030969][T11971] delete_channel: no stack [ 470.313241][T11989] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 470.319812][T11989] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 470.474542][T11983] tc_dump_action: action bad kind [ 471.071499][T11987] __nla_validate_parse: 13 callbacks suppressed [ 471.071517][T11987] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2168'. [ 471.305686][T11997] delete_channel: no stack [ 471.358714][T12011] FAULT_INJECTION: forcing a failure. [ 471.358714][T12011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.394698][T12011] CPU: 1 PID: 12011 Comm: syz.3.2173 Not tainted syzkaller #0 [ 471.402215][T12011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 471.412296][T12011] Call Trace: [ 471.415590][T12011] [ 471.418530][T12011] dump_stack_lvl+0x16c/0x230 [ 471.423227][T12011] ? show_regs_print_info+0x20/0x20 [ 471.428447][T12011] ? load_image+0x3b0/0x3b0 [ 471.432978][T12011] ? __lock_acquire+0x7c80/0x7c80 [ 471.438032][T12011] should_fail_ex+0x39d/0x4d0 [ 471.442733][T12011] _copy_from_user+0x2f/0xe0 [ 471.447344][T12011] __copy_msghdr+0x3bb/0x580 [ 471.451968][T12011] ___sys_sendmsg+0x1a6/0x290 [ 471.456671][T12011] ? __sys_sendmsg+0x270/0x270 [ 471.461475][T12011] ? __lock_acquire+0x7c80/0x7c80 [ 471.466545][T12011] __se_sys_sendmsg+0x1a5/0x270 [ 471.471431][T12011] ? __x64_sys_sendmsg+0x80/0x80 [ 471.476411][T12011] ? lockdep_hardirqs_on+0x98/0x150 [ 471.481632][T12011] do_syscall_64+0x55/0xb0 [ 471.486072][T12011] ? clear_bhb_loop+0x40/0x90 [ 471.490761][T12011] ? clear_bhb_loop+0x40/0x90 [ 471.495432][T12011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.501315][T12011] RIP: 0033:0x7fd76bb8efc9 [ 471.505810][T12011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.525425][T12011] RSP: 002b:00007fd76ca95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.533859][T12011] RAX: ffffffffffffffda RBX: 00007fd76bde6090 RCX: 00007fd76bb8efc9 [ 471.541857][T12011] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 471.549843][T12011] RBP: 00007fd76ca95090 R08: 0000000000000000 R09: 0000000000000000 [ 471.557836][T12011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.565833][T12011] R13: 00007fd76bde6128 R14: 00007fd76bde6090 R15: 00007ffe02d9e828 [ 471.573832][T12011] [ 471.623413][T12016] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2176'. [ 471.634135][T12012] delete_channel: no stack [ 471.908532][T12031] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2181'. [ 471.926388][T12031] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2181'. [ 471.954286][T12028] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2181'. [ 472.023478][T12031] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2181'. [ 472.036865][T12031] tc_dump_action: action bad kind [ 472.071302][T12032] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2182'. [ 472.457330][T12036] delete_channel: no stack [ 472.481297][T12044] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 472.487818][T12044] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 472.652004][T12054] netlink: 'syz.3.2189': attribute type 10 has an invalid length. [ 472.669961][T12054] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2189'. [ 472.726559][T12048] delete_channel: no stack [ 472.782312][T12056] netlink: 'syz.3.2189': attribute type 10 has an invalid length. [ 472.833647][T12056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.875539][T12056] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 472.886274][T12060] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2190'. [ 473.093726][T12071] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2193'. [ 473.126972][T12069] tc_dump_action: action bad kind [ 473.128785][T12074] FAULT_INJECTION: forcing a failure. [ 473.128785][T12074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.150991][T12074] CPU: 1 PID: 12074 Comm: syz.0.2195 Not tainted syzkaller #0 [ 473.158495][T12074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 473.168571][T12074] Call Trace: [ 473.171882][T12074] [ 473.174830][T12074] dump_stack_lvl+0x16c/0x230 [ 473.179536][T12074] ? show_regs_print_info+0x20/0x20 [ 473.184734][T12074] ? load_image+0x3b0/0x3b0 [ 473.189232][T12074] ? __might_fault+0xaa/0x120 [ 473.193905][T12074] ? __lock_acquire+0x7c80/0x7c80 [ 473.198932][T12074] should_fail_ex+0x39d/0x4d0 [ 473.203623][T12074] _copy_to_user+0x2f/0xa0 [ 473.208038][T12074] bpf_test_finish+0x4d8/0x620 [ 473.212800][T12074] ? convert___skb_to_skb+0x590/0x590 [ 473.218171][T12074] ? convert_skb_to___skb+0x420/0x420 [ 473.223546][T12074] bpf_prog_test_run_skb+0xc28/0x11c0 [ 473.228922][T12074] ? cpu_online+0x60/0x60 [ 473.233245][T12074] bpf_prog_test_run+0x321/0x390 [ 473.238179][T12074] __sys_bpf+0x440/0x800 [ 473.242411][T12074] ? bpf_link_show_fdinfo+0x350/0x350 [ 473.247782][T12074] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 473.253936][T12074] __x64_sys_bpf+0x7c/0x90 [ 473.258343][T12074] do_syscall_64+0x55/0xb0 [ 473.262752][T12074] ? clear_bhb_loop+0x40/0x90 [ 473.267421][T12074] ? clear_bhb_loop+0x40/0x90 [ 473.272086][T12074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.277966][T12074] RIP: 0033:0x7fc342d8efc9 [ 473.282371][T12074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.301971][T12074] RSP: 002b:00007fc340ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 473.310385][T12074] RAX: ffffffffffffffda RBX: 00007fc342fe5fa0 RCX: 00007fc342d8efc9 [ 473.318351][T12074] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 000000000000000a [ 473.326310][T12074] RBP: 00007fc340ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 473.334269][T12074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.342227][T12074] R13: 00007fc342fe6038 R14: 00007fc342fe5fa0 R15: 00007fff9e8798d8 [ 473.350198][T12074] [ 473.495550][T12077] delete_channel: no stack [ 474.224340][T12092] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 474.231051][T12092] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 474.395604][T12081] delete_channel: no stack [ 475.007287][T12119] tc_dump_action: action bad kind [ 475.043704][T12120] delete_channel: no stack [ 476.196352][T12131] delete_channel: no stack [ 476.218995][T12138] __nla_validate_parse: 10 callbacks suppressed [ 476.219040][T12138] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2216'. [ 476.422015][T12148] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 476.428533][T12148] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 476.511790][T12151] delete_channel: no stack [ 476.582132][T12157] FAULT_INJECTION: forcing a failure. [ 476.582132][T12157] name failslab, interval 1, probability 0, space 0, times 0 [ 476.593975][T12158] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2220'. [ 476.616393][T12158] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2220'. [ 476.629117][T12154] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2220'. [ 476.632045][T12157] CPU: 0 PID: 12157 Comm: syz.2.2222 Not tainted syzkaller #0 [ 476.641677][T12158] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2220'. [ 476.645581][T12157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 476.645596][T12157] Call Trace: [ 476.645603][T12157] [ 476.645611][T12157] dump_stack_lvl+0x16c/0x230 [ 476.645639][T12157] ? show_regs_print_info+0x20/0x20 [ 476.656006][T12158] tc_dump_action: action bad kind [ 476.664873][T12157] ? load_image+0x3b0/0x3b0 [ 476.664911][T12157] should_fail_ex+0x39d/0x4d0 [ 476.664938][T12157] should_failslab+0x9/0x20 [ 476.699617][T12157] slab_pre_alloc_hook+0x59/0x310 [ 476.704653][T12157] kmem_cache_alloc+0x5a/0x2e0 [ 476.709408][T12157] ? dst_alloc+0x105/0x170 [ 476.713816][T12157] dst_alloc+0x105/0x170 [ 476.718051][T12157] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 476.724109][T12157] ? ip_route_output_key_hash_rcu+0x1351/0x2360 [ 476.730347][T12157] ? ip_route_output_key_hash+0x12f/0x340 [ 476.736059][T12157] ip_route_output_key_hash+0x20b/0x340 [ 476.741595][T12157] ? ip_route_input_rcu+0x3010/0x3010 [ 476.746962][T12157] ? __lock_acquire+0x7c80/0x7c80 [ 476.751975][T12157] ? tomoyo_check_acl+0x37c/0x3f0 [ 476.756995][T12157] ip_route_output_flow+0x2a/0x150 [ 476.762093][T12157] ? security_sk_classify_flow+0x7b/0x90 [ 476.767715][T12157] raw_sendmsg+0x1093/0x1950 [ 476.772310][T12157] ? compat_raw_ioctl+0x70/0x70 [ 476.777188][T12157] ? aa_sk_perm+0x7fc/0x930 [ 476.781693][T12157] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 476.788123][T12157] ? sock_rps_record_flow+0x19/0x400 [ 476.793419][T12157] ? inet_send_prepare+0x260/0x260 [ 476.798541][T12157] ? inet_sendmsg+0x7c/0x2f0 [ 476.803131][T12157] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 476.808408][T12157] ? security_socket_sendmsg+0x80/0xa0 [ 476.813858][T12157] ? inet_send_prepare+0x260/0x260 [ 476.818961][T12157] ____sys_sendmsg+0x5bf/0x950 [ 476.823725][T12157] ? __asan_memset+0x22/0x40 [ 476.828309][T12157] ? __sys_sendmsg_sock+0x30/0x30 [ 476.833323][T12157] ? __import_iovec+0x5f2/0x860 [ 476.838172][T12157] ? import_iovec+0x73/0xa0 [ 476.842671][T12157] ___sys_sendmsg+0x220/0x290 [ 476.847351][T12157] ? __sys_sendmsg+0x270/0x270 [ 476.852124][T12157] ? __lock_acquire+0x7c80/0x7c80 [ 476.857155][T12157] __se_sys_sendmsg+0x1a5/0x270 [ 476.862000][T12157] ? __x64_sys_sendmsg+0x80/0x80 [ 476.866941][T12157] ? lockdep_hardirqs_on+0x98/0x150 [ 476.872129][T12157] do_syscall_64+0x55/0xb0 [ 476.876542][T12157] ? clear_bhb_loop+0x40/0x90 [ 476.881228][T12157] ? clear_bhb_loop+0x40/0x90 [ 476.885920][T12157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 476.891817][T12157] RIP: 0033:0x7f5b3718efc9 [ 476.896238][T12157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.915842][T12157] RSP: 002b:00007f5b380b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.924334][T12157] RAX: ffffffffffffffda RBX: 00007f5b373e5fa0 RCX: 00007f5b3718efc9 [ 476.932304][T12157] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003 [ 476.940288][T12157] RBP: 00007f5b380b4090 R08: 0000000000000000 R09: 0000000000000000 [ 476.948257][T12157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.956222][T12157] R13: 00007f5b373e6038 R14: 00007f5b373e5fa0 R15: 00007ffe01298588 [ 476.964220][T12157] [ 477.044065][T12161] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2223'. [ 477.643607][T12170] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2225'. [ 478.255176][T12183] delete_channel: no stack [ 478.290084][T12184] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2230'. [ 478.377647][T12186] delete_channel: no stack [ 478.406088][T12194] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2234'. [ 478.438331][T12194] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2234'. [ 478.462567][T12196] tc_dump_action: action bad kind [ 480.139473][T12221] delete_channel: no stack [ 480.256441][T12225] delete_channel: no stack [ 480.321555][T12230] tc_dump_action: action bad kind [ 480.425684][T12237] netlink: 'syz.2.2249': attribute type 10 has an invalid length. [ 480.517653][T12244] netlink: 'syz.1.2250': attribute type 29 has an invalid length. [ 480.538439][T12244] netlink: 'syz.1.2250': attribute type 29 has an invalid length. [ 480.557565][T12244] netlink: 'syz.1.2250': attribute type 29 has an invalid length. [ 480.573144][T12244] netlink: 'syz.1.2250': attribute type 29 has an invalid length. [ 480.582209][T12244] netlink: 'syz.1.2250': attribute type 29 has an invalid length. [ 480.775284][T12252] delete_channel: no stack [ 481.247064][T12263] delete_channel: no stack [ 481.305060][T12268] __nla_validate_parse: 10 callbacks suppressed [ 481.305103][T12268] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2259'. [ 481.389522][T12274] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2262'. [ 481.484286][T12274] netlink: 208092 bytes leftover after parsing attributes in process `syz.1.2262'. [ 481.495024][T12277] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2261'. [ 481.532195][T12277] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2261'. [ 481.549605][T12275] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2261'. [ 481.576334][T12277] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2261'. [ 481.598150][T12277] tc_dump_action: action bad kind [ 481.785360][T12285] delete_channel: no stack [ 481.961946][T12289] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2267'. [ 482.026713][T12291] delete_channel: no stack [ 482.804439][T12305] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2273'. [ 482.900797][T12314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2275'. [ 482.937503][T12309] tc_dump_action: action bad kind [ 483.212539][T12323] delete_channel: no stack [ 483.331286][T12327] delete_channel: no stack [ 483.343425][T12332] netlink: 'syz.3.2283': attribute type 21 has an invalid length. [ 484.264803][T12336] tc_dump_action: action bad kind [ 484.910754][T12369] FAULT_INJECTION: forcing a failure. [ 484.910754][T12369] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 484.926472][T12369] CPU: 1 PID: 12369 Comm: syz.1.2296 Not tainted syzkaller #0 [ 484.933974][T12369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 484.944048][T12369] Call Trace: [ 484.947344][T12369] [ 484.950288][T12369] dump_stack_lvl+0x16c/0x230 [ 484.954994][T12369] ? show_regs_print_info+0x20/0x20 [ 484.960212][T12369] ? load_image+0x3b0/0x3b0 [ 484.964741][T12369] ? __lock_acquire+0x7c80/0x7c80 [ 484.969793][T12369] ? verify_lock_unused+0x140/0x140 [ 484.975019][T12369] ? bpf_trace_run4+0x287/0x420 [ 484.979889][T12369] should_fail_ex+0x39d/0x4d0 [ 484.984591][T12369] prepare_alloc_pages+0x1e2/0x5f0 [ 484.989737][T12369] __alloc_pages+0x127/0x460 [ 484.994353][T12369] ? zone_statistics+0x170/0x170 [ 484.999320][T12369] ? mt_find+0x13e/0x5b0 [ 485.003592][T12369] ? handle_mm_fault+0xd1/0x4920 [ 485.008565][T12369] __folio_alloc+0x10/0x20 [ 485.013005][T12369] vma_alloc_folio+0x47a/0x8f0 [ 485.017800][T12369] handle_mm_fault+0x1a38/0x4920 [ 485.022761][T12369] ? handle_mm_fault+0xd1/0x4920 [ 485.027736][T12369] ? numa_migrate_prep+0x350/0x350 [ 485.032885][T12369] ? lock_mm_and_find_vma+0x9c/0x300 [ 485.038197][T12369] do_user_addr_fault+0x738/0x12e0 [ 485.043339][T12369] exc_page_fault+0x67/0x110 [ 485.047953][T12369] asm_exc_page_fault+0x26/0x30 [ 485.052822][T12369] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 485.058651][T12369] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 485.078279][T12369] RSP: 0018:ffffc9000525f630 EFLAGS: 00050202 [ 485.084373][T12369] RAX: ffffffff841cc201 RBX: 0000000000000e5c RCX: 0000000000000e5c [ 485.092363][T12369] RDX: 0000000000000000 RSI: ffff888026ac4000 RDI: 00002000000011c0 [ 485.100351][T12369] RBP: ffffc9000525f7c0 R08: ffff888026ac4e5b R09: 1ffff11004d589cb [ 485.108344][T12369] R10: dffffc0000000000 R11: ffffed1004d589cc R12: 000020000000201c [ 485.116337][T12369] R13: ffffc9000525fe40 R14: 00002000000011c0 R15: ffff888026ac4000 [ 485.124343][T12369] ? _copy_to_iter+0x10b1/0x10d0 [ 485.129321][T12369] copyout+0x70/0x90 [ 485.133236][T12369] _copy_to_iter+0x432/0x10d0 [ 485.137952][T12369] ? iov_iter_init+0x1e0/0x1e0 [ 485.142747][T12369] ? __virt_addr_valid+0x18c/0x540 [ 485.147881][T12369] ? __virt_addr_valid+0x469/0x540 [ 485.153010][T12369] ? __phys_addr_symbol+0x2f/0x70 [ 485.158071][T12369] __skb_datagram_iter+0xdb/0x780 [ 485.163117][T12369] ? skb_copy_datagram_iter+0x200/0x200 [ 485.168689][T12369] skb_copy_datagram_iter+0xb1/0x200 [ 485.173999][T12369] netlink_recvmsg+0x2c5/0xdf0 [ 485.178791][T12369] ? netlink_sendmsg+0xbe0/0xbe0 [ 485.183744][T12369] ? aa_sk_perm+0x7fc/0x930 [ 485.188274][T12369] ? aa_af_perm+0x2b0/0x2b0 [ 485.192791][T12369] ? __lock_acquire+0x1260/0x7c80 [ 485.197838][T12369] ? verify_lock_unused+0x140/0x140 [ 485.203053][T12369] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 485.208355][T12369] ? security_socket_recvmsg+0x89/0xb0 [ 485.213828][T12369] ? netlink_sendmsg+0xbe0/0xbe0 [ 485.218787][T12369] ____sys_recvmsg+0x29e/0x5b0 [ 485.223591][T12369] ? __sys_recvmsg_sock+0x50/0x50 [ 485.228665][T12369] ? import_iovec+0x73/0xa0 [ 485.233201][T12369] ___sys_recvmsg+0x1b6/0x510 [ 485.237910][T12369] ? __sys_recvmsg+0x270/0x270 [ 485.242708][T12369] ? ksys_write+0x1c1/0x250 [ 485.247249][T12369] ? __fget_files+0x44a/0x4d0 [ 485.251961][T12369] __x64_sys_recvmsg+0x1f2/0x2c0 [ 485.256936][T12369] ? ___sys_recvmsg+0x510/0x510 [ 485.261825][T12369] ? lockdep_hardirqs_on+0x98/0x150 [ 485.267044][T12369] do_syscall_64+0x55/0xb0 [ 485.271477][T12369] ? clear_bhb_loop+0x40/0x90 [ 485.276170][T12369] ? clear_bhb_loop+0x40/0x90 [ 485.280868][T12369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.286782][T12369] RIP: 0033:0x7f068498efc9 [ 485.291214][T12369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.310843][T12369] RSP: 002b:00007f068584c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 485.319283][T12369] RAX: ffffffffffffffda RBX: 00007f0684be5fa0 RCX: 00007f068498efc9 [ 485.327278][T12369] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 485.335271][T12369] RBP: 00007f068584c090 R08: 0000000000000000 R09: 0000000000000000 [ 485.343266][T12369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.351259][T12369] R13: 00007f0684be6038 R14: 00007f0684be5fa0 R15: 00007ffde264e608 [ 485.359250][T12369] [ 485.363716][T12362] delete_channel: no stack [ 485.819491][T12379] tc_dump_action: action bad kind [ 486.505694][T12412] delete_channel: no stack [ 486.552597][T12419] netlink: 'syz.3.2310': attribute type 10 has an invalid length. [ 486.571682][T12419] FAULT_INJECTION: forcing a failure. [ 486.571682][T12419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.594753][T12419] CPU: 1 PID: 12419 Comm: syz.3.2310 Not tainted syzkaller #0 [ 486.602271][T12419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 486.612348][T12419] Call Trace: [ 486.615638][T12419] [ 486.618585][T12419] dump_stack_lvl+0x16c/0x230 [ 486.623286][T12419] ? show_regs_print_info+0x20/0x20 [ 486.628528][T12419] ? load_image+0x3b0/0x3b0 [ 486.633062][T12419] ? __might_fault+0xaa/0x120 [ 486.637761][T12419] should_fail_ex+0x39d/0x4d0 [ 486.642467][T12419] copyin+0x1a/0x90 [ 486.646297][T12419] _copy_from_iter+0x54f/0x1290 [ 486.651165][T12419] ? slab_post_alloc_hook+0x8a/0x4d0 [ 486.656466][T12419] ? __virt_addr_valid+0x18c/0x540 [ 486.661587][T12419] ? copyout_mc+0x70/0x70 [ 486.665908][T12419] ? __virt_addr_valid+0x18c/0x540 [ 486.671012][T12419] ? __virt_addr_valid+0x18c/0x540 [ 486.676117][T12419] ? __virt_addr_valid+0x469/0x540 [ 486.681224][T12419] ? __check_object_size+0x506/0xa30 [ 486.686508][T12419] netlink_sendmsg+0x75c/0xbe0 [ 486.691276][T12419] ? netlink_getsockopt+0x580/0x580 [ 486.696469][T12419] ? aa_sock_msg_perm+0x94/0x150 [ 486.701401][T12419] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 486.706680][T12419] ? security_socket_sendmsg+0x80/0xa0 [ 486.712135][T12419] ? netlink_getsockopt+0x580/0x580 [ 486.717332][T12419] ____sys_sendmsg+0x5bf/0x950 [ 486.722097][T12419] ? __asan_memset+0x22/0x40 [ 486.726694][T12419] ? __sys_sendmsg_sock+0x30/0x30 [ 486.731715][T12419] ? __import_iovec+0x3fa/0x860 [ 486.736571][T12419] ? import_iovec+0x73/0xa0 [ 486.741074][T12419] ___sys_sendmsg+0x220/0x290 [ 486.745750][T12419] ? __sys_sendmsg+0x270/0x270 [ 486.750528][T12419] ? __lock_acquire+0x7c80/0x7c80 [ 486.755560][T12419] __se_sys_sendmsg+0x1a5/0x270 [ 486.760402][T12419] ? perf_trace_preemptirq_template+0x281/0x340 [ 486.766635][T12419] ? __x64_sys_sendmsg+0x80/0x80 [ 486.771573][T12419] ? lockdep_hardirqs_on+0x98/0x150 [ 486.776766][T12419] do_syscall_64+0x55/0xb0 [ 486.781173][T12419] ? clear_bhb_loop+0x40/0x90 [ 486.785837][T12419] ? clear_bhb_loop+0x40/0x90 [ 486.790509][T12419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.796395][T12419] RIP: 0033:0x7fd76bb8efc9 [ 486.800798][T12419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.820397][T12419] RSP: 002b:00007fd76cab6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.828825][T12419] RAX: ffffffffffffffda RBX: 00007fd76bde5fa0 RCX: 00007fd76bb8efc9 [ 486.836803][T12419] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 486.844793][T12419] RBP: 00007fd76cab6090 R08: 0000000000000000 R09: 0000000000000000 [ 486.852757][T12419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.860724][T12419] R13: 00007fd76bde6038 R14: 00007fd76bde5fa0 R15: 00007ffe02d9e828 [ 486.868712][T12419] [ 486.973524][T12421] __nla_validate_parse: 16 callbacks suppressed [ 486.973545][T12421] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2311'. [ 487.060109][T12428] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2312'. [ 487.244744][T12428] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2312'. [ 487.275150][T12433] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2312'. [ 487.287028][T12433] tc_dump_action: action bad kind [ 487.341332][T12425] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2312'. [ 487.356116][T12436] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2315'. [ 487.765893][T12452] delete_channel: no stack [ 487.807877][T12458] netlink: 'syz.2.2322': attribute type 29 has an invalid length. [ 487.828815][T12458] netlink: 'syz.2.2322': attribute type 29 has an invalid length. [ 487.839136][T10411] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 487.849791][T12458] netlink: 'syz.2.2322': attribute type 29 has an invalid length. [ 487.868293][T12458] netlink: 'syz.2.2322': attribute type 29 has an invalid length. [ 488.149583][T12472] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2326'. [ 488.212067][T12477] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2327'. [ 488.304129][T12477] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2327'. [ 488.342025][T12478] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2327'. [ 488.357056][T12478] tc_dump_action: action bad kind [ 488.606883][T12472] syz.0.2326 (12472) used greatest stack depth: 18408 bytes left [ 488.816423][T12492] delete_channel: no stack [ 489.578591][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 492.023509][T12524] __nla_validate_parse: 2 callbacks suppressed [ 492.023541][T12524] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2343'. [ 492.047548][T12526] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2340'. [ 492.066477][T12526] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2340'. [ 492.073373][T12525] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2342'. [ 492.096036][T12519] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2340'. [ 492.129032][T12526] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2340'. [ 492.163261][T12526] tc_dump_action: action bad kind [ 492.639251][T12525] syz.3.2342 (12525) used greatest stack depth: 18280 bytes left [ 492.961116][ T3465] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 493.120782][T12556] syz.1.2350 uses obsolete (PF_INET,SOCK_PACKET) [ 493.166613][T12556] IPv6: NLM_F_CREATE should be specified when creating new route [ 493.173142][ T5106] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 493.174438][T12556] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2350'. [ 493.183743][ T5106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 493.205683][ T5106] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 493.220271][ T5106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 493.230774][ T5106] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 493.244474][ T5106] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 493.562787][T10411] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.581861][T12572] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2353'. [ 493.591278][T12572] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2353'. [ 493.608087][T12570] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2354'. [ 493.637143][T12572] tc_dump_action: action bad kind [ 493.677532][T10411] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.770508][T10411] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.906406][T10411] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.929655][T12558] chnl_net:caif_netlink_parms(): no params data found [ 494.436340][T12558] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.443693][T12558] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.452136][T12558] bridge_slave_0: entered allmulticast mode [ 494.460595][T12558] bridge_slave_0: entered promiscuous mode [ 494.504874][T12558] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.513315][T12558] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.534490][T12558] bridge_slave_1: entered allmulticast mode [ 494.542396][T12558] bridge_slave_1: entered promiscuous mode [ 494.740076][T12558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.775428][T12558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.864483][T12558] team0: Port device team_slave_0 added [ 494.873469][T12603] tc_dump_action: action bad kind [ 494.885450][T12558] team0: Port device team_slave_1 added [ 494.998222][T12558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.008996][T12558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.041557][T12558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.076951][T12558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.083934][T12558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.119129][T12558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.247236][T12558] hsr_slave_0: entered promiscuous mode [ 495.277866][T12558] hsr_slave_1: entered promiscuous mode [ 495.292659][T12558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.301991][T12558] Cannot create hsr debugfs directory [ 495.305157][ T5106] Bluetooth: hci4: command tx timeout [ 495.804453][T12632] tc_dump_action: action bad kind [ 496.318879][T12649] netlink: 'syz.1.2379': attribute type 29 has an invalid length. [ 496.331585][T12649] netlink: 'syz.1.2379': attribute type 29 has an invalid length. [ 496.447202][T12649] netlink: 'syz.1.2379': attribute type 29 has an invalid length. [ 496.469936][T12654] netlink: 'syz.1.2379': attribute type 29 has an invalid length. [ 496.638218][T12558] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 496.661418][T12558] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 496.681895][T12558] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 496.709785][T12558] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 496.760145][T10411] bond0: (slave wlan1): Releasing backup interface [ 496.768146][T10411] mac80211_hwsim hwsim6 wlan1 (unregistering): left promiscuous mode [ 497.127391][T10411] hsr_slave_0: left promiscuous mode [ 497.134147][T10411] hsr_slave_1: left promiscuous mode [ 497.141298][T10411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.150246][T10411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.162010][T10411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.170861][T10411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.180722][T10411] bridge_slave_1: left allmulticast mode [ 497.186833][T10411] bridge_slave_1: left promiscuous mode [ 497.194114][T10411] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.219825][T10411] bridge_slave_0: left allmulticast mode [ 497.229975][T10411] bridge_slave_0: left promiscuous mode [ 497.239857][T10411] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.273203][T10411] veth1_vlan: left promiscuous mode [ 497.279232][T10411] veth0_vlan: left promiscuous mode [ 497.365069][ T5106] Bluetooth: hci4: command tx timeout [ 497.603414][T12682] __nla_validate_parse: 15 callbacks suppressed [ 497.603431][T12682] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2387'. [ 497.787982][T10411] team0 (unregistering): Port device team_slave_1 removed [ 497.827177][T10411] team0 (unregistering): Port device team_slave_0 removed [ 497.870644][T10411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.881246][T10411] bond_slave_1 (unregistering): left promiscuous mode [ 498.101621][T10411] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 498.111397][T10411] batadv0 (unregistering): left promiscuous mode [ 498.140368][T10411] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 498.148945][T10411] dummy0 (unregistering): left promiscuous mode [ 498.359677][T10411] bond0 (unregistering): Released all slaves [ 498.436151][T12667] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2386'. [ 498.458936][T12682] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2387'. [ 498.474764][T12683] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2387'. [ 498.491217][T12683] tc_dump_action: action bad kind [ 498.722209][T12558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.788250][T12558] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.820948][T10401] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.828141][T10401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.860250][T10409] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.867444][T10409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.937631][T12701] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2395'. [ 499.201403][T12705] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2397'. [ 499.444822][ T5106] Bluetooth: hci4: command tx timeout [ 499.563263][T12712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.694403][T12558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.715733][T12722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2400'. [ 499.746956][T12722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2400'. [ 499.769630][T12719] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2400'. [ 499.783151][T12722] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2400'. [ 499.793118][T12722] tc_dump_action: action bad kind [ 499.821194][T12558] veth0_vlan: entered promiscuous mode [ 499.838203][T12558] veth1_vlan: entered promiscuous mode [ 499.890088][T12558] veth0_macvtap: entered promiscuous mode [ 499.919398][T12558] veth1_macvtap: entered promiscuous mode [ 499.967600][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.978464][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.992684][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.004580][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.018600][T12558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.046830][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.064136][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.084338][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.100087][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.111183][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.123093][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.135820][T12558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.168564][T12558] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.194014][T12558] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.203891][T12558] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.217824][T12558] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.669152][T10401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.686098][T10401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.764164][T10404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.786803][T10404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.007233][T12747] tc_dump_action: action bad kind [ 501.016284][T12750] delete_channel: no stack [ 501.532496][ T5106] Bluetooth: hci4: command tx timeout [ 501.716043][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.722434][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.641732][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 502.655105][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 502.664536][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 502.680259][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 502.697692][ T5832] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 502.705510][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 502.785815][T12778] delete_channel: no stack [ 502.851356][T12782] __nla_validate_parse: 8 callbacks suppressed [ 502.851371][T12782] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2423'. [ 502.918991][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.983580][T12782] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2423'. [ 503.000932][T12781] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2423'. [ 503.018671][T12789] netlink: 'syz.0.2426': attribute type 7 has an invalid length. [ 503.029160][T12788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.039471][T12787] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2423'. [ 503.060736][T12787] tc_dump_action: action bad kind [ 503.148287][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.192690][T12797] netlink: 'syz.2.2428': attribute type 2 has an invalid length. [ 503.248623][T12798] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2429'. [ 503.258915][T12796] netlink: 'syz.2.2428': attribute type 2 has an invalid length. [ 503.310098][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.345938][T12797] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2428'. [ 503.429572][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.415659][T12809] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2432'. [ 504.590434][T12774] chnl_net:caif_netlink_parms(): no params data found [ 504.726623][ T5832] Bluetooth: hci2: command tx timeout [ 505.213864][T12831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2438'. [ 505.354593][T12831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2438'. [ 505.364223][T12835] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2438'. [ 505.384247][T12835] tc_dump_action: action bad kind [ 505.394603][T12774] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.402127][T12774] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.409533][T12774] bridge_slave_0: entered allmulticast mode [ 505.417158][T12774] bridge_slave_0: entered promiscuous mode [ 505.427389][T12774] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.434885][T12774] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.447010][T12774] bridge_slave_1: entered allmulticast mode [ 505.461438][T12774] bridge_slave_1: entered promiscuous mode [ 505.625717][T12774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.752123][T12774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.894191][T12774] team0: Port device team_slave_0 added [ 506.020549][T12774] team0: Port device team_slave_1 added [ 506.117341][T12846] FAULT_INJECTION: forcing a failure. [ 506.117341][T12846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.271411][T12846] CPU: 0 PID: 12846 Comm: syz.3.2442 Not tainted syzkaller #0 [ 506.278948][T12846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 506.289048][T12846] Call Trace: [ 506.292360][T12846] [ 506.295336][T12846] dump_stack_lvl+0x16c/0x230 [ 506.300075][T12846] ? show_regs_print_info+0x20/0x20 [ 506.305318][T12846] ? load_image+0x3b0/0x3b0 [ 506.309876][T12846] ? __lock_acquire+0x7c80/0x7c80 [ 506.314943][T12846] ? snprintf+0xdb/0x120 [ 506.319234][T12846] should_fail_ex+0x39d/0x4d0 [ 506.323968][T12846] _copy_to_user+0x2f/0xa0 [ 506.328445][T12846] simple_read_from_buffer+0xe7/0x150 [ 506.333882][T12846] proc_fail_nth_read+0x1e3/0x250 [ 506.338968][T12846] ? proc_fault_inject_write+0x340/0x340 [ 506.344651][T12846] ? fsnotify_perm+0x271/0x5e0 [ 506.349470][T12846] ? proc_fault_inject_write+0x340/0x340 [ 506.355133][T12846] vfs_read+0x27e/0x920 [ 506.359344][T12846] ? kernel_read+0x1e0/0x1e0 [ 506.363985][T12846] ? __fget_files+0x28/0x4d0 [ 506.368612][T12846] ? __fget_files+0x44a/0x4d0 [ 506.373370][T12846] ? __fdget_pos+0x2a3/0x330 [ 506.378011][T12846] ? ksys_read+0x75/0x250 [ 506.382446][T12846] ksys_read+0x147/0x250 [ 506.386769][T12846] ? vfs_write+0x940/0x940 [ 506.391247][T12846] ? lockdep_hardirqs_on+0x98/0x150 [ 506.396513][T12846] do_syscall_64+0x55/0xb0 [ 506.400990][T12846] ? clear_bhb_loop+0x40/0x90 [ 506.405711][T12846] ? clear_bhb_loop+0x40/0x90 [ 506.410435][T12846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.416368][T12846] RIP: 0033:0x7fd76bb8d9dc [ 506.420826][T12846] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 506.440470][T12846] RSP: 002b:00007fd76cab6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 506.448927][T12846] RAX: ffffffffffffffda RBX: 00007fd76bde5fa0 RCX: 00007fd76bb8d9dc [ 506.457020][T12846] RDX: 000000000000000f RSI: 00007fd76cab60a0 RDI: 0000000000000004 [ 506.465025][T12846] RBP: 00007fd76cab6090 R08: 0000000000000000 R09: 0000000000000000 [ 506.473029][T12846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.481031][T12846] R13: 00007fd76bde6038 R14: 00007fd76bde5fa0 R15: 00007ffe02d9e828 [ 506.489086][T12846] [ 506.691955][T12774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.700327][T12774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.768899][T12774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.807830][ T5832] Bluetooth: hci2: command tx timeout [ 506.913874][T12774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.921909][T12774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.949722][T12774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.125886][ T3465] wlan1: Trigger new scan to find an IBSS to join [ 507.433848][T12774] hsr_slave_0: entered promiscuous mode [ 507.452762][T12774] hsr_slave_1: entered promiscuous mode [ 507.479087][T12774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 507.487318][T12774] Cannot create hsr debugfs directory [ 507.622216][T12874] tc_dump_action: action bad kind [ 508.506857][T12890] __nla_validate_parse: 8 callbacks suppressed [ 508.506921][T12890] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2456'. [ 508.885557][ T5832] Bluetooth: hci2: command tx timeout [ 509.294990][T12898] FAULT_INJECTION: forcing a failure. [ 509.294990][T12898] name failslab, interval 1, probability 0, space 0, times 0 [ 509.333792][T12898] CPU: 0 PID: 12898 Comm: syz.2.2458 Not tainted syzkaller #0 [ 509.341312][T12898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 509.351394][T12898] Call Trace: [ 509.354695][T12898] [ 509.357637][T12898] dump_stack_lvl+0x16c/0x230 [ 509.362310][T12898] ? show_regs_print_info+0x20/0x20 [ 509.367516][T12898] ? load_image+0x3b0/0x3b0 [ 509.372005][T12898] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 509.377982][T12898] ? __asan_memset+0x22/0x40 [ 509.382566][T12898] should_fail_ex+0x39d/0x4d0 [ 509.387245][T12898] should_failslab+0x9/0x20 [ 509.391784][T12898] slab_pre_alloc_hook+0x59/0x310 [ 509.396807][T12898] ? __debug_object_init+0xe8/0x430 [ 509.402009][T12898] kmem_cache_alloc+0x5a/0x2e0 [ 509.406768][T12898] ? slab_build_skb+0x2b/0x3f0 [ 509.411538][T12898] slab_build_skb+0x2b/0x3f0 [ 509.416129][T12898] bpf_prog_test_run_skb+0x3ba/0x11c0 [ 509.421493][T12898] ? __fget_files+0x28/0x4d0 [ 509.426085][T12898] ? cpu_online+0x60/0x60 [ 509.430403][T12898] bpf_prog_test_run+0x321/0x390 [ 509.435337][T12898] __sys_bpf+0x440/0x800 [ 509.439579][T12898] ? bpf_link_show_fdinfo+0x350/0x350 [ 509.444967][T12898] ? lock_chain_count+0x20/0x20 [ 509.449817][T12898] __x64_sys_bpf+0x7c/0x90 [ 509.454227][T12898] do_syscall_64+0x55/0xb0 [ 509.458639][T12898] ? clear_bhb_loop+0x40/0x90 [ 509.463304][T12898] ? clear_bhb_loop+0x40/0x90 [ 509.467989][T12898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 509.473897][T12898] RIP: 0033:0x7fab2d58efc9 [ 509.478304][T12898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.497902][T12898] RSP: 002b:00007fab2e3d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 509.506399][T12898] RAX: ffffffffffffffda RBX: 00007fab2d7e5fa0 RCX: 00007fab2d58efc9 [ 509.514361][T12898] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 509.522327][T12898] RBP: 00007fab2e3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 509.530289][T12898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.538267][T12898] R13: 00007fab2d7e6038 R14: 00007fab2d7e5fa0 R15: 00007ffe0a5e1988 [ 509.546245][T12898] [ 509.562032][T12897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.644967][T12903] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2460'. [ 509.655122][T12903] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2460'. [ 509.665347][T12902] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2460'. [ 509.688492][T12903] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2460'. [ 509.712643][T12903] tc_dump_action: action bad kind [ 509.837017][T12908] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2462'. [ 509.992102][T12774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 510.046156][T12774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 510.147208][T12774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 510.241107][T12774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 510.473602][T12924] delete_channel: no stack [ 510.529846][T12939] netlink: 'syz.0.2467': attribute type 10 has an invalid length. [ 510.575288][T12939] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2467'. [ 510.782693][T12944] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2469'. [ 510.844406][T12947] FAULT_INJECTION: forcing a failure. [ 510.844406][T12947] name failslab, interval 1, probability 0, space 0, times 0 [ 510.857881][T12947] CPU: 1 PID: 12947 Comm: syz.3.2470 Not tainted syzkaller #0 [ 510.865395][T12947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 510.875481][T12947] Call Trace: [ 510.878770][T12947] [ 510.881723][T12947] dump_stack_lvl+0x16c/0x230 [ 510.886428][T12947] ? show_regs_print_info+0x20/0x20 [ 510.891643][T12947] ? load_image+0x3b0/0x3b0 [ 510.896168][T12947] ? __might_sleep+0xe0/0xe0 [ 510.900793][T12947] ? __lock_acquire+0x7c80/0x7c80 [ 510.905831][T12947] ? trace_call_bpf+0xc3/0x690 [ 510.910617][T12947] should_fail_ex+0x39d/0x4d0 [ 510.915338][T12947] should_failslab+0x9/0x20 [ 510.919856][T12947] slab_pre_alloc_hook+0x59/0x310 [ 510.924896][T12947] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 510.931013][T12947] kmem_cache_alloc_node+0x60/0x330 [ 510.936250][T12947] ? __alloc_skb+0x108/0x2c0 [ 510.940886][T12947] __alloc_skb+0x108/0x2c0 [ 510.945334][T12947] alloc_skb_with_frags+0xca/0x7c0 [ 510.950473][T12947] ? trace_event_raw_event_lock+0x230/0x230 [ 510.956394][T12947] sock_alloc_send_pskb+0x857/0x990 [ 510.961645][T12947] ? sock_kzfree_s+0x50/0x50 [ 510.966245][T12947] ? do_raw_spin_lock+0x121/0x2c0 [ 510.971289][T12947] ? __rwlock_init+0x150/0x150 [ 510.976088][T12947] ? do_raw_spin_unlock+0x121/0x230 [ 510.981319][T12947] unix_dgram_sendmsg+0x5a1/0x1720 [ 510.986476][T12947] ? aa_sk_perm+0x7fc/0x930 [ 510.991025][T12947] ? unix_dgram_poll+0x670/0x670 [ 510.995975][T12947] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 511.002414][T12947] ? aa_sock_msg_perm+0x94/0x150 [ 511.007368][T12947] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 511.012687][T12947] ? security_socket_sendmsg+0x80/0xa0 [ 511.018156][T12947] ? unix_dgram_poll+0x670/0x670 [ 511.023106][T12947] ____sys_sendmsg+0x5bf/0x950 [ 511.027906][T12947] ? __asan_memset+0x22/0x40 [ 511.032510][T12947] ? __sys_sendmsg_sock+0x30/0x30 [ 511.037543][T12947] ? __import_iovec+0x3fa/0x860 [ 511.042428][T12947] ? import_iovec+0x73/0xa0 [ 511.047048][T12947] ___sys_sendmsg+0x220/0x290 [ 511.051748][T12947] ? __sys_sendmsg+0x270/0x270 [ 511.056607][T12947] ? __lock_acquire+0x7c80/0x7c80 [ 511.061717][T12947] __se_sys_sendmsg+0x1a5/0x270 [ 511.066604][T12947] ? __x64_sys_sendmsg+0x80/0x80 [ 511.071695][T12947] ? lockdep_hardirqs_on+0x98/0x150 [ 511.076917][T12947] do_syscall_64+0x55/0xb0 [ 511.081355][T12947] ? clear_bhb_loop+0x40/0x90 [ 511.086050][T12947] ? clear_bhb_loop+0x40/0x90 [ 511.090748][T12947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.096655][T12947] RIP: 0033:0x7fd76bb8efc9 [ 511.101082][T12947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.120797][T12947] RSP: 002b:00007fd76cab6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.129230][T12947] RAX: ffffffffffffffda RBX: 00007fd76bde5fa0 RCX: 00007fd76bb8efc9 [ 511.137214][T12947] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 511.145193][T12947] RBP: 00007fd76cab6090 R08: 0000000000000000 R09: 0000000000000000 [ 511.153177][T12947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.161168][T12947] R13: 00007fd76bde6038 R14: 00007fd76bde5fa0 R15: 00007ffe02d9e828 [ 511.169186][T12947] [ 511.234885][ T5832] Bluetooth: hci2: command tx timeout [ 511.421560][T12774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.542687][T12774] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.565617][T10404] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.572795][T10404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.598491][T12952] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2471'. [ 511.633186][T12952] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2471'. [ 511.659776][ T2882] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.667862][ T2882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.712990][T12955] tc_dump_action: action bad kind [ 511.713393][T12956] netlink: 'syz.0.2472': attribute type 1 has an invalid length. [ 511.733619][T12956] netlink: 'syz.0.2472': attribute type 3 has an invalid length. [ 511.835449][ T11] bond0: (slave wlan1): Releasing backup interface [ 512.089676][T10401] wlan1: Trigger new scan to find an IBSS to join [ 512.217240][T12969] delete_channel: no stack [ 512.294113][ T11] hsr_slave_0: left promiscuous mode [ 512.307645][ T11] hsr_slave_1: left promiscuous mode [ 512.313834][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.352750][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.375919][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.388995][ T11] bridge_slave_1: left allmulticast mode [ 512.402273][ T11] bridge_slave_1: left promiscuous mode [ 512.415380][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.427116][ T11] bridge_slave_0: left promiscuous mode [ 512.432908][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.492028][ T11] veth0_macvtap: left promiscuous mode [ 512.503603][ T11] veth1_vlan: left promiscuous mode [ 512.515783][ T11] veth0_vlan: left promiscuous mode [ 513.055808][ T2882] wlan1: Creating new IBSS network, BSSID be:c8:a9:4b:d4:22 [ 513.713066][ T11] team0 (unregistering): Port device team_slave_1 removed [ 513.756537][ T11] team0 (unregistering): Port device team_slave_0 removed [ 513.792594][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.026500][ T11] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 514.233552][ T11] bond0 (unregistering): Released all slaves [ 514.312555][T12979] netlink: 'syz.0.2479': attribute type 10 has an invalid length. [ 514.320539][T12979] __nla_validate_parse: 6 callbacks suppressed [ 514.320550][T12979] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2479'. [ 514.351303][T12998] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2483'. [ 514.365276][T12999] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2483'. [ 514.379311][T12999] tc_dump_action: action bad kind [ 514.653252][T13004] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2484'. [ 514.695463][T13004] netlink: 'syz.0.2484': attribute type 1 has an invalid length. [ 514.703471][T13004] netlink: 'syz.0.2484': attribute type 3 has an invalid length. [ 514.734730][T13004] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2484'. [ 514.914198][T12774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.038557][T12774] veth0_vlan: entered promiscuous mode [ 515.077620][T12774] veth1_vlan: entered promiscuous mode [ 515.127519][T13013] delete_channel: no stack [ 515.128230][T12774] veth0_macvtap: entered promiscuous mode [ 515.162625][T12774] veth1_macvtap: entered promiscuous mode [ 515.231962][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.251804][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.277946][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.309286][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.324941][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.336139][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.352303][T12774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.362175][T13022] netlink: 'syz.2.2491': attribute type 10 has an invalid length. [ 515.372027][T13022] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2491'. [ 515.577329][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.590246][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.603791][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.617096][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.629779][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.640787][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.652270][T12774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.681315][T13032] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2493'. [ 515.684065][T12774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.700572][T12774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.710426][T12774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.719583][T12774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.737214][T13032] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2493'. [ 515.752010][T13037] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2493'. [ 515.825526][T13035] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2493'. [ 515.836253][T13035] tc_dump_action: action bad kind [ 516.109806][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.133433][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.185745][T10404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.207957][T10404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.256686][T13046] netlink: 'syz.3.2496': attribute type 1 has an invalid length. [ 516.271549][T13046] netlink: 'syz.3.2496': attribute type 3 has an invalid length. [ 517.007567][T13055] delete_channel: no stack [ 517.145639][T13064] netlink: 'syz.2.2502': attribute type 10 has an invalid length. [ 517.258735][ T5106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 517.268524][ T5106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 517.281115][ T5106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 517.292384][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 517.304393][ T5106] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 517.312677][ T5106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 517.525771][T10411] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.788031][T10411] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.853986][T13079] tc_dump_action: action bad kind [ 517.933845][T10411] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.208869][T10411] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.844448][T13068] chnl_net:caif_netlink_parms(): no params data found [ 519.335786][T13099] delete_channel: no stack [ 519.365169][ T5832] Bluetooth: hci1: command tx timeout [ 519.386944][T13068] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.400232][T13068] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.446337][T13068] bridge_slave_0: entered allmulticast mode [ 519.453431][T13068] bridge_slave_0: entered promiscuous mode [ 519.486687][T13103] netlink: 'syz.0.2512': attribute type 10 has an invalid length. [ 519.510699][T13103] __nla_validate_parse: 9 callbacks suppressed [ 519.510762][T13103] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2512'. [ 519.635858][T13068] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.646775][T13068] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.662483][T13068] bridge_slave_1: entered allmulticast mode [ 519.677468][T13068] bridge_slave_1: entered promiscuous mode [ 519.896310][T13068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.913460][T13124] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2516'. [ 519.932810][T13119] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2515'. [ 519.948491][T13068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.963507][T13124] FAULT_INJECTION: forcing a failure. [ 519.963507][T13124] name failslab, interval 1, probability 0, space 0, times 0 [ 519.982457][T13124] CPU: 1 PID: 13124 Comm: syz.0.2516 Not tainted syzkaller #0 [ 519.989964][T13124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 520.000043][T13124] Call Trace: [ 520.003335][T13124] [ 520.006282][T13124] dump_stack_lvl+0x16c/0x230 [ 520.010984][T13124] ? show_regs_print_info+0x20/0x20 [ 520.016204][T13124] ? load_image+0x3b0/0x3b0 [ 520.020724][T13124] ? __might_sleep+0xe0/0xe0 [ 520.025330][T13124] ? __lock_acquire+0x7c80/0x7c80 [ 520.030373][T13124] should_fail_ex+0x39d/0x4d0 [ 520.035084][T13124] should_failslab+0x9/0x20 [ 520.039604][T13124] slab_pre_alloc_hook+0x59/0x310 [ 520.044649][T13124] ? lockdep_hardirqs_on+0x98/0x150 [ 520.049856][T13124] kmem_cache_alloc_node+0x60/0x330 [ 520.055081][T13124] ? __alloc_skb+0x108/0x2c0 [ 520.059671][T13124] __alloc_skb+0x108/0x2c0 [ 520.064081][T13124] netlink_ack+0x376/0x1110 [ 520.068586][T13124] ? __dev_queue_xmit+0x245/0x35a0 [ 520.073696][T13124] ? netlink_dump+0xde0/0xde0 [ 520.078367][T13124] ? ref_tracker_free+0x634/0x7d0 [ 520.083571][T13124] ? __copy_skb_header+0xa7/0x550 [ 520.088616][T13124] netlink_rcv_skb+0x29a/0x480 [ 520.093388][T13124] ? rtnetlink_bind+0x80/0x80 [ 520.098065][T13124] ? netlink_ack+0x1110/0x1110 [ 520.102837][T13124] ? __lock_acquire+0x7c80/0x7c80 [ 520.107869][T13124] ? netlink_deliver_tap+0x2e/0x1b0 [ 520.113075][T13124] netlink_unicast+0x751/0x8d0 [ 520.117847][T13124] netlink_sendmsg+0x8c1/0xbe0 [ 520.122609][T13124] ? netlink_getsockopt+0x580/0x580 [ 520.127805][T13124] ? aa_sock_msg_perm+0x94/0x150 [ 520.132736][T13124] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 520.138013][T13124] ? security_socket_sendmsg+0x80/0xa0 [ 520.143485][T13124] ? netlink_getsockopt+0x580/0x580 [ 520.148703][T13124] ____sys_sendmsg+0x5bf/0x950 [ 520.153482][T13124] ? __asan_memset+0x22/0x40 [ 520.158069][T13124] ? __sys_sendmsg_sock+0x30/0x30 [ 520.163091][T13124] ? __import_iovec+0x3fa/0x860 [ 520.167953][T13124] ? import_iovec+0x73/0xa0 [ 520.172453][T13124] ___sys_sendmsg+0x220/0x290 [ 520.177129][T13124] ? __sys_sendmsg+0x270/0x270 [ 520.181904][T13124] ? __lock_acquire+0x7c80/0x7c80 [ 520.186936][T13124] __se_sys_sendmsg+0x1a5/0x270 [ 520.191790][T13124] ? __x64_sys_sendmsg+0x80/0x80 [ 520.196746][T13124] ? lockdep_hardirqs_on+0x98/0x150 [ 520.201948][T13124] do_syscall_64+0x55/0xb0 [ 520.206376][T13124] ? clear_bhb_loop+0x40/0x90 [ 520.211060][T13124] ? clear_bhb_loop+0x40/0x90 [ 520.215730][T13124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 520.221611][T13124] RIP: 0033:0x7fc342d8efc9 [ 520.226022][T13124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.245638][T13124] RSP: 002b:00007fc340ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.254046][T13124] RAX: ffffffffffffffda RBX: 00007fc342fe5fa0 RCX: 00007fc342d8efc9 [ 520.262012][T13124] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 520.269975][T13124] RBP: 00007fc340ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 520.277934][T13124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.285896][T13124] R13: 00007fc342fe6038 R14: 00007fc342fe5fa0 R15: 00007fff9e8798d8 [ 520.293869][T13124] [ 520.361675][T13119] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2515'. [ 520.431268][T13068] team0: Port device team_slave_0 added [ 520.445506][T13127] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2515'. [ 520.465097][T13127] tc_dump_action: action bad kind [ 520.686771][T13129] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2518'. [ 520.781957][T13121] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2515'. [ 520.798281][T13068] team0: Port device team_slave_1 added [ 521.400981][T13068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.411179][T13068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.437881][T13068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.449272][ T5832] Bluetooth: hci1: command tx timeout [ 521.461504][T13068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.471027][T13068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.497076][T13068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.509250][T13129] ieee80211 phy91: Failed to add default virtual iface [ 521.554386][T13139] netlink: 'syz.2.2522': attribute type 29 has an invalid length. [ 521.591419][T13139] netlink: 'syz.2.2522': attribute type 29 has an invalid length. [ 521.601221][T13139] netlink: 'syz.2.2522': attribute type 29 has an invalid length. [ 521.662679][T13135] delete_channel: no stack [ 521.740363][T13068] hsr_slave_0: entered promiscuous mode [ 521.762429][T13068] hsr_slave_1: entered promiscuous mode [ 521.770142][T13068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 521.788380][T13068] Cannot create hsr debugfs directory [ 521.845875][T13148] netlink: 'syz.1.2524': attribute type 10 has an invalid length. [ 521.871970][T13148] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2524'. [ 522.322011][T13166] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2527'. [ 522.380106][T13171] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2527'. [ 522.389674][T13171] tc_dump_action: action bad kind [ 523.511770][T13178] delete_channel: no stack [ 523.527216][ T5832] Bluetooth: hci1: command tx timeout [ 523.677063][T13187] FAULT_INJECTION: forcing a failure. [ 523.677063][T13187] name failslab, interval 1, probability 0, space 0, times 0 [ 523.712196][T13187] CPU: 0 PID: 13187 Comm: syz.2.2536 Not tainted syzkaller #0 [ 523.719704][T13187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 523.729786][T13187] Call Trace: [ 523.733079][T13187] [ 523.736028][T13187] dump_stack_lvl+0x16c/0x230 [ 523.740728][T13187] ? sctp_sendmsg+0x155c/0x27e0 [ 523.745601][T13187] ? ___sys_sendmsg+0x220/0x290 [ 523.750475][T13187] ? show_regs_print_info+0x20/0x20 [ 523.755709][T13187] ? load_image+0x3b0/0x3b0 [ 523.760236][T13187] should_fail_ex+0x39d/0x4d0 [ 523.764929][T13187] should_failslab+0x9/0x20 [ 523.769424][T13187] slab_pre_alloc_hook+0x59/0x310 [ 523.774439][T13187] ? sctp_add_bind_addr+0x8c/0x360 [ 523.779546][T13187] __kmem_cache_alloc_node+0x53/0x260 [ 523.784918][T13187] ? sctp_add_bind_addr+0x8c/0x360 [ 523.790025][T13187] kmalloc_trace+0x2a/0xe0 [ 523.794441][T13187] sctp_add_bind_addr+0x8c/0x360 [ 523.799374][T13187] sctp_copy_local_addr_list+0x30c/0x4e0 [ 523.805002][T13187] ? sctp_copy_local_addr_list+0x9c/0x4e0 [ 523.810711][T13187] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 523.816772][T13187] ? sctp_v4_is_any+0x35/0x60 [ 523.821440][T13187] ? sctp_copy_one_addr+0x8c/0x350 [ 523.826544][T13187] sctp_bind_addr_copy+0xb3/0x3c0 [ 523.831562][T13187] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 523.837897][T13187] sctp_connect_new_asoc+0x2da/0x690 [ 523.843178][T13187] ? __sctp_connect+0xd20/0xd20 [ 523.848016][T13187] ? __local_bh_enable_ip+0x12e/0x1c0 [ 523.853372][T13187] ? _local_bh_enable+0xa0/0xa0 [ 523.858223][T13187] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 523.864050][T13187] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 523.869871][T13187] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 523.875414][T13187] ? security_sctp_bind_connect+0x89/0xb0 [ 523.881132][T13187] sctp_sendmsg+0x155c/0x27e0 [ 523.885813][T13187] ? sctp_getsockopt+0xb60/0xb60 [ 523.890753][T13187] ? aa_sk_perm+0x7fc/0x930 [ 523.895252][T13187] ? aa_af_perm+0x2b0/0x2b0 [ 523.899750][T13187] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 523.906246][T13187] ? sock_rps_record_flow+0x19/0x400 [ 523.911521][T13187] ? inet_send_prepare+0x260/0x260 [ 523.916623][T13187] ? inet_sendmsg+0x7c/0x2f0 [ 523.921200][T13187] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 523.926474][T13187] ? security_socket_sendmsg+0x80/0xa0 [ 523.931928][T13187] ? inet_send_prepare+0x260/0x260 [ 523.937025][T13187] ____sys_sendmsg+0x5bf/0x950 [ 523.941793][T13187] ? __asan_memset+0x22/0x40 [ 523.946372][T13187] ? __sys_sendmsg_sock+0x30/0x30 [ 523.951388][T13187] ? __import_iovec+0x5f2/0x860 [ 523.956233][T13187] ? import_iovec+0x73/0xa0 [ 523.960729][T13187] ___sys_sendmsg+0x220/0x290 [ 523.965400][T13187] ? __sys_sendmsg+0x270/0x270 [ 523.970171][T13187] ? __lock_acquire+0x7c80/0x7c80 [ 523.975199][T13187] __se_sys_sendmsg+0x1a5/0x270 [ 523.980043][T13187] ? __x64_sys_sendmsg+0x80/0x80 [ 523.984987][T13187] ? lockdep_hardirqs_on+0x98/0x150 [ 523.990176][T13187] do_syscall_64+0x55/0xb0 [ 523.994581][T13187] ? clear_bhb_loop+0x40/0x90 [ 523.999248][T13187] ? clear_bhb_loop+0x40/0x90 [ 524.003913][T13187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 524.009792][T13187] RIP: 0033:0x7fab2d58efc9 [ 524.014198][T13187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.033893][T13187] RSP: 002b:00007fab2e3d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.042298][T13187] RAX: ffffffffffffffda RBX: 00007fab2d7e5fa0 RCX: 00007fab2d58efc9 [ 524.050258][T13187] RDX: 0000000000040050 RSI: 0000200000000740 RDI: 0000000000000003 [ 524.058219][T13187] RBP: 00007fab2e3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 524.066177][T13187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.074135][T13187] R13: 00007fab2d7e6038 R14: 00007fab2d7e5fa0 R15: 00007ffe0a5e1988 [ 524.082107][T13187] [ 524.119140][T13068] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 524.171700][T13068] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 524.198460][T13068] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 524.208771][T13191] netlink: 'syz.1.2537': attribute type 10 has an invalid length. [ 524.239973][T13068] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 524.462786][T13194] tc_dump_action: action bad kind [ 524.654581][T13068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.795582][T13068] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.831988][T10401] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.839290][T10401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.877517][T10401] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.884850][T10401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.156851][T13217] __nla_validate_parse: 9 callbacks suppressed [ 525.156916][T13217] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2542'. [ 525.618373][ T5832] Bluetooth: hci1: command tx timeout [ 525.644332][T13218] delete_channel: no stack [ 525.841120][T13068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.961984][T13233] netlink: 'syz.0.2549': attribute type 21 has an invalid length. [ 525.999717][T13234] netlink: 'syz.1.2547': attribute type 10 has an invalid length. [ 526.039839][T13234] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2547'. [ 526.161025][T13239] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2548'. [ 526.177798][T13239] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2548'. [ 526.220962][T13236] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2548'. [ 526.259340][T13239] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2548'. [ 526.270141][T13239] tc_dump_action: action bad kind [ 526.326609][T13068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.534551][T13068] veth0_vlan: entered promiscuous mode [ 526.650254][T13250] delete_channel: no stack [ 526.680831][T13068] veth1_vlan: entered promiscuous mode [ 526.819800][T13068] veth0_macvtap: entered promiscuous mode [ 526.894010][T13068] veth1_macvtap: entered promiscuous mode [ 527.131939][T13263] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2555'. [ 527.253997][T13068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.318376][T13068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.342761][T13068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.353388][T13068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.364475][T13068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.375519][T13068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.385436][T13068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.395969][T13068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.416934][T13068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.751193][T10411] hsr_slave_0: left promiscuous mode [ 527.757835][T10411] hsr_slave_1: left promiscuous mode [ 527.772591][T10411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.780174][T13271] FAULT_INJECTION: forcing a failure. [ 527.780174][T13271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.781332][T13271] [ 527.781337][T13271] ====================================================== [ 527.781343][T13271] WARNING: possible circular locking dependency detected [ 527.781353][T13271] syzkaller #0 Not tainted [ 527.781360][T13271] ------------------------------------------------------ [ 527.781365][T13271] syz.0.2558/13271 is trying to acquire lock: [ 527.781373][T13271] ffffffff8cd24160 (console_owner){-...}-{0:0}, at: console_flush_all+0x10f/0xd00 [ 527.781416][T13271] [ 527.781416][T13271] but task is already holding lock: [ 527.781420][T13271] ffff8880b8f3c218 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 527.781449][T13271] [ 527.781449][T13271] which lock already depends on the new lock. [ 527.781449][T13271] [ 527.781453][T13271] [ 527.781453][T13271] the existing dependency chain (in reverse order) is: [ 527.781456][T13271] [ 527.781456][T13271] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 527.781474][T13271] _raw_spin_lock_nested+0x32/0x50 [ 527.781490][T13271] raw_spin_rq_lock_nested+0x2a/0x140 [ 527.781507][T13271] task_fork_fair+0x62/0x1f0 [ 527.781520][T13271] sched_cgroup_fork+0x333/0x3c0 [ 527.781530][T13271] copy_process+0x21e4/0x3d70 [ 527.781543][T13271] kernel_clone+0x21b/0x840 [ 527.781557][T13271] user_mode_thread+0xde/0x130 [ 527.781570][T13271] rest_init+0x27/0x300 [ 527.781583][T13271] arch_call_rest_init+0xe/0x10 [ 527.781601][T13271] start_kernel+0x459/0x4e0 [ 527.781624][T13271] x86_64_start_reservations+0x2a/0x30 [ 527.781639][T13271] copy_bootdata+0x0/0xe0 [ 527.781652][T13271] secondary_startup_64_no_verify+0x179/0x17b [ 527.781671][T13271] [ 527.781671][T13271] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 527.781690][T13271] _raw_spin_lock_irqsave+0xa8/0xf0 [ 527.781704][T13271] try_to_wake_up+0x60/0x1140 [ 527.781722][T13271] __wake_up_common+0x2a4/0x4e0 [ 527.781737][T13271] __wake_up+0x112/0x190 [ 527.781749][T13271] tty_port_default_wakeup+0xa2/0xf0 [ 527.781763][T13271] serial8250_tx_chars+0x6bd/0x8a0 [ 527.781780][T13271] serial8250_handle_irq+0x534/0x6e0 [ 527.781796][T13271] serial8250_default_handle_irq+0xb8/0x1a0 [ 527.781814][T13271] serial8250_interrupt+0x9f/0x1c0 [ 527.781829][T13271] __handle_irq_event_percpu+0x276/0x930 [ 527.781848][T13271] handle_irq_event+0x8b/0x1e0 [ 527.781865][T13271] handle_edge_irq+0x247/0xb30 [ 527.781879][T13271] __common_interrupt+0x13b/0x230 [ 527.781894][T13271] common_interrupt+0xb4/0xd0 [ 527.781913][T13271] asm_common_interrupt+0x26/0x40 [ 527.781927][T13271] pv_native_safe_halt+0x13/0x20 [ 527.781946][T13271] default_idle+0x13/0x20 [ 527.781959][T13271] default_idle_call+0x6c/0xa0 [ 527.781972][T13271] do_idle+0x1eb/0x510 [ 527.781986][T13271] cpu_startup_entry+0x43/0x60 [ 527.782001][T13271] rest_init+0x2e2/0x300 [ 527.782014][T13271] arch_call_rest_init+0xe/0x10 [ 527.782029][T13271] start_kernel+0x459/0x4e0 [ 527.782044][T13271] x86_64_start_reservations+0x2a/0x30 [ 527.782059][T13271] copy_bootdata+0x0/0xe0 [ 527.782072][T13271] secondary_startup_64_no_verify+0x179/0x17b [ 527.782089][T13271] [ 527.782089][T13271] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 527.782109][T13271] _raw_spin_lock_irqsave+0xa8/0xf0 [ 527.782122][T13271] __wake_up+0xf8/0x190 [ 527.782134][T13271] tty_port_default_wakeup+0xa2/0xf0 [ 527.782147][T13271] serial8250_tx_chars+0x6bd/0x8a0 [ 527.782163][T13271] serial8250_handle_irq+0x534/0x6e0 [ 527.782179][T13271] serial8250_default_handle_irq+0xb8/0x1a0 [ 527.782196][T13271] serial8250_interrupt+0x9f/0x1c0 [ 527.782212][T13271] __handle_irq_event_percpu+0x276/0x930 [ 527.782230][T13271] handle_irq_event+0x8b/0x1e0 [ 527.782248][T13271] handle_edge_irq+0x247/0xb30 [ 527.782261][T13271] __common_interrupt+0x13b/0x230 [ 527.782276][T13271] common_interrupt+0xb4/0xd0 [ 527.782293][T13271] asm_common_interrupt+0x26/0x40 [ 527.782306][T13271] _raw_spin_unlock_irqrestore+0xa9/0x110 [ 527.782320][T13271] uart_write+0x45b/0x5d0 [ 527.782331][T13271] n_tty_write+0xd27/0x11d0 [ 527.782349][T13271] file_tty_write+0x54b/0x980 [ 527.782364][T13271] vfs_write+0x43b/0x940 [ 527.782380][T13271] ksys_write+0x147/0x250 [ 527.782395][T13271] do_syscall_64+0x55/0xb0 [ 527.782411][T13271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.782425][T13271] [ 527.782425][T13271] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 527.782443][T13271] _raw_spin_lock_irqsave+0xa8/0xf0 [ 527.782457][T13271] serial8250_console_write+0x16d/0x17a0 [ 527.782474][T13271] console_flush_all+0x6cd/0xd00 [ 527.782490][T13271] console_unlock+0xae/0x340 [ 527.782504][T13271] vprintk_emit+0x477/0x600 [ 527.782519][T13271] _printk+0xd0/0x110 [ 527.782532][T13271] register_console+0x91b/0xe60 [ 527.782547][T13271] univ8250_console_init+0x45/0x50 [ 527.782563][T13271] console_init+0x17b/0x5e0 [ 527.782579][T13271] start_kernel+0x2c0/0x4e0 [ 527.782594][T13271] x86_64_start_reservations+0x2a/0x30 [ 527.782609][T13271] copy_bootdata+0x0/0xe0 [ 527.782627][T13271] secondary_startup_64_no_verify+0x179/0x17b [ 527.782645][T13271] [ 527.782645][T13271] -> #0 (console_owner){-...}-{0:0}: [ 527.782663][T13271] __lock_acquire+0x2ddb/0x7c80 [ 527.782678][T13271] lock_acquire+0x197/0x410 [ 527.782691][T13271] console_flush_all+0x693/0xd00 [ 527.782706][T13271] console_unlock+0xae/0x340 [ 527.782720][T13271] vprintk_emit+0x477/0x600 [ 527.782735][T13271] _printk+0xd0/0x110 [ 527.782748][T13271] should_fail_ex+0x37e/0x4d0 [ 527.782765][T13271] strncpy_from_user+0x36/0x2e0 [ 527.782777][T13271] strncpy_from_user_nofault+0x71/0x140 [ 527.782795][T13271] bpf_probe_read_user_str+0x2a/0x70 [ 527.782815][T13271] bpf_prog_bc7c5c6b9645592f+0x3d/0x3f [ 527.782829][T13271] bpf_trace_run4+0x1f9/0x420 [ 527.782842][T13271] __bpf_trace_sched_switch+0x17b/0x1e0 [ 527.782858][T13271] __traceiter_sched_switch+0x93/0xc0 [ 527.782871][T13271] __schedule+0x2197/0x44d0 [ 527.782888][T13271] schedule+0xbd/0x170 [ 527.782904][T13271] schedule_preempt_disabled+0x13/0x20 [ 527.782922][T13271] __mutex_lock+0x6b7/0xcc0 [ 527.782939][T13271] ipv6_route_ioctl+0x2f7/0x4a0 [ 527.782953][T13271] inet6_ioctl+0x21a/0x280 [ 527.782971][T13271] sock_do_ioctl+0xd7/0x2f0 [ 527.782981][T13271] sock_ioctl+0x623/0x7a0 [ 527.782990][T13271] __se_sys_ioctl+0xfd/0x170 [ 527.782995][T10411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.783003][T13271] do_syscall_64+0x55/0xb0 [ 527.783016][T13271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.783027][T13271] [ 527.783027][T13271] other info that might help us debug this: [ 527.783027][T13271] [ 527.783030][T13271] Chain exists of: [ 527.783030][T13271] console_owner --> &p->pi_lock --> &rq->__lock [ 527.783030][T13271] [ 527.783046][T13271] Possible unsafe locking scenario: [ 527.783046][T13271] [ 527.783049][T13271] CPU0 CPU1 [ 527.783052][T13271] ---- ---- [ 527.783055][T13271] lock(&rq->__lock); [ 527.783061][T13271] lock(&p->pi_lock); [ 527.783068][T13271] lock(&rq->__lock); [ 527.783075][T13271] lock(console_owner); [ 527.783082][T13271] [ 527.783082][T13271] *** DEADLOCK *** [ 527.783082][T13271] [ 527.783084][T13271] 5 locks held by syz.0.2558/13271: [ 527.783090][T13271] #0: ffffffff8dfbbc48 (rtnl_mutex){+.+.}-{3:3}, at: ipv6_route_ioctl+0x2f7/0x4a0 [ 527.783116][T13271] #1: ffff8880b8f3c218 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 527.783145][T13271] #2: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0xfd/0x420 [ 527.783170][T13271] #3: ffffffff8cd24240 (console_lock){+.+.}-{0:0}, at: _printk+0xd0/0x110 [ 527.783195][T13271] #4: ffffffff8cc0ba50 (console_srcu){....}-{0:0}, at: console_flush_all+0x10f/0xd00 [ 527.783222][T13271] [ 527.783222][T13271] stack backtrace: [ 527.783225][T13271] CPU: 1 PID: 13271 Comm: syz.0.2558 Not tainted syzkaller #0 [ 527.783236][T13271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 527.783244][T13271] Call Trace: [ 527.783248][T13271] [ 527.783253][T13271] dump_stack_lvl+0x16c/0x230 [ 527.783267][T13271] ? load_image+0x3b0/0x3b0 [ 527.783280][T13271] ? show_regs_print_info+0x20/0x20 [ 527.783296][T13271] ? print_circular_bug+0x12b/0x1a0 [ 527.783310][T13271] check_noncircular+0x2bd/0x3c0 [ 527.783325][T13271] ? print_deadlock_bug+0x5d0/0x5d0 [ 527.783337][T13271] ? lockdep_lock+0xe0/0x220 [ 527.783352][T13271] __lock_acquire+0x2ddb/0x7c80 [ 527.783373][T13271] ? verify_lock_unused+0x140/0x140 [ 527.783392][T13271] lock_acquire+0x197/0x410 [ 527.783404][T13271] ? console_flush_all+0x10f/0xd00 [ 527.783419][T13271] ? __lock_acquire+0x7c80/0x7c80 [ 527.783431][T13271] ? do_raw_spin_lock+0x121/0x2c0 [ 527.783444][T13271] ? read_lock_is_recursive+0x20/0x20 [ 527.783456][T13271] ? __rwlock_init+0x150/0x150 [ 527.783470][T13271] ? do_raw_spin_unlock+0x121/0x230 [ 527.783485][T13271] console_flush_all+0x693/0xd00 [ 527.783497][T13271] ? console_flush_all+0x10f/0xd00 [ 527.783511][T13271] ? console_flush_all+0x10f/0xd00 [ 527.783527][T13271] ? is_console_locked+0x20/0x20 [ 527.783540][T13271] ? __lock_acquire+0x1334/0x7c80 [ 527.783555][T13271] console_unlock+0xae/0x340 [ 527.783568][T13271] ? other_cpu_in_panic+0xf0/0xf0 [ 527.783581][T13271] ? __lock_acquire+0x1260/0x7c80 [ 527.783595][T13271] vprintk_emit+0x477/0x600 [ 527.783609][T13271] ? printk_sprint+0x460/0x460 [ 527.783631][T13271] _printk+0xd0/0x110 [ 527.783644][T13271] ? load_image+0x3b0/0x3b0 [ 527.783655][T13271] ? __lock_acquire+0x1334/0x7c80 [ 527.783670][T13271] should_fail_ex+0x37e/0x4d0 [ 527.783686][T13271] strncpy_from_user+0x36/0x2e0 [ 527.783698][T13271] strncpy_from_user_nofault+0x71/0x140 [ 527.783714][T13271] bpf_probe_read_user_str+0x2a/0x70 [ 527.783731][T13271] bpf_prog_bc7c5c6b9645592f+0x3d/0x3f [ 527.783743][T13271] bpf_trace_run4+0x1f9/0x420 [ 527.783754][T13271] ? bpf_trace_run4+0xfd/0x420 [ 527.783765][T13271] ? bpf_trace_run3+0x400/0x400 [ 527.783777][T13271] ? __bpf_trace_sched_switch+0x160/0x1e0 [ 527.783792][T13271] __bpf_trace_sched_switch+0x17b/0x1e0 [ 527.783807][T13271] ? __bpf_trace_sched_wakeup_template+0xe0/0xe0 [ 527.783821][T13271] ? __lock_acquire+0x7c20/0x7c80 [ 527.783833][T13271] ? local_clock+0x20/0x20 [ 527.783847][T13271] ? tracing_record_taskinfo_sched_switch+0x7d/0x360 [ 527.783863][T13271] ? __bpf_trace_sched_wakeup_template+0xe0/0xe0 [ 527.783878][T13271] __traceiter_sched_switch+0x93/0xc0 [ 527.783890][T13271] __schedule+0x2197/0x44d0 [ 527.783911][T13271] ? asan.module_dtor+0x20/0x20 [ 527.783926][T13271] ? __mutex_lock+0x6b2/0xcc0 [ 527.783942][T13271] ? __mutex_trylock_common+0x84/0x250 [ 527.783960][T13271] ? trace_raw_output_contention_end+0xd0/0xd0 [ 527.783979][T13271] schedule+0xbd/0x170 [ 527.783992][T13271] schedule_preempt_disabled+0x13/0x20 [ 527.784007][T13271] __mutex_lock+0x6b7/0xcc0 [ 527.784022][T13271] ? __mutex_lock+0x4e8/0xcc0 [ 527.784039][T13271] ? ipv6_route_ioctl+0x2f7/0x4a0 [ 527.784050][T13271] ? mutex_lock_nested+0x20/0x20 [ 527.784067][T13271] ? l3mdev_fib_table_by_index+0x34/0x2d0 [ 527.784081][T13271] ? l3mdev_fib_table_by_index+0x34/0x2d0 [ 527.784097][T13271] ipv6_route_ioctl+0x2f7/0x4a0 [ 527.784110][T13271] ? rt6_purge_dflt_routers+0xaf0/0xaf0 [ 527.784127][T13271] ? __might_fault+0xaa/0x120 [ 527.784138][T13271] ? __might_fault+0xc6/0x120 [ 527.784147][T13271] ? __might_fault+0xaa/0x120 [ 527.784159][T13271] inet6_ioctl+0x21a/0x280 [ 527.784175][T13271] ? inet6_getname+0x650/0x650 [ 527.784193][T13271] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 527.784212][T13271] sock_do_ioctl+0xd7/0x2f0 [ 527.784224][T13271] ? sock_show_fdinfo+0xb0/0xb0 [ 527.784239][T13271] sock_ioctl+0x623/0x7a0 [ 527.784251][T13271] ? sock_poll+0x3d0/0x3d0 [ 527.784263][T13271] ? bpf_lsm_file_ioctl+0x9/0x10 [ 527.784275][T13271] ? security_file_ioctl+0x80/0xa0 [ 527.784290][T13271] ? sock_poll+0x3d0/0x3d0 [ 527.784300][T13271] __se_sys_ioctl+0xfd/0x170 [ 527.784314][T13271] do_syscall_64+0x55/0xb0 [ 527.784327][T13271] ? clear_bhb_loop+0x40/0x90 [ 527.784339][T13271] ? clear_bhb_loop+0x40/0x90 [ 527.784351][T13271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.784362][T13271] RIP: 0033:0x7fc342d8efc9 [ 527.784372][T13271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.784382][T13271] RSP: 002b:00007fc340ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.784394][T13271] RAX: ffffffffffffffda RBX: 00007fc342fe5fa0 RCX: 00007fc342d8efc9 [ 527.784403][T13271] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000003 [ 527.784410][T13271] RBP: 00007fc340ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 527.784418][T13271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.784425][T13271] R13: 00007fc342fe6038 R14: 00007fc342fe5fa0 R15: 00007fff9e8798d8 [ 527.784439][T13271] [ 527.797427][T13271] CPU: 1 PID: 13271 Comm: syz.0.2558 Not tainted syzkaller #0 [ 527.797441][T13271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 527.797448][T13271] Call Trace: [ 527.797453][T13271] [ 527.797458][T13271] dump_stack_lvl+0x16c/0x230 [ 527.797476][T13271] ? show_regs_print_info+0x20/0x20 [ 527.797493][T13271] ? load_image+0x3b0/0x3b0 [ 527.797507][T13271] ? __lock_acquire+0x1334/0x7c80 [ 527.797527][T13271] should_fail_ex+0x39d/0x4d0 [ 527.797547][T13271] strncpy_from_user+0x36/0x2e0 [ 527.797564][T13271] strncpy_from_user_nofault+0x71/0x140 [ 527.797585][T13271] bpf_probe_read_user_str+0x2a/0x70 [ 527.797608][T13271] bpf_prog_bc7c5c6b9645592f+0x3d/0x3f [ 527.797627][T13271] bpf_trace_run4+0x1f9/0x420 [ 529.134469][T13271] ? bpf_trace_run4+0xfd/0x420 [ 529.139228][T13271] ? bpf_trace_run3+0x400/0x400 [ 529.144063][T13271] ? __bpf_trace_sched_switch+0x160/0x1e0 [ 529.149781][T13271] __bpf_trace_sched_switch+0x17b/0x1e0 [ 529.155325][T13271] ? __bpf_trace_sched_wakeup_template+0xe0/0xe0 [ 529.161662][T13271] ? __lock_acquire+0x7c20/0x7c80 [ 529.166690][T13271] ? local_clock+0x20/0x20 [ 529.171091][T13271] ? tracing_record_taskinfo_sched_switch+0x7d/0x360 [ 529.177752][T13271] ? __bpf_trace_sched_wakeup_template+0xe0/0xe0 [ 529.184065][T13271] __traceiter_sched_switch+0x93/0xc0 [ 529.189419][T13271] __schedule+0x2197/0x44d0 [ 529.193913][T13271] ? asan.module_dtor+0x20/0x20 [ 529.198750][T13271] ? __mutex_lock+0x6b2/0xcc0 [ 529.203424][T13271] ? __mutex_trylock_common+0x84/0x250 [ 529.208900][T13271] ? trace_raw_output_contention_end+0xd0/0xd0 [ 529.215064][T13271] schedule+0xbd/0x170 [ 529.219136][T13271] schedule_preempt_disabled+0x13/0x20 [ 529.224580][T13271] __mutex_lock+0x6b7/0xcc0 [ 529.229069][T13271] ? __mutex_lock+0x4e8/0xcc0 [ 529.233733][T13271] ? ipv6_route_ioctl+0x2f7/0x4a0 [ 529.238742][T13271] ? mutex_lock_nested+0x20/0x20 [ 529.243664][T13271] ? l3mdev_fib_table_by_index+0x34/0x2d0 [ 529.249367][T13271] ? l3mdev_fib_table_by_index+0x34/0x2d0 [ 529.255080][T13271] ipv6_route_ioctl+0x2f7/0x4a0 [ 529.259930][T13271] ? rt6_purge_dflt_routers+0xaf0/0xaf0 [ 529.265464][T13271] ? __might_fault+0xaa/0x120 [ 529.270126][T13271] ? __might_fault+0xc6/0x120 [ 529.274787][T13271] ? __might_fault+0xaa/0x120 [ 529.279460][T13271] inet6_ioctl+0x21a/0x280 [ 529.283867][T13271] ? inet6_getname+0x650/0x650 [ 529.288614][T13271] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 529.294061][T13271] sock_do_ioctl+0xd7/0x2f0 [ 529.298549][T13271] ? sock_show_fdinfo+0xb0/0xb0 [ 529.303386][T13271] sock_ioctl+0x623/0x7a0 [ 529.307700][T13271] ? sock_poll+0x3d0/0x3d0 [ 529.312103][T13271] ? bpf_lsm_file_ioctl+0x9/0x10 [ 529.317027][T13271] ? security_file_ioctl+0x80/0xa0 [ 529.322132][T13271] ? sock_poll+0x3d0/0x3d0 [ 529.326533][T13271] __se_sys_ioctl+0xfd/0x170 [ 529.331114][T13271] do_syscall_64+0x55/0xb0 [ 529.335531][T13271] ? clear_bhb_loop+0x40/0x90 [ 529.340206][T13271] ? clear_bhb_loop+0x40/0x90 [ 529.344871][T13271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 529.350766][T13271] RIP: 0033:0x7fc342d8efc9 [ 529.355172][T13271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.374788][T13271] RSP: 002b:00007fc340ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 529.383204][T13271] RAX: ffffffffffffffda RBX: 00007fc342fe5fa0 RCX: 00007fc342d8efc9 [ 529.391164][T13271] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000003 [ 529.399124][T13271] RBP: 00007fc340ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 529.407087][T13271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.415062][T13271] R13: 00007fc342fe6038 R14: 00007fc342fe5fa0 R15: 00007fff9e8798d8 [ 529.423041][T13271] [ 529.433147][T10411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.441664][T10411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.449942][T10411] bridge_slave_1: left allmulticast mode [ 529.455768][T10411] bridge_slave_1: left promiscuous mode [ 529.461444][T10411] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.469578][T10411] bridge_slave_0: left promiscuous mode [ 529.475479][T10411] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.485525][T10411] veth0_macvtap: left promiscuous mode [ 529.491060][T10411] veth1_vlan: left promiscuous mode [ 529.496379][T10411] veth0_vlan: left promiscuous mode [ 529.711188][T10411] team0 (unregistering): Port device team_slave_1 removed [ 529.728055][T10411] team0 (unregistering): Port device team_slave_0 removed [ 529.753966][T10411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.839950][T10411] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 529.881338][T10411] bond0 (unregistering): Released all slaves [ 529.952671][T13068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.963230][T13068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.973440][T13068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.987743][T13068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.997712][T13068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.008498][T13068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.019322][T13068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.030403][T13068] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.039313][T13068] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.048038][T13068] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.056759][T13068] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.147467][T13068] ieee80211 phy95: Selected rate control algorithm 'minstrel_ht' [ 530.173667][T10404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.175714][T13068] ieee80211 phy96: Selected rate control algorithm 'minstrel_ht' [ 530.182146][T10404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.206279][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.214122][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50