last executing test programs: 36.767819907s ago: executing program 2 (id=7364): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x50) 36.547683778s ago: executing program 2 (id=7367): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000600000004000000"], 0x0, 0x2a}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x10009e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='])}{\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x5, 0x4, &(0x7f0000000100)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2a609, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x7fffffff}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'vxcan1\x00', @broadcast}) 35.850161383s ago: executing program 2 (id=7369): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2a609, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xa, 0x7fffffff}, 0x10c101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x120000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{r0}, &(0x7f0000000a40), &(0x7f0000000a80)='%pB \x00'}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8a", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000090010000000000003"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x6, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r7, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) ioctl$SIOCSIFHWADDR(r3, 0xc0189436, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x1b, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000055a60701000000000000000018110000", @ANYRES16=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000100000550901000000000095002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018110000", @ANYRES32=r10, @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="00ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f00000002c0)={0xffffffffffffffff, r11}) 35.182841115s ago: executing program 2 (id=7372): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000380), 0xe}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="030000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300000000e7ff000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000007d0000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000400), &(0x7f0000000440)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="02cb0ccfd81f8e06928eac43e46fa29315002424309e230beb80421f3354db5c6b3c5f2745561c15d0313a03767e1a6da1cf864942e368e2bae9d276880dbe16bc38a7ee9b43816c43377ef694646d8118a36d8c8fa5bc81f0176783baabfe285ee94f56f573fa81e451cc555701091ad24a2a3e6db074e48a714582b54304366d7456157785fb91a8257d5b5e0d13a55ccaf23d765c453e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x100, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c00000000000000"], 0x68}, 0x84) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r6) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r6, r5, 0x4, r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000340)}, 0xffffffffffffff0b) r8 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f0000000080)=@rc={0xa, @none}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x230}, 0x0) r9 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) socket$kcm(0x10, 0x3, 0x10) 32.100980878s ago: executing program 2 (id=7381): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x40488c4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x2000000000000216, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x1}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffec0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r4) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"}) 21.016415714s ago: executing program 3 (id=7431): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000600000004000000"], 0x0, 0x2a}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x10009e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='])}{\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x5, 0x4, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2a609, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x7fffffff}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'vxcan1\x00', @broadcast}) 20.522662538s ago: executing program 3 (id=7433): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/43, 0x2b}, 0x100) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000180)=0x20) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90224fc600d00020004000100ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg(r5, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x400000}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000001ac0)=[{0x108, 0x116, 0x3, "9d3d7fac61a21a680e0c58b642bd05cd61ecbec9273ddd12e3e737e5fd67207ed645384cb84afe7963880c4f9ae4f6314347869022475c94d4c9cd0ead1f3c0dd19cb4da92c48f859ff46e1d199249b1365826482c7779f5217d369cc5b0f83a0a126a0df81762e4526ddc78e45687b8381892f42ea78a479fed2517355934ea7cf56696e3f768e70bdb5cdb13b11bd58350b541bb7109b544a021145d9ee2aa615f26d89f107d389ab080c739926d53e5ee69f06a74cb744052b77463eb1d328938436be5a9a5a82d8e28c3bad0f2fd8123b761f2ecfe90c363eaeb9a541bd3606a308b2d125b7459aac6621f27c067d333fd70660d86"}, {0x110, 0x10f, 0x2, "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"}, {0xa0, 0x1, 0x3, "2f0644bcca29fe3626299c158238128e5fc6286df47dd3e5372129f32116ba8723c1adedb74efe539112d50b97ac9dbfd062e10c514ed4207fb35d9861239608209aff2793f6fa65dda4ffe8c849e2fd0de17ab9bb324678d2de052fec1f80fbbc817e5bebce37769eadb02339d71246e143a21aaed09c8cc1bd5df6178311ef4f9be14e093e8e81aa830cd4678df8"}, {0x1010, 0x101, 0x4, "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"}], 0x12c8}, 0x1) bpf$ITER_CREATE(0x21, &(0x7f00000017c0)={r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xbf}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) recvmsg$unix(r4, 0x0, 0x81) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x27) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x200, 0x0, 0x1}, {0xfffffffd, 0x4, 0x10006, 0x3}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x50}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) 20.235781782s ago: executing program 0 (id=7435): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000380), 0xe}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="030000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300000000e7ff000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000007d0000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000400), &(0x7f0000000440)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="02cb0ccfd81f8e06928eac43e46fa29315002424309e230beb80421f3354db5c6b3c5f2745561c15d0313a03767e1a6da1cf864942e368e2bae9d276880dbe16bc38a7ee9b43816c43377ef694646d8118a36d8c8fa5bc81f0176783baabfe285ee94f56f573fa81e451cc555701091ad24a2a3e6db074e48a714582b54304366d7456157785fb91a8257d5b5e0d13a55ccaf23d765c453e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x100, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c00000000000000"], 0x68}, 0x84) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r6) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r6, r5, 0x4, r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000340)}, 0xffffffffffffff0b) r8 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f0000000080)=@rc={0xa, @none}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac1414000000"], 0x230}, 0x0) r9 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) socket$kcm(0x10, 0x3, 0x10) 20.006796834s ago: executing program 3 (id=7437): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x4, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 19.8984939s ago: executing program 0 (id=7439): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x53, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r11, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300040c0) setsockopt$sock_attach_bpf(r11, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r11, 0x1, 0x31, &(0x7f0000000000), 0x4) r12 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x8914, &(0x7f00000007c0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e') sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x8, 0x7, 0xc, 0xac, 0x0, 0x9e54, 0x8200, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0xd948, 0xe}, 0x104140, 0x9, 0x2106, 0x1, 0x0, 0x9, 0x5, 0x0, 0x2, 0x0, 0xa}, 0xffffffffffffffff, 0x1, r1, 0x0) 19.797760724s ago: executing program 3 (id=7440): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000600000004000000"], 0x0, 0x2a}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x10009e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='])}{\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x5, 0x4, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2a609, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x7fffffff}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'vxcan1\x00', @broadcast}) 19.578798265s ago: executing program 1 (id=7442): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000ffffff7f00000000000000bf8200000000030007020000f8ffffffb703000008001000b704000000000000750000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d00000002001100c50083b8000000000000000000000000000068a47ac0eb23ad2787017ae4f851ad6367e11a10ef7a52b713dd59ccd177deace7edfa46beb458e9d8e8db61810ed4a136142733912be10a5d24ce3218bbf12281692341651f96cad68d647e4f6a4d278700c16a", 0x82}], 0x1, 0x0, 0x0, 0x5865}, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0xa, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x7f, 0xfffe, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xf, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r5, 0x2) r6 = getpid() perf_event_open(0x0, r6, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.stat\x00', 0x60ff, 0x8cffffff) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x4d, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="3af6303ea6fedea42d5949a9e835edead37cf054a8083bba53f22e70b94a8f04f63a4f86f0369f92de8eccf90cd13de3b4a6eb1cec46806f3b4198ee4fbc53b92ea30eb2744ab5572b75f9cb2ee4", 0x4e}, {0x0}, {0x0}, {&(0x7f00000008c0)="3f9c1a6ad2b39c2c3943b486dc38dd9dea472009d8f0870c67bf2ff4ff", 0x1d}, {0x0}], 0x5}, 0x24044810) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19.336753107s ago: executing program 0 (id=7443): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0xffffffffffffffd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000037000b63446a80648c2594f90b24fc60", 0x14}], 0x1}, 0x5006) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x106) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xf) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, 0x0) r7 = socket$kcm(0x23, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89ef, &(0x7f0000000000)={r7}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x705, 0x0, 0x0, 0x5}, {0x6, 0x40, 0x7, 0xffffffff}, {0x4, 0x5, 0x8, 0x4}, {0x7516, 0x80, 0x7, 0x9}]}) bpf$ITER_CREATE(0x21, &(0x7f00000017c0)={r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x3, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r6, 0x0, 0x81) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000000000000000000060b0b4bf76fe2bd5330a0080e1e75b1cc87f6707632d5f7b0b0e5fe0812315b4ee78817608c98bc86b065944663f243998e64f0484b57b2b75bb51e6e4a28640fc7704cb4af02020e4a1401dd8fc91d808ade0a19c6979a54db94c859c2d2a2652c5ce688c817694c84dd953e5c956bcca3298ceb6fcf119a86dc5c55d540566edb37fdb353feefe440da5c1e7ac5f8eeddcedd776b5c83b3c4c738e"], 0x10}, 0xfc10) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, 0x0, 0x4000081) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0xb701, 0x0) 19.256456391s ago: executing program 1 (id=7444): r0 = socket$kcm(0xa, 0x2, 0x0) (async) socket$kcm(0x22, 0x2, 0x21) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d71, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) close(0x3) close(r0) (async, rerun: 32) r2 = socket$kcm(0xa, 0x1, 0x0) (rerun: 32) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x80, 0x0}, 0x2600c055) (async) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'tunl0\x00', 0x10}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 19.082995899s ago: executing program 1 (id=7445): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f00000001c0), 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) write$cgroup_pid(r2, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 18.962300045s ago: executing program 3 (id=7446): socketpair(0x1, 0x1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1af06, 0xffffffffffffffff, 0x8, 0x0, &(0x7f00000005c0)=[{0x1, 0x5, 0xb, 0xc}, {0x1, 0x1, 0xb, 0xc}, {0x2, 0x1, 0x10, 0xa}, {0x4, 0x3, 0xf}, {0x3, 0x5, 0x5, 0xc}, {0x4, 0x5, 0x7}, {0x3, 0x4, 0x0, 0x7}, {0x1, 0x3, 0x9, 0xb}], 0x10, 0x8}, 0x94) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000180)=@phonet={0x23, 0x6, 0x7, 0xfa}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="93f6556354d8137f49dde2", 0xb}, {&(0x7f0000000240)="70182e485ce8a4218bd673aae3bdb9754aaadb49cb18a2134c94951895b5c3b0fe569b5206d06842ddc14fcbffb4492f9635d7d7854cd4e9b0667044de7ac5f71bf2b4bd59305b8aea9c6041cffb46ee13243da54680c508707cd19725daa8a192477992e48dd5fb04adb7499d823fcd1579611fe1ccec9c58ffaf1109f51439a538d9f369ceff136c4497c59cb1d701b3b94841644b83f343b98787c299b35e8628a64e7431e6a8f705f1ecec74af74f0d565708c254f036a21f79766224f8f4e1c3ee061fd73503c28", 0xca}], 0x2}, 0x40000) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x2, @perf_bp={0x0, 0x4}, 0x19122, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121fb719b6", 0x31}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000210081044e", 0x9}, {0x0}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$kcm(0x29, 0xf, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x1a0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20) socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 18.895864929s ago: executing program 0 (id=7447): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0xa}, 0x11490d, 0x4, 0x400000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x7ffff000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x25, 0x29, 0x32, 0xe0ff}}, @ip_tos_u8={{0x11, 0x4410, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x64}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 18.798956693s ago: executing program 1 (id=7448): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x18}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r0}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, 0x0) 18.412493552s ago: executing program 1 (id=7449): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x40488c4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x2000000000000216, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x1}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffec0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"}) 18.146841015s ago: executing program 1 (id=7450): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc8a000500feff"], &(0x7f0000000080)='GPL\x00', 0x5, 0x6f, &(0x7f0000003300)=""/111, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x3, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000300142603600e120800060000000441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) 18.099664118s ago: executing program 0 (id=7451): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x30598, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000090401000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000020130180000000000000000000000000000009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f0000002820000004000000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES64=0x0], 0x20) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000300), 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 18.099195778s ago: executing program 2 (id=7375): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdedd79f2007915, @perf_bp={0x0, 0xa}, 0x11c92d, 0x2, 0x9, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000fe27008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0xfe, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff88500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080)}, 0x100a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000feff7000000070000000020000000400000000000002050000000300000005000093010000000a000000ffff00000600000002000000ff0f000005000000040000003e000000030000000a0000000300000081000000100000007304000001000000050000000000000e0400000000000000000000000000000d"], 0x0, 0x8a, 0x0, 0x1, 0x6, 0x10000}, 0x28) r11 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x7bb6e9342ad6733b}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r12, 0x1, '\x00', r13, r10, 0x0, 0x3, 0x1}, 0x50) r14 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) 17.982250644s ago: executing program 3 (id=7452): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x18000000000002a0, 0x28, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x8, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x6a161, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x4a48, 0xfffc, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe8000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x3fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000800000000000000000000000700000000000000000000000000001ef90cf5e7578b4dcfafc0ff8417713697efa2ca4c252bbb38260a5c8ece8e164b4143aec3"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) recvmsg$kcm(r6, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r8, &(0x7f0000000840)={&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000740)="a641b66c07213931c61b968cb718db64ca310d8507915f933d5ac2b0a3bdd22f7a47837c9b21e13b20fb872b6fa87020c158db9a1bab5013abea4467d72209bfc56f9f27023a1976529c1f96c74f207fc51415f7360a87fbf9e513c22b9779e2584557a646a918ff1cdc2cce6384dd5186b963ac85ab047f692d0e4dd50eabe2473918d4b300dcd04b8a500fff73c6824f21762f261e85596844e2f863c22341d0ff64d15bbf34e5562aba19bb046c74a6c9293da100dec5390e1c83b03e78fbd33997cc6ddea6fecee364cb3b6db338c6fdf3f21305b66bbdf3", 0xda}, {&(0x7f0000000300)="05a629d6347d0cca3f9714d61a27da9a442fa42d3d544a105229ff0242e9d59f", 0x20}, {&(0x7f0000000380)="73d76d4891ef", 0x6}, {&(0x7f0000000900)="e1f8e05566dfb0c44bf4440637feafdc907bb7542539106162cc0483ed62dce5a07ed3e87970e6a66ef6c59820cefa496c92a6b1ca3adef6ad34b8aa330ff6995de39060847357118c8879db42d71f1906e1402c199785aff59a03f84116d72a2de8697c7d7b964a088743b1042a0099b5455ea61953136a9cf2763293a749dc6208558b0a3db23774a3e7ae1b3be507f0da26efbbeee334c6a90404fa6e55b744d26540943cefc1089d76a44094442b264cae428cb11986015aace058c62266d684b3eb6f25733176349dc4a3832370f7dbda9cd9a59b3b6d39822b3620b7958edcdf372fddcc46af103bad19f45770292ab2", 0xf3}], 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000000000000000000002000000bc6079510000000018000000000000000000000007000000018307faac1414191400000000000000000000000100000002000000000000001400000000000000000000000200000001000000000000001400000000000000000000000100000006000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14143fe000000000000000000000000000040000000000020000000900000000000000"], 0xb0}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) 17.675101659s ago: executing program 0 (id=7453): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000600000004000000"], 0x0, 0x2a}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x10009e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='])}{\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x5, 0x4, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2a609, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x7fffffff}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'vxcan1\x00', @broadcast}) 2.154168074s ago: executing program 32 (id=7453): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000600000004000000"], 0x0, 0x2a}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x10009e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='])}{\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x5, 0x4, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2a609, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x7fffffff}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'vxcan1\x00', @broadcast}) 1.516979906s ago: executing program 33 (id=7450): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc8a000500feff"], &(0x7f0000000080)='GPL\x00', 0x5, 0x6f, &(0x7f0000003300)=""/111, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x3, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000300142603600e120800060000000441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) 673.999737ms ago: executing program 34 (id=7375): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdedd79f2007915, @perf_bp={0x0, 0xa}, 0x11c92d, 0x2, 0x9, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000fe27008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0xfe, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff88500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080)}, 0x100a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000feff7000000070000000020000000400000000000002050000000300000005000093010000000a000000ffff00000600000002000000ff0f000005000000040000003e000000030000000a0000000300000081000000100000007304000001000000050000000000000e0400000000000000000000000000000d"], 0x0, 0x8a, 0x0, 0x1, 0x6, 0x10000}, 0x28) r11 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x7bb6e9342ad6733b}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r12, 0x1, '\x00', r13, r10, 0x0, 0x3, 0x1}, 0x50) r14 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 35 (id=7452): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x18000000000002a0, 0x28, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x8, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x6a161, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x4a48, 0xfffc, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe8000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x3fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000800000000000000000000000700000000000000000000000000001ef90cf5e7578b4dcfafc0ff8417713697efa2ca4c252bbb38260a5c8ece8e164b4143aec3"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) recvmsg$kcm(r6, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r8, &(0x7f0000000840)={&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000740)="a641b66c07213931c61b968cb718db64ca310d8507915f933d5ac2b0a3bdd22f7a47837c9b21e13b20fb872b6fa87020c158db9a1bab5013abea4467d72209bfc56f9f27023a1976529c1f96c74f207fc51415f7360a87fbf9e513c22b9779e2584557a646a918ff1cdc2cce6384dd5186b963ac85ab047f692d0e4dd50eabe2473918d4b300dcd04b8a500fff73c6824f21762f261e85596844e2f863c22341d0ff64d15bbf34e5562aba19bb046c74a6c9293da100dec5390e1c83b03e78fbd33997cc6ddea6fecee364cb3b6db338c6fdf3f21305b66bbdf3", 0xda}, {&(0x7f0000000300)="05a629d6347d0cca3f9714d61a27da9a442fa42d3d544a105229ff0242e9d59f", 0x20}, {&(0x7f0000000380)="73d76d4891ef", 0x6}, {&(0x7f0000000900)="e1f8e05566dfb0c44bf4440637feafdc907bb7542539106162cc0483ed62dce5a07ed3e87970e6a66ef6c59820cefa496c92a6b1ca3adef6ad34b8aa330ff6995de39060847357118c8879db42d71f1906e1402c199785aff59a03f84116d72a2de8697c7d7b964a088743b1042a0099b5455ea61953136a9cf2763293a749dc6208558b0a3db23774a3e7ae1b3be507f0da26efbbeee334c6a90404fa6e55b744d26540943cefc1089d76a44094442b264cae428cb11986015aace058c62266d684b3eb6f25733176349dc4a3832370f7dbda9cd9a59b3b6d39822b3620b7958edcdf372fddcc46af103bad19f45770292ab2", 0xf3}], 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000000000000000000002000000bc6079510000000018000000000000000000000007000000018307faac1414191400000000000000000000000100000002000000000000001400000000000000000000000200000001000000000000001400000000000000000000000100000006000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14143fe000000000000000000000000000040000000000020000000900000000000000"], 0xb0}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) kernel console output (not intermixed with test programs): 00007fb139c15fa0 R15: 00007ffce048ff88 [ 1468.082837][T27035] [ 1468.139334][T27039] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6338'. [ 1468.630415][T27053] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6344'. [ 1468.669518][T27054] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.6343'. [ 1471.137634][T27068] FAULT_INJECTION: forcing a failure. [ 1471.137634][T27068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1471.153241][T27068] CPU: 0 PID: 27068 Comm: syz.0.6348 Not tainted syzkaller #0 [ 1471.160781][T27068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1471.170966][T27068] Call Trace: [ 1471.174284][T27068] [ 1471.177260][T27068] dump_stack_lvl+0x18c/0x250 [ 1471.181992][T27068] ? show_regs_print_info+0x20/0x20 [ 1471.187326][T27068] ? load_image+0x400/0x400 [ 1471.191868][T27068] ? __might_fault+0xaa/0x120 [ 1471.196664][T27068] ? __lock_acquire+0x7d40/0x7d40 [ 1471.201737][T27068] should_fail_ex+0x39d/0x4d0 [ 1471.206474][T27068] _copy_from_iter+0x1d9/0x12e0 [ 1471.211374][T27068] ? __virt_addr_valid+0x18c/0x540 [ 1471.216533][T27068] ? __lock_acquire+0x7d40/0x7d40 [ 1471.221603][T27068] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 1471.227052][T27068] ? copyout_mc+0x70/0x70 [ 1471.231422][T27068] ? __virt_addr_valid+0x18c/0x540 [ 1471.236573][T27068] ? __virt_addr_valid+0x18c/0x540 [ 1471.241744][T27068] ? __virt_addr_valid+0x469/0x540 [ 1471.246914][T27068] ? __check_object_size+0x506/0xa20 [ 1471.252248][T27068] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 1471.258095][T27068] ? sk_psock_verdict_data_ready+0x13f/0x520 [ 1471.264109][T27068] ? __receive_sock+0x90/0x90 [ 1471.268820][T27068] ? skb_put+0x11b/0x210 [ 1471.273097][T27068] unix_stream_sendmsg+0x562/0xbf0 [ 1471.278256][T27068] ? unix_show_fdinfo+0x270/0x270 [ 1471.283403][T27068] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1471.289853][T27068] ? aa_sock_msg_perm+0x94/0x150 [ 1471.294821][T27068] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1471.300139][T27068] ? security_socket_sendmsg+0x80/0xa0 [ 1471.305632][T27068] ? unix_show_fdinfo+0x270/0x270 [ 1471.310726][T27068] ____sys_sendmsg+0x5ba/0x960 [ 1471.315533][T27068] ? __asan_memset+0x22/0x40 [ 1471.320168][T27068] ? __sys_sendmsg_sock+0x30/0x30 [ 1471.325273][T27068] ? __import_iovec+0x5f2/0x850 [ 1471.330184][T27068] ? import_iovec+0x73/0xa0 [ 1471.334718][T27068] ___sys_sendmsg+0x2a6/0x360 [ 1471.339422][T27068] ? get_pid_task+0x20/0x1e0 [ 1471.344055][T27068] ? __sys_sendmsg+0x2a0/0x2a0 [ 1471.348859][T27068] ? __lock_acquire+0x7d40/0x7d40 [ 1471.353935][T27068] __se_sys_sendmsg+0x1c2/0x2b0 [ 1471.358816][T27068] ? __x64_sys_sendmsg+0x80/0x80 [ 1471.363799][T27068] ? lockdep_hardirqs_on+0x98/0x150 [ 1471.369069][T27068] do_syscall_64+0x55/0xa0 [ 1471.373522][T27068] ? clear_bhb_loop+0x40/0x90 [ 1471.378251][T27068] ? clear_bhb_loop+0x40/0x90 [ 1471.383052][T27068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1471.389010][T27068] RIP: 0033:0x7febeaf9c799 [ 1471.393471][T27068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1471.413108][T27068] RSP: 002b:00007febebefc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1471.421567][T27068] RAX: ffffffffffffffda RBX: 00007febeb215fa0 RCX: 00007febeaf9c799 [ 1471.429599][T27068] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 1471.437607][T27068] RBP: 00007febebefc090 R08: 0000000000000000 R09: 0000000000000000 [ 1471.445611][T27068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1471.453610][T27068] R13: 00007febeb216038 R14: 00007febeb215fa0 R15: 00007ffe4e7e3598 [ 1471.461641][T27068] [ 1471.867119][T27070] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6349'. [ 1472.585044][T27083] netlink: 'syz.1.6354': attribute type 10 has an invalid length. [ 1472.635645][T27083] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.6354'. [ 1473.561310][T27098] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6360'. [ 1475.922627][T27103] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6362'. [ 1475.934936][T27103] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6362'. [ 1475.946594][T27103] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6362'. [ 1476.529652][T27121] netlink: 'syz.2.6369': attribute type 10 has an invalid length. [ 1476.549480][T27121] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6369'. [ 1476.571705][T27121] netlink: 'syz.2.6369': attribute type 10 has an invalid length. [ 1476.593304][T27121] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6369'. [ 1476.919344][T27131] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6371'. [ 1477.221242][T27135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1477.698163][T27157] FAULT_INJECTION: forcing a failure. [ 1477.698163][T27157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1477.714006][T27157] CPU: 1 PID: 27157 Comm: syz.1.6383 Not tainted syzkaller #0 [ 1477.721537][T27157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1477.731633][T27157] Call Trace: [ 1477.734951][T27157] [ 1477.737927][T27157] dump_stack_lvl+0x18c/0x250 [ 1477.742636][T27157] ? show_regs_print_info+0x20/0x20 [ 1477.747882][T27157] ? load_image+0x400/0x400 [ 1477.752402][T27157] ? __might_fault+0xaa/0x120 [ 1477.757458][T27157] ? __lock_acquire+0x7d40/0x7d40 [ 1477.762702][T27157] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1477.769093][T27157] should_fail_ex+0x39d/0x4d0 [ 1477.773824][T27157] _copy_from_user+0x2f/0xe0 [ 1477.778471][T27157] __sys_bpf+0x23e/0x890 [ 1477.782789][T27157] ? bpf_link_show_fdinfo+0x390/0x390 [ 1477.788208][T27157] ? lock_chain_count+0x20/0x20 [ 1477.793252][T27157] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1477.799253][T27157] __x64_sys_bpf+0x7c/0x90 [ 1477.803680][T27157] do_syscall_64+0x55/0xa0 [ 1477.808128][T27157] ? clear_bhb_loop+0x40/0x90 [ 1477.812848][T27157] ? clear_bhb_loop+0x40/0x90 [ 1477.817664][T27157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1477.823597][T27157] RIP: 0033:0x7fb13999c799 [ 1477.828028][T27157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1477.847658][T27157] RSP: 002b:00007fb13a87b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1477.856139][T27157] RAX: ffffffffffffffda RBX: 00007fb139c16090 RCX: 00007fb13999c799 [ 1477.864154][T27157] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1477.872144][T27157] RBP: 00007fb13a87b090 R08: 0000000000000000 R09: 0000000000000000 [ 1477.880125][T27157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1477.888123][T27157] R13: 00007fb139c16128 R14: 00007fb139c16090 R15: 00007ffce048ff88 [ 1477.896115][T27157] [ 1478.066274][T27161] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6385'. [ 1478.507866][T27165] netlink: 'syz.1.6387': attribute type 10 has an invalid length. [ 1478.516363][T27165] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6387'. [ 1479.168035][T27170] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.6387'. [ 1479.181743][T27171] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6387'. [ 1480.317260][T27202] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6400'. [ 1481.080754][T27230] FAULT_INJECTION: forcing a failure. [ 1481.080754][T27230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1481.095089][T27230] CPU: 0 PID: 27230 Comm: syz.0.6410 Not tainted syzkaller #0 [ 1481.102624][T27230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1481.113438][T27230] Call Trace: [ 1481.116764][T27230] [ 1481.119996][T27230] dump_stack_lvl+0x18c/0x250 [ 1481.124839][T27230] ? show_regs_print_info+0x20/0x20 [ 1481.130192][T27230] ? load_image+0x400/0x400 [ 1481.135020][T27230] ? __might_fault+0xaa/0x120 [ 1481.139755][T27230] ? __lock_acquire+0x7d40/0x7d40 [ 1481.144838][T27230] should_fail_ex+0x39d/0x4d0 [ 1481.149585][T27230] _copy_from_user+0x2f/0xe0 [ 1481.154240][T27230] __sys_bpf+0x23e/0x890 [ 1481.158543][T27230] ? bpf_link_show_fdinfo+0x390/0x390 [ 1481.163989][T27230] ? lock_chain_count+0x20/0x20 [ 1481.168995][T27230] __x64_sys_bpf+0x7c/0x90 [ 1481.173490][T27230] do_syscall_64+0x55/0xa0 [ 1481.177976][T27230] ? clear_bhb_loop+0x40/0x90 [ 1481.182722][T27230] ? clear_bhb_loop+0x40/0x90 [ 1481.187548][T27230] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1481.193500][T27230] RIP: 0033:0x7febeaf9c799 [ 1481.198056][T27230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1481.217716][T27230] RSP: 002b:00007febebedb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1481.226182][T27230] RAX: ffffffffffffffda RBX: 00007febeb216090 RCX: 00007febeaf9c799 [ 1481.234375][T27230] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1481.242394][T27230] RBP: 00007febebedb090 R08: 0000000000000000 R09: 0000000000000000 [ 1481.250415][T27230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1481.258429][T27230] R13: 00007febeb216128 R14: 00007febeb216090 R15: 00007ffe4e7e3598 [ 1481.266814][T27230] [ 1481.281889][T27232] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6411'. [ 1481.421578][T27229] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6411'. [ 1482.333898][T27258] FAULT_INJECTION: forcing a failure. [ 1482.333898][T27258] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.366775][T27258] CPU: 1 PID: 27258 Comm: syz.0.6420 Not tainted syzkaller #0 [ 1482.374419][T27258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1482.385062][T27258] Call Trace: [ 1482.388486][T27258] [ 1482.391529][T27258] dump_stack_lvl+0x18c/0x250 [ 1482.396519][T27258] ? show_regs_print_info+0x20/0x20 [ 1482.401790][T27258] ? load_image+0x400/0x400 [ 1482.406355][T27258] ? __might_sleep+0xe0/0xe0 [ 1482.411185][T27258] ? __lock_acquire+0x7d40/0x7d40 [ 1482.416270][T27258] should_fail_ex+0x39d/0x4d0 [ 1482.421026][T27258] should_failslab+0x9/0x20 [ 1482.425585][T27258] slab_pre_alloc_hook+0x59/0x310 [ 1482.430677][T27258] ? copyout_mc+0x70/0x70 [ 1482.435064][T27258] ? __virt_addr_valid+0x18c/0x540 [ 1482.440251][T27258] kmem_cache_alloc_node+0x60/0x320 [ 1482.445518][T27258] ? __alloc_skb+0x103/0x2c0 [ 1482.450252][T27258] __alloc_skb+0x103/0x2c0 [ 1482.454719][T27258] __ip6_append_data+0x2abc/0x3c50 [ 1482.459917][T27258] ? udpv6_sendmsg+0x2390/0x2390 [ 1482.464906][T27258] ? mark_lock+0x94/0x320 [ 1482.469292][T27258] ? ip6_setup_cork+0xfe0/0xfe0 [ 1482.474186][T27258] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1482.479606][T27258] ip6_append_data+0x1b0/0x350 [ 1482.484415][T27258] ? udpv6_sendmsg+0x2390/0x2390 [ 1482.489434][T27258] udpv6_sendmsg+0xc37/0x2390 [ 1482.494187][T27258] ? udpv6_sendmsg+0x2390/0x2390 [ 1482.499209][T27258] ? udp_v6_early_demux+0xf80/0xf80 [ 1482.504494][T27258] ? __lock_acquire+0x1273/0x7d40 [ 1482.509800][T27258] ? inet_send_prepare+0x5c/0x260 [ 1482.514969][T27258] ? inet6_sendmsg+0x5f/0xd0 [ 1482.519601][T27258] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 1482.524835][T27258] ____sys_sendmsg+0x5ba/0x960 [ 1482.529647][T27258] ? __asan_memset+0x22/0x40 [ 1482.534288][T27258] ? __sys_sendmsg_sock+0x30/0x30 [ 1482.539337][T27258] ? __import_iovec+0x5f2/0x850 [ 1482.544238][T27258] ? import_iovec+0x73/0xa0 [ 1482.548814][T27258] ___sys_sendmsg+0x2a6/0x360 [ 1482.553552][T27258] ? get_pid_task+0x20/0x1e0 [ 1482.558198][T27258] ? __sys_sendmsg+0x2a0/0x2a0 [ 1482.563036][T27258] ? __lock_acquire+0x7d40/0x7d40 [ 1482.568143][T27258] __se_sys_sendmsg+0x1c2/0x2b0 [ 1482.573047][T27258] ? __x64_sys_sendmsg+0x80/0x80 [ 1482.578028][T27258] ? lockdep_hardirqs_on+0x98/0x150 [ 1482.583276][T27258] do_syscall_64+0x55/0xa0 [ 1482.587759][T27258] ? clear_bhb_loop+0x40/0x90 [ 1482.592731][T27258] ? clear_bhb_loop+0x40/0x90 [ 1482.597442][T27258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1482.603368][T27258] RIP: 0033:0x7febeaf9c799 [ 1482.607811][T27258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1482.627550][T27258] RSP: 002b:00007febebefc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1482.636255][T27258] RAX: ffffffffffffffda RBX: 00007febeb215fa0 RCX: 00007febeaf9c799 [ 1482.644257][T27258] RDX: 0000000020000081 RSI: 0000200000000240 RDI: 0000000000000003 [ 1482.652350][T27258] RBP: 00007febebefc090 R08: 0000000000000000 R09: 0000000000000000 [ 1482.660362][T27258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1482.668362][T27258] R13: 00007febeb216038 R14: 00007febeb215fa0 R15: 00007ffe4e7e3598 [ 1482.676382][T27258] [ 1483.176532][T27273] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6426'. [ 1484.422760][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1484.722065][T27305] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6437'. [ 1484.860743][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.867286][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.168120][T27312] netlink: 'syz.1.6439': attribute type 22 has an invalid length. [ 1485.188741][T27312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6439'. [ 1485.804762][T27319] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6441'. [ 1488.085579][T27340] netlink: 'syz.0.6448': attribute type 21 has an invalid length. [ 1488.133276][T27340] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6448'. [ 1488.438272][T27346] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1489.377361][T27358] netlink: 'syz.3.6454': attribute type 22 has an invalid length. [ 1489.390494][T23148] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1489.507036][T27358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6454'. [ 1492.293567][T27373] netlink: 'syz.3.6460': attribute type 21 has an invalid length. [ 1492.302608][T27373] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6460'. [ 1492.772125][T27385] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6464'. [ 1492.803340][T27389] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6463'. [ 1494.194054][T27414] netlink: 'syz.2.6472': attribute type 21 has an invalid length. [ 1494.202700][T27414] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6472'. [ 1494.809768][T27420] netlink: 'syz.2.6474': attribute type 13 has an invalid length. [ 1494.818894][T27420] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6474'. [ 1494.838168][T27420] syz_tun: refused to change device tx_queue_len [ 1494.845288][T27430] netlink: 763 bytes leftover after parsing attributes in process `syz.1.6477'. [ 1494.903506][T27430] netlink: 'syz.1.6477': attribute type 10 has an invalid length. [ 1494.934449][T27430] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6477'. [ 1494.976633][T27430] batadv_slave_1: entered promiscuous mode [ 1494.994208][T27430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1495.024645][T27430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1495.615155][T27447] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6482'. [ 1497.270342][T27497] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6495'. [ 1498.670016][T27537] IPv6: NLM_F_CREATE should be specified when creating new route [ 1498.678811][T27537] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6504'. [ 1501.397567][T27584] IPv6: NLM_F_CREATE should be specified when creating new route [ 1501.589401][T27584] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6519'. [ 1503.591442][T27598] tap0: tun_chr_ioctl cmd 1074025677 [ 1503.609525][T27598] tap0: linktype set to 6 [ 1503.801135][T27613] netlink: 'syz.3.6529': attribute type 3 has an invalid length. [ 1503.811807][T27613] netlink: 'syz.3.6529': attribute type 1 has an invalid length. [ 1503.822511][T27613] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.6529'. [ 1507.688631][T27644] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6538'. [ 1507.767028][T27642] netlink: 209340 bytes leftover after parsing attributes in process `syz.2.6537'. [ 1508.165462][T27660] netlink: 'syz.3.6542': attribute type 1 has an invalid length. [ 1508.188503][T27660] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.6542'. [ 1508.237142][T27660] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6542'. [ 1508.401067][T27660] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6542'. [ 1508.417221][T27662] tap0: tun_chr_ioctl cmd 1074025677 [ 1508.423856][T27662] tap0: linktype set to 6 [ 1509.470539][T27689] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6548'. [ 1509.586579][T27695] netlink: 'syz.2.6549': attribute type 21 has an invalid length. [ 1509.594538][T27695] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6549'. [ 1509.648491][T27695] netlink: 'syz.2.6549': attribute type 4 has an invalid length. [ 1509.677034][T27695] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6549'. [ 1509.957296][T27703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6553'. [ 1511.650221][T27738] syzkaller0: entered promiscuous mode [ 1511.666672][T27738] syzkaller0: entered allmulticast mode [ 1516.300673][T27739] tap0: tun_chr_ioctl cmd 1074025677 [ 1516.306163][T27739] tap0: linktype set to 6 [ 1517.395895][ T2972] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1519.643734][T27789] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6573'. [ 1520.956029][T27813] netlink: 'syz.1.6582': attribute type 21 has an invalid length. [ 1520.964167][T27813] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6582'. [ 1521.643260][T27835] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6590'. [ 1521.676713][T27835] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6590'. [ 1521.691010][T27830] tap0: tun_chr_ioctl cmd 1074025677 [ 1521.727138][T27830] tap0: linktype set to 6 [ 1521.836235][T27836] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6590'. [ 1522.612349][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1523.134721][T27854] FAULT_INJECTION: forcing a failure. [ 1523.134721][T27854] name failslab, interval 1, probability 0, space 0, times 0 [ 1523.153738][T27854] CPU: 1 PID: 27854 Comm: syz.2.6595 Not tainted syzkaller #0 [ 1523.161296][T27854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1523.171664][T27854] Call Trace: [ 1523.174992][T27854] [ 1523.177965][T27854] dump_stack_lvl+0x18c/0x250 [ 1523.182797][T27854] ? sctp_sendmsg+0x1575/0x28c0 [ 1523.187700][T27854] ? ___sys_sendmsg+0x2a6/0x360 [ 1523.193038][T27854] ? show_regs_print_info+0x20/0x20 [ 1523.198358][T27854] ? load_image+0x400/0x400 [ 1523.202935][T27854] should_fail_ex+0x39d/0x4d0 [ 1523.207689][T27854] should_failslab+0x9/0x20 [ 1523.212248][T27854] slab_pre_alloc_hook+0x59/0x310 [ 1523.217787][T27854] ? sctp_add_bind_addr+0x8c/0x360 [ 1523.223207][T27854] __kmem_cache_alloc_node+0x53/0x250 [ 1523.228648][T27854] ? sctp_add_bind_addr+0x8c/0x360 [ 1523.233809][T27854] kmalloc_trace+0x2a/0xe0 [ 1523.238284][T27854] sctp_add_bind_addr+0x8c/0x360 [ 1523.243270][T27854] sctp_copy_local_addr_list+0x315/0x4f0 [ 1523.248975][T27854] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 1523.254752][T27854] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1523.260885][T27854] ? sctp_v4_is_any+0x35/0x60 [ 1523.265607][T27854] ? sctp_copy_one_addr+0x8c/0x350 [ 1523.270783][T27854] sctp_bind_addr_copy+0xb3/0x3c0 [ 1523.275867][T27854] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1523.282252][T27854] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1523.287601][T27854] ? __sctp_connect+0xd80/0xd80 [ 1523.292496][T27854] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1523.297970][T27854] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1523.303583][T27854] ? security_sctp_bind_connect+0x89/0xb0 [ 1523.309385][T27854] sctp_sendmsg+0x1575/0x28c0 [ 1523.314168][T27854] ? sctp_getsockopt+0xb60/0xb60 [ 1523.319170][T27854] ? aa_sk_perm+0x83c/0x970 [ 1523.323751][T27854] ? aa_af_perm+0x330/0x330 [ 1523.328354][T27854] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1523.334849][T27854] ? sock_rps_record_flow+0x19/0x3f0 [ 1523.340225][T27854] ? inet_sendmsg+0xe9/0x2f0 [ 1523.344877][T27854] ? inet_send_prepare+0x260/0x260 [ 1523.350056][T27854] ____sys_sendmsg+0x5ba/0x960 [ 1523.354872][T27854] ? __lock_acquire+0x7d40/0x7d40 [ 1523.359969][T27854] ? __asan_memset+0x22/0x40 [ 1523.364620][T27854] ? __sys_sendmsg_sock+0x30/0x30 [ 1523.369690][T27854] ? __import_iovec+0x5f2/0x850 [ 1523.374604][T27854] ? import_iovec+0x73/0xa0 [ 1523.379161][T27854] ___sys_sendmsg+0x2a6/0x360 [ 1523.383884][T27854] ? get_pid_task+0x20/0x1e0 [ 1523.388535][T27854] ? __sys_sendmsg+0x2a0/0x2a0 [ 1523.393375][T27854] ? __lock_acquire+0x7d40/0x7d40 [ 1523.398477][T27854] __se_sys_sendmsg+0x1c2/0x2b0 [ 1523.403427][T27854] ? __x64_sys_sendmsg+0x80/0x80 [ 1523.408430][T27854] ? lockdep_hardirqs_on+0x98/0x150 [ 1523.413681][T27854] do_syscall_64+0x55/0xa0 [ 1523.418164][T27854] ? clear_bhb_loop+0x40/0x90 [ 1523.422974][T27854] ? clear_bhb_loop+0x40/0x90 [ 1523.427704][T27854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1523.433660][T27854] RIP: 0033:0x7fe5a919c799 [ 1523.438118][T27854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1523.458127][T27854] RSP: 002b:00007fe5aa0d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1523.466685][T27854] RAX: ffffffffffffffda RBX: 00007fe5a9415fa0 RCX: 00007fe5a919c799 [ 1523.474700][T27854] RDX: 000000000004c0e0 RSI: 00002000000006c0 RDI: 0000000000000003 [ 1523.482720][T27854] RBP: 00007fe5aa0d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1523.490737][T27854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1523.498845][T27854] R13: 00007fe5a9416038 R14: 00007fe5a9415fa0 R15: 00007ffe2f6528e8 [ 1523.506879][T27854] [ 1523.704155][T27856] mac80211_hwsim hwsim535 wlan0: left promiscuous mode [ 1523.727253][T27856] mac80211_hwsim hwsim535 wlan0: left allmulticast mode [ 1523.816376][T27859] mac80211_hwsim hwsim535 wlan0: entered promiscuous mode [ 1523.824502][T27859] mac80211_hwsim hwsim535 wlan0: entered allmulticast mode [ 1526.897764][T27875] tap0: tun_chr_ioctl cmd 1074025677 [ 1526.922829][T27875] tap0: linktype set to 6 [ 1526.990710][T27879] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6602'. [ 1530.792201][T27918] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6615'. [ 1531.193755][T27922] tap0: tun_chr_ioctl cmd 1074025677 [ 1531.208364][T27922] tap0: linktype set to 6 [ 1531.764294][T27937] delete_channel: no stack [ 1531.833853][T27947] .&nr: renamed from bond_slave_1 [ 1531.990706][T27950] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6624'. [ 1532.025666][T27947] syzkaller0: entered promiscuous mode [ 1532.053530][T27947] syzkaller0: entered allmulticast mode [ 1536.158854][T27973] tap0: tun_chr_ioctl cmd 1074025677 [ 1536.164382][T27973] tap0: linktype set to 6 [ 1536.309482][T27983] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.6633'. [ 1536.323297][T27983] openvswitch: netlink: IP tunnel dst address not specified [ 1536.416026][ T51] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 1538.106296][T27991] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6636'. [ 1538.326207][T27994] syzkaller0: entered promiscuous mode [ 1538.333248][T27994] syzkaller0: entered allmulticast mode [ 1541.520656][T28026] netlink: 'syz.1.6646': attribute type 1 has an invalid length. [ 1541.541384][T28026] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6646'. [ 1542.262815][T28050] FAULT_INJECTION: forcing a failure. [ 1542.262815][T28050] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1542.336951][T28050] CPU: 1 PID: 28050 Comm: syz.0.6654 Not tainted syzkaller #0 [ 1542.344531][T28050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1542.354671][T28050] Call Trace: [ 1542.358033][T28050] [ 1542.361047][T28050] dump_stack_lvl+0x18c/0x250 [ 1542.365928][T28050] ? show_regs_print_info+0x20/0x20 [ 1542.371226][T28050] ? load_image+0x400/0x400 [ 1542.375849][T28050] ? __lock_acquire+0x7d40/0x7d40 [ 1542.381144][T28050] ? perf_trace_lock+0xfc/0x3b0 [ 1542.386336][T28050] should_fail_ex+0x39d/0x4d0 [ 1542.391124][T28050] prepare_alloc_pages+0x1e2/0x5f0 [ 1542.396360][T28050] __alloc_pages+0x134/0x460 [ 1542.401057][T28050] ? zone_statistics+0x170/0x170 [ 1542.406122][T28050] ? alloc_pages+0x4dc/0x740 [ 1542.410802][T28050] ? do_raw_spin_unlock+0x121/0x230 [ 1542.416115][T28050] __get_free_pages+0xc/0x30 [ 1542.420760][T28050] kasan_populate_vmalloc_pte+0x35/0x100 [ 1542.426465][T28050] __apply_to_page_range+0x860/0xdd0 [ 1542.431828][T28050] ? kasan_populate_vmalloc+0x70/0x70 [ 1542.437357][T28050] ? apply_to_page_range+0x50/0x50 [ 1542.442572][T28050] ? do_raw_spin_unlock+0x121/0x230 [ 1542.447843][T28050] alloc_vmap_area+0x1d0c/0x1e30 [ 1542.452880][T28050] ? vm_map_ram+0xcb0/0xcb0 [ 1542.457545][T28050] ? rcu_is_watching+0x15/0xb0 [ 1542.462381][T28050] __get_vm_area_node+0x162/0x370 [ 1542.467481][T28050] __vmalloc_node_range+0x36e/0x1330 [ 1542.472837][T28050] ? sock_hash_alloc+0x261/0x4d0 [ 1542.477971][T28050] ? free_vm_area+0x50/0x50 [ 1542.482531][T28050] ? bpf_map_area_alloc+0x5e/0x110 [ 1542.487714][T28050] ? rcu_is_watching+0x15/0xb0 [ 1542.492541][T28050] ? bpf_map_area_alloc+0x5e/0x110 [ 1542.497713][T28050] bpf_map_area_alloc+0xf1/0x110 [ 1542.502751][T28050] ? sock_hash_alloc+0x261/0x4d0 [ 1542.507798][T28050] sock_hash_alloc+0x261/0x4d0 [ 1542.512676][T28050] map_create+0x877/0x12f0 [ 1542.517125][T28050] ? bpf_lsm_bpf+0x9/0x10 [ 1542.521493][T28050] __sys_bpf+0x651/0x890 [ 1542.525852][T28050] ? bpf_link_show_fdinfo+0x390/0x390 [ 1542.531352][T28050] ? lock_chain_count+0x20/0x20 [ 1542.536239][T28050] __x64_sys_bpf+0x7c/0x90 [ 1542.540703][T28050] do_syscall_64+0x55/0xa0 [ 1542.545185][T28050] ? clear_bhb_loop+0x40/0x90 [ 1542.549930][T28050] ? clear_bhb_loop+0x40/0x90 [ 1542.554751][T28050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1542.560701][T28050] RIP: 0033:0x7febeaf9c799 [ 1542.565173][T28050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1542.584846][T28050] RSP: 002b:00007febebefc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1542.593332][T28050] RAX: ffffffffffffffda RBX: 00007febeb215fa0 RCX: 00007febeaf9c799 [ 1542.601379][T28050] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0000000000000000 [ 1542.609415][T28050] RBP: 00007febebefc090 R08: 0000000000000000 R09: 0000000000000000 [ 1542.617448][T28050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1542.625489][T28050] R13: 00007febeb216038 R14: 00007febeb215fa0 R15: 00007ffe4e7e3598 [ 1542.633583][T28050] [ 1542.835015][T28054] tap0: tun_chr_ioctl cmd 1074025677 [ 1542.867904][T28054] tap0: linktype set to 6 [ 1542.898469][T28065] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.6659'. [ 1542.964970][T28065] syzkaller0: entered promiscuous mode [ 1542.971048][T28065] syzkaller0: entered allmulticast mode [ 1544.108850][T28070] delete_channel: no stack [ 1546.294575][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.301261][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.925794][T28075] netlink: 'syz.1.6661': attribute type 21 has an invalid length. [ 1547.933858][T28075] netlink: 'syz.1.6661': attribute type 1 has an invalid length. [ 1547.945352][T28075] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6661'. [ 1548.739477][T28102] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6673'. [ 1551.664926][T28107] netlink: 'syz.1.6675': attribute type 10 has an invalid length. [ 1551.939926][T28115] tap0: tun_chr_ioctl cmd 1074025677 [ 1551.945993][T28115] tap0: linktype set to 6 [ 1551.963321][T28118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6677'. [ 1551.996043][T28119] IPv6: Can't replace route, no match found [ 1552.289364][T28123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6679'. [ 1552.556374][T28126] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6680'. [ 1553.379877][T28134] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6682'. [ 1553.398012][T28140] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6684'. [ 1554.184861][T28159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6690'. [ 1554.265819][T28155] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6689'. [ 1554.617945][ T2972] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1555.021762][T28168] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6693'. [ 1555.278048][T28172] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6694'. [ 1555.445509][T28175] netlink: 'syz.0.6696': attribute type 10 has an invalid length. [ 1555.522478][T28177] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6695'. [ 1556.181675][T28197] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6704'. [ 1556.197015][T28195] tap0: tun_chr_ioctl cmd 1074025677 [ 1556.205389][T28195] tap0: linktype set to 6 [ 1556.582929][T28206] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6705'. [ 1557.068023][T28210] netlink: 'syz.3.6707': attribute type 10 has an invalid length. [ 1557.083076][T28210] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6707'. [ 1557.820836][T23148] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1558.644752][T28247] tap0: tun_chr_ioctl cmd 1074025677 [ 1558.653079][T28247] tap0: linktype set to 6 [ 1559.478787][T28278] __nla_validate_parse: 3 callbacks suppressed [ 1559.478850][T28278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6725'. [ 1559.514462][T28276] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6724'. [ 1560.305325][T28296] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6732'. [ 1563.221647][T28303] tap0: tun_chr_ioctl cmd 1074025677 [ 1563.233458][T28303] tap0: linktype set to 6 [ 1563.391053][T28305] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6735'. [ 1563.913095][T28315] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6737'. [ 1564.119240][T28315] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6737'. [ 1564.139495][T28320] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6739'. [ 1564.307187][T28309] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6737'. [ 1565.982778][T28338] netlink: 'syz.3.6744': attribute type 4 has an invalid length. [ 1566.025444][T28338] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6744'. [ 1566.169011][T28352] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6746'. [ 1566.252780][T28338] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1567.011899][T28363] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6750'. [ 1567.046236][T28368] tap0: tun_chr_ioctl cmd 1074025677 [ 1567.066149][T28368] tap0: linktype set to 6 [ 1572.249210][T28407] netlink: 'syz.1.6757': attribute type 4 has an invalid length. [ 1572.559046][T28407] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6757'. [ 1572.735822][T28407] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1576.851882][T28448] ref_ctr_offset mismatch. inode: 0xa01 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 1577.756993][T28456] netlink: 'syz.0.6775': attribute type 29 has an invalid length. [ 1577.781030][T28456] netlink: 'syz.0.6775': attribute type 29 has an invalid length. [ 1577.832896][T28462] netlink: 'syz.0.6775': attribute type 29 has an invalid length. [ 1577.936721][T28465] netlink: 'syz.0.6775': attribute type 29 has an invalid length. [ 1578.696683][T28474] tap0: tun_chr_ioctl cmd 1074025677 [ 1578.705219][T28474] tap0: linktype set to 6 [ 1579.059081][T28487] netlink: 'syz.2.6783': attribute type 39 has an invalid length. [ 1579.402893][T28493] FAULT_INJECTION: forcing a failure. [ 1579.402893][T28493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1579.445094][T28493] CPU: 1 PID: 28493 Comm: syz.0.6785 Not tainted syzkaller #0 [ 1579.452655][T28493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1579.462778][T28493] Call Trace: [ 1579.466156][T28493] [ 1579.469178][T28493] dump_stack_lvl+0x18c/0x250 [ 1579.474098][T28493] ? show_regs_print_info+0x20/0x20 [ 1579.479363][T28493] ? load_image+0x400/0x400 [ 1579.484119][T28493] ? __lock_acquire+0x7d40/0x7d40 [ 1579.489206][T28493] ? snprintf+0xe9/0x140 [ 1579.493517][T28493] should_fail_ex+0x39d/0x4d0 [ 1579.498442][T28493] _copy_to_user+0x2f/0xa0 [ 1579.503037][T28493] simple_read_from_buffer+0xe7/0x150 [ 1579.508484][T28493] proc_fail_nth_read+0x1e8/0x260 [ 1579.513603][T28493] ? proc_fault_inject_write+0x360/0x360 [ 1579.519308][T28493] ? fsnotify_perm+0x271/0x5e0 [ 1579.524229][T28493] ? proc_fault_inject_write+0x360/0x360 [ 1579.529919][T28493] vfs_read+0x28b/0x970 [ 1579.534142][T28493] ? kernel_read+0x1e0/0x1e0 [ 1579.538871][T28493] ? __fget_files+0x28/0x4b0 [ 1579.543506][T28493] ? __fget_files+0x28/0x4b0 [ 1579.548146][T28493] ? __fget_files+0x43d/0x4b0 [ 1579.552891][T28493] ? __fdget_pos+0x2a3/0x330 [ 1579.557538][T28493] ? ksys_read+0x75/0x260 [ 1579.561943][T28493] ksys_read+0x150/0x260 [ 1579.566281][T28493] ? vfs_write+0x990/0x990 [ 1579.570760][T28493] ? lockdep_hardirqs_on+0x98/0x150 [ 1579.576028][T28493] do_syscall_64+0x55/0xa0 [ 1579.580544][T28493] ? clear_bhb_loop+0x40/0x90 [ 1579.585271][T28493] ? clear_bhb_loop+0x40/0x90 [ 1579.590008][T28493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1579.595944][T28493] RIP: 0033:0x7febeaf5cfce [ 1579.600408][T28493] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1579.620082][T28493] RSP: 002b:00007febebedafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1579.628539][T28493] RAX: ffffffffffffffda RBX: 00007febebedb6c0 RCX: 00007febeaf5cfce [ 1579.636562][T28493] RDX: 000000000000000f RSI: 00007febebedb0a0 RDI: 0000000000000009 [ 1579.644570][T28493] RBP: 00007febebedb090 R08: 0000000000000000 R09: 0000000000000000 [ 1579.652587][T28493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1579.660601][T28493] R13: 00007febeb216128 R14: 00007febeb216090 R15: 00007ffe4e7e3598 [ 1579.668648][T28493] [ 1579.878512][T28498] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6786'. [ 1582.619541][T28540] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.6800'. [ 1585.635041][T28584] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6811'. [ 1585.754669][T28579] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6810'. [ 1586.627079][T23148] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1589.172850][T23149] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1590.305063][T28630] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6825'. [ 1590.348762][T28632] tap0: tun_chr_ioctl cmd 1074025677 [ 1590.358633][T28632] tap0: linktype set to 6 [ 1591.104737][T28638] netlink: 'syz.3.6829': attribute type 3 has an invalid length. [ 1591.115870][T28638] netlink: 'syz.3.6829': attribute type 1 has an invalid length. [ 1591.136306][T28643] netlink: 'syz.0.6831': attribute type 11 has an invalid length. [ 1591.145079][T28638] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.6829'. [ 1591.164366][T28643] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.6831'. [ 1591.181740][T28643] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1591.193792][T28643] CPU: 0 PID: 28643 Comm: syz.0.6831 Not tainted syzkaller #0 [ 1591.201333][T28643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1591.211526][T28643] Call Trace: [ 1591.214839][T28643] [ 1591.217798][T28643] dump_stack_lvl+0x18c/0x250 [ 1591.222531][T28643] ? show_regs_print_info+0x20/0x20 [ 1591.227773][T28643] ? load_image+0x400/0x400 [ 1591.232328][T28643] sysfs_warn_dup+0x8e/0xa0 [ 1591.236861][T28643] sysfs_do_create_link_sd+0xc0/0x110 [ 1591.242261][T28643] device_add_class_symlinks+0x1cf/0x240 [ 1591.247998][T28643] device_add+0x507/0xc20 [ 1591.252367][T28643] wiphy_register+0x1dad/0x2ae0 [ 1591.257270][T28643] ? cfg80211_event_work+0x40/0x40 [ 1591.262423][T28643] ? minstrel_ht_alloc+0x88a/0x990 [ 1591.267583][T28643] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1591.273690][T28643] ieee80211_register_hw+0x3464/0x4250 [ 1591.279296][T28643] ? ieee80211_tasklet_handler+0x20/0x20 [ 1591.285143][T28643] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1591.291256][T28643] ? __debug_object_init+0xec/0x450 [ 1591.296498][T28643] ? __asan_memset+0x22/0x40 [ 1591.301135][T28643] ? __hrtimer_init+0x186/0x270 [ 1591.306028][T28643] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1591.311897][T28643] ? mac80211_hwsim_free+0x220/0x220 [ 1591.317224][T28643] ? rcu_is_watching+0x15/0xb0 [ 1591.322024][T28643] ? kstrndup+0xbd/0x140 [ 1591.326316][T28643] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1591.331496][T28643] ? __nla_validate+0x50/0x50 [ 1591.336232][T28643] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1591.342614][T28643] ? __nla_parse+0x40/0x50 [ 1591.347073][T28643] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1591.353448][T28643] genl_family_rcv_msg_doit+0x211/0x310 [ 1591.359028][T28643] ? end_current_label_crit_section+0x170/0x170 [ 1591.365313][T28643] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1591.371255][T28643] ? bpf_lsm_capable+0x9/0x10 [ 1591.376055][T28643] ? security_capable+0x89/0xb0 [ 1591.380949][T28643] genl_rcv_msg+0x619/0x7a0 [ 1591.385493][T28643] ? genl_bind+0x360/0x360 [ 1591.389948][T28643] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1591.396319][T28643] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1591.402951][T28643] ? ref_tracker_free+0x690/0x840 [ 1591.408020][T28643] netlink_rcv_skb+0x241/0x4d0 [ 1591.412824][T28643] ? genl_bind+0x360/0x360 [ 1591.417302][T28643] ? netlink_ack+0x1180/0x1180 [ 1591.422138][T28643] ? __lock_acquire+0x7d40/0x7d40 [ 1591.427252][T28643] ? down_read+0x1ac/0x2e0 [ 1591.431721][T28643] genl_rcv+0x28/0x40 [ 1591.435748][T28643] netlink_unicast+0x751/0x8d0 [ 1591.440572][T28643] netlink_sendmsg+0x8d0/0xbf0 [ 1591.445394][T28643] ? netlink_getsockopt+0x590/0x590 [ 1591.451216][T28643] ? aa_sock_msg_perm+0x94/0x150 [ 1591.456402][T28643] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1591.461745][T28643] ? security_socket_sendmsg+0x80/0xa0 [ 1591.467243][T28643] ? netlink_getsockopt+0x590/0x590 [ 1591.472492][T28643] ____sys_sendmsg+0x5ba/0x960 [ 1591.477302][T28643] ? __asan_memset+0x22/0x40 [ 1591.481965][T28643] ? __sys_sendmsg_sock+0x30/0x30 [ 1591.487033][T28643] ? __import_iovec+0x5f2/0x850 [ 1591.491974][T28643] ? import_iovec+0x73/0xa0 [ 1591.496582][T28643] ___sys_sendmsg+0x2a6/0x360 [ 1591.501320][T28643] ? __sys_sendmsg+0x2a0/0x2a0 [ 1591.506252][T28643] ? trace_call_bpf+0xc3/0x6c0 [ 1591.511096][T28643] __se_sys_sendmsg+0x1c2/0x2b0 [ 1591.515994][T28643] ? __x64_sys_sendmsg+0x80/0x80 [ 1591.521088][T28643] ? lockdep_hardirqs_on+0x98/0x150 [ 1591.526588][T28643] do_syscall_64+0x55/0xa0 [ 1591.531049][T28643] ? clear_bhb_loop+0x40/0x90 [ 1591.536106][T28643] ? clear_bhb_loop+0x40/0x90 [ 1591.540820][T28643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1591.546789][T28643] RIP: 0033:0x7febeaf9c799 [ 1591.551258][T28643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1591.570916][T28643] RSP: 002b:00007febebefc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1591.579377][T28643] RAX: ffffffffffffffda RBX: 00007febeb215fa0 RCX: 00007febeaf9c799 [ 1591.587389][T28643] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1591.595508][T28643] RBP: 00007febeb032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1591.603524][T28643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1591.611550][T28643] R13: 00007febeb216038 R14: 00007febeb215fa0 R15: 00007ffe4e7e3598 [ 1591.619674][T28643] [ 1591.897558][T28657] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6835'. [ 1592.586253][T28678] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6839'. [ 1592.630159][T28681] netlink: 'syz.2.6842': attribute type 3 has an invalid length. [ 1592.651709][T28681] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6842'. [ 1592.672945][T28674] tap0: tun_chr_ioctl cmd 1074025677 [ 1592.684573][T28674] tap0: linktype set to 6 [ 1593.084088][T28682] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6842'. [ 1594.169260][T28706] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6850'. [ 1594.807629][T28718] FAULT_INJECTION: forcing a failure. [ 1594.807629][T28718] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.827713][T28718] CPU: 0 PID: 28718 Comm: syz.2.6853 Not tainted syzkaller #0 [ 1594.835258][T28718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1594.845353][T28718] Call Trace: [ 1594.848668][T28718] [ 1594.851653][T28718] dump_stack_lvl+0x18c/0x250 [ 1594.856410][T28718] ? sctp_sendmsg+0x1575/0x28c0 [ 1594.861291][T28718] ? ___sys_sendmsg+0x2a6/0x360 [ 1594.866254][T28718] ? show_regs_print_info+0x20/0x20 [ 1594.871579][T28718] ? load_image+0x400/0x400 [ 1594.876124][T28718] should_fail_ex+0x39d/0x4d0 [ 1594.880838][T28718] should_failslab+0x9/0x20 [ 1594.885399][T28718] slab_pre_alloc_hook+0x59/0x310 [ 1594.890469][T28718] ? sctp_add_bind_addr+0x8c/0x360 [ 1594.895608][T28718] __kmem_cache_alloc_node+0x53/0x250 [ 1594.901043][T28718] ? sctp_add_bind_addr+0x8c/0x360 [ 1594.906177][T28718] kmalloc_trace+0x2a/0xe0 [ 1594.911074][T28718] sctp_add_bind_addr+0x8c/0x360 [ 1594.916040][T28718] sctp_copy_local_addr_list+0x315/0x4f0 [ 1594.921720][T28718] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 1594.927481][T28718] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1594.933588][T28718] ? sctp_v4_is_any+0x35/0x60 [ 1594.938295][T28718] ? sctp_copy_one_addr+0x8c/0x350 [ 1594.943469][T28718] sctp_bind_addr_copy+0xb3/0x3c0 [ 1594.948532][T28718] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1594.954904][T28718] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1594.960228][T28718] ? __sctp_connect+0xd80/0xd80 [ 1594.965117][T28718] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1594.970527][T28718] ? _local_bh_enable+0xa0/0xa0 [ 1594.975407][T28718] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1594.981245][T28718] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1594.987176][T28718] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1594.993144][T28718] ? security_sctp_bind_connect+0x89/0xb0 [ 1594.998928][T28718] sctp_sendmsg+0x1575/0x28c0 [ 1595.003657][T28718] ? sctp_getsockopt+0xb60/0xb60 [ 1595.008658][T28718] ? aa_sk_perm+0x83c/0x970 [ 1595.013204][T28718] ? aa_af_perm+0x330/0x330 [ 1595.017743][T28718] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1595.024190][T28718] ? sock_rps_record_flow+0x19/0x3f0 [ 1595.029520][T28718] ? inet_sendmsg+0x7c/0x2f0 [ 1595.034153][T28718] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1595.039479][T28718] ? security_socket_sendmsg+0x80/0xa0 [ 1595.045029][T28718] ? inet_send_prepare+0x260/0x260 [ 1595.050174][T28718] ____sys_sendmsg+0x5ba/0x960 [ 1595.055400][T28718] ? __lock_acquire+0x7d40/0x7d40 [ 1595.060483][T28718] ? __asan_memset+0x22/0x40 [ 1595.065145][T28718] ? __sys_sendmsg_sock+0x30/0x30 [ 1595.070209][T28718] ? __import_iovec+0x5f2/0x850 [ 1595.075119][T28718] ? import_iovec+0x73/0xa0 [ 1595.079671][T28718] ___sys_sendmsg+0x2a6/0x360 [ 1595.084388][T28718] ? get_pid_task+0x20/0x1e0 [ 1595.089189][T28718] ? __sys_sendmsg+0x2a0/0x2a0 [ 1595.094433][T28718] ? __lock_acquire+0x7d40/0x7d40 [ 1595.099509][T28718] __se_sys_sendmsg+0x1c2/0x2b0 [ 1595.104402][T28718] ? __x64_sys_sendmsg+0x80/0x80 [ 1595.109380][T28718] ? lockdep_hardirqs_on+0x98/0x150 [ 1595.114704][T28718] do_syscall_64+0x55/0xa0 [ 1595.119416][T28718] ? clear_bhb_loop+0x40/0x90 [ 1595.124305][T28718] ? clear_bhb_loop+0x40/0x90 [ 1595.129011][T28718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1595.134938][T28718] RIP: 0033:0x7fe5a919c799 [ 1595.139408][T28718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1595.159042][T28718] RSP: 002b:00007fe5aa0b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1595.167682][T28718] RAX: ffffffffffffffda RBX: 00007fe5a9416090 RCX: 00007fe5a919c799 [ 1595.175682][T28718] RDX: 0000000000008054 RSI: 0000200000000300 RDI: 0000000000000003 [ 1595.183681][T28718] RBP: 00007fe5aa0b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1595.191681][T28718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1595.199698][T28718] R13: 00007fe5a9416128 R14: 00007fe5a9416090 R15: 00007ffe2f6528e8 [ 1595.207747][T28718] [ 1595.542518][T28724] tap0: tun_chr_ioctl cmd 1074025677 [ 1595.552840][T28724] tap0: linktype set to 6 [ 1595.768902][T28727] tap0: tun_chr_ioctl cmd 1074025677 [ 1595.774958][T28727] tap0: linktype set to 6 [ 1596.237454][T28741] FAULT_INJECTION: forcing a failure. [ 1596.237454][T28741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1596.282285][T28741] CPU: 0 PID: 28741 Comm: syz.2.6858 Not tainted syzkaller #0 [ 1596.289838][T28741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1596.299943][T28741] Call Trace: [ 1596.303265][T28741] [ 1596.306234][T28741] dump_stack_lvl+0x18c/0x250 [ 1596.310976][T28741] ? show_regs_print_info+0x20/0x20 [ 1596.316238][T28741] ? load_image+0x400/0x400 [ 1596.320802][T28741] ? __might_fault+0xaa/0x120 [ 1596.325624][T28741] ? __lock_acquire+0x7d40/0x7d40 [ 1596.330826][T28741] should_fail_ex+0x39d/0x4d0 [ 1596.335564][T28741] _copy_from_user+0x2f/0xe0 [ 1596.340212][T28741] ___sys_sendmsg+0x1c7/0x360 [ 1596.344932][T28741] ? get_pid_task+0x20/0x1e0 [ 1596.349735][T28741] ? __sys_sendmsg+0x2a0/0x2a0 [ 1596.354716][T28741] ? __lock_acquire+0x7d40/0x7d40 [ 1596.359785][T28741] __se_sys_sendmsg+0x1c2/0x2b0 [ 1596.364838][T28741] ? __x64_sys_sendmsg+0x80/0x80 [ 1596.369817][T28741] ? lockdep_hardirqs_on+0x98/0x150 [ 1596.375042][T28741] do_syscall_64+0x55/0xa0 [ 1596.379526][T28741] ? clear_bhb_loop+0x40/0x90 [ 1596.384237][T28741] ? clear_bhb_loop+0x40/0x90 [ 1596.389121][T28741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1596.395051][T28741] RIP: 0033:0x7fe5a919c799 [ 1596.399593][T28741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1596.419611][T28741] RSP: 002b:00007fe5aa0d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1596.428074][T28741] RAX: ffffffffffffffda RBX: 00007fe5a9415fa0 RCX: 00007fe5a919c799 [ 1596.436181][T28741] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1596.444188][T28741] RBP: 00007fe5aa0d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1596.452186][T28741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1596.460183][T28741] R13: 00007fe5a9416038 R14: 00007fe5a9415fa0 R15: 00007ffe2f6528e8 [ 1596.468282][T28741] [ 1597.434810][T28763] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6866'. [ 1597.475001][T28763] team0: Port device team_slave_0 removed [ 1597.503545][T28763] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1598.104784][T28780] tap0: tun_chr_ioctl cmd 1074025677 [ 1598.112709][T28780] tap0: linktype set to 6 [ 1598.929600][T28797] tap0: tun_chr_ioctl cmd 1074025677 [ 1598.947016][T28797] tap0: linktype set to 6 [ 1599.637011][T28818] syzkaller0: entered promiscuous mode [ 1599.656089][T28818] syzkaller0: entered allmulticast mode [ 1599.834507][T28818] syzkaller0: mtu less than device minimum [ 1600.585385][T28828] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6886'. [ 1600.609583][T28828] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 1600.822700][T28833] tap0: tun_chr_ioctl cmd 1074025677 [ 1600.830154][T28833] tap0: linktype set to 6 [ 1602.869288][T28874] netlink: 'syz.1.6899': attribute type 10 has an invalid length. [ 1605.883493][T28946] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.6914'. [ 1606.011015][T28946] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.6914'. [ 1606.027477][T28946] tipc: Started in network mode [ 1606.032515][T28946] tipc: Node identity b, cluster identity 73 [ 1606.039503][T28946] tipc: Node number set to 11 [ 1607.731286][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.737924][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.358803][T28990] FAULT_INJECTION: forcing a failure. [ 1608.358803][T28990] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.407998][T28990] CPU: 1 PID: 28990 Comm: syz.3.6929 Not tainted syzkaller #0 [ 1608.415567][T28990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1608.425761][T28990] Call Trace: [ 1608.429083][T28990] [ 1608.432041][T28990] dump_stack_lvl+0x18c/0x250 [ 1608.436741][T28990] ? show_regs_print_info+0x20/0x20 [ 1608.441955][T28990] ? load_image+0x400/0x400 [ 1608.446475][T28990] ? __might_sleep+0xe0/0xe0 [ 1608.451253][T28990] ? __lock_acquire+0x7d40/0x7d40 [ 1608.456378][T28990] should_fail_ex+0x39d/0x4d0 [ 1608.461094][T28990] should_failslab+0x9/0x20 [ 1608.465615][T28990] slab_pre_alloc_hook+0x59/0x310 [ 1608.470658][T28990] kmem_cache_alloc_node+0x60/0x320 [ 1608.475892][T28990] ? __alloc_skb+0x103/0x2c0 [ 1608.480516][T28990] __alloc_skb+0x103/0x2c0 [ 1608.484955][T28990] tipc_buf_acquire+0x2b/0xe0 [ 1608.489647][T28990] tipc_msg_build+0x8c3/0xee0 [ 1608.494347][T28990] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 1608.500707][T28990] ? net_generic+0x1e/0x240 [ 1608.505255][T28990] ? tipc_group_bc_cong+0x168/0x210 [ 1608.510497][T28990] tipc_send_group_bcast+0x7d8/0xad0 [ 1608.515875][T28990] ? tipc_wait_for_connect+0x650/0x650 [ 1608.521412][T28990] ? wait_woken+0x180/0x180 [ 1608.525995][T28990] __tipc_sendmsg+0x33c/0x2bb0 [ 1608.530839][T28990] ? rht_unlock+0x1d0/0x1d0 [ 1608.535415][T28990] ? verify_lock_unused+0x140/0x140 [ 1608.540850][T28990] ? verify_lock_unused+0x140/0x140 [ 1608.546346][T28990] ? perf_trace_lock+0xfc/0x3b0 [ 1608.551318][T28990] ? trace_event_raw_event_lock+0x250/0x250 [ 1608.557325][T28990] ? mark_lock+0x94/0x320 [ 1608.561711][T28990] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1608.567745][T28990] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1608.573173][T28990] ? lockdep_hardirqs_on+0x98/0x150 [ 1608.578418][T28990] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1608.583885][T28990] ? _local_bh_enable+0xa0/0xa0 [ 1608.588788][T28990] tipc_sendmsg+0x55/0x70 [ 1608.593176][T28990] sock_write_iter+0x2df/0x420 [ 1608.597991][T28990] ? sock_read_iter+0x3e0/0x3e0 [ 1608.602926][T28990] ? common_file_perm+0x198/0x1f0 [ 1608.608009][T28990] vfs_write+0x46c/0x990 [ 1608.612298][T28990] ? file_end_write+0x250/0x250 [ 1608.617190][T28990] ? __fget_files+0x43d/0x4b0 [ 1608.621918][T28990] ? __fdget_pos+0x1d8/0x330 [ 1608.626563][T28990] ? ksys_write+0x75/0x260 [ 1608.631025][T28990] ksys_write+0x150/0x260 [ 1608.635408][T28990] ? __ia32_sys_read+0x90/0x90 [ 1608.640340][T28990] ? lockdep_hardirqs_on+0x98/0x150 [ 1608.645577][T28990] do_syscall_64+0x55/0xa0 [ 1608.650043][T28990] ? clear_bhb_loop+0x40/0x90 [ 1608.654748][T28990] ? clear_bhb_loop+0x40/0x90 [ 1608.659461][T28990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1608.665475][T28990] RIP: 0033:0x7f98c459c799 [ 1608.670094][T28990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1608.689745][T28990] RSP: 002b:00007f98c5406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1608.698196][T28990] RAX: ffffffffffffffda RBX: 00007f98c4815fa0 RCX: 00007f98c459c799 [ 1608.706308][T28990] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000005 [ 1608.714345][T28990] RBP: 00007f98c5406090 R08: 0000000000000000 R09: 0000000000000000 [ 1608.722354][T28990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1608.730381][T28990] R13: 00007f98c4816038 R14: 00007f98c4815fa0 R15: 00007fff80caeae8 [ 1608.738517][T28990] [ 1609.041135][T28998] netlink: 'syz.1.6933': attribute type 1 has an invalid length. [ 1609.138158][T28998] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.6933'. [ 1609.181633][T28999] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.6933'. [ 1613.617050][T29058] netlink: 'syz.0.6956': attribute type 39 has an invalid length. [ 1613.715762][T29064] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.6959'. [ 1613.744091][T29064] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.6959'. [ 1614.010319][T29076] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6964'. [ 1614.107791][T29082] netlink: 'syz.1.6964': attribute type 4 has an invalid length. [ 1614.115633][T29082] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6964'. [ 1614.314193][T29093] netlink: 'syz.1.6970': attribute type 10 has an invalid length. [ 1614.491201][T29099] netlink: 'syz.0.6966': attribute type 4 has an invalid length. [ 1614.564183][T29099] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6966'. [ 1614.756707][T29099] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1615.326287][T29117] FAULT_INJECTION: forcing a failure. [ 1615.326287][T29117] name failslab, interval 1, probability 0, space 0, times 0 [ 1615.366309][T29117] CPU: 0 PID: 29117 Comm: syz.0.6977 Not tainted syzkaller #0 [ 1615.374053][T29117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1615.384161][T29117] Call Trace: [ 1615.387581][T29117] [ 1615.390799][T29117] dump_stack_lvl+0x18c/0x250 [ 1615.395532][T29117] ? sctp_sendmsg+0x1575/0x28c0 [ 1615.400429][T29117] ? show_regs_print_info+0x20/0x20 [ 1615.405692][T29117] ? load_image+0x400/0x400 [ 1615.410617][T29117] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1615.416849][T29117] ? lock_chain_count+0x20/0x20 [ 1615.421744][T29117] should_fail_ex+0x39d/0x4d0 [ 1615.426659][T29117] should_failslab+0x9/0x20 [ 1615.431204][T29117] slab_pre_alloc_hook+0x59/0x310 [ 1615.436288][T29117] ? sctp_add_bind_addr+0x8c/0x360 [ 1615.441470][T29117] __kmem_cache_alloc_node+0x53/0x250 [ 1615.446916][T29117] ? sctp_add_bind_addr+0x8c/0x360 [ 1615.452168][T29117] kmalloc_trace+0x2a/0xe0 [ 1615.456717][T29117] sctp_add_bind_addr+0x8c/0x360 [ 1615.461702][T29117] sctp_copy_local_addr_list+0x315/0x4f0 [ 1615.467379][T29117] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 1615.473153][T29117] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1615.479546][T29117] ? sctp_v4_is_any+0x35/0x60 [ 1615.484266][T29117] ? sctp_copy_one_addr+0x8c/0x350 [ 1615.489436][T29117] sctp_bind_addr_copy+0xb3/0x3c0 [ 1615.494509][T29117] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1615.500872][T29117] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1615.506194][T29117] ? __sctp_connect+0xd80/0xd80 [ 1615.511089][T29117] ? sctp_sendmsg+0xbc7/0x28c0 [ 1615.515877][T29117] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1615.521481][T29117] ? security_sctp_bind_connect+0x89/0xb0 [ 1615.527246][T29117] sctp_sendmsg+0x1575/0x28c0 [ 1615.532153][T29117] ? sctp_getsockopt+0xb60/0xb60 [ 1615.537132][T29117] ? aa_sk_perm+0x83c/0x970 [ 1615.541693][T29117] ? aa_af_perm+0x330/0x330 [ 1615.546239][T29117] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1615.552786][T29117] ? sock_rps_record_flow+0x19/0x3f0 [ 1615.558110][T29117] ? inet_sendmsg+0xe9/0x2f0 [ 1615.562929][T29117] ? inet_send_prepare+0x260/0x260 [ 1615.568099][T29117] ____sys_sendmsg+0x5ba/0x960 [ 1615.572908][T29117] ? __lock_acquire+0x7d40/0x7d40 [ 1615.578000][T29117] ? __asan_memset+0x22/0x40 [ 1615.582640][T29117] ? __sys_sendmsg_sock+0x30/0x30 [ 1615.587704][T29117] ? __import_iovec+0x5f2/0x850 [ 1615.593218][T29117] ? import_iovec+0x73/0xa0 [ 1615.597776][T29117] ___sys_sendmsg+0x2a6/0x360 [ 1615.602504][T29117] ? get_pid_task+0x20/0x1e0 [ 1615.607408][T29117] ? __sys_sendmsg+0x2a0/0x2a0 [ 1615.612681][T29117] ? __lock_acquire+0x7d40/0x7d40 [ 1615.617769][T29117] __se_sys_sendmsg+0x1c2/0x2b0 [ 1615.622744][T29117] ? __x64_sys_sendmsg+0x80/0x80 [ 1615.627762][T29117] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1615.633697][T29117] do_syscall_64+0x55/0xa0 [ 1615.638149][T29117] ? clear_bhb_loop+0x40/0x90 [ 1615.642859][T29117] ? clear_bhb_loop+0x40/0x90 [ 1615.647586][T29117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1615.653510][T29117] RIP: 0033:0x7febeaf9c799 [ 1615.658003][T29117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1615.677658][T29117] RSP: 002b:00007febebefc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1615.686510][T29117] RAX: ffffffffffffffda RBX: 00007febeb215fa0 RCX: 00007febeaf9c799 [ 1615.694632][T29117] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 1615.702663][T29117] RBP: 00007febebefc090 R08: 0000000000000000 R09: 0000000000000000 [ 1615.710705][T29117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1615.718733][T29117] R13: 00007febeb216038 R14: 00007febeb215fa0 R15: 00007ffe4e7e3598 [ 1615.726759][T29117] [ 1615.980766][T29122] netlink: 'syz.3.6980': attribute type 4 has an invalid length. [ 1616.005439][T29122] netlink: 191644 bytes leftover after parsing attributes in process `syz.3.6980'. [ 1617.137193][T29169] tap0: tun_chr_ioctl cmd 1074025677 [ 1617.157450][T29169] tap0: linktype set to 6 [ 1617.518564][T29177] FAULT_INJECTION: forcing a failure. [ 1617.518564][T29177] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.560602][T29177] CPU: 0 PID: 29177 Comm: syz.0.6998 Not tainted syzkaller #0 [ 1617.568154][T29177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1617.578267][T29177] Call Trace: [ 1617.581587][T29177] [ 1617.584580][T29177] dump_stack_lvl+0x18c/0x250 [ 1617.589497][T29177] ? sctp_sendmsg+0x1575/0x28c0 [ 1617.594441][T29177] ? ___sys_sendmsg+0x2a6/0x360 [ 1617.599353][T29177] ? show_regs_print_info+0x20/0x20 [ 1617.604634][T29177] ? load_image+0x400/0x400 [ 1617.609223][T29177] should_fail_ex+0x39d/0x4d0 [ 1617.613969][T29177] should_failslab+0x9/0x20 [ 1617.618544][T29177] slab_pre_alloc_hook+0x59/0x310 [ 1617.623629][T29177] ? sctp_add_bind_addr+0x8c/0x360 [ 1617.628793][T29177] __kmem_cache_alloc_node+0x53/0x250 [ 1617.634230][T29177] ? sctp_add_bind_addr+0x8c/0x360 [ 1617.639392][T29177] kmalloc_trace+0x2a/0xe0 [ 1617.643876][T29177] sctp_add_bind_addr+0x8c/0x360 [ 1617.648874][T29177] sctp_copy_local_addr_list+0x315/0x4f0 [ 1617.654584][T29177] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 1617.660367][T29177] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1617.666502][T29177] ? sctp_v4_is_any+0x35/0x60 [ 1617.671232][T29177] ? sctp_copy_one_addr+0x8c/0x350 [ 1617.676411][T29177] sctp_bind_addr_copy+0xb3/0x3c0 [ 1617.681521][T29177] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1617.687922][T29177] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1617.693268][T29177] ? __sctp_connect+0xd80/0xd80 [ 1617.698179][T29177] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1617.703608][T29177] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1617.709214][T29177] ? security_sctp_bind_connect+0x89/0xb0 [ 1617.715186][T29177] sctp_sendmsg+0x1575/0x28c0 [ 1617.720303][T29177] ? sctp_getsockopt+0xb60/0xb60 [ 1617.725413][T29177] ? aa_sk_perm+0x83c/0x970 [ 1617.730237][T29177] ? aa_af_perm+0x330/0x330 [ 1617.734884][T29177] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1617.741374][T29177] ? sock_rps_record_flow+0x19/0x3f0 [ 1617.746735][T29177] ? inet_sendmsg+0xe9/0x2f0 [ 1617.751480][T29177] ? inet_send_prepare+0x260/0x260 [ 1617.756765][T29177] ____sys_sendmsg+0x5ba/0x960 [ 1617.761777][T29177] ? __lock_acquire+0x7d40/0x7d40 [ 1617.767043][T29177] ? __asan_memset+0x22/0x40 [ 1617.771706][T29177] ? __sys_sendmsg_sock+0x30/0x30 [ 1617.776962][T29177] ? __import_iovec+0x5f2/0x850 [ 1617.781901][T29177] ? import_iovec+0x73/0xa0 [ 1617.786503][T29177] ___sys_sendmsg+0x2a6/0x360 [ 1617.791250][T29177] ? __sys_sendmsg+0x2a0/0x2a0 [ 1617.796289][T29177] ? __lock_acquire+0x7d40/0x7d40 [ 1617.801436][T29177] __se_sys_sendmsg+0x1c2/0x2b0 [ 1617.806395][T29177] ? __x64_sys_sendmsg+0x80/0x80 [ 1617.811427][T29177] ? lockdep_hardirqs_on+0x98/0x150 [ 1617.816693][T29177] do_syscall_64+0x55/0xa0 [ 1617.821184][T29177] ? clear_bhb_loop+0x40/0x90 [ 1617.825917][T29177] ? clear_bhb_loop+0x40/0x90 [ 1617.830752][T29177] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1617.836790][T29177] RIP: 0033:0x7febeaf9c799 [ 1617.841265][T29177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1617.861032][T29177] RSP: 002b:00007febebefc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1617.869512][T29177] RAX: ffffffffffffffda RBX: 00007febeb215fa0 RCX: 00007febeaf9c799 [ 1617.877626][T29177] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 1617.885680][T29177] RBP: 00007febebefc090 R08: 0000000000000000 R09: 0000000000000000 [ 1617.893720][T29177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1617.901755][T29177] R13: 00007febeb216038 R14: 00007febeb215fa0 R15: 00007ffe4e7e3598 [ 1617.909821][T29177] [ 1617.974494][T29181] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.7000'. [ 1618.070245][T29185] netlink: 'syz.3.7001': attribute type 10 has an invalid length. [ 1618.614073][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1618.658516][T29193] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7004'. [ 1618.792825][T29193] netlink: 'syz.3.7004': attribute type 3 has an invalid length. [ 1618.836692][T29193] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7004'. [ 1619.830174][T29213] tap0: tun_chr_ioctl cmd 1074025677 [ 1619.908650][T29213] tap0: linktype set to 6 [ 1621.167833][ T2972] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1623.001037][T29270] tap0: tun_chr_ioctl cmd 1074025677 [ 1623.248439][T29270] tap0: linktype set to 6 [ 1626.066119][T29317] tap0: tun_chr_ioctl cmd 1074025677 [ 1626.075447][T29317] tap0: linktype set to 6 [ 1629.957509][T29357] delete_channel: no stack [ 1629.964568][T29357] delete_channel: no stack [ 1632.207476][T28905] wlan1: Trigger new scan to find an IBSS to join [ 1634.858601][T29421] FAULT_INJECTION: forcing a failure. [ 1634.858601][T29421] name failslab, interval 1, probability 0, space 0, times 0 [ 1634.873961][T29421] CPU: 0 PID: 29421 Comm: syz.0.7080 Not tainted syzkaller #0 [ 1634.881506][T29421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1634.891707][T29421] Call Trace: [ 1634.895177][T29421] [ 1634.898163][T29421] dump_stack_lvl+0x18c/0x250 [ 1634.902910][T29421] ? show_regs_print_info+0x20/0x20 [ 1634.908181][T29421] ? load_image+0x400/0x400 [ 1634.912757][T29421] ? __might_sleep+0xe0/0xe0 [ 1634.917406][T29421] ? __lock_acquire+0x7d40/0x7d40 [ 1634.922472][T29421] should_fail_ex+0x39d/0x4d0 [ 1634.927223][T29421] should_failslab+0x9/0x20 [ 1634.931795][T29421] slab_pre_alloc_hook+0x59/0x310 [ 1634.936879][T29421] ? __lock_acquire+0x7d40/0x7d40 [ 1634.941966][T29421] kmem_cache_alloc_node+0x60/0x320 [ 1634.947228][T29421] ? netlink_autobind+0x11e/0x300 [ 1634.952316][T29421] ? __alloc_skb+0x103/0x2c0 [ 1634.956970][T29421] __alloc_skb+0x103/0x2c0 [ 1634.961436][T29421] netlink_sendmsg+0x66a/0xbf0 [ 1634.966244][T29421] ? netlink_getsockopt+0x590/0x590 [ 1634.971486][T29421] ? aa_sock_msg_perm+0x94/0x150 [ 1634.976463][T29421] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1634.981823][T29421] ? security_socket_sendmsg+0x80/0xa0 [ 1634.987841][T29421] ? netlink_getsockopt+0x590/0x590 [ 1634.993074][T29421] ____sys_sendmsg+0x5ba/0x960 [ 1634.997864][T29421] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1635.004082][T29421] ? __asan_memset+0x22/0x40 [ 1635.008702][T29421] ? __sys_sendmsg_sock+0x30/0x30 [ 1635.013753][T29421] ? __import_iovec+0x5f2/0x850 [ 1635.018699][T29421] ? import_iovec+0x73/0xa0 [ 1635.023243][T29421] ___sys_sendmsg+0x2a6/0x360 [ 1635.027960][T29421] ? __sys_sendmsg+0x2a0/0x2a0 [ 1635.032770][T29421] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1635.038541][T29421] __se_sys_sendmsg+0x1c2/0x2b0 [ 1635.043424][T29421] ? __x64_sys_sendmsg+0x80/0x80 [ 1635.048389][T29421] ? lockdep_hardirqs_on+0x98/0x150 [ 1635.053624][T29421] ? __x64_sys_sendmsg+0x4f/0x80 [ 1635.058702][T29421] do_syscall_64+0x55/0xa0 [ 1635.063149][T29421] ? clear_bhb_loop+0x40/0x90 [ 1635.067855][T29421] ? clear_bhb_loop+0x40/0x90 [ 1635.072559][T29421] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1635.078481][T29421] RIP: 0033:0x7febeaf9c799 [ 1635.082933][T29421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1635.102569][T29421] RSP: 002b:00007febebefc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1635.111014][T29421] RAX: ffffffffffffffda RBX: 00007febeb215fa0 RCX: 00007febeaf9c799 [ 1635.119024][T29421] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1635.127017][T29421] RBP: 00007febebefc090 R08: 0000000000000000 R09: 0000000000000000 [ 1635.135007][T29421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1635.143097][T29421] R13: 00007febeb216038 R14: 00007febeb215fa0 R15: 00007ffe4e7e3598 [ 1635.151162][T29421] [ 1635.179689][T28912] wlan1: Trigger new scan to find an IBSS to join [ 1636.913611][T29446] FAULT_INJECTION: forcing a failure. [ 1636.913611][T29446] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.941337][T29446] CPU: 0 PID: 29446 Comm: syz.3.7089 Not tainted syzkaller #0 [ 1636.948969][T29446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1636.959091][T29446] Call Trace: [ 1636.962415][T29446] [ 1636.965392][T29446] dump_stack_lvl+0x18c/0x250 [ 1636.970131][T29446] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1636.976348][T29446] ? show_regs_print_info+0x20/0x20 [ 1636.981612][T29446] ? load_image+0x400/0x400 [ 1636.986203][T29446] should_fail_ex+0x39d/0x4d0 [ 1636.990951][T29446] should_failslab+0x9/0x20 [ 1636.995515][T29446] slab_pre_alloc_hook+0x59/0x310 [ 1637.000609][T29446] ? __asan_memcpy+0x40/0x70 [ 1637.005259][T29446] ? tomoyo_encode+0x28b/0x540 [ 1637.010160][T29446] ? tomoyo_encode+0x28b/0x540 [ 1637.014977][T29446] __kmem_cache_alloc_node+0x53/0x250 [ 1637.020400][T29446] ? prepend_path+0x4b/0x960 [ 1637.025045][T29446] ? tomoyo_encode+0x28b/0x540 [ 1637.029868][T29446] __kmalloc+0xa4/0x230 [ 1637.034322][T29446] tomoyo_encode+0x28b/0x540 [ 1637.038970][T29446] tomoyo_realpath_from_path+0x592/0x5d0 [ 1637.044666][T29446] tomoyo_path_number_perm+0x248/0x620 [ 1637.050276][T29446] ? tomoyo_path_number_perm+0x217/0x620 [ 1637.056059][T29446] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1637.061588][T29446] ? lockdep_hardirqs_on+0x98/0x150 [ 1637.066883][T29446] ? __fget_files+0x28/0x4b0 [ 1637.071532][T29446] ? __fget_files+0x28/0x4b0 [ 1637.076212][T29446] security_file_ioctl+0x70/0xa0 [ 1637.081216][T29446] __se_sys_ioctl+0x48/0x170 [ 1637.085867][T29446] do_syscall_64+0x55/0xa0 [ 1637.090385][T29446] ? clear_bhb_loop+0x40/0x90 [ 1637.095114][T29446] ? clear_bhb_loop+0x40/0x90 [ 1637.100104][T29446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1637.106048][T29446] RIP: 0033:0x7f98c459c799 [ 1637.110507][T29446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1637.130259][T29446] RSP: 002b:00007f98c5406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1637.138732][T29446] RAX: ffffffffffffffda RBX: 00007f98c4815fa0 RCX: 00007f98c459c799 [ 1637.146754][T29446] RDX: 0000200000000180 RSI: 00000000401054d5 RDI: 0000000000000003 [ 1637.154765][T29446] RBP: 00007f98c5406090 R08: 0000000000000000 R09: 0000000000000000 [ 1637.162869][T29446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1637.170873][T29446] R13: 00007f98c4816038 R14: 00007f98c4815fa0 R15: 00007fff80caeae8 [ 1637.178912][T29446] [ 1637.345685][T29446] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1637.641535][T29457] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.7092'. [ 1637.850236][T29472] netlink: 'syz.2.7097': attribute type 1 has an invalid length. [ 1639.173922][T28911] wlan1: Trigger new scan to find an IBSS to join [ 1639.895554][T29505] tap0: tun_chr_ioctl cmd 1074025677 [ 1639.943772][T29505] tap0: linktype set to 6 [ 1640.169409][T29515] FAULT_INJECTION: forcing a failure. [ 1640.169409][T29515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1640.185616][T29515] CPU: 0 PID: 29515 Comm: syz.2.7112 Not tainted syzkaller #0 [ 1640.193130][T29515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1640.203294][T29515] Call Trace: [ 1640.206629][T29515] [ 1640.209622][T29515] dump_stack_lvl+0x18c/0x250 [ 1640.214476][T29515] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1640.220694][T29515] ? show_regs_print_info+0x20/0x20 [ 1640.226057][T29515] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1640.232286][T29515] ? dump_stack+0x9/0x20 [ 1640.236596][T29515] should_fail_ex+0x39d/0x4d0 [ 1640.241341][T29515] _copy_from_user+0x2f/0xe0 [ 1640.245989][T29515] __sys_bpf+0x23e/0x890 [ 1640.250286][T29515] ? bpf_link_show_fdinfo+0x390/0x390 [ 1640.255793][T29515] __x64_sys_bpf+0x7c/0x90 [ 1640.260257][T29515] do_syscall_64+0x55/0xa0 [ 1640.264730][T29515] ? clear_bhb_loop+0x40/0x90 [ 1640.269451][T29515] ? clear_bhb_loop+0x40/0x90 [ 1640.274197][T29515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1640.280241][T29515] RIP: 0033:0x7fe5a919c799 [ 1640.284725][T29515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1640.304397][T29515] RSP: 002b:00007fe5aa0b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1640.312869][T29515] RAX: ffffffffffffffda RBX: 00007fe5a9416090 RCX: 00007fe5a919c799 [ 1640.320883][T29515] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 0000000000000000 [ 1640.328897][T29515] RBP: 00007fe5aa0b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1640.336924][T29515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1640.344953][T29515] R13: 00007fe5a9416128 R14: 00007fe5a9416090 R15: 00007ffe2f6528e8 [ 1640.352991][T29515] [ 1640.712144][T28906] wlan1: Creating new IBSS network, BSSID ca:f3:2b:2a:d6:fb [ 1640.738696][T29517] netlink: 'syz.1.7109': attribute type 1 has an invalid length. [ 1641.108145][T29530] tap0: tun_chr_ioctl cmd 1074025677 [ 1641.114416][T29530] tap0: linktype set to 6 [ 1641.134459][T29531] tap0: tun_chr_ioctl cmd 1074025677 [ 1641.146278][T29531] tap0: linktype set to 6 [ 1643.102167][T29558] tap0: tun_chr_ioctl cmd 1074025677 [ 1643.117790][T29568] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7125'. [ 1643.127975][T29558] tap0: linktype set to 6 [ 1643.152207][T29557] netlink: 'syz.0.7123': attribute type 1 has an invalid length. [ 1643.251499][T29573] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7128'. [ 1643.279546][T29573] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7128'. [ 1643.304811][T29573] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7128'. [ 1644.795543][T29592] tap0: tun_chr_ioctl cmd 1074025677 [ 1644.804858][T29592] tap0: linktype set to 6 [ 1645.972593][T29626] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.7147'. [ 1646.001298][T29626] netlink: zone id is out of range [ 1646.018771][T29626] netlink: zone id is out of range [ 1646.073191][T29626] netlink: zone id is out of range [ 1646.089832][T29626] netlink: zone id is out of range [ 1646.115938][T29626] netlink: zone id is out of range [ 1646.192387][T29626] netlink: zone id is out of range [ 1646.227391][T29626] netlink: zone id is out of range [ 1646.232646][T29626] netlink: zone id is out of range [ 1646.265967][T29626] netlink: zone id is out of range [ 1646.281779][T29626] netlink: zone id is out of range [ 1646.890299][T29642] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7152'. [ 1648.894536][T29658] netlink: 177680 bytes leftover after parsing attributes in process `syz.2.7157'. [ 1649.117829][T29664] FAULT_INJECTION: forcing a failure. [ 1649.117829][T29664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1649.151440][T29664] CPU: 0 PID: 29664 Comm: syz.2.7159 Not tainted syzkaller #0 [ 1649.158999][T29664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1649.169233][T29664] Call Trace: [ 1649.172657][T29664] [ 1649.175698][T29664] dump_stack_lvl+0x18c/0x250 [ 1649.180472][T29664] ? show_regs_print_info+0x20/0x20 [ 1649.185737][T29664] ? load_image+0x400/0x400 [ 1649.190310][T29664] ? __lock_acquire+0x7d40/0x7d40 [ 1649.195449][T29664] should_fail_ex+0x39d/0x4d0 [ 1649.200193][T29664] _copy_from_user+0x2f/0xe0 [ 1649.204846][T29664] __copy_msghdr+0x3bb/0x580 [ 1649.209500][T29664] ___sys_sendmsg+0x214/0x360 [ 1649.214224][T29664] ? get_pid_task+0x20/0x1e0 [ 1649.218878][T29664] ? __sys_sendmsg+0x2a0/0x2a0 [ 1649.223717][T29664] ? __lock_acquire+0x7d40/0x7d40 [ 1649.228827][T29664] __se_sys_sendmsg+0x1c2/0x2b0 [ 1649.233732][T29664] ? __x64_sys_sendmsg+0x80/0x80 [ 1649.238737][T29664] ? lockdep_hardirqs_on+0x98/0x150 [ 1649.243989][T29664] do_syscall_64+0x55/0xa0 [ 1649.248551][T29664] ? clear_bhb_loop+0x40/0x90 [ 1649.253289][T29664] ? clear_bhb_loop+0x40/0x90 [ 1649.258030][T29664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1649.263969][T29664] RIP: 0033:0x7fe5a919c799 [ 1649.268435][T29664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1649.288265][T29664] RSP: 002b:00007fe5aa0d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1649.296742][T29664] RAX: ffffffffffffffda RBX: 00007fe5a9415fa0 RCX: 00007fe5a919c799 [ 1649.304766][T29664] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1649.312793][T29664] RBP: 00007fe5aa0d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1649.320808][T29664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1649.328811][T29664] R13: 00007fe5a9416038 R14: 00007fe5a9415fa0 R15: 00007ffe2f6528e8 [ 1649.336860][T29664] [ 1649.452569][T29667] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1649.464644][T29667] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1649.476024][T29667] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1649.529497][T29667] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1649.537686][T29667] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1649.545160][T29667] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1649.742026][ T2972] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.845771][ T2972] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.967697][T29683] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.7163'. [ 1649.989231][T29673] tap0: tun_chr_ioctl cmd 1074025677 [ 1649.995268][T29683] netlink: 'syz.1.7163': attribute type 2 has an invalid length. [ 1650.004887][T29673] tap0: linktype set to 6 [ 1650.068107][ T2972] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.154976][ T2972] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.287654][T29666] chnl_net:caif_netlink_parms(): no params data found [ 1650.599467][T29666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.609928][T29666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.617703][T29666] bridge_slave_0: entered allmulticast mode [ 1650.625496][T29666] bridge_slave_0: entered promiscuous mode [ 1650.823377][T29666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.834854][T29666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.842843][T29666] bridge_slave_1: entered allmulticast mode [ 1650.859122][T29666] bridge_slave_1: entered promiscuous mode [ 1650.922436][T29666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1651.014533][T29666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1651.193741][T29715] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7170'. [ 1651.248774][T29666] team0: Port device team_slave_0 added [ 1651.262759][T29716] FAULT_INJECTION: forcing a failure. [ 1651.262759][T29716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1651.306751][T29716] CPU: 1 PID: 29716 Comm: syz.0.7171 Not tainted syzkaller #0 [ 1651.314308][T29716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1651.324502][T29716] Call Trace: [ 1651.327825][T29716] [ 1651.330800][T29716] dump_stack_lvl+0x18c/0x250 [ 1651.335624][T29716] ? show_regs_print_info+0x20/0x20 [ 1651.340976][T29716] ? load_image+0x400/0x400 [ 1651.345528][T29716] ? __might_fault+0xaa/0x120 [ 1651.350260][T29716] ? __lock_acquire+0x7d40/0x7d40 [ 1651.355351][T29716] should_fail_ex+0x39d/0x4d0 [ 1651.360093][T29716] _copy_from_user+0x2f/0xe0 [ 1651.364752][T29716] sctp_setsockopt+0x19e/0x11e0 [ 1651.370083][T29716] ? sock_common_recvmsg+0x190/0x190 [ 1651.375432][T29716] do_sock_setsockopt+0x175/0x1a0 [ 1651.380507][T29716] ? __fdget+0x180/0x210 [ 1651.384813][T29716] __x64_sys_setsockopt+0x182/0x200 [ 1651.390066][T29716] do_syscall_64+0x55/0xa0 [ 1651.394544][T29716] ? clear_bhb_loop+0x40/0x90 [ 1651.399365][T29716] ? clear_bhb_loop+0x40/0x90 [ 1651.404098][T29716] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1651.410047][T29716] RIP: 0033:0x7febeaf9c799 [ 1651.414511][T29716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1651.434167][T29716] RSP: 002b:00007febebedb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1651.442640][T29716] RAX: ffffffffffffffda RBX: 00007febeb216090 RCX: 00007febeaf9c799 [ 1651.450676][T29716] RDX: 000000000000001f RSI: 0000000000000084 RDI: 0000000000000006 [ 1651.458712][T29716] RBP: 00007febebedb090 R08: 0000000000000120 R09: 0000000000000000 [ 1651.466828][T29716] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1651.474850][T29716] R13: 00007febeb216128 R14: 00007febeb216090 R15: 00007ffe4e7e3598 [ 1651.482895][T29716] [ 1651.499325][T29715] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7170'. [ 1651.520062][T29666] team0: Port device team_slave_1 added [ 1651.630425][T29723] netlink: 'syz.1.7170': attribute type 10 has an invalid length. [ 1651.648731][ T51] Bluetooth: hci1: command tx timeout [ 1651.658181][T29723] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7170'. [ 1651.736995][T29666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1651.752103][T29666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1651.782800][T29666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1651.869247][T29666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1651.876273][T29666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1651.911488][T29666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1651.991481][T29666] hsr_slave_0: entered promiscuous mode [ 1652.030917][T29666] hsr_slave_1: entered promiscuous mode [ 1652.056838][T29666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1652.069310][T29666] Cannot create hsr debugfs directory [ 1652.530287][T28906] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1652.608853][T29743] tap0: tun_chr_ioctl cmd 1074025677 [ 1652.614608][T29743] tap0: linktype set to 6 [ 1653.146672][ T51] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 1653.148204][ T51] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 1653.728025][ T51] Bluetooth: hci1: command tx timeout [ 1655.171931][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1655.577110][T29666] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1655.603271][T29666] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1655.690916][T29666] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1655.728296][T29666] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1655.806756][ T51] Bluetooth: hci1: command tx timeout [ 1656.499633][T29666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1656.619922][T29666] 8021q: adding VLAN 0 to HW filter on device team0 [ 1656.711778][T28906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.719080][T28906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1656.736847][T28906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.744130][T28906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1657.244140][T29852] syzkaller0: entered promiscuous mode [ 1657.256953][T29852] syzkaller0: entered allmulticast mode [ 1657.257222][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1657.298500][T29852] net_ratelimit: 425 callbacks suppressed [ 1657.298517][T29852] syzkaller0: mtu greater than device maximum [ 1657.901570][ T51] Bluetooth: hci1: command tx timeout [ 1658.003002][T29871] netlink: 'syz.2.7200': attribute type 2 has an invalid length. [ 1658.024373][T29871] netlink: 116 bytes leftover after parsing attributes in process `syz.2.7200'. [ 1658.084010][T29871] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1658.170296][T29666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1658.556746][T29666] veth0_vlan: entered promiscuous mode [ 1658.572079][T29666] veth1_vlan: entered promiscuous mode [ 1658.608724][T29666] veth0_macvtap: entered promiscuous mode [ 1658.628688][T29666] veth1_macvtap: entered promiscuous mode [ 1658.802040][T29666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1658.825124][T29666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.845448][T29666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1658.910062][T29666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1658.955799][T29666] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.970014][T29666] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.979024][T29666] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.987825][T29666] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.632004][T29889] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.7205'. [ 1659.985189][T28912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1660.004196][T28912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1660.087774][T28906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1660.095674][T28906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1661.313085][T29917] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.7212'. [ 1661.517756][T29924] syz.1.7213[29924] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1661.519351][T29924] syz.1.7213[29924] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1661.961554][T29932] caif0: entered promiscuous mode [ 1661.982854][T29932] caif0: entered allmulticast mode [ 1663.468039][ T2972] hsr_slave_0: left promiscuous mode [ 1663.477376][ T2972] hsr_slave_1: left promiscuous mode [ 1663.523601][ T2972] veth1_macvtap: left promiscuous mode [ 1663.531927][ T2972] veth0_macvtap: left promiscuous mode [ 1663.541429][ T2972] veth1_vlan: left promiscuous mode [ 1663.547531][ T2972] veth0_vlan: left promiscuous mode [ 1668.627811][T30011] netlink: 'syz.2.7244': attribute type 10 has an invalid length. [ 1668.709949][T30011] wg1: entered promiscuous mode [ 1668.726795][T30011] wg1: entered allmulticast mode [ 1668.748794][T30011] team0: Device wg1 is of different type [ 1669.138092][T30028] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.7249'. [ 1669.150915][T30025] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7248'. [ 1669.184097][T30025] veth0_to_bond: entered promiscuous mode [ 1669.205669][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.212438][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.164880][T30058] FAULT_INJECTION: forcing a failure. [ 1671.164880][T30058] name failslab, interval 1, probability 0, space 0, times 0 [ 1671.193209][T30058] CPU: 0 PID: 30058 Comm: syz.1.7259 Not tainted syzkaller #0 [ 1671.200747][T30058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1671.210855][T30058] Call Trace: [ 1671.214182][T30058] [ 1671.217152][T30058] dump_stack_lvl+0x18c/0x250 [ 1671.221904][T30058] ? show_regs_print_info+0x20/0x20 [ 1671.227162][T30058] ? load_image+0x400/0x400 [ 1671.231724][T30058] ? __might_sleep+0xe0/0xe0 [ 1671.236371][T30058] ? __lock_acquire+0x7d40/0x7d40 [ 1671.241452][T30058] ? sctp_outq_tail+0x604/0x8a0 [ 1671.246374][T30058] should_fail_ex+0x39d/0x4d0 [ 1671.251117][T30058] should_failslab+0x9/0x20 [ 1671.255681][T30058] slab_pre_alloc_hook+0x59/0x310 [ 1671.260777][T30058] kmem_cache_alloc_node+0x60/0x320 [ 1671.266039][T30058] ? __alloc_skb+0x103/0x2c0 [ 1671.270698][T30058] __alloc_skb+0x103/0x2c0 [ 1671.275267][T30058] _sctp_make_chunk+0x5e/0x420 [ 1671.280243][T30058] sctp_make_datafrag_empty+0x12b/0x240 [ 1671.285850][T30058] ? sctp_make_ecne+0x340/0x340 [ 1671.290765][T30058] ? sctp_auth_send_cid+0x69/0x250 [ 1671.295928][T30058] sctp_datamsg_from_user+0x722/0xee0 [ 1671.301381][T30058] sctp_sendmsg_to_asoc+0x107f/0x1830 [ 1671.306813][T30058] ? __asan_memcpy+0x40/0x70 [ 1671.311492][T30058] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 1671.316937][T30058] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 1671.322816][T30058] ? __sctp_connect+0xd80/0xd80 [ 1671.327713][T30058] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1671.333140][T30058] ? _local_bh_enable+0xa0/0xa0 [ 1671.338041][T30058] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1671.343897][T30058] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1671.349750][T30058] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1671.355362][T30058] ? security_sctp_bind_connect+0x89/0xb0 [ 1671.361195][T30058] sctp_sendmsg+0x1b83/0x28c0 [ 1671.366006][T30058] ? sctp_getsockopt+0xb60/0xb60 [ 1671.371089][T30058] ? aa_sk_perm+0x83c/0x970 [ 1671.375666][T30058] ? aa_af_perm+0x330/0x330 [ 1671.380397][T30058] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1671.386878][T30058] ? sock_rps_record_flow+0x19/0x3f0 [ 1671.392219][T30058] ? inet_sendmsg+0x7c/0x2f0 [ 1671.396902][T30058] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1671.402374][T30058] ? security_socket_sendmsg+0x80/0xa0 [ 1671.407894][T30058] ? inet_send_prepare+0x260/0x260 [ 1671.413060][T30058] ____sys_sendmsg+0x5ba/0x960 [ 1671.417857][T30058] ? __lock_acquire+0x7d40/0x7d40 [ 1671.422922][T30058] ? __asan_memset+0x22/0x40 [ 1671.427548][T30058] ? __sys_sendmsg_sock+0x30/0x30 [ 1671.432607][T30058] ? __import_iovec+0x5f2/0x850 [ 1671.437515][T30058] ? import_iovec+0x73/0xa0 [ 1671.442151][T30058] ___sys_sendmsg+0x2a6/0x360 [ 1671.446859][T30058] ? get_pid_task+0x20/0x1e0 [ 1671.451485][T30058] ? __sys_sendmsg+0x2a0/0x2a0 [ 1671.456311][T30058] ? __lock_acquire+0x7d40/0x7d40 [ 1671.461411][T30058] __se_sys_sendmsg+0x1c2/0x2b0 [ 1671.466336][T30058] ? __x64_sys_sendmsg+0x80/0x80 [ 1671.471340][T30058] ? lockdep_hardirqs_on+0x98/0x150 [ 1671.476593][T30058] do_syscall_64+0x55/0xa0 [ 1671.481048][T30058] ? clear_bhb_loop+0x40/0x90 [ 1671.485866][T30058] ? clear_bhb_loop+0x40/0x90 [ 1671.490693][T30058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1671.496813][T30058] RIP: 0033:0x7fb13999c799 [ 1671.501280][T30058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1671.521008][T30058] RSP: 002b:00007fb13a89c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1671.529453][T30058] RAX: ffffffffffffffda RBX: 00007fb139c15fa0 RCX: 00007fb13999c799 [ 1671.537453][T30058] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 1671.545459][T30058] RBP: 00007fb13a89c090 R08: 0000000000000000 R09: 0000000000000000 [ 1671.553459][T30058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1671.561519][T30058] R13: 00007fb139c16038 R14: 00007fb139c15fa0 R15: 00007ffce048ff88 [ 1671.569548][T30058] [ 1671.593532][T30062] syzkaller0: entered promiscuous mode [ 1671.612661][T30062] syzkaller0: entered allmulticast mode [ 1673.477262][T30093] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7271'. [ 1673.618495][T30093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1673.650358][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1673.675182][T30093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1673.713452][T30093] bond0 (unregistering): Released all slaves [ 1673.738419][T30089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7269'. [ 1673.753380][T30088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7269'. [ 1675.948695][T30129] À: port 1(vlan0) entered blocking state [ 1675.977552][T30129] À: port 1(vlan0) entered disabled state [ 1676.002128][T30129] vlan0: entered allmulticast mode [ 1676.036625][T30129] veth0_vlan: entered allmulticast mode [ 1676.086159][T30129] vlan0: entered promiscuous mode [ 1676.249844][T28910] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.306947][T29667] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1676.321964][T29667] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1676.337488][T29667] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1676.349369][T29667] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1676.360254][T29667] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1676.379295][T29667] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1676.415574][ T51] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1676.475052][T28910] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.595940][T28910] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.769668][T28910] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.037570][T30141] chnl_net:caif_netlink_parms(): no params data found [ 1677.192402][T30141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.208509][T30141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.215978][T30141] bridge_slave_0: entered allmulticast mode [ 1677.236091][T30141] bridge_slave_0: entered promiscuous mode [ 1677.253030][T30161] netlink: 'syz.2.7292': attribute type 13 has an invalid length. [ 1677.262908][T30161] netlink: 160 bytes leftover after parsing attributes in process `syz.2.7292'. [ 1677.305693][T30161] erspan0: refused to change device tx_queue_len [ 1677.314398][T30161] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1677.335348][T30141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.357366][T30141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.370413][T30141] bridge_slave_1: entered allmulticast mode [ 1677.378488][T30141] bridge_slave_1: entered promiscuous mode [ 1677.475555][T30141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1677.504054][T30141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1677.541378][T30163] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7293'. [ 1677.781348][T30141] team0: Port device team_slave_0 added [ 1677.858616][T30141] team0: Port device team_slave_1 added [ 1678.011409][T30141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1678.018621][T30141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1678.045302][T30141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1678.094340][T30141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1678.104284][T30141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1678.138301][T30141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1678.349573][T30141] hsr_slave_0: entered promiscuous mode [ 1678.373488][T30141] hsr_slave_1: entered promiscuous mode [ 1678.446978][ T51] Bluetooth: hci2: command tx timeout [ 1680.528832][ T51] Bluetooth: hci2: command tx timeout [ 1681.324002][T30141] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1681.388219][T30141] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1681.429895][T30141] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1681.450213][T30141] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1682.489029][T30141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1682.606725][ T51] Bluetooth: hci2: command tx timeout [ 1682.616111][T30141] 8021q: adding VLAN 0 to HW filter on device team0 [ 1682.776236][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.783624][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1682.880796][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.888068][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1683.223850][T30280] lo: entered allmulticast mode [ 1683.311714][T30283] lo: entered promiscuous mode [ 1683.346629][T30283] lo: left allmulticast mode [ 1683.550253][T30293] syzkaller0: left promiscuous mode [ 1683.555560][T30293] syzkaller0: left allmulticast mode [ 1684.028529][T30141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1684.359750][T30141] veth0_vlan: entered promiscuous mode [ 1684.432338][T30141] veth1_vlan: entered promiscuous mode [ 1684.583202][T30141] veth0_macvtap: entered promiscuous mode [ 1684.603415][T30141] veth1_macvtap: entered promiscuous mode [ 1684.758538][ T51] Bluetooth: hci2: command tx timeout [ 1685.248079][T30320] netlink: 'syz.1.7323': attribute type 19 has an invalid length. [ 1685.682543][T30141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.723820][T30141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.786484][T30141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.816469][T30141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.845097][T30141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1685.882109][T30141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.946503][T30141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.988274][T30141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1686.005959][T30341] lo: left promiscuous mode [ 1686.016804][T30341] lo: entered allmulticast mode [ 1686.212654][T30341] lo: entered promiscuous mode [ 1686.217762][T30341] lo: left allmulticast mode [ 1686.313568][T30141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.365552][T30141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.389793][T30141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.407646][T30141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.007459][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1687.015402][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1687.420551][T28892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1687.439191][T28892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1688.182678][T30379] FAULT_INJECTION: forcing a failure. [ 1688.182678][T30379] name failslab, interval 1, probability 0, space 0, times 0 [ 1688.256473][T30379] CPU: 0 PID: 30379 Comm: syz.2.7335 Not tainted syzkaller #0 [ 1688.264053][T30379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1688.274179][T30379] Call Trace: [ 1688.278115][T30379] [ 1688.281187][T30379] dump_stack_lvl+0x18c/0x250 [ 1688.286152][T30379] ? sctp_sendmsg+0x1575/0x28c0 [ 1688.291097][T30379] ? ___sys_sendmsg+0x2a6/0x360 [ 1688.296009][T30379] ? show_regs_print_info+0x20/0x20 [ 1688.301278][T30379] ? load_image+0x400/0x400 [ 1688.305867][T30379] should_fail_ex+0x39d/0x4d0 [ 1688.310627][T30379] should_failslab+0x9/0x20 [ 1688.315198][T30379] slab_pre_alloc_hook+0x59/0x310 [ 1688.320293][T30379] ? sctp_add_bind_addr+0x8c/0x360 [ 1688.325460][T30379] __kmem_cache_alloc_node+0x53/0x250 [ 1688.330915][T30379] ? sctp_add_bind_addr+0x8c/0x360 [ 1688.336084][T30379] kmalloc_trace+0x2a/0xe0 [ 1688.340549][T30379] sctp_add_bind_addr+0x8c/0x360 [ 1688.345529][T30379] sctp_copy_local_addr_list+0x315/0x4f0 [ 1688.351242][T30379] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 1688.357024][T30379] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1688.363146][T30379] ? sctp_v4_is_any+0x35/0x60 [ 1688.367861][T30379] ? sctp_copy_one_addr+0x8c/0x350 [ 1688.373031][T30379] sctp_bind_addr_copy+0xb3/0x3c0 [ 1688.378099][T30379] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1688.384506][T30379] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1688.389822][T30379] ? __sctp_connect+0xd80/0xd80 [ 1688.394702][T30379] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1688.400109][T30379] ? _local_bh_enable+0xa0/0xa0 [ 1688.405019][T30379] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1688.410871][T30379] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1688.416715][T30379] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1688.422320][T30379] ? security_sctp_bind_connect+0x89/0xb0 [ 1688.428079][T30379] sctp_sendmsg+0x1575/0x28c0 [ 1688.432827][T30379] ? sctp_getsockopt+0xb60/0xb60 [ 1688.437797][T30379] ? aa_sk_perm+0x83c/0x970 [ 1688.442347][T30379] ? aa_af_perm+0x330/0x330 [ 1688.446889][T30379] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1688.453347][T30379] ? sock_rps_record_flow+0x19/0x3f0 [ 1688.458765][T30379] ? inet_sendmsg+0x7c/0x2f0 [ 1688.463391][T30379] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1688.468713][T30379] ? security_socket_sendmsg+0x80/0xa0 [ 1688.474201][T30379] ? inet_send_prepare+0x260/0x260 [ 1688.479342][T30379] ____sys_sendmsg+0x5ba/0x960 [ 1688.484135][T30379] ? __lock_acquire+0x7d40/0x7d40 [ 1688.489193][T30379] ? __asan_memset+0x22/0x40 [ 1688.493819][T30379] ? __sys_sendmsg_sock+0x30/0x30 [ 1688.498873][T30379] ? __import_iovec+0x5f2/0x850 [ 1688.503768][T30379] ? import_iovec+0x73/0xa0 [ 1688.508303][T30379] ___sys_sendmsg+0x2a6/0x360 [ 1688.513007][T30379] ? get_pid_task+0x20/0x1e0 [ 1688.517644][T30379] ? __sys_sendmsg+0x2a0/0x2a0 [ 1688.522450][T30379] ? __lock_acquire+0x7d40/0x7d40 [ 1688.527528][T30379] __se_sys_sendmsg+0x1c2/0x2b0 [ 1688.532410][T30379] ? __x64_sys_sendmsg+0x80/0x80 [ 1688.537397][T30379] ? lockdep_hardirqs_on+0x98/0x150 [ 1688.542632][T30379] do_syscall_64+0x55/0xa0 [ 1688.547086][T30379] ? clear_bhb_loop+0x40/0x90 [ 1688.551797][T30379] ? clear_bhb_loop+0x40/0x90 [ 1688.556540][T30379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1688.562491][T30379] RIP: 0033:0x7fe5a919c799 [ 1688.566946][T30379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1688.586929][T30379] RSP: 002b:00007fe5aa0d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1688.595396][T30379] RAX: ffffffffffffffda RBX: 00007fe5a9415fa0 RCX: 00007fe5a919c799 [ 1688.603422][T30379] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 1688.611431][T30379] RBP: 00007fe5aa0d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1688.619440][T30379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1688.627442][T30379] R13: 00007fe5a9416038 R14: 00007fe5a9415fa0 R15: 00007ffe2f6528e8 [ 1688.635642][T30379] [ 1688.932078][T29667] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1688.946015][T29667] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1688.963925][T29667] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1688.976592][T29667] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1688.997701][T29667] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1689.011567][T29667] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1689.967603][T30401] netlink: 'syz.2.7341': attribute type 39 has an invalid length. [ 1690.231305][T30401] hsr_slave_1 (unregistering): left promiscuous mode [ 1690.786764][T30383] chnl_net:caif_netlink_parms(): no params data found [ 1691.086947][ T51] Bluetooth: hci3: command tx timeout [ 1691.110870][ T51] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 1691.193335][T30383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1691.212009][T30383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1691.220532][T30383] bridge_slave_0: entered allmulticast mode [ 1691.228274][T30383] bridge_slave_0: entered promiscuous mode [ 1691.239200][T30422] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.7348'. [ 1693.167674][ T51] Bluetooth: hci1: command tx timeout [ 1693.173244][ T51] Bluetooth: hci3: command tx timeout [ 1693.978271][T30383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1693.985541][T30383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1693.993032][T30383] bridge_slave_1: entered allmulticast mode [ 1694.000338][T30383] bridge_slave_1: entered promiscuous mode [ 1694.109876][T30383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1694.212009][T30383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1694.471766][T30383] team0: Port device team_slave_0 added [ 1694.484592][T30383] team0: Port device team_slave_1 added [ 1694.494636][T30435] netlink: 'syz.2.7360': attribute type 19 has an invalid length. [ 1694.518408][T30435] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7360'. [ 1694.610152][T30383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1694.621545][T30383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1694.651182][T30383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1694.690785][T30383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1694.698034][T30383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1694.725416][T30383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1694.897948][T30383] hsr_slave_0: entered promiscuous mode [ 1694.905124][T30383] hsr_slave_1: entered promiscuous mode [ 1694.915866][T30383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1694.929773][T30383] Cannot create hsr debugfs directory [ 1695.246711][ T51] Bluetooth: hci3: command tx timeout [ 1695.670971][T30383] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.834113][T30383] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.040089][T30383] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.172420][T30467] netlink: 'syz.0.7366': attribute type 10 has an invalid length. [ 1696.282921][T30467] team0: Device hsr_slave_0 failed to register rx_handler [ 1696.376289][T30383] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.129772][T30383] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1697.217123][T30383] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1697.230271][T30486] netlink: 'syz.0.7371': attribute type 3 has an invalid length. [ 1697.233191][T30383] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1697.251627][T30486] netlink: 77544 bytes leftover after parsing attributes in process `syz.0.7371'. [ 1697.310278][T30383] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1697.330620][ T51] Bluetooth: hci3: command tx timeout [ 1697.447630][T28910] hsr_slave_0: left promiscuous mode [ 1697.455187][T28910] hsr_slave_1: left promiscuous mode [ 1697.491772][T28910] veth0_macvtap: left promiscuous mode [ 1697.497903][T28910] veth1_vlan: left promiscuous mode [ 1697.503245][T28910] veth0_vlan: left promiscuous mode [ 1698.349966][T28910] team0 (unregistering): Port device team_slave_1 removed [ 1699.114757][T30383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1699.155263][T30383] 8021q: adding VLAN 0 to HW filter on device team0 [ 1699.195925][T28905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.203264][T28905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1699.218642][T28905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.225870][T28905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1699.623810][T30383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1699.725540][T30383] veth0_vlan: entered promiscuous mode [ 1699.746800][T30383] veth1_vlan: entered promiscuous mode [ 1699.803675][T30383] veth0_macvtap: entered promiscuous mode [ 1699.815104][T30383] veth1_macvtap: entered promiscuous mode [ 1699.835980][T30383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1699.848112][T30383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1699.859578][T30383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1699.870238][T30383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1699.880716][T30383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1699.892957][T30383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1699.904837][T30383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1699.963886][T30383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1699.975061][T30383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1699.987412][T30383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1699.998883][T30383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1700.011870][T30383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1700.054429][T30383] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.064645][T30383] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.073582][T30383] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.085689][T30383] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.218366][T28892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1700.226285][T28892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.322119][T28912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1700.333857][T28912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.489448][T30496] IPv6: Can't replace route, no match found [ 1700.574233][T30496] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7382'. [ 1702.464864][T29667] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1702.476743][T29667] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1702.579565][T29667] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1702.591849][T29667] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1702.629352][T29667] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1702.645248][T29667] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1703.376611][T30529] netlink: 'syz.0.7385': attribute type 10 has an invalid length. [ 1703.404311][T30529] netlink: 9279 bytes leftover after parsing attributes in process `syz.0.7385'. [ 1703.451616][T30532] netlink: 'syz.3.7383': attribute type 1 has an invalid length. [ 1703.485031][T30532] netlink: 'syz.3.7383': attribute type 3 has an invalid length. [ 1703.524299][T30532] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7383'. [ 1703.573587][T30533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1703.583250][T30533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1703.607119][T30533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1703.615395][T30533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1704.191872][T30543] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7386'. [ 1704.704729][T30521] chnl_net:caif_netlink_parms(): no params data found [ 1704.740032][T30561] netlink: 'syz.3.7390': attribute type 4 has an invalid length. [ 1704.762508][T30561] netlink: 112 bytes leftover after parsing attributes in process `syz.3.7390'. [ 1704.780562][T29667] Bluetooth: hci4: command tx timeout [ 1705.242760][T30521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1705.298023][T30521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1705.371027][T30521] bridge_slave_0: entered allmulticast mode [ 1705.405145][T30521] bridge_slave_0: entered promiscuous mode [ 1705.474019][T30572] netlink: 'syz.1.7393': attribute type 10 has an invalid length. [ 1705.515882][T30572] team0: Port device dummy0 added [ 1705.553248][T30521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1705.563260][T30521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1705.579942][T30521] bridge_slave_1: entered allmulticast mode [ 1705.588285][T30521] bridge_slave_1: entered promiscuous mode [ 1705.652737][T28911] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1705.671502][T30521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1705.706883][T30521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1705.880809][T30521] team0: Port device team_slave_0 added [ 1705.890703][T30574] netlink: 'syz.3.7394': attribute type 3 has an invalid length. [ 1705.921482][T30574] netlink: 'syz.3.7394': attribute type 275 has an invalid length. [ 1705.932552][T30521] team0: Port device team_slave_1 added [ 1706.115255][T30521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1706.133216][T30521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1706.186409][T30521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1706.324369][T30521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1706.331629][T30521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1706.371364][T30521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1706.582599][T30521] hsr_slave_0: entered promiscuous mode [ 1706.605553][T30521] hsr_slave_1: entered promiscuous mode [ 1706.617942][T30521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1706.625586][T30521] Cannot create hsr debugfs directory [ 1706.644389][T30594] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7401'. [ 1706.672402][T30598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1706.773884][T30601] netlink: 'syz.1.7402': attribute type 2 has an invalid length. [ 1706.782623][T30601] netlink: 'syz.1.7402': attribute type 8 has an invalid length. [ 1706.790524][T30601] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7402'. [ 1706.846630][T29667] Bluetooth: hci4: command tx timeout [ 1706.924412][T30605] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.7405'. [ 1707.374931][T30521] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.475777][T28910] hsr_slave_0: left promiscuous mode [ 1707.483005][T28910] hsr_slave_1: left promiscuous mode [ 1707.493308][T28910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1707.517270][T28910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1707.536868][T28910] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1707.544610][T28910] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1707.645518][T28910] veth0_macvtap: left promiscuous mode [ 1708.155621][T28910] team0 (unregistering): Port device geneve1 removed [ 1708.745035][T28910] team0 (unregistering): Port device team_slave_1 removed [ 1708.836908][T28910] team0 (unregistering): Port device team_slave_0 removed [ 1708.927431][T29667] Bluetooth: hci4: command tx timeout [ 1709.434233][T30521] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.455888][T30630] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7413'. [ 1709.465499][T30634] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7415'. [ 1709.594989][T30521] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.737455][T30521] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.212423][T30521] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1710.311323][T30649] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1710.317942][T30649] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1710.376216][T30521] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1710.446887][T30521] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1710.474543][T30521] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1710.558285][T30651] netlink: 'syz.1.7421': attribute type 21 has an invalid length. [ 1710.571716][T30651] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7421'. [ 1710.587853][T30651] netlink: 'syz.1.7421': attribute type 5 has an invalid length. [ 1710.597663][T30651] netlink: 'syz.1.7421': attribute type 6 has an invalid length. [ 1710.617174][T30651] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7421'. [ 1710.713332][T30651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1710.721339][T30651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.735559][T30651] bridge0: entered allmulticast mode [ 1710.871890][T28911] tipc: Left network mode [ 1711.016791][T29667] Bluetooth: hci4: command tx timeout [ 1711.055108][T30664] netlink: 'syz.0.7426': attribute type 4 has an invalid length. [ 1711.063164][T30664] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7426'. [ 1711.083078][T30521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1711.448854][T30521] 8021q: adding VLAN 0 to HW filter on device team0 [ 1711.470261][T28905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.477640][T28905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1711.539074][T30679] netlink: 'syz.1.7430': attribute type 10 has an invalid length. [ 1711.550431][T30679] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7430'. [ 1711.564714][T30679] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1711.574440][T30679] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1711.602340][T30679] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1711.705419][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.712700][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1711.882620][T30521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1712.185401][T30690] netlink: 'syz.3.7433': attribute type 1 has an invalid length. [ 1712.195077][T30690] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.7433'. [ 1712.209238][T30690] netlink: 'syz.3.7433': attribute type 1 has an invalid length. [ 1712.261089][T30694] netlink: 167856 bytes leftover after parsing attributes in process `syz.3.7433'. [ 1712.301585][T30694] netlink: 8446 bytes leftover after parsing attributes in process `syz.3.7433'. [ 1712.405877][T30521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1712.673596][T30521] veth0_vlan: entered promiscuous mode [ 1712.704367][T30521] veth1_vlan: entered promiscuous mode [ 1713.131821][T30521] veth0_macvtap: entered promiscuous mode [ 1713.173423][T30521] veth1_macvtap: entered promiscuous mode [ 1713.209511][T30521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1713.222978][T30521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.241667][T30521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1713.265535][T30521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.302369][T30521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1713.313454][T30521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1713.324507][T30521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.341983][T30521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1713.352826][T30521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.364924][T30521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1713.385775][T30720] delete_channel: no stack [ 1713.440310][T30521] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.451206][T30521] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.462158][T30521] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.471315][T30521] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.738727][T30735] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7446'. [ 1713.795462][T30736] netlink: 'syz.3.7446': attribute type 29 has an invalid length. [ 1713.872037][T30736] netlink: 'syz.3.7446': attribute type 29 has an invalid length. [ 1713.925964][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.944353][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.991728][T30735] netlink: 'syz.3.7446': attribute type 29 has an invalid length. [ 1714.235593][T28910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1714.282815][T28910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1714.532956][T30746] IPv6: NLM_F_CREATE should be specified when creating new route [ 1714.671578][T30748] __nla_validate_parse: 1 callbacks suppressed [ 1714.671599][T30748] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.7375'. [ 1714.692736][T30748] netlink: 8454 bytes leftover after parsing attributes in process `syz.2.7375'. [ 1731.020798][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1731.034839][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1731.043739][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1731.058870][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1731.070932][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1731.078477][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1731.692825][T29667] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1731.703388][T29667] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1731.711896][T29667] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1731.723306][T29667] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1731.731316][T29667] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1731.739279][T29667] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1732.367890][T29667] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1732.378789][T29667] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1732.387416][T29667] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1732.397545][T29667] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1732.406748][T29667] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1732.414757][T29667] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1732.978890][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1732.993007][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1733.002616][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1733.021634][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1733.033336][ T51] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1733.042781][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1733.166771][T29667] Bluetooth: hci0: command tx timeout [ 1733.806654][T29667] Bluetooth: hci5: command tx timeout [ 1734.446658][T29667] Bluetooth: hci6: command tx timeout [ 1735.086563][T29667] Bluetooth: hci7: command tx timeout [ 1735.246556][T29667] Bluetooth: hci0: command tx timeout [ 1735.886575][T29667] Bluetooth: hci5: command tx timeout [ 1736.526542][T29667] Bluetooth: hci6: command tx timeout [ 1737.168023][T29667] Bluetooth: hci7: command tx timeout [ 1737.326558][T29667] Bluetooth: hci0: command tx timeout [ 1737.966665][T29667] Bluetooth: hci5: command tx timeout [ 1738.606578][T29667] Bluetooth: hci6: command tx timeout [ 1739.246522][T29667] Bluetooth: hci7: command tx timeout [ 1739.406551][T29667] Bluetooth: hci0: command tx timeout [ 1740.046534][T29667] Bluetooth: hci5: command tx timeout [ 1740.686564][T29667] Bluetooth: hci6: command tx timeout [ 1741.326691][T29667] Bluetooth: hci7: command tx timeout [ 1770.446588][ C1] icmp: detected local route for 10.128.1.4 during ICMP sending, src 10.128.0.163 [ 1770.456966][ C1] icmp: detected local route for 10.128.1.4 during ICMP sending, src 10.128.0.163 [ 1770.466569][ C1] icmp: detected local route for 10.128.1.4 during ICMP sending, src 10.128.0.163 [ 1770.476074][ C1] icmp: detected local route for 10.128.1.4 during ICMP sending, src 10.128.0.163 [ 1770.485652][ C1] icmp: detected local route for 10.128.1.4 during ICMP sending, src 10.128.0.163 [ 1773.651572][T29667] Bluetooth: hci1: command 0x0406 tx timeout [ 1819.796313][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1819.802993][ C0] rcu: 0-....: (1 GPs behind) idle=89ac/1/0x4000000000000000 softirq=163131/163132 fqs=3044 [ 1819.814895][ C0] rcu: hardirqs softirqs csw/system [ 1819.821354][ C0] rcu: number: 1353411 0 0 [ 1819.827798][ C0] rcu: cputime: 18779 33710 43 ==> 52520(ms) [ 1819.835628][ C0] rcu: (t=10503 jiffies g=204637 q=1408 ncpus=2) [ 1819.842065][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 4316 jiffies! g204637 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1819.854414][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=128157 [ 1819.862433][ C0] rcu: rcu_preempt kthread starved for 4319 jiffies! g204637 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1819.873837][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1819.883975][ C0] rcu: RCU grace-period kthread stack dump: [ 1819.889929][ C0] task:rcu_preempt state:I stack:26728 pid:17 ppid:2 flags:0x00004000 [ 1819.899366][ C0] Call Trace: [ 1819.902682][ C0] [ 1819.905737][ C0] __schedule+0x1553/0x45a0 [ 1819.910319][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1819.916272][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1819.922217][ C0] ? asan.module_dtor+0x20/0x20 [ 1819.927193][ C0] ? enqueue_timer+0x23d/0x550 [ 1819.931992][ C0] ? __mod_timer+0x984/0xdb0 [ 1819.936625][ C0] schedule+0xbd/0x170 [ 1819.940743][ C0] schedule_timeout+0x188/0x2d0 [ 1819.945631][ C0] ? console_conditional_schedule+0x40/0x40 [ 1819.951565][ C0] ? update_process_times+0x1b0/0x1b0 [ 1819.956974][ C0] ? prepare_to_swait_event+0x339/0x360 [ 1819.962568][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 1819.967453][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1819.973634][ C0] ? rcu_gp_init+0x1560/0x1560 [ 1819.978555][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 1819.983615][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1819.989046][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1819.994320][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 1819.999076][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1820.004228][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 1820.009344][ C0] ? __kthread_parkme+0x162/0x1c0 [ 1820.014435][ C0] kthread+0x2fa/0x390 [ 1820.018551][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1820.023699][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1820.028322][ C0] ret_from_fork+0x48/0x80 [ 1820.032864][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1820.037572][ C0] ret_from_fork_asm+0x11/0x20 [ 1820.042389][ C0] [ 1820.045478][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1820.051842][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1820.057079][ C1] NMI backtrace for cpu 1 [ 1820.057091][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1820.057107][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1820.057117][ C1] RIP: 0010:queued_write_lock_slowpath+0x137/0x2ac [ 1820.057145][ C1] Code: f0 41 81 0e 00 01 00 00 42 0f b6 04 23 84 c0 74 37 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 2a 4c 89 f7 e8 1d 68 50 f7 eb 20 f3 90 <42> 0f b6 04 23 84 c0 74 15 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 08 [ 1820.057160][ C1] RSP: 0018:ffffc900001f0540 EFLAGS: 00000206 [ 1820.057176][ C1] RAX: 00000000000001ff RBX: 1ffffffff1c9a8a8 RCX: ffffffff8a8ee2ed [ 1820.057189][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e4d4540 [ 1820.057200][ C1] RBP: ffffc900001f05f0 R08: ffffffff8e4d4543 R09: 1ffffffff1c9a8a8 [ 1820.057213][ C1] R10: dffffc0000000000 R11: fffffbfff1c9a8a9 R12: dffffc0000000000 [ 1820.057226][ C1] R13: 1ffff9200003e0ac R14: ffffffff8e4d4540 R15: ffffc900001f0590 [ 1820.057239][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1820.057254][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1820.057266][ C1] CR2: 00007f58d0203aef CR3: 000000000cf32000 CR4: 00000000003506e0 [ 1820.057281][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1820.057291][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1820.057302][ C1] Call Trace: [ 1820.057309][ C1] [ 1820.057319][ C1] ? queued_read_lock_slowpath+0x250/0x250 [ 1820.057345][ C1] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1820.057369][ C1] do_raw_write_lock+0x1ea/0x260 [ 1820.057395][ C1] ? do_raw_read_unlock+0x80/0x80 [ 1820.057417][ C1] ? perf_trace_lock+0xfc/0x3b0 [ 1820.057446][ C1] ? ___neigh_create+0x20f/0x2440 [ 1820.057471][ C1] ___neigh_create+0x20f/0x2440 [ 1820.057498][ C1] ? __ipv6_neigh_lookup_noref+0x5b9/0x7d0 [ 1820.057529][ C1] ip6_finish_output2+0x1581/0x1630 [ 1820.057555][ C1] ? ip6_finish_output2+0x645/0x1630 [ 1820.057578][ C1] ? ip6_mtu+0x7d/0x3f0 [ 1820.057599][ C1] ? nf_hook+0x390/0x390 [ 1820.057620][ C1] ? ip6_finish_output+0x57b/0x820 [ 1820.057646][ C1] ndisc_send_skb+0xc26/0x14f0 [ 1820.057664][ C1] ? ndisc_send_skb+0x1f5/0x14f0 [ 1820.057693][ C1] ? ndisc_mc_map+0x680/0x680 [ 1820.057711][ C1] ? skb_dst+0xd0/0xd0 [ 1820.057742][ C1] addrconf_rs_timer+0x2d5/0x630 [ 1820.057763][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 1820.057787][ C1] call_timer_fn+0x189/0x540 [ 1820.057804][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 1820.057821][ C1] ? call_timer_fn+0xd2/0x540 [ 1820.057837][ C1] ? __run_timers+0x800/0x800 [ 1820.057860][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1820.057879][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1820.057899][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 1820.057917][ C1] __run_timers+0x542/0x800 [ 1820.057943][ C1] ? detach_timer+0x2b0/0x2b0 [ 1820.057965][ C1] ? lock_chain_count+0x20/0x20 [ 1820.057989][ C1] run_timer_softirq+0x67/0xf0 [ 1820.058007][ C1] handle_softirqs+0x280/0x820 [ 1820.058027][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1820.058048][ C1] ? do_softirq+0x1a0/0x1a0 [ 1820.058068][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1820.058093][ C1] __irq_exit_rcu+0xd3/0x190 [ 1820.058110][ C1] ? irq_exit_rcu+0x20/0x20 [ 1820.058133][ C1] irq_exit_rcu+0x9/0x20 [ 1820.058148][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1820.058168][ C1] [ 1820.058174][ C1] [ 1820.058180][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1820.058202][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1820.058221][ C1] Code: 40 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d c3 29 43 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 1820.058235][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 1820.058249][ C1] RAX: f42d714f5f372c00 RBX: ffffffff8162ac40 RCX: f42d714f5f372c00 [ 1820.058261][ C1] RDX: 0000000000000001 RSI: ffffffff8acac960 RDI: ffffffff8b1c85a0 [ 1820.058273][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 1820.058285][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff1100384a780 [ 1820.058298][ C1] R13: 1ffff92000030fc8 R14: 0000000000000001 R15: dffffc0000000000 [ 1820.058312][ C1] ? do_idle+0x1f0/0x4e0 [ 1820.058339][ C1] default_idle+0x13/0x20 [ 1820.058358][ C1] default_idle_call+0x6c/0xa0 [ 1820.058378][ C1] do_idle+0x1f0/0x4e0 [ 1820.058399][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1820.058421][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1820.058449][ C1] ? do_idle+0xc/0x4e0 [ 1820.058471][ C1] cpu_startup_entry+0x43/0x60 [ 1820.058491][ C1] start_secondary+0xee/0xf0 [ 1820.058509][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1820.058543][ C1] [ 1820.059102][ C0] CPU: 0 PID: 30753 Comm: syz.3.7452 Not tainted syzkaller #0 [ 1820.531585][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1820.541679][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x19a/0x1d0 [ 1820.548580][ C0] Code: 00 4d 85 e4 75 16 e8 b5 c4 0f 00 eb 15 e8 ae c4 0f 00 e8 89 bc 0d 09 4d 85 e4 74 ea e8 9f c4 0f 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 [ 1820.568312][ C0] RSP: 0018:ffffc900000075c0 EFLAGS: 00000246 [ 1820.574417][ C0] RAX: ffffffff817757c1 RBX: 0000000000000000 RCX: ffff8880290e0000 [ 1820.582420][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1820.590421][ C0] RBP: ffffc90000007678 R08: ffffffff911c1547 R09: 1ffffffff22382a8 [ 1820.598418][ C0] R10: dffffc0000000000 R11: fffffbfff22382a9 R12: 0000000000000200 [ 1820.606417][ C0] R13: 0000000000000010 R14: 1ffff92000000eb8 R15: dffffc0000000000 [ 1820.614409][ C0] FS: 00007f637a7306c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1820.623474][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1820.630097][ C0] CR2: 0000000100000000 CR3: 000000004a42d000 CR4: 00000000003506f0 [ 1820.638098][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1820.646140][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1820.654151][ C0] Call Trace: [ 1820.657462][ C0] [ 1820.660369][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 1820.665734][ C0] ? call_rcu+0x950/0x950 [ 1820.670120][ C0] ? neigh_destroy+0x44a/0x5a0 [ 1820.675197][ C0] ktime_get+0x35/0x280 [ 1820.679470][ C0] ? ___neigh_create+0x49c/0x2440 [ 1820.684545][ C0] ___neigh_create+0x4a7/0x2440 [ 1820.689477][ C0] ip6_finish_output2+0x1581/0x1630 [ 1820.694728][ C0] ? ip6_finish_output2+0x645/0x1630 [ 1820.700054][ C0] ? ip6_mtu+0x7d/0x3f0 [ 1820.704248][ C0] ? nf_hook+0x390/0x390 [ 1820.708519][ C0] ? ip6_finish_output+0x57b/0x820 [ 1820.713706][ C0] ndisc_send_skb+0xc26/0x14f0 [ 1820.718506][ C0] ? ndisc_send_skb+0x1f5/0x14f0 [ 1820.723474][ C0] ? ndisc_mc_map+0x680/0x680 [ 1820.728179][ C0] ? skb_dst+0xd0/0xd0 [ 1820.732294][ C0] addrconf_rs_timer+0x2d5/0x630 [ 1820.737263][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 1820.743358][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1820.749381][ C0] call_timer_fn+0x189/0x540 [ 1820.754001][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 1820.760108][ C0] ? call_timer_fn+0xd2/0x540 [ 1820.764815][ C0] ? __run_timers+0x800/0x800 [ 1820.769530][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 1820.775716][ C0] __run_timers+0x542/0x800 [ 1820.780288][ C0] ? detach_timer+0x2b0/0x2b0 [ 1820.785062][ C0] run_timer_softirq+0x67/0xf0 [ 1820.789886][ C0] handle_softirqs+0x280/0x820 [ 1820.794701][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1820.799505][ C0] ? do_softirq+0x1a0/0x1a0 [ 1820.804154][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1820.809421][ C0] __irq_exit_rcu+0xd3/0x190 [ 1820.814068][ C0] ? irq_exit_rcu+0x20/0x20 [ 1820.818615][ C0] irq_exit_rcu+0x9/0x20 [ 1820.823145][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1820.828818][ C0] [ 1820.831775][ C0] [ 1820.834757][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1820.840777][ C0] RIP: 0010:generic_exec_single+0x481/0x4f0 [ 1820.846726][ C0] Code: 75 11 e8 72 03 0b 00 48 85 db 75 16 e8 68 03 0b 00 eb 15 e8 61 03 0b 00 e8 3c fb 08 09 48 85 db 74 ea e8 52 03 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 1820.866377][ C0] RSP: 0018:ffffc90004ce7a00 EFLAGS: 00000246 [ 1820.872483][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 1820.880570][ C0] RDX: ffffc9000e41e000 RSI: 000000000000394a RDI: 000000000000394b [ 1820.888610][ C0] RBP: ffffc90004ce7ad0 R08: ffffffff911c15ff R09: 1ffffffff22382bf [ 1820.896611][ C0] R10: dffffc0000000000 R11: fffffbfff22382c0 R12: 1ffff9200099cf44 [ 1820.904609][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff9200099cf65 [ 1820.912715][ C0] ? event_function+0x300/0x300 [ 1820.917605][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 1820.923450][ C0] ? percpu_counter_add_batch+0x1f1/0x2a0 [ 1820.929205][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1820.934432][ C0] ? smp_call_function_single+0xb0/0x5a0 [ 1820.940100][ C0] smp_call_function_single+0x36d/0x5a0 [ 1820.945678][ C0] ? event_function+0x300/0x300 [ 1820.950566][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 1820.956756][ C0] ? event_function+0x300/0x300 [ 1820.961679][ C0] perf_install_in_context+0x5be/0x920 [ 1820.967266][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 1820.973276][ C0] ? add_event_to_ctx+0x1180/0x1180 [ 1820.978611][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 1820.984017][ C0] ? perf_event__header_size+0x165/0x220 [ 1820.989993][ C0] __se_sys_perf_event_open+0x1836/0x1c50 [ 1820.995778][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1821.001556][ C0] ? lock_chain_count+0x20/0x20 [ 1821.006438][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1821.011749][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1821.017419][ C0] do_syscall_64+0x55/0xa0 [ 1821.021865][ C0] ? clear_bhb_loop+0x40/0x90 [ 1821.026749][ C0] ? clear_bhb_loop+0x40/0x90 [ 1821.031523][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1821.037452][ C0] RIP: 0033:0x7f637979c799 [ 1821.041895][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1821.061584][ C0] RSP: 002b:00007f637a730028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1821.070127][ C0] RAX: ffffffffffffffda RBX: 00007f6379a15fa0 RCX: 00007f637979c799 [ 1821.078305][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 1821.086397][ C0] RBP: 00007f6379832c99 R08: 000000000000000a R09: 0000000000000000 [ 1821.094477][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1821.102525][ C0] R13: 00007f6379a16038 R14: 00007f6379a15fa0 R15: 00007ffd87164998 [ 1821.110567][ C0] [ 1825.861548][T30795] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1825.872360][T30795] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1825.881147][T30795] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1825.889472][T30795] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1825.897742][T30795] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1825.905186][T30795] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1826.317777][T30799] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1826.329721][T30799] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1826.338938][T30799] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1826.351818][T30799] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1826.359857][T30799] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1826.367579][T30799] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1826.927409][T30788] Bluetooth: hci2: command 0x0406 tx timeout [ 1826.933545][T30789] Bluetooth: hci3: command 0x0406 tx timeout