last executing test programs: 2m27.087115526s ago: executing program 2 (id=2324): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x2, 0x3, 0x106) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) close(r6) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000100)={r2}) setsockopt$sock_attach_bpf(r3, 0x107, 0x2, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYRES16=r8], 0xfe33) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000700)="fb", 0x1}, {&(0x7f0000000680)="660f829e3add48b05d82", 0xa}, {&(0x7f0000000800)="adb34727cc508abe1092fb01d95f9d", 0xf}], 0x3}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{}]}, 0x94) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0x12, &(0x7f0000000340), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4) 2m25.953553013s ago: executing program 2 (id=2330): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x4e, 0x0, 0x4000) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r2, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r3, 0x0, &(0x7f00000004c0)=""/128}, 0x20) close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f0000000640)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="72198a010e2cc291208ec0260132753f9a53a512c1eff5ef5628d8c8c8e3483abb1fa745ab1648018a1b401c1fc044ec15f6d6c2b7508c662e2c96c1d89b7c98fda281b3be2c5004d2fa901be158de65f1391c124607638ccec0e384143843df41c72b3583d8d2899a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r6}, &(0x7f0000000500), &(0x7f0000000600)=r5}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 2m23.359054543s ago: executing program 2 (id=2335): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x4e, 0x0, 0x4000) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r4}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r5, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r6, 0x0, &(0x7f00000004c0)=""/128}, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) close(r7) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f0000000640)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r9 = socket$kcm(0xa, 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="72198a010e2cc291208ec0260132753f9a53a512c1eff5ef5628d8c8c8e3483abb1fa745ab1648018a1b401c1fc044ec15f6d6c2b7508c662e2c96c1d89b7c98fda281b3be2c5004d2fa901be158de65f1391c124607638ccec0e384143843df41c72b3583d8d2899a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r10}, &(0x7f0000000500), &(0x7f0000000600)=r9}, 0x20) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 2m23.03846929s ago: executing program 2 (id=2340): socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x3, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x0, 0x0, 0x6}, {0x10020002, 0x0, 0x0, 0x2}]}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000340)=r3, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xfffa0000}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff0000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m22.214471499s ago: executing program 2 (id=2343): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x4e, 0x0, 0x4000) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r2, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r3, 0x0, &(0x7f00000004c0)=""/128}, 0x20) close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f0000000640)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="72198a010e2cc291208ec0260132753f9a53a512c1eff5ef5628d8c8c8e3483abb1fa745ab1648018a1b401c1fc044ec15f6d6c2b7508c662e2c96c1d89b7c98fda281b3be2c5004d2fa901be158de65f1391c124607638ccec0e384143843df41c72b3583d8d2899a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r6}, &(0x7f0000000500), &(0x7f0000000600)=r5}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 2m22.115029101s ago: executing program 2 (id=2345): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x15, &(0x7f0000000040), 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1000000000000, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="02", 0x1}, {0x0}], 0x2}, 0x20044054) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000380), 0x1}, 0x255c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe4b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae708000000000004087"], 0xfe1b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000000000006, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x3, 0xfffffffc, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x19, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7, 0x0, 0x8, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xf00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m6.826735915s ago: executing program 32 (id=2345): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x15, &(0x7f0000000040), 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1000000000000, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="02", 0x1}, {0x0}], 0x2}, 0x20044054) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000380), 0x1}, 0x255c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe4b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae708000000000004087"], 0xfe1b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000000000006, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x3, 0xfffffffc, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x19, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7, 0x0, 0x8, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xf00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.236884873s ago: executing program 0 (id=3053): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x4e, 0x0, 0x4000) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r4}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r5, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r6, 0x0, &(0x7f00000004c0)=""/128}, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) close(r7) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f0000000640)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r9 = socket$kcm(0xa, 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000040000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r10}, &(0x7f0000000500), &(0x7f0000000600)=r9}, 0x20) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 7.002562078s ago: executing program 4 (id=3057): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0xa6, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03004e21000af32c6e020675f800250002400100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x880) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504800000002e"], 0x0, 0x37}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x1b1fca5f, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000004}, 0x0, 0xe, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000100)={'wlan1\x00', @random="0a0000000400"}) 6.943614479s ago: executing program 0 (id=3058): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4080, 0x40000000, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.789347003s ago: executing program 1 (id=3059): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x17, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018015b10639097f618ddd092ee7ede70f5a52beb99a90e1e", @ANYRESOCT=r1, @ANYRES64=r2, @ANYRES64=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001980)}], 0x1}, 0x24000008) r4 = syz_clone(0x44196800, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x0) syz_open_procfs$namespace(r4, &(0x7f00000003c0)='ns/time_for_children\x00') r5 = socket$kcm(0x10, 0x3, 0x10) r6 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0xb, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x3, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x56040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0x4}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x4, 0x0, &(0x7f0000000240)="d2ff0307", 0x0, 0x200009, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c12400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 6.748290803s ago: executing program 4 (id=3061): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r1, 0x0, 0x100000000000000}, 0x38) 6.639143456s ago: executing program 3 (id=3062): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x17, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018015b10639097f618ddd092ee7ede70f5a52beb99a90e1e", @ANYRESOCT=r1, @ANYRES64=r2, @ANYRES64=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001980)}], 0x1}, 0x24000008) r4 = syz_clone(0x44196800, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x0) syz_open_procfs$namespace(r4, &(0x7f00000003c0)='ns/time_for_children\x00') r5 = socket$kcm(0x10, 0x3, 0x10) r6 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0xb, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x3, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0x4, 0x0, &(0x7f0000000240)="d2ff0307", 0x0, 0x200009, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c12400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 6.542327258s ago: executing program 4 (id=3063): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) (async) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x216, 0xc, 0x7f}, 0x50) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r4, 0x8004745a, &(0x7f0000000180)) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) (async) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) 3.830119721s ago: executing program 4 (id=3064): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu>=0||!') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000", 0x26}], 0x1}, 0x800000000000000) 3.721951024s ago: executing program 1 (id=3065): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x4e, 0x0, 0x4000) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f00000007c0), &(0x7f0000000640)=r2}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r3, &(0x7f00000004c0)}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) close(r4) socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000580)}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="72198a010e2cc291208ec0260132753f9a53a512c1eff5ef5628d8c8c8e3483abb1fa745ab1648018a1b401c1fc044ec15f6d6c2b7508c662e2c96c1d89b7c98fda281b3be2c5004d2fa901be158de65f1391c124607638ccec0e384143843df41c72b3583d8d2899a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r5}, &(0x7f0000000500), &(0x7f0000000600)}, 0x20) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 3.682020715s ago: executing program 3 (id=3066): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x4e, 0x0, 0x4000) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r4}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r5, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r6, 0x0, &(0x7f00000004c0)=""/128}, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) close(r7) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f0000000640)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r9 = socket$kcm(0xa, 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000040000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r10}, &(0x7f0000000500), &(0x7f0000000600)=r9}, 0x20) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 3.634432265s ago: executing program 4 (id=3067): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000340)=""/85, 0x55}, {&(0x7f0000001080)=""/4042, 0xfca}, {&(0x7f0000000f80)=""/206, 0xce}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000600)=""/144, 0x90}, {&(0x7f0000000c80)=""/186, 0xba}, {&(0x7f0000000bc0)=""/165, 0xa5}, {&(0x7f0000000500)=""/246, 0xf6}, {&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000d80)=""/119, 0x77}], 0xa}, 0x2000) recvmsg$kcm(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000140)={'wlan1\x00', @random="56c0a58e44fd"}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x3}]}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x61, 0x61, 0x2e, 0x0, 0x2e, 0x61, 0x5f, 0x30]}}, &(0x7f0000000100)=""/185, 0x46, 0xb9}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r3, 0x20, &(0x7f0000000480)={&(0x7f0000000380)=""/180, 0xb4, 0x0, &(0x7f0000000440)=""/38, 0x26}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd4000000e00001100630277", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 3.627878036s ago: executing program 1 (id=3068): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x0, 0xfffffffffffff001, 0x8, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="a2e02657c640031900"/29], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0xe4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}, 0x0, 0x4, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x2000000000000216, &(0x7f0000000400)=ANY=[@ANYRESOCT], 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x110ea8, 0x400000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1200000003000000040000000200000140080100", @ANYRES32, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000000315bf664fd9c003e55f400000000005352f91144d20c0676d57efc01a1095cca23d81d437c226cce84ae5b37653afe3e0bd86f8a8cf294b97abb75994b88fcc71d33cb1a16ab3af1eac34afeeae3c2634451efa30f5662dabc7033970c26a9c1bbfde2a491d27426e477cc1ae39a3f90794f05f8325408b419c2156e34c8e0146df2a71c7af8d0c506bd7bd20c6a58c066aebeb7832bf6bfaaf67eceb0f11b20cc717368bb26ed37418597930044a0c54d1267c285229b4156557080d8c80a708e1fecfd54c568107348154137777155152f3eb4", @ANYRES32=r3, @ANYBLOB], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4042, 0x200000000000d9b, 0x1, 0x2, 0x7fff, 0x7fffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0xd, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x6c2f9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000300), 0x9}, 0x4001, 0x35, 0x43a1bd76, 0x7, 0x10000000000009, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xfffffffffffdffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x1, 0xd, 0x82, 0x0, 0x58, 0x91, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x57, 0x2, @perf_config_ext={0x401, 0xde}, 0x1e0a, 0x6b7, 0x20e7, 0x9, 0x2, 0x3ff, 0x5, 0x0, 0x3ff, 0x0, 0xad}, 0x0, 0x2, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x3}, 0x1084, 0x10004, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1874746671a785cd9662000000000000000000000000000600fa9400000000761a8fc3bc07000000e2ed"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) 3.602540636s ago: executing program 0 (id=3069): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0xa6, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03004e21000af32c6e020675f800250002400100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x880) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504800000002e"], 0x0, 0x37}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x1b1fca5f, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000004}, 0x0, 0xe, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000100)={'wlan1\x00', @random="0a0000000400"}) 3.46634368s ago: executing program 1 (id=3070): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4e, 0x0, 0x4000) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r3}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r4, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r5, 0x0, &(0x7f00000004c0)=""/128}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000640)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r7, 0x58, &(0x7f0000000580)}, 0x10) r8 = socket$kcm(0xa, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="72198a010e2cc291208ec0260132753f9a53a512c1eff5ef5628d8c8c8e3483abb1fa745ab1648018a1b401c1fc044ec15f6d6c2b7508c662e2c96c1d89b7c98fda281b3be2c5004d2fa901be158de65f1391c124607638ccec0e384143843df41c72b3583d8d2899a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r9}, &(0x7f0000000500), &(0x7f0000000600)=r8}, 0x20) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 3.466122429s ago: executing program 3 (id=3071): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 3.46577706s ago: executing program 0 (id=3072): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89f2, &(0x7f0000000900)={'sit0\x00', @random="3f00230c1100"}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000004000000000000000000079100e000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffefff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'wlan0\x00', @local}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0901020028000b05d25a806f8c6394f90324fc600d00030009000100ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 3.314681813s ago: executing program 4 (id=3073): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x13, &(0x7f0000000800)=r0, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002017207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r5, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000000000000007000000890f0463"], 0x20, 0x5}, 0x0) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0xed, 0x10, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x84, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c003", 0x31}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x13, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}, @printk={@i}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 3.314090443s ago: executing program 1 (id=3074): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x17, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018015b10639097f618ddd092ee7ede70f5a52beb99a90e1e", @ANYRESOCT=r1, @ANYRES64=r2, @ANYRES64=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001980)}], 0x1}, 0x24000008) r4 = syz_clone(0x44196800, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x0) syz_open_procfs$namespace(r4, &(0x7f00000003c0)='ns/time_for_children\x00') r5 = socket$kcm(0x10, 0x3, 0x10) r6 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0xb, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x3, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0x4, 0x0, &(0x7f0000000240)="d2ff0307", 0x0, 0x200009, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c12400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.261961904s ago: executing program 3 (id=3075): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="d8000000040081044e81f782db44b904021d080201000000400000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20000000) 3.146467607s ago: executing program 0 (id=3076): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x4e, 0x0, 0x4000) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f00000007c0), &(0x7f0000000640)=r2}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r3, &(0x7f00000004c0)}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) close(r4) socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000580)}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000040000000400", @ANYRES32, @ANYBLOB="72198a010e2cc291208ec0260132753f9a53a512c1eff5ef5628d8c8c8e3483abb1fa745ab1648018a1b401c1fc044ec15f6d6c2b7508c662e2c96c1d89b7c98fda281b3be2c5004d2fa901be158de65f1391c124607638ccec0e384143843df41c72b3583d8d2899a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r5}, &(0x7f0000000500), &(0x7f0000000600)}, 0x20) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 3.102473128s ago: executing program 3 (id=3077): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4080, 0x40000000, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.035532439s ago: executing program 0 (id=3078): perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3542, 0x1ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x8, 0x3ff}, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) socket$kcm(0x10, 0x400000002, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x8902, &(0x7f00000005c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x4, 0x1, 0x4, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x13, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xffbd, @rand_addr=0x64010101}, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000840)="9f5c69622235016455c741ae93d87c77e1a8bab95108ab505972f1726fe58d7f0e60d343c99884770f9ac59d5355b2a887a017f8588c9127f024c96df746e937316e1a492f1f3c2f24b92f13b94142a2ba699ff9"}, {&(0x7f0000000000)="27a33198ca1d86ab7f8814b68ecbe9860dd64978f8e305f579495e75c1939d540215b0", 0xfff4}]}, 0x80) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/185, 0xb9}, 0x80010000) socket$kcm(0xa, 0x5, 0x0) 89.183438ms ago: executing program 1 (id=3079): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x17, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018015b10639097f618ddd092ee7ede70f5a52beb99a90e1e", @ANYRESOCT=r1, @ANYRES64=r2, @ANYRES64=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001980)}], 0x1}, 0x24000008) r4 = syz_clone(0x44196800, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x0) syz_open_procfs$namespace(r4, &(0x7f00000003c0)='ns/time_for_children\x00') r5 = socket$kcm(0x10, 0x3, 0x10) r6 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0xb, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x3, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0x4, 0x0, &(0x7f0000000240)="d2ff0307", 0x0, 0x200009, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c12400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 3 (id=3080): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f0000000040), 0x4) close(r2) close(r1) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r4, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), 0x0, 0x69, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x23, 0x8, 0x0, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000480)=r5) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%pS \x00'}, 0x20) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000300)=@raw=[@call={0x85, 0x0, 0x0, 0xb3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000}], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x8c, &(0x7f0000000500)=""/140, 0x40f00, 0x6c, '\x00', r5, 0x18, r7, 0x8, &(0x7f00000005c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xf, 0xffff, 0x3}, 0x10, 0x20bfd, 0xffffffffffffffff, 0x5, &(0x7f0000000980)=[r8, r9, r10, r11, r12], &(0x7f00000009c0)=[{0x2, 0x2, 0x3, 0xb}, {0x1, 0x3, 0xc, 0x2}, {0x5, 0x1, 0x0, 0x3}, {0x5, 0x3, 0xb, 0xa}, {0x0, 0x4, 0x5}], 0x10, 0x3}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x6c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/50, 0x32}, {&(0x7f0000000100)=""/48, 0x30}, {&(0x7f0000001a80)=""/4088, 0xff8}, {&(0x7f0000000200)=""/236, 0xec}, {&(0x7f0000003980)=""/4077, 0xfed}, {&(0x7f00000001c0)=""/16, 0x10}], 0x6}, 0x12000) kernel console output (not intermixed with test programs): [ 358.138065][T11376] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1919'. [ 358.621299][T11390] FAULT_INJECTION: forcing a failure. [ 358.621299][T11390] name failslab, interval 1, probability 0, space 0, times 0 [ 358.692767][T11390] CPU: 0 PID: 11390 Comm: syz.0.1926 Not tainted syzkaller #0 [ 358.700319][T11390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.710421][T11390] Call Trace: [ 358.713747][T11390] [ 358.717236][T11390] dump_stack_lvl+0x18c/0x250 [ 358.721968][T11390] ? show_regs_print_info+0x20/0x20 [ 358.727220][T11390] ? load_image+0x420/0x420 [ 358.731781][T11390] ? __might_sleep+0xe0/0xe0 [ 358.736418][T11390] ? __lock_acquire+0x7d80/0x7d80 [ 358.741496][T11390] should_fail_ex+0x394/0x4c0 [ 358.746239][T11390] should_failslab+0x9/0x20 [ 358.750803][T11390] slab_pre_alloc_hook+0x59/0x300 [ 358.755891][T11390] ? __lock_acquire+0x1336/0x7d80 [ 358.760982][T11390] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 358.766766][T11390] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 358.772546][T11390] __kmem_cache_alloc_node+0x53/0x250 [ 358.777980][T11390] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 358.783751][T11390] __kmalloc+0xa7/0x240 [ 358.787966][T11390] tomoyo_realpath_from_path+0xe6/0x5c0 [ 358.793605][T11390] tomoyo_check_open_permission+0x224/0x460 [ 358.799534][T11390] ? tomoyo_check_open_permission+0x1cf/0x460 [ 358.805646][T11390] ? tomoyo_check_path_number_acl+0x280/0x280 [ 358.811799][T11390] ? __asan_memset+0x22/0x40 [ 358.816505][T11390] ? __rwlock_init+0x150/0x150 [ 358.821328][T11390] ? tomoyo_file_open+0xed/0x180 [ 358.826324][T11390] security_file_open+0x62/0xa0 [ 358.831229][T11390] do_dentry_open+0x32b/0x14b0 [ 358.836066][T11390] ? __asan_memcpy+0x40/0x70 [ 358.840711][T11390] path_openat+0x284f/0x3270 [ 358.845404][T11390] ? perf_trace_lock+0xfc/0x3b0 [ 358.850296][T11390] ? __x64_sys_openat+0x139/0x160 [ 358.855372][T11390] ? verify_lock_unused+0x140/0x140 [ 358.860618][T11390] ? do_filp_open+0x430/0x430 [ 358.865351][T11390] ? perf_trace_lock+0xfc/0x3b0 [ 358.870281][T11390] do_filp_open+0x1f2/0x430 [ 358.874846][T11390] ? vfs_tmpfile+0x620/0x620 [ 358.879551][T11390] ? _raw_spin_unlock+0x28/0x40 [ 358.884465][T11390] ? alloc_fd+0x590/0x640 [ 358.888899][T11390] do_sys_openat2+0x134/0x1d0 [ 358.893654][T11390] ? do_sys_open+0xe0/0xe0 [ 358.898118][T11390] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 358.904163][T11390] ? srcu_init_notifier_head+0x90/0x90 [ 358.909667][T11390] ? lock_chain_count+0x20/0x20 [ 358.914581][T11390] __x64_sys_openat+0x139/0x160 [ 358.919488][T11390] do_syscall_64+0x55/0xb0 [ 358.923960][T11390] ? clear_bhb_loop+0x40/0x90 [ 358.928675][T11390] ? clear_bhb_loop+0x40/0x90 [ 358.933421][T11390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.939356][T11390] RIP: 0033:0x7f11b815e84e [ 358.943810][T11390] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 358.963458][T11390] RSP: 002b:00007f11b8fddec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 358.971924][T11390] RAX: ffffffffffffffda RBX: 00007f11b8fde6c0 RCX: 00007f11b815e84e [ 358.979937][T11390] RDX: 0000000000000000 RSI: 00007f11b8fddf90 RDI: ffffffffffffff9c [ 358.987945][T11390] RBP: 00007f11b8fde090 R08: 0000000000000000 R09: 0000000000000000 [ 358.995957][T11390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 359.003970][T11390] R13: 00007f11b8426038 R14: 00007f11b8425fa0 R15: 00007ffd957a5568 [ 359.012030][T11390] [ 359.022875][T11390] ERROR: Out of memory at tomoyo_realpath_from_path. [ 359.723732][T11401] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1928'. [ 361.047478][T11431] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1936'. [ 361.433562][T11448] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1941'. [ 362.129432][T11468] netlink: 'syz.3.1948': attribute type 41 has an invalid length. [ 362.546069][T11483] netlink: 'syz.0.1954': attribute type 12 has an invalid length. [ 362.554096][T11483] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1954'. [ 363.791933][T11517] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1965'. [ 364.692015][T11544] netlink: 'syz.1.1970': attribute type 10 has an invalid length. [ 365.154723][T11558] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1976'. [ 365.296254][T11561] netlink: 'syz.0.1977': attribute type 21 has an invalid length. [ 365.358564][T11561] netlink: 'syz.0.1977': attribute type 6 has an invalid length. [ 365.392929][T11561] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1977'. [ 365.500685][T11564] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1978'. [ 370.503791][T11627] syzkaller0: entered promiscuous mode [ 370.509336][T11627] syzkaller0: entered allmulticast mode [ 370.597784][T11635] syzkaller0: entered promiscuous mode [ 370.614278][T11629] netlink: 'syz.0.2000': attribute type 21 has an invalid length. [ 370.639910][T11629] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2000'. [ 376.090740][T11716] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2022'. [ 378.661179][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.670580][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.929624][T11761] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2039'. [ 382.874300][T11792] sctp: [Deprecated]: syz.0.2049 (pid 11792) Use of int in maxseg socket option. [ 382.874300][T11792] Use struct sctp_assoc_value instead [ 382.941539][T11790] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2049'. [ 383.563837][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2059'. [ 383.574087][T11814] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2059'. [ 383.864079][T11816] netlink: 'syz.2.2059': attribute type 21 has an invalid length. [ 383.872123][T11816] netlink: 'syz.2.2059': attribute type 6 has an invalid length. [ 384.907204][T11842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2068'. [ 386.404970][T11872] netlink: 'syz.0.2078': attribute type 29 has an invalid length. [ 386.415668][T11872] netlink: 'syz.0.2078': attribute type 29 has an invalid length. [ 386.426289][T11872] netlink: 'syz.0.2078': attribute type 29 has an invalid length. [ 386.435834][T11872] netlink: 'syz.0.2078': attribute type 29 has an invalid length. [ 386.445556][T11872] netlink: 'syz.0.2078': attribute type 29 has an invalid length. [ 386.486445][T11872] netlink: 207684 bytes leftover after parsing attributes in process `syz.0.2078'. [ 386.512864][T11872] netlink: 'syz.0.2078': attribute type 1 has an invalid length. [ 386.520666][T11872] netlink: 'syz.0.2078': attribute type 2 has an invalid length. [ 386.839715][T11887] syzkaller0: entered promiscuous mode [ 390.691626][T11924] netlink: 'syz.2.2099': attribute type 21 has an invalid length. [ 390.709423][T11925] netlink: 'syz.2.2099': attribute type 21 has an invalid length. [ 392.358420][T11939] FAULT_INJECTION: forcing a failure. [ 392.358420][T11939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.440009][T11939] CPU: 0 PID: 11939 Comm: syz.2.2104 Not tainted syzkaller #0 [ 392.447591][T11939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.457672][T11939] Call Trace: [ 392.460969][T11939] [ 392.463908][T11939] dump_stack_lvl+0x18c/0x250 [ 392.468616][T11939] ? show_regs_print_info+0x20/0x20 [ 392.473811][T11939] ? load_image+0x420/0x420 [ 392.478317][T11939] ? __might_fault+0xaa/0x120 [ 392.482990][T11939] ? __lock_acquire+0x7d80/0x7d80 [ 392.488019][T11939] should_fail_ex+0x394/0x4c0 [ 392.492706][T11939] _copy_from_user+0x2f/0xe0 [ 392.497300][T11939] do_ipv6_setsockopt+0x2e6/0x3e50 [ 392.502427][T11939] ? sk_dst_reset+0xa0/0xa0 [ 392.506931][T11939] ? kernel_text_address+0xa0/0xd0 [ 392.512049][T11939] ? verify_lock_unused+0x140/0x140 [ 392.517252][T11939] ? mark_lock+0x94/0x320 [ 392.521582][T11939] ? __lock_acquire+0x1262/0x7d80 [ 392.526709][T11939] ? aa_label_sk_perm+0x4d4/0x660 [ 392.531738][T11939] ? aa_sk_perm+0x970/0x970 [ 392.536253][T11939] ? __might_sleep+0xe0/0xe0 [ 392.540845][T11939] ? ksys_write+0x1d2/0x260 [ 392.545356][T11939] ? aa_sk_perm+0x83c/0x970 [ 392.549860][T11939] ? __fget_files+0x28/0x460 [ 392.554451][T11939] ? aa_af_perm+0x330/0x330 [ 392.558952][T11939] ? __fget_files+0x28/0x460 [ 392.563537][T11939] ? aa_sock_opt_perm+0x74/0x100 [ 392.568467][T11939] ipv6_setsockopt+0x59/0x190 [ 392.573136][T11939] ? sock_common_recvmsg+0x190/0x190 [ 392.578423][T11939] do_sock_setsockopt+0x175/0x1a0 [ 392.583443][T11939] ? __fdget+0x180/0x210 [ 392.587681][T11939] __x64_sys_setsockopt+0x182/0x200 [ 392.592875][T11939] do_syscall_64+0x55/0xb0 [ 392.597285][T11939] ? clear_bhb_loop+0x40/0x90 [ 392.601953][T11939] ? clear_bhb_loop+0x40/0x90 [ 392.606630][T11939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.612519][T11939] RIP: 0033:0x7ff13a99e019 [ 392.616950][T11939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.636556][T11939] RSP: 002b:00007ff13b8d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 392.644965][T11939] RAX: ffffffffffffffda RBX: 00007ff13ac25fa0 RCX: 00007ff13a99e019 [ 392.652932][T11939] RDX: 0000000000000008 RSI: 0000000000000029 RDI: 0000000000000003 [ 392.660893][T11939] RBP: 00007ff13b8d3090 R08: 0000000000000120 R09: 0000000000000000 [ 392.668881][T11939] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 392.676871][T11939] R13: 00007ff13ac26038 R14: 00007ff13ac25fa0 R15: 00007ffc3fd2a248 [ 392.684846][T11939] [ 392.861075][T11945] netlink: 'syz.2.2107': attribute type 3 has an invalid length. [ 392.876578][T11945] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2107'. [ 395.665713][T11947] netlink: 'syz.1.2106': attribute type 2 has an invalid length. [ 395.677953][T11960] netlink: 'syz.2.2111': attribute type 9 has an invalid length. [ 395.687144][T11960] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2111'. [ 395.987858][T11981] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2118'. [ 396.004694][T11981] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2118'. [ 397.192047][T11997] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2123'. [ 397.203675][T11997] bridge_slave_1: default FDB implementation only supports local addresses [ 397.460577][T11997] netlink: 'syz.3.2123': attribute type 3 has an invalid length. [ 397.504000][T11997] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2123'. [ 398.061367][T12015] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.2127'. [ 398.187679][T12019] FAULT_INJECTION: forcing a failure. [ 398.187679][T12019] name failslab, interval 1, probability 0, space 0, times 0 [ 398.200448][T12019] CPU: 1 PID: 12019 Comm: syz.3.2130 Not tainted syzkaller #0 [ 398.207962][T12019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.218054][T12019] Call Trace: [ 398.221358][T12019] [ 398.224300][T12019] dump_stack_lvl+0x18c/0x250 [ 398.229009][T12019] ? show_regs_print_info+0x20/0x20 [ 398.234224][T12019] ? load_image+0x420/0x420 [ 398.238756][T12019] ? netdev_core_pick_tx+0x370/0x370 [ 398.244149][T12019] should_fail_ex+0x394/0x4c0 [ 398.248848][T12019] should_failslab+0x9/0x20 [ 398.253371][T12019] slab_pre_alloc_hook+0x59/0x300 [ 398.258427][T12019] kmem_cache_alloc+0x5a/0x2c0 [ 398.263299][T12019] ? skb_clone+0x1eb/0x370 [ 398.267740][T12019] skb_clone+0x1eb/0x370 [ 398.271998][T12019] bpf_clone_redirect+0x16d/0x4a0 [ 398.277061][T12019] bpf_prog_208b094576c80b22+0x5e/0x63 [ 398.282541][T12019] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 398.288543][T12019] ? perf_trace_preemptirq_template+0xac/0x330 [ 398.294717][T12019] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 398.300711][T12019] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 398.306009][T12019] ? lock_chain_count+0x20/0x20 [ 398.310865][T12019] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 398.317129][T12019] ? __local_bh_disable_ip+0x108/0x1a0 [ 398.322598][T12019] ? __cant_sleep+0x220/0x220 [ 398.327306][T12019] ? __local_bh_enable_ip+0x13a/0x1c0 [ 398.332692][T12019] ? _local_bh_enable+0xa0/0xa0 [ 398.337557][T12019] ? bpf_test_timer_continue+0x135/0x380 [ 398.343209][T12019] ? bpf_test_run+0x174/0x870 [ 398.347907][T12019] bpf_test_run+0x2df/0x870 [ 398.352488][T12019] ? bpf_test_run+0x174/0x870 [ 398.357197][T12019] ? dst_hold+0x70/0x70 [ 398.361373][T12019] ? eth_get_headlen+0x210/0x210 [ 398.366349][T12019] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 398.371774][T12019] ? cpu_online+0x60/0x60 [ 398.376120][T12019] bpf_prog_test_run+0x31f/0x390 [ 398.381074][T12019] __sys_bpf+0x49d/0x890 [ 398.385339][T12019] ? bpf_link_show_fdinfo+0x390/0x390 [ 398.390751][T12019] ? lock_chain_count+0x20/0x20 [ 398.395630][T12019] __x64_sys_bpf+0x7c/0x90 [ 398.400067][T12019] do_syscall_64+0x55/0xb0 [ 398.404492][T12019] ? clear_bhb_loop+0x40/0x90 [ 398.409175][T12019] ? clear_bhb_loop+0x40/0x90 [ 398.413871][T12019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.419770][T12019] RIP: 0033:0x7f7c1bf9e019 [ 398.424197][T12019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.443814][T12019] RSP: 002b:00007f7c1ced1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 398.452241][T12019] RAX: ffffffffffffffda RBX: 00007f7c1c225fa0 RCX: 00007f7c1bf9e019 [ 398.460221][T12019] RDX: 000000000000003d RSI: 0000200000000080 RDI: 000000000000000a [ 398.468200][T12019] RBP: 00007f7c1ced1090 R08: 0000000000000000 R09: 0000000000000000 [ 398.476175][T12019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.484151][T12019] R13: 00007f7c1c226038 R14: 00007f7c1c225fa0 R15: 00007ffd94c8c5e8 [ 398.492159][T12019] [ 399.121368][T12033] netlink: 'syz.0.2135': attribute type 29 has an invalid length. [ 399.196157][T12033] netlink: 'syz.0.2135': attribute type 29 has an invalid length. [ 399.237046][T12034] netlink: 'syz.0.2135': attribute type 29 has an invalid length. [ 399.281800][T12033] netlink: 'syz.0.2135': attribute type 29 has an invalid length. [ 399.347960][T12039] netlink: 'syz.0.2135': attribute type 29 has an invalid length. [ 399.555347][T12041] netlink: 'syz.3.2138': attribute type 21 has an invalid length. [ 399.583338][T12041] netlink: 'syz.3.2138': attribute type 10 has an invalid length. [ 399.613114][T12041] netlink: 'syz.3.2138': attribute type 12 has an invalid length. [ 399.620987][T12041] netlink: 'syz.3.2138': attribute type 13 has an invalid length. [ 399.704339][T12041] netlink: 12226 bytes leftover after parsing attributes in process `syz.3.2138'. [ 399.816096][T12041] geneve0: entered promiscuous mode [ 399.898471][T12041] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 401.058174][T12071] delete_channel: no stack [ 401.067039][T12071] delete_channel: no stack [ 401.145229][T12074] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.2151'. [ 401.961217][T12092] FAULT_INJECTION: forcing a failure. [ 401.961217][T12092] name failslab, interval 1, probability 0, space 0, times 0 [ 401.974192][T12092] CPU: 1 PID: 12092 Comm: syz.2.2159 Not tainted syzkaller #0 [ 401.981686][T12092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.991766][T12092] Call Trace: [ 401.995063][T12092] [ 401.998012][T12092] dump_stack_lvl+0x18c/0x250 [ 402.002719][T12092] ? show_regs_print_info+0x20/0x20 [ 402.007945][T12092] ? load_image+0x420/0x420 [ 402.012474][T12092] ? perf_trace_lock+0xfc/0x3b0 [ 402.017350][T12092] ? verify_lock_unused+0x140/0x140 [ 402.022577][T12092] ? perf_trace_lock+0xfc/0x3b0 [ 402.027456][T12092] should_fail_ex+0x394/0x4c0 [ 402.032258][T12092] should_failslab+0x9/0x20 [ 402.036792][T12092] slab_pre_alloc_hook+0x59/0x300 [ 402.041866][T12092] kmem_cache_alloc+0x5a/0x2c0 [ 402.046666][T12092] ? skb_clone+0x1eb/0x370 [ 402.051125][T12092] skb_clone+0x1eb/0x370 [ 402.055397][T12092] __netlink_deliver_tap+0x411/0x7f0 [ 402.060741][T12092] ? netlink_deliver_tap+0x2e/0x1b0 [ 402.065966][T12092] netlink_deliver_tap+0x19c/0x1b0 [ 402.071114][T12092] netlink_unicast+0x77b/0x930 [ 402.075926][T12092] netlink_sendmsg+0x8d0/0xbf0 [ 402.080809][T12092] ? netlink_getsockopt+0x590/0x590 [ 402.086034][T12092] ? apparmor_socket_sendmsg+0x8e/0x330 [ 402.091608][T12092] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 402.096922][T12092] ? security_socket_sendmsg+0x80/0xa0 [ 402.102403][T12092] ? netlink_getsockopt+0x590/0x590 [ 402.107630][T12092] ____sys_sendmsg+0x61b/0x980 [ 402.112426][T12092] ? __asan_memset+0x22/0x40 [ 402.117041][T12092] ? __sys_sendmsg_sock+0x30/0x30 [ 402.122082][T12092] ? __import_iovec+0x3fa/0x850 [ 402.126974][T12092] ? import_iovec+0x73/0xa0 [ 402.131510][T12092] ___sys_sendmsg+0x2a6/0x360 [ 402.136215][T12092] ? __sys_sendmsg+0x2b0/0x2b0 [ 402.141040][T12092] ? __lock_acquire+0x7d80/0x7d80 [ 402.146130][T12092] __se_sys_sendmsg+0x1d0/0x2c0 [ 402.151010][T12092] ? __x64_sys_sendmsg+0x80/0x80 [ 402.155987][T12092] ? lockdep_hardirqs_on+0x98/0x150 [ 402.161219][T12092] do_syscall_64+0x55/0xb0 [ 402.165655][T12092] ? clear_bhb_loop+0x40/0x90 [ 402.170350][T12092] ? clear_bhb_loop+0x40/0x90 [ 402.175052][T12092] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.180963][T12092] RIP: 0033:0x7ff13a99e019 [ 402.185389][T12092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.205016][T12092] RSP: 002b:00007ff13b8d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.213432][T12092] RAX: ffffffffffffffda RBX: 00007ff13ac25fa0 RCX: 00007ff13a99e019 [ 402.221403][T12092] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 402.229378][T12092] RBP: 00007ff13b8d3090 R08: 0000000000000000 R09: 0000000000000000 [ 402.237346][T12092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.245318][T12092] R13: 00007ff13ac26038 R14: 00007ff13ac25fa0 R15: 00007ffc3fd2a248 [ 402.253312][T12092] [ 402.465581][T12098] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2161'. [ 402.532548][T12098] bridge_slave_1: default FDB implementation only supports local addresses [ 402.781953][T12098] validate_nla: 16 callbacks suppressed [ 402.781990][T12098] netlink: 'syz.2.2161': attribute type 3 has an invalid length. [ 402.800870][T12098] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2161'. [ 403.226388][T12110] syzkaller0: entered promiscuous mode [ 403.241776][T12110] syzkaller0: entered allmulticast mode [ 404.770056][T12122] netlink: 'syz.0.2168': attribute type 21 has an invalid length. [ 404.778629][T12122] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2168'. [ 404.788493][T12123] netlink: 'syz.0.2168': attribute type 21 has an invalid length. [ 404.802558][T12123] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2168'. [ 404.804199][T12111] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 404.828593][T12111] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 404.840327][T12111] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 406.908538][T12146] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 406.953461][T12146] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 406.996954][T12149] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.2179'. [ 407.487028][T12162] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2183'. [ 407.508641][T12162] bridge_slave_1: default FDB implementation only supports local addresses [ 407.809997][T12171] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2187'. [ 407.855183][T12171] netlink: 'syz.2.2187': attribute type 58 has an invalid length. [ 407.859207][T12162] netlink: 'syz.0.2183': attribute type 3 has an invalid length. [ 407.875640][T12171] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2187'. [ 407.924648][T12162] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2183'. [ 408.032689][T12177] FAULT_INJECTION: forcing a failure. [ 408.032689][T12177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.062521][T12177] CPU: 0 PID: 12177 Comm: syz.3.2189 Not tainted syzkaller #0 [ 408.070048][T12177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.080124][T12177] Call Trace: [ 408.083419][T12177] [ 408.086365][T12177] dump_stack_lvl+0x18c/0x250 [ 408.091070][T12177] ? show_regs_print_info+0x20/0x20 [ 408.096303][T12177] ? load_image+0x420/0x420 [ 408.100834][T12177] ? __might_fault+0xaa/0x120 [ 408.105528][T12177] ? __lock_acquire+0x7d80/0x7d80 [ 408.110575][T12177] should_fail_ex+0x394/0x4c0 [ 408.115284][T12177] _copy_from_user+0x2f/0xe0 [ 408.119895][T12177] kstrtouint_from_user+0xde/0x170 [ 408.125041][T12177] ? kstrtol_from_user+0x190/0x190 [ 408.130196][T12177] proc_fail_nth_write+0x8f/0x250 [ 408.135250][T12177] ? proc_fail_nth_read+0x260/0x260 [ 408.140483][T12177] ? proc_fail_nth_read+0x260/0x260 [ 408.145705][T12177] vfs_write+0x299/0x9a0 [ 408.149977][T12177] ? file_end_write+0x250/0x250 [ 408.154849][T12177] ? __fget_files+0x28/0x460 [ 408.159469][T12177] ? __fget_files+0x3fc/0x460 [ 408.164176][T12177] ? __fdget_pos+0x2a3/0x330 [ 408.168785][T12177] ? ksys_write+0x74/0x260 [ 408.173227][T12177] ksys_write+0x151/0x260 [ 408.177584][T12177] ? __ia32_sys_read+0x90/0x90 [ 408.182377][T12177] ? lockdep_hardirqs_on+0x98/0x150 [ 408.187598][T12177] do_syscall_64+0x55/0xb0 [ 408.192035][T12177] ? clear_bhb_loop+0x40/0x90 [ 408.196730][T12177] ? clear_bhb_loop+0x40/0x90 [ 408.201429][T12177] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.207339][T12177] RIP: 0033:0x7f7c1bf5e84e [ 408.211770][T12177] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 408.231400][T12177] RSP: 002b:00007f7c1ceaffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 408.239839][T12177] RAX: ffffffffffffffda RBX: 00007f7c1ceb06c0 RCX: 00007f7c1bf5e84e [ 408.247831][T12177] RDX: 0000000000000001 RSI: 00007f7c1ceb00a0 RDI: 000000000000000d [ 408.255816][T12177] RBP: 00007f7c1ceb0090 R08: 0000000000000000 R09: 0000000000000000 [ 408.263803][T12177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.271789][T12177] R13: 00007f7c1c226128 R14: 00007f7c1c226090 R15: 00007ffd94c8c5e8 [ 408.279794][T12177] [ 409.302034][T12194] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2194'. [ 409.315765][T12194] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2194'. [ 409.326767][T12194] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2194'. [ 409.344592][T12194] FAULT_INJECTION: forcing a failure. [ 409.344592][T12194] name failslab, interval 1, probability 0, space 0, times 0 [ 409.374372][T12194] CPU: 0 PID: 12194 Comm: syz.3.2194 Not tainted syzkaller #0 [ 409.381915][T12194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.391995][T12194] Call Trace: [ 409.395291][T12194] [ 409.398234][T12194] dump_stack_lvl+0x18c/0x250 [ 409.402941][T12194] ? show_regs_print_info+0x20/0x20 [ 409.408169][T12194] ? load_image+0x420/0x420 [ 409.412722][T12194] should_fail_ex+0x394/0x4c0 [ 409.417432][T12194] should_failslab+0x9/0x20 [ 409.421966][T12194] slab_pre_alloc_hook+0x59/0x300 [ 409.427025][T12194] kmem_cache_alloc+0x5a/0x2c0 [ 409.431815][T12194] ? skb_clone+0x1eb/0x370 [ 409.436264][T12194] skb_clone+0x1eb/0x370 [ 409.440532][T12194] __netlink_deliver_tap+0x411/0x7f0 [ 409.445851][T12194] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.451077][T12194] netlink_deliver_tap+0x19c/0x1b0 [ 409.456215][T12194] netlink_dump+0x95b/0xec0 [ 409.460769][T12194] ? netlink_lookup+0x200/0x200 [ 409.465660][T12194] ? slab_free_freelist_hook+0x130/0x1a0 [ 409.471322][T12194] ? netlink_recvmsg+0x5e7/0xe60 [ 409.476278][T12194] ? kmem_cache_free+0xf8/0x290 [ 409.481162][T12194] netlink_recvmsg+0x693/0xe60 [ 409.485953][T12194] ? netlink_sendmsg+0xbf0/0xbf0 [ 409.490917][T12194] ? aa_af_perm+0x330/0x330 [ 409.495448][T12194] ? __lock_acquire+0x1262/0x7d80 [ 409.500500][T12194] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 409.505809][T12194] ? security_socket_recvmsg+0x89/0xb0 [ 409.511280][T12194] ? netlink_sendmsg+0xbf0/0xbf0 [ 409.516216][T12194] ____sys_recvmsg+0x2bd/0x5d0 [ 409.520996][T12194] ? __sys_recvmsg_sock+0x50/0x50 [ 409.526035][T12194] ? import_iovec+0x73/0xa0 [ 409.530557][T12194] ___sys_recvmsg+0x214/0x590 [ 409.535273][T12194] ? __sys_recvmsg+0x2a0/0x2a0 [ 409.540076][T12194] ? ksys_write+0x1d2/0x260 [ 409.544619][T12194] ? __fget_files+0x3fc/0x460 [ 409.549339][T12194] __x64_sys_recvmsg+0x21e/0x2f0 [ 409.554310][T12194] ? ___sys_recvmsg+0x590/0x590 [ 409.559198][T12194] ? lockdep_hardirqs_on+0x98/0x150 [ 409.564430][T12194] do_syscall_64+0x55/0xb0 [ 409.568870][T12194] ? clear_bhb_loop+0x40/0x90 [ 409.573569][T12194] ? clear_bhb_loop+0x40/0x90 [ 409.578276][T12194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.584199][T12194] RIP: 0033:0x7f7c1bf9e019 [ 409.588632][T12194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.608269][T12194] RSP: 002b:00007f7c1ced1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 409.616727][T12194] RAX: ffffffffffffffda RBX: 00007f7c1c225fa0 RCX: 00007f7c1bf9e019 [ 409.624809][T12194] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000003 [ 409.632804][T12194] RBP: 00007f7c1ced1090 R08: 0000000000000000 R09: 0000000000000000 [ 409.640795][T12194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.648786][T12194] R13: 00007f7c1c226038 R14: 00007f7c1c225fa0 R15: 00007ffd94c8c5e8 [ 409.656794][T12194] [ 409.964017][T12201] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2197'. [ 409.982352][T12201] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2197'. [ 410.023330][T12203] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2197'. [ 410.131410][T12206] netlink: 3890 bytes leftover after parsing attributes in process `syz.2.2199'. [ 410.216021][T12210] FAULT_INJECTION: forcing a failure. [ 410.216021][T12210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.229258][T12210] CPU: 0 PID: 12210 Comm: syz.3.2201 Not tainted syzkaller #0 [ 410.236740][T12210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.246827][T12210] Call Trace: [ 410.250128][T12210] [ 410.253074][T12210] dump_stack_lvl+0x18c/0x250 [ 410.257782][T12210] ? show_regs_print_info+0x20/0x20 [ 410.262998][T12210] ? load_image+0x420/0x420 [ 410.267537][T12210] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 410.273802][T12210] should_fail_ex+0x394/0x4c0 [ 410.278485][T12210] strncpy_from_user+0x36/0x2f0 [ 410.283337][T12210] ? __local_bh_disable_ip+0x108/0x1a0 [ 410.288795][T12210] strncpy_from_user_nofault+0x71/0x140 [ 410.294345][T12210] bpf_probe_read_user_str+0x2a/0x70 [ 410.299636][T12210] bpf_prog_a91b00db09d76834+0x45/0x47 [ 410.305092][T12210] bpf_test_run+0x2df/0x870 [ 410.309607][T12210] ? bpf_test_run+0x174/0x870 [ 410.314280][T12210] ? dst_hold+0x70/0x70 [ 410.318436][T12210] ? convert___skb_to_skb+0x3d/0x590 [ 410.323909][T12210] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 410.329291][T12210] ? cpu_online+0x60/0x60 [ 410.333617][T12210] bpf_prog_test_run+0x31f/0x390 [ 410.338554][T12210] __sys_bpf+0x49d/0x890 [ 410.342795][T12210] ? bpf_link_show_fdinfo+0x390/0x390 [ 410.348176][T12210] ? lock_chain_count+0x20/0x20 [ 410.353031][T12210] __x64_sys_bpf+0x7c/0x90 [ 410.357443][T12210] do_syscall_64+0x55/0xb0 [ 410.361855][T12210] ? clear_bhb_loop+0x40/0x90 [ 410.366526][T12210] ? clear_bhb_loop+0x40/0x90 [ 410.371199][T12210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 410.377123][T12210] RIP: 0033:0x7f7c1bf9e019 [ 410.381535][T12210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.401138][T12210] RSP: 002b:00007f7c1ced1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 410.409549][T12210] RAX: ffffffffffffffda RBX: 00007f7c1c225fa0 RCX: 00007f7c1bf9e019 [ 410.417515][T12210] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 410.425569][T12210] RBP: 00007f7c1ced1090 R08: 0000000000000000 R09: 0000000000000000 [ 410.433534][T12210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.441495][T12210] R13: 00007f7c1c226038 R14: 00007f7c1c225fa0 R15: 00007ffd94c8c5e8 [ 410.449484][T12210] [ 411.414546][T12237] netlink: 'syz.2.2211': attribute type 10 has an invalid length. [ 411.426696][T12237] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2211'. [ 412.496034][T12267] netlink: 'syz.1.2223': attribute type 1 has an invalid length. [ 412.512710][T12267] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2223'. [ 412.699031][T12269] syzkaller0: entered promiscuous mode [ 412.723253][T12269] syzkaller0: entered allmulticast mode [ 412.954224][T12282] netlink: 'syz.0.2227': attribute type 1 has an invalid length. [ 413.005622][T12282] netlink: 'syz.0.2227': attribute type 3 has an invalid length. [ 413.058097][T12282] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2227'. [ 413.140876][T12284] netlink: 'syz.0.2227': attribute type 10 has an invalid length. [ 413.161991][T12284] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2227'. [ 414.339987][T12296] netlink: 1772 bytes leftover after parsing attributes in process `syz.0.2232'. [ 416.148230][T12317] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2237'. [ 416.915457][T12343] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2247'. [ 417.665073][T12355] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2249'. [ 417.677798][T12355] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2249'. [ 417.690737][T12355] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2249'. [ 417.706475][T12355] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2249'. [ 418.409845][T12362] FAULT_INJECTION: forcing a failure. [ 418.409845][T12362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.432695][T12362] CPU: 0 PID: 12362 Comm: syz.0.2251 Not tainted syzkaller #0 [ 418.440316][T12362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 418.450396][T12362] Call Trace: [ 418.453701][T12362] [ 418.456656][T12362] dump_stack_lvl+0x18c/0x250 [ 418.461366][T12362] ? show_regs_print_info+0x20/0x20 [ 418.466675][T12362] ? load_image+0x420/0x420 [ 418.471214][T12362] ? __might_fault+0xaa/0x120 [ 418.475925][T12362] ? __lock_acquire+0x7d80/0x7d80 [ 418.480981][T12362] should_fail_ex+0x394/0x4c0 [ 418.485691][T12362] _copy_from_iter+0x1cd/0x1290 [ 418.490567][T12362] ? rcu_is_watching+0x15/0xb0 [ 418.495357][T12362] ? copyout_mc+0x70/0x70 [ 418.499688][T12362] ? __virt_addr_valid+0x10c/0x380 [ 418.504800][T12362] ? __virt_addr_valid+0x10c/0x380 [ 418.509908][T12362] ? __virt_addr_valid+0x10c/0x380 [ 418.515014][T12362] ? __check_object_size+0x4fc/0xa40 [ 418.520296][T12362] netlink_sendmsg+0x76b/0xbf0 [ 418.525058][T12362] ? netlink_getsockopt+0x590/0x590 [ 418.530248][T12362] ? apparmor_socket_sendmsg+0x170/0x330 [ 418.535877][T12362] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 418.541155][T12362] ? security_socket_sendmsg+0x80/0xa0 [ 418.546603][T12362] ? netlink_getsockopt+0x590/0x590 [ 418.551792][T12362] ____sys_sendmsg+0x61b/0x980 [ 418.556550][T12362] ? __asan_memset+0x22/0x40 [ 418.561136][T12362] ? __sys_sendmsg_sock+0x30/0x30 [ 418.566152][T12362] ? __import_iovec+0x5f2/0x850 [ 418.571007][T12362] ? import_iovec+0x73/0xa0 [ 418.575510][T12362] ___sys_sendmsg+0x2a6/0x360 [ 418.580179][T12362] ? get_pid_task+0x20/0x1e0 [ 418.584766][T12362] ? __sys_sendmsg+0x2b0/0x2b0 [ 418.589541][T12362] ? __lock_acquire+0x7d80/0x7d80 [ 418.594580][T12362] __se_sys_sendmsg+0x1d0/0x2c0 [ 418.599427][T12362] ? __x64_sys_sendmsg+0x80/0x80 [ 418.604370][T12362] ? lockdep_hardirqs_on+0x98/0x150 [ 418.609563][T12362] do_syscall_64+0x55/0xb0 [ 418.613973][T12362] ? clear_bhb_loop+0x40/0x90 [ 418.618644][T12362] ? clear_bhb_loop+0x40/0x90 [ 418.623315][T12362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.629201][T12362] RIP: 0033:0x7f11b819e019 [ 418.633609][T12362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.653208][T12362] RSP: 002b:00007f11b8fde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.661618][T12362] RAX: ffffffffffffffda RBX: 00007f11b8425fa0 RCX: 00007f11b819e019 [ 418.669581][T12362] RDX: 000000002000c810 RSI: 0000200000000040 RDI: 0000000000000003 [ 418.677770][T12362] RBP: 00007f11b8fde090 R08: 0000000000000000 R09: 0000000000000000 [ 418.685752][T12362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.693728][T12362] R13: 00007f11b8426038 R14: 00007f11b8425fa0 R15: 00007ffd957a5568 [ 418.701719][T12362] [ 418.942364][T12379] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2259'. [ 419.007377][T12383] netlink: 'syz.0.2260': attribute type 10 has an invalid length. [ 419.040537][T12383] netlink: 'syz.0.2260': attribute type 25 has an invalid length. [ 420.989318][T12420] netlink: 'syz.2.2269': attribute type 1 has an invalid length. [ 421.002668][T12420] netlink: 'syz.2.2269': attribute type 3 has an invalid length. [ 421.011002][T12420] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2269'. [ 421.155109][T12426] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2273'. [ 422.940857][T12480] netlink: 'syz.2.2289': attribute type 10 has an invalid length. [ 422.962590][T12480] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2289'. [ 423.448129][T12498] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2293'. [ 423.503989][T12498] netlink: 'syz.0.2293': attribute type 10 has an invalid length. [ 423.520640][T12498] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2293'. [ 424.788023][T12533] netlink: 'syz.0.2303': attribute type 39 has an invalid length. [ 425.407254][T12547] netlink: 'syz.1.2306': attribute type 10 has an invalid length. [ 425.415548][T12547] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2306'. [ 425.992249][T12569] netlink: 'syz.0.2314': attribute type 39 has an invalid length. [ 426.766529][T12595] FAULT_INJECTION: forcing a failure. [ 426.766529][T12595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.798155][T12595] CPU: 1 PID: 12595 Comm: syz.2.2321 Not tainted syzkaller #0 [ 426.805690][T12595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 426.815775][T12595] Call Trace: [ 426.819075][T12595] [ 426.822027][T12595] dump_stack_lvl+0x18c/0x250 [ 426.826739][T12595] ? show_regs_print_info+0x20/0x20 [ 426.831968][T12595] ? load_image+0x420/0x420 [ 426.836541][T12595] ? __might_fault+0xaa/0x120 [ 426.841216][T12595] ? __lock_acquire+0x7d80/0x7d80 [ 426.846262][T12595] should_fail_ex+0x394/0x4c0 [ 426.850942][T12595] _copy_from_user+0x2f/0xe0 [ 426.855544][T12595] kstrtouint_from_user+0xde/0x170 [ 426.860704][T12595] ? kstrtol_from_user+0x190/0x190 [ 426.865842][T12595] proc_fail_nth_write+0x8f/0x250 [ 426.870868][T12595] ? proc_fail_nth_read+0x260/0x260 [ 426.876069][T12595] ? proc_fail_nth_read+0x260/0x260 [ 426.881265][T12595] vfs_write+0x299/0x9a0 [ 426.885513][T12595] ? file_end_write+0x250/0x250 [ 426.890363][T12595] ? __fget_files+0x28/0x460 [ 426.894952][T12595] ? __fget_files+0x3fc/0x460 [ 426.899634][T12595] ? __fdget_pos+0x2a3/0x330 [ 426.904254][T12595] ? ksys_write+0x74/0x260 [ 426.908672][T12595] ksys_write+0x151/0x260 [ 426.913025][T12595] ? __ia32_sys_read+0x90/0x90 [ 426.917788][T12595] ? lockdep_hardirqs_on+0x98/0x150 [ 426.922994][T12595] do_syscall_64+0x55/0xb0 [ 426.927405][T12595] ? clear_bhb_loop+0x40/0x90 [ 426.932076][T12595] ? clear_bhb_loop+0x40/0x90 [ 426.936751][T12595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.942749][T12595] RIP: 0033:0x7ff13a95e84e [ 426.947161][T12595] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 426.966784][T12595] RSP: 002b:00007ff13b8d2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 426.975219][T12595] RAX: ffffffffffffffda RBX: 00007ff13b8d36c0 RCX: 00007ff13a95e84e [ 426.983220][T12595] RDX: 0000000000000001 RSI: 00007ff13b8d30a0 RDI: 0000000000000005 [ 426.991184][T12595] RBP: 00007ff13b8d3090 R08: 0000000000000000 R09: 0000000000000000 [ 426.999154][T12595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 427.007120][T12595] R13: 00007ff13ac26038 R14: 00007ff13ac25fa0 R15: 00007ffc3fd2a248 [ 427.015102][T12595] [ 427.029495][T12594] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2320'. [ 427.247748][T12605] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2324'. [ 427.272610][T12605] bridge_slave_1: default FDB implementation only supports local addresses [ 427.377719][T12606] syzkaller0: entered promiscuous mode [ 427.384097][T12606] syzkaller0: entered allmulticast mode [ 429.172172][T12631] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2331'. [ 429.192052][T12631] openvswitch: netlink: Duplicate key (type 0). [ 429.355026][ T51] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 430.792619][T12633] netlink: 'syz.3.2332': attribute type 10 has an invalid length. [ 431.244135][T12664] netlink: 'syz.3.2338': attribute type 10 has an invalid length. [ 431.252176][T12664] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2338'. [ 431.444285][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 431.885179][T12673] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2341'. [ 432.234766][T12682] netlink: 'syz.2.2345': attribute type 39 has an invalid length. [ 432.361287][T12682] bond0: (slave syz_tun): Releasing backup interface [ 434.101493][T12728] netlink: 'syz.0.2356': attribute type 3 has an invalid length. [ 434.112576][T12728] netlink: 'syz.0.2356': attribute type 1 has an invalid length. [ 434.120506][T12728] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.2356'. [ 435.190791][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 435.200984][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 435.209640][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 435.218876][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 435.227037][ T5090] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 435.235250][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 435.307321][ T2974] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.413254][ T2974] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.497005][ T2974] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.574877][ T2974] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.585741][ T5090] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 435.646495][T12747] chnl_net:caif_netlink_parms(): no params data found [ 435.790354][T12747] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.814090][T12747] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.838834][T12747] bridge_slave_0: entered allmulticast mode [ 435.848690][T12747] bridge_slave_0: entered promiscuous mode [ 435.882240][T12747] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.891258][T12747] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.898734][T12747] bridge_slave_1: entered allmulticast mode [ 435.906497][T12747] bridge_slave_1: entered promiscuous mode [ 436.057684][T12747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.069862][T12747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.183571][T12747] team0: Port device team_slave_0 added [ 436.207571][T12747] team0: Port device team_slave_1 added [ 436.364953][T12747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.385018][T12747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.411894][T12747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.439671][T12747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.448969][T12747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.476402][T12747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.999405][T12747] hsr_slave_0: entered promiscuous mode [ 437.015392][T12747] hsr_slave_1: entered promiscuous mode [ 437.028539][T12747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.036404][T12747] Cannot create hsr debugfs directory [ 437.282546][ T5090] Bluetooth: hci0: command tx timeout [ 438.391562][T12747] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 438.409003][T12747] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 438.426353][T12747] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 438.447785][T12747] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 438.664734][T12747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.737405][T12747] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.787902][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.795105][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.869871][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.877213][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.376628][ T5090] Bluetooth: hci0: command tx timeout [ 439.464954][T12846] netlink: 'syz.3.2382': attribute type 3 has an invalid length. [ 439.484372][T12747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.491663][T12846] netlink: 'syz.3.2382': attribute type 16 has an invalid length. [ 439.517578][T12846] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2382'. [ 439.567449][T12848] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2382'. [ 439.607309][T12848] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2382'. [ 439.676443][T12747] veth0_vlan: entered promiscuous mode [ 439.815733][T12747] veth1_vlan: entered promiscuous mode [ 439.853909][T12849] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2382'. [ 440.037041][T12850] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2382'. [ 440.095902][T12747] veth0_macvtap: entered promiscuous mode [ 440.133188][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.139574][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.143432][T12747] veth1_macvtap: entered promiscuous mode [ 440.232342][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.290507][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.300533][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.317265][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.327297][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.344179][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.358034][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.371095][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.384216][T12747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.433859][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.550550][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.605689][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.620053][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.677226][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.699838][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.716832][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.741931][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.775908][T12747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.797655][T12747] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.822827][T12747] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.831594][T12747] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.860979][T12747] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.094844][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.112083][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.174097][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.181963][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.286858][T12862] netlink: 'syz.1.2391': attribute type 5 has an invalid length. [ 441.300942][T12862] netlink: 'syz.1.2391': attribute type 1 has an invalid length. [ 441.326388][T12862] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2391'. [ 441.352011][ T2974] hsr_slave_0: left promiscuous mode [ 441.361917][ T2974] hsr_slave_1: left promiscuous mode [ 441.388080][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.396000][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.412109][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.419894][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.438215][ T2974] bridge0: port 4(dummy0) entered disabled state [ 441.446583][ T5090] Bluetooth: hci0: command tx timeout [ 441.459781][ T2974] batadv0: left allmulticast mode [ 441.465939][ T2974] batadv0: left promiscuous mode [ 441.471240][ T2974] bridge0: port 3(batadv0) entered disabled state [ 441.481969][ T2974] bridge_slave_1: left allmulticast mode [ 441.487847][ T2974] bridge_slave_1: left promiscuous mode [ 441.494539][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.505378][ T2974] bridge_slave_0: left allmulticast mode [ 441.511273][ T2974] bridge_slave_0: left promiscuous mode [ 441.517594][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.536587][ T2974] veth1_macvtap: left promiscuous mode [ 441.543953][ T2974] veth0_macvtap: left promiscuous mode [ 442.090656][ T2974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.135397][ T2974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.377196][ T2974] bond0 (unregistering): Released all slaves [ 443.091562][T12892] netlink: 'syz.0.2393': attribute type 10 has an invalid length. [ 443.101726][T12892] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 443.122740][T12892] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 443.153358][T12892] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 443.221605][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 443.231160][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 443.240902][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 443.249309][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 443.298127][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 443.324448][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 443.536184][ T51] Bluetooth: hci0: command tx timeout [ 443.898856][ T5774] bond0: (slave syz_tun): Releasing backup interface [ 444.221613][T12893] chnl_net:caif_netlink_parms(): no params data found [ 444.354788][T12893] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.362056][T12893] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.370700][T12893] bridge_slave_0: entered allmulticast mode [ 444.378468][T12893] bridge_slave_0: entered promiscuous mode [ 444.388675][T12893] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.396410][T12893] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.404686][T12893] bridge_slave_1: entered allmulticast mode [ 444.412043][T12893] bridge_slave_1: entered promiscuous mode [ 444.445981][T12893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.458669][T12893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.495717][T12893] team0: Port device team_slave_0 added [ 444.505548][T12893] team0: Port device team_slave_1 added [ 444.537090][T12893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.544257][T12893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.570984][T12893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.584637][T12893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.591622][T12893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.624046][T12893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.706214][T12893] hsr_slave_0: entered promiscuous mode [ 444.716325][T12893] hsr_slave_1: entered promiscuous mode [ 444.999868][T12893] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.097277][T12893] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.181017][T12893] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.392792][ T51] Bluetooth: hci3: command tx timeout [ 446.337543][T12893] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.462984][T12893] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 446.472093][T12893] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 446.484784][T12893] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 446.500137][T12893] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 446.561186][T12893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.583536][T12893] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.596093][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.603267][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.619670][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.626804][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.795207][T12893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.839475][T12893] veth0_vlan: entered promiscuous mode [ 446.851136][T12893] veth1_vlan: entered promiscuous mode [ 446.880141][T12893] veth0_macvtap: entered promiscuous mode [ 446.896208][T12893] veth1_macvtap: entered promiscuous mode [ 446.914881][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.925792][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.936177][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.947364][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.957304][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.968167][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.979851][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.990409][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.001914][T12893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.018161][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.028732][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.038632][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.049436][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.059646][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.070160][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.080041][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.090492][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.101918][T12893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.117137][T12893] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.126509][T12893] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.135754][T12893] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.144538][T12893] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.226856][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.246566][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.270139][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.278078][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.443188][ T51] Bluetooth: hci3: command tx timeout [ 447.479728][T12953] netlink: 'syz.3.2407': attribute type 10 has an invalid length. [ 447.487843][T12953] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 447.500465][T12953] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 447.511394][T12953] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 447.739114][T12950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.761301][T12950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.045137][ T5090] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 448.064166][ T5090] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 448.072331][ T5090] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 448.081476][ T5090] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 448.089317][ T5090] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 448.097718][ T5090] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 448.660694][T12950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.669928][T12950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.678760][T12950] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 448.686432][T12950] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 448.833615][T12968] FAULT_INJECTION: forcing a failure. [ 448.833615][T12968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.856371][T12968] CPU: 0 PID: 12968 Comm: syz.3.2411 Not tainted syzkaller #0 [ 448.863938][T12968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 448.874024][T12968] Call Trace: [ 448.877322][T12968] [ 448.880273][T12968] dump_stack_lvl+0x18c/0x250 [ 448.884984][T12968] ? show_regs_print_info+0x20/0x20 [ 448.890220][T12968] ? load_image+0x420/0x420 [ 448.894759][T12968] ? __lock_acquire+0x7d80/0x7d80 [ 448.899815][T12968] ? aa_sk_perm+0x970/0x970 [ 448.904354][T12968] should_fail_ex+0x394/0x4c0 [ 448.909068][T12968] _copy_from_user+0x2f/0xe0 [ 448.913692][T12968] copy_from_sockptr+0x69/0x80 [ 448.918493][T12968] packet_setsockopt+0xbff/0x1500 [ 448.923547][T12968] ? packet_ioctl+0x350/0x350 [ 448.928252][T12968] ? aa_sk_perm+0x83c/0x970 [ 448.932780][T12968] ? __fget_files+0x28/0x460 [ 448.937402][T12968] ? aa_af_perm+0x330/0x330 [ 448.941933][T12968] ? __fget_files+0x28/0x460 [ 448.946553][T12968] ? aa_sock_opt_perm+0x74/0x100 [ 448.951508][T12968] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 448.957064][T12968] ? security_socket_setsockopt+0x7e/0xa0 [ 448.962800][T12968] ? packet_ioctl+0x350/0x350 [ 448.967476][T12968] do_sock_setsockopt+0x175/0x1a0 [ 448.972494][T12968] ? __fdget+0x180/0x210 [ 448.976737][T12968] __x64_sys_setsockopt+0x182/0x200 [ 448.981932][T12968] do_syscall_64+0x55/0xb0 [ 448.986344][T12968] ? clear_bhb_loop+0x40/0x90 [ 448.991014][T12968] ? clear_bhb_loop+0x40/0x90 [ 448.995686][T12968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.001582][T12968] RIP: 0033:0x7fd153b9e019 [ 449.005992][T12968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.025595][T12968] RSP: 002b:00007fd1549f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 449.034007][T12968] RAX: ffffffffffffffda RBX: 00007fd153e25fa0 RCX: 00007fd153b9e019 [ 449.041975][T12968] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000003 [ 449.049941][T12968] RBP: 00007fd1549f5090 R08: 0000000000000004 R09: 0000000000000000 [ 449.057907][T12968] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 449.065876][T12968] R13: 00007fd153e26038 R14: 00007fd153e25fa0 R15: 00007ffdec287d58 [ 449.073853][T12968] [ 449.270918][T12961] chnl_net:caif_netlink_parms(): no params data found [ 449.466269][T12961] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.473650][T12961] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.480879][T12961] bridge_slave_0: entered allmulticast mode [ 449.489290][T12990] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2418'. [ 449.493762][T12961] bridge_slave_0: entered promiscuous mode [ 449.509786][T12961] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.517940][T12961] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.525226][ T5090] Bluetooth: hci3: command tx timeout [ 449.593139][T12961] bridge_slave_1: entered allmulticast mode [ 449.600465][T12961] bridge_slave_1: entered promiscuous mode [ 449.700876][T12961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.763872][T12961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.163051][ T5090] Bluetooth: hci4: command tx timeout [ 450.533513][T12961] team0: Port device team_slave_0 added [ 450.548205][T12961] team0: Port device team_slave_1 added [ 450.614043][T12961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.621057][T12961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.655250][T12961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.672240][T12997] netlink: 'syz.1.2421': attribute type 39 has an invalid length. [ 450.689454][T12997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2421'. [ 450.707390][T12997] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2421'. [ 450.718239][T12961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.725786][T12961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.752780][T12961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.942371][T12961] hsr_slave_0: entered promiscuous mode [ 450.949468][T12961] hsr_slave_1: entered promiscuous mode [ 450.956996][T12961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 450.966519][T12961] Cannot create hsr debugfs directory [ 450.972336][T13001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.983050][T13001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.005932][T13001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.017000][T13001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.480966][T12961] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 451.498142][T12961] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 451.510720][T12961] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 451.529915][T12961] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 451.604649][ T5090] Bluetooth: hci3: command tx timeout [ 451.661639][T12961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.694889][T12961] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.719135][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.726470][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.749208][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.756445][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.859568][T13030] FAULT_INJECTION: forcing a failure. [ 451.859568][T13030] name failslab, interval 1, probability 0, space 0, times 0 [ 451.902376][T13030] CPU: 0 PID: 13030 Comm: syz.0.2431 Not tainted syzkaller #0 [ 451.909903][T13030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 451.919987][T13030] Call Trace: [ 451.923287][T13030] [ 451.926218][T13030] dump_stack_lvl+0x18c/0x250 [ 451.930895][T13030] ? show_regs_print_info+0x20/0x20 [ 451.936095][T13030] ? load_image+0x420/0x420 [ 451.940602][T13030] ? __might_sleep+0xe0/0xe0 [ 451.945190][T13030] ? __lock_acquire+0x7d80/0x7d80 [ 451.950216][T13030] should_fail_ex+0x394/0x4c0 [ 451.956333][T13030] should_failslab+0x9/0x20 [ 451.961721][T13030] slab_pre_alloc_hook+0x59/0x300 [ 451.966758][T13030] ? tomoyo_encode+0x2ad/0x570 [ 451.971530][T13030] ? tomoyo_encode+0x2ad/0x570 [ 451.976300][T13030] __kmem_cache_alloc_node+0x53/0x250 [ 451.981683][T13030] ? tomoyo_encode+0x2ad/0x570 [ 451.986452][T13030] __kmalloc+0xa7/0x240 [ 451.990607][T13030] tomoyo_encode+0x2ad/0x570 [ 451.995198][T13030] tomoyo_realpath_from_path+0x57c/0x5c0 [ 452.000832][T13030] ? tomoyo_domain+0xd6/0x120 [ 452.005512][T13030] tomoyo_path_number_perm+0x248/0x5e0 [ 452.010974][T13030] ? tomoyo_path_number_perm+0x217/0x5e0 [ 452.016614][T13030] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 452.022074][T13030] ? ksys_write+0x1d2/0x260 [ 452.026597][T13030] ? __fget_files+0x28/0x460 [ 452.031194][T13030] security_file_ioctl+0x70/0xa0 [ 452.036131][T13030] __se_sys_ioctl+0x48/0x170 [ 452.040717][T13030] do_syscall_64+0x55/0xb0 [ 452.045129][T13030] ? clear_bhb_loop+0x40/0x90 [ 452.049796][T13030] ? clear_bhb_loop+0x40/0x90 [ 452.054470][T13030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.060354][T13030] RIP: 0033:0x7f75be79e019 [ 452.064764][T13030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.084365][T13030] RSP: 002b:00007f75bf710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.092782][T13030] RAX: ffffffffffffffda RBX: 00007f75bea25fa0 RCX: 00007f75be79e019 [ 452.100747][T13030] RDX: 0000200000000900 RSI: 00000000000089fa RDI: 0000000000000004 [ 452.108712][T13030] RBP: 00007f75bf710090 R08: 0000000000000000 R09: 0000000000000000 [ 452.116678][T13030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.124641][T13030] R13: 00007f75bea26038 R14: 00007f75bea25fa0 R15: 00007fff2c28bbd8 [ 452.132617][T13030] [ 452.192999][T13030] ERROR: Out of memory at tomoyo_realpath_from_path. [ 452.246259][ T5090] Bluetooth: hci4: command tx timeout [ 452.371038][T12961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.797618][T13052] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2435'. [ 453.091334][T12961] veth0_vlan: entered promiscuous mode [ 453.121264][T12961] veth1_vlan: entered promiscuous mode [ 453.188310][T12961] veth0_macvtap: entered promiscuous mode [ 453.214021][T12961] veth1_macvtap: entered promiscuous mode [ 453.259502][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.288889][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.312516][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.332782][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.352649][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.372852][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.384409][T12961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.414662][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.451473][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.464281][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.475226][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.486283][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.497744][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.509896][T12961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.531512][T12961] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.551373][T12961] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.562903][T12961] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.582778][T12961] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.915408][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.940944][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.016763][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.025362][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.324610][ T5090] Bluetooth: hci4: command tx timeout [ 454.419887][T13087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.440892][T13087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.512389][T13087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.532291][T13087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.385932][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 455.397875][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 455.406210][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 455.426349][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 455.442235][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 455.459837][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 455.644429][ T5775] bond0: (slave syz_tun): Releasing backup interface [ 455.858079][ T2974] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.982278][ T2974] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.088832][ T2974] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.201876][ T2974] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.288175][T13131] FAULT_INJECTION: forcing a failure. [ 456.288175][T13131] name failslab, interval 1, probability 0, space 0, times 0 [ 456.305042][T13131] CPU: 0 PID: 13131 Comm: syz.3.2460 Not tainted syzkaller #0 [ 456.312558][T13131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.322629][T13131] Call Trace: [ 456.325917][T13131] [ 456.328856][T13131] dump_stack_lvl+0x18c/0x250 [ 456.333554][T13131] ? show_regs_print_info+0x20/0x20 [ 456.338779][T13131] ? load_image+0x420/0x420 [ 456.343311][T13131] ? __might_sleep+0xe0/0xe0 [ 456.347924][T13131] ? __lock_acquire+0x7d80/0x7d80 [ 456.352975][T13131] should_fail_ex+0x394/0x4c0 [ 456.357685][T13131] should_failslab+0x9/0x20 [ 456.362243][T13131] slab_pre_alloc_hook+0x59/0x300 [ 456.367287][T13131] ? __mutex_lock+0x30d/0xc80 [ 456.371992][T13131] ? bpf_trampoline_update+0x79/0x11c0 [ 456.377468][T13131] __kmem_cache_alloc_node+0x53/0x250 [ 456.382863][T13131] ? bpf_trampoline_update+0x79/0x11c0 [ 456.388341][T13131] kmalloc_trace+0x2a/0xe0 [ 456.392780][T13131] bpf_trampoline_update+0x79/0x11c0 [ 456.398077][T13131] ? __lock_acquire+0x7d80/0x7d80 [ 456.403119][T13131] ? __local_bh_enable_ip+0x13a/0x1c0 [ 456.408515][T13131] bpf_trampoline_link_prog+0x4e6/0x6e0 [ 456.414100][T13131] bpf_tracing_prog_attach+0xaa3/0xf00 [ 456.419589][T13131] ? bpf_raw_tp_link_attach+0x590/0x590 [ 456.425170][T13131] bpf_raw_tp_link_attach+0x3e3/0x590 [ 456.430566][T13131] ? bpf_insn_prepare_dump+0x850/0x850 [ 456.436077][T13131] bpf_raw_tracepoint_open+0x195/0x210 [ 456.441554][T13131] __sys_bpf+0x3c5/0x890 [ 456.445834][T13131] ? bpf_link_show_fdinfo+0x390/0x390 [ 456.451235][T13131] ? lock_chain_count+0x20/0x20 [ 456.456113][T13131] __x64_sys_bpf+0x7c/0x90 [ 456.460544][T13131] do_syscall_64+0x55/0xb0 [ 456.464974][T13131] ? clear_bhb_loop+0x40/0x90 [ 456.469662][T13131] ? clear_bhb_loop+0x40/0x90 [ 456.474357][T13131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.480269][T13131] RIP: 0033:0x7fd153b9e019 [ 456.484731][T13131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.504364][T13131] RSP: 002b:00007fd1549f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 456.512808][T13131] RAX: ffffffffffffffda RBX: 00007fd153e25fa0 RCX: 00007fd153b9e019 [ 456.520791][T13131] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 456.528774][T13131] RBP: 00007fd1549f5090 R08: 0000000000000000 R09: 0000000000000000 [ 456.536760][T13131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.544755][T13131] R13: 00007fd153e26038 R14: 00007fd153e25fa0 R15: 00007ffdec287d58 [ 456.552762][T13131] [ 456.562479][ T5090] Bluetooth: hci4: command tx timeout [ 457.169059][T13146] veth0_vlan: entered allmulticast mode [ 457.536452][ T5090] Bluetooth: hci5: command tx timeout [ 457.735095][T13154] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.743620][T13154] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.766713][T13154] bridge0: entered allmulticast mode [ 457.876375][T13156] bridge_slave_1: left allmulticast mode [ 457.882092][T13156] bridge_slave_1: left promiscuous mode [ 457.894007][T13156] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.928256][T13156] bridge_slave_0: left allmulticast mode [ 457.946619][T13156] bridge_slave_0: left promiscuous mode [ 457.992642][T13156] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.080811][T13176] netlink: set zone limit has 8 unknown bytes [ 458.236177][T13108] chnl_net:caif_netlink_parms(): no params data found [ 458.651468][T13108] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.675854][T13108] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.688340][T13108] bridge_slave_0: entered allmulticast mode [ 458.697436][T13108] bridge_slave_0: entered promiscuous mode [ 458.765094][T13108] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.776780][T13108] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.784844][T13108] bridge_slave_1: entered allmulticast mode [ 458.791789][T13108] bridge_slave_1: entered promiscuous mode [ 458.851350][T13108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.879634][T13108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.031739][T13205] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.2472'. [ 459.053223][T13108] team0: Port device team_slave_0 added [ 459.101986][T13108] team0: Port device team_slave_1 added [ 459.231789][T13108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.245028][T13108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.305579][T13108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.350722][T13108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.361514][T13108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.400275][T13108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.511907][T13223] FAULT_INJECTION: forcing a failure. [ 459.511907][T13223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.531045][T13108] hsr_slave_0: entered promiscuous mode [ 459.531521][T13223] CPU: 0 PID: 13223 Comm: syz.0.2475 Not tainted syzkaller #0 [ 459.544105][T13223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 459.554183][T13223] Call Trace: [ 459.557479][T13223] [ 459.560433][T13223] dump_stack_lvl+0x18c/0x250 [ 459.565141][T13223] ? show_regs_print_info+0x20/0x20 [ 459.570365][T13223] ? load_image+0x420/0x420 [ 459.574902][T13223] ? __might_fault+0xaa/0x120 [ 459.579602][T13223] ? __lock_acquire+0x7d80/0x7d80 [ 459.584653][T13223] ? __virt_addr_valid+0x10c/0x380 [ 459.589796][T13223] should_fail_ex+0x394/0x4c0 [ 459.594499][T13223] _copy_from_user+0x2f/0xe0 [ 459.599116][T13223] ____sys_sendmsg+0x329/0x980 [ 459.602525][ T5090] Bluetooth: hci5: command tx timeout [ 459.603891][T13223] ? __sys_sendmsg_sock+0x30/0x30 [ 459.614303][T13223] ? __import_iovec+0x3fa/0x850 [ 459.619187][T13223] ? import_iovec+0x73/0xa0 [ 459.623733][T13223] ___sys_sendmsg+0x2a6/0x360 [ 459.628429][T13223] ? get_pid_task+0x20/0x1e0 [ 459.633572][T13223] ? __sys_sendmsg+0x2b0/0x2b0 [ 459.638379][T13223] ? __lock_acquire+0x7d80/0x7d80 [ 459.643450][T13223] __se_sys_sendmsg+0x1d0/0x2c0 [ 459.648330][T13223] ? __x64_sys_sendmsg+0x80/0x80 [ 459.653307][T13223] ? lockdep_hardirqs_on+0x98/0x150 [ 459.658543][T13223] do_syscall_64+0x55/0xb0 [ 459.662984][T13223] ? clear_bhb_loop+0x40/0x90 [ 459.667676][T13223] ? clear_bhb_loop+0x40/0x90 [ 459.672349][T13223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.678240][T13223] RIP: 0033:0x7f75be79e019 [ 459.682674][T13223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.702292][T13223] RSP: 002b:00007f75bf710028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.710698][T13223] RAX: ffffffffffffffda RBX: 00007f75bea25fa0 RCX: 00007f75be79e019 [ 459.718678][T13223] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 459.726641][T13223] RBP: 00007f75bf710090 R08: 0000000000000000 R09: 0000000000000000 [ 459.734603][T13223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.742589][T13223] R13: 00007f75bea26038 R14: 00007f75bea25fa0 R15: 00007fff2c28bbd8 [ 459.750577][T13223] [ 459.755246][T13108] hsr_slave_1: entered promiscuous mode [ 459.774861][T13108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.782580][T13108] Cannot create hsr debugfs directory [ 461.308252][ T2974] hsr_slave_0: left promiscuous mode [ 461.320799][ T2974] hsr_slave_1: left promiscuous mode [ 461.383340][ T2974] veth1_macvtap: left promiscuous mode [ 461.397712][ T2974] veth0_macvtap: left promiscuous mode [ 461.684546][ T5090] Bluetooth: hci5: command tx timeout [ 462.531562][ T2974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.577775][ T2974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.638331][ T2974] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 462.819615][ T2974] bond0 (unregistering): Released all slaves [ 462.927571][T13264] netlink: 'syz.0.2483': attribute type 10 has an invalid length. [ 462.942658][T13264] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.957170][T13264] bridge_slave_1: left allmulticast mode [ 462.963660][T13264] bridge_slave_1: left promiscuous mode [ 462.970728][T13264] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.981489][T13264] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 463.270679][T13286] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.2489'. [ 463.388674][T13108] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 463.452593][T13108] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 463.519666][T13108] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 463.575305][T13304] FAULT_INJECTION: forcing a failure. [ 463.575305][T13304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.614227][T13108] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 463.662705][T13304] CPU: 0 PID: 13304 Comm: syz.4.2493 Not tainted syzkaller #0 [ 463.670243][T13304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 463.680349][T13304] Call Trace: [ 463.683680][T13304] [ 463.686656][T13304] dump_stack_lvl+0x18c/0x250 [ 463.691399][T13304] ? show_regs_print_info+0x20/0x20 [ 463.696649][T13304] ? load_image+0x420/0x420 [ 463.701210][T13304] ? __might_fault+0xaa/0x120 [ 463.705940][T13304] ? __lock_acquire+0x7d80/0x7d80 [ 463.711045][T13304] should_fail_ex+0x394/0x4c0 [ 463.715804][T13304] _copy_from_user+0x2f/0xe0 [ 463.720451][T13304] ___sys_sendmsg+0x1c7/0x360 [ 463.725174][T13304] ? __sys_sendmsg+0x2b0/0x2b0 [ 463.729999][T13304] ? __lock_acquire+0x7d80/0x7d80 [ 463.735093][T13304] __se_sys_sendmsg+0x1d0/0x2c0 [ 463.739967][T13304] ? __x64_sys_sendmsg+0x80/0x80 [ 463.744947][T13304] ? lockdep_hardirqs_on+0x98/0x150 [ 463.750167][T13304] do_syscall_64+0x55/0xb0 [ 463.754589][T13304] ? clear_bhb_loop+0x40/0x90 [ 463.759273][T13304] ? clear_bhb_loop+0x40/0x90 [ 463.763969][T13304] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.769897][T13304] RIP: 0033:0x7f35e179e019 [ 463.774336][T13304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.794035][T13304] RSP: 002b:00007f35e2728028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.802481][T13304] RAX: ffffffffffffffda RBX: 00007f35e1a25fa0 RCX: 00007f35e179e019 [ 463.810471][T13304] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 463.818449][T13304] RBP: 00007f35e2728090 R08: 0000000000000000 R09: 0000000000000000 [ 463.826439][T13304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.834431][T13304] R13: 00007f35e1a26038 R14: 00007f35e1a25fa0 R15: 00007ffead6d8228 [ 463.842462][T13304] [ 463.871420][ T5090] Bluetooth: hci5: command tx timeout [ 464.190166][T13108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.259874][T13108] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.313802][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.321072][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.384137][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.391329][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.412953][ T5090] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 465.228755][T13350] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 465.409048][T13108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.427144][T13358] FAULT_INJECTION: forcing a failure. [ 465.427144][T13358] name failslab, interval 1, probability 0, space 0, times 0 [ 465.462710][T13358] CPU: 0 PID: 13358 Comm: syz.3.2508 Not tainted syzkaller #0 [ 465.470227][T13358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.480391][T13358] Call Trace: [ 465.483692][T13358] [ 465.486644][T13358] dump_stack_lvl+0x18c/0x250 [ 465.491352][T13358] ? show_regs_print_info+0x20/0x20 [ 465.496583][T13358] ? load_image+0x420/0x420 [ 465.501124][T13358] ? __might_sleep+0xe0/0xe0 [ 465.505741][T13358] ? __lock_acquire+0x7d80/0x7d80 [ 465.510793][T13358] should_fail_ex+0x394/0x4c0 [ 465.515505][T13358] should_failslab+0x9/0x20 [ 465.520031][T13358] slab_pre_alloc_hook+0x59/0x300 [ 465.525085][T13358] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 465.525400][T13108] veth0_vlan: entered promiscuous mode [ 465.530816][T13358] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 465.530852][T13358] __kmem_cache_alloc_node+0x53/0x250 [ 465.530881][T13358] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 465.553210][T13358] __kmalloc+0xa7/0x240 [ 465.557398][T13358] tomoyo_realpath_from_path+0xe6/0x5c0 [ 465.562975][T13358] ? tomoyo_domain+0xd6/0x120 [ 465.567682][T13358] tomoyo_path_number_perm+0x248/0x5e0 [ 465.571200][T13108] veth1_vlan: entered promiscuous mode [ 465.573156][T13358] ? tomoyo_path_number_perm+0x217/0x5e0 [ 465.573184][T13358] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 465.573207][T13358] ? ksys_write+0x1d2/0x260 [ 465.573259][T13358] ? __fget_files+0x28/0x460 [ 465.598892][T13358] security_file_ioctl+0x70/0xa0 [ 465.603872][T13358] __se_sys_ioctl+0x48/0x170 [ 465.608500][T13358] do_syscall_64+0x55/0xb0 [ 465.612956][T13358] ? clear_bhb_loop+0x40/0x90 [ 465.617659][T13358] ? clear_bhb_loop+0x40/0x90 [ 465.622374][T13358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.625868][T13108] veth0_macvtap: entered promiscuous mode [ 465.628271][T13358] RIP: 0033:0x7fd153b9e019 [ 465.638399][T13358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.658018][T13358] RSP: 002b:00007fd1549f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.666433][T13358] RAX: ffffffffffffffda RBX: 00007fd153e25fa0 RCX: 00007fd153b9e019 [ 465.674401][T13358] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000003 [ 465.682365][T13358] RBP: 00007fd1549f5090 R08: 0000000000000000 R09: 0000000000000000 [ 465.690337][T13358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.698392][T13358] R13: 00007fd153e26038 R14: 00007fd153e25fa0 R15: 00007ffdec287d58 [ 465.706375][T13358] [ 465.728335][T13108] veth1_macvtap: entered promiscuous mode [ 465.737687][T13358] ERROR: Out of memory at tomoyo_realpath_from_path. [ 465.782207][T13108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.829010][T13108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.851047][T13108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.873192][T13108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.889698][T13108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.912476][T13108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.930090][T13108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.967608][T13108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.978478][T13108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.990668][T13108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.032705][T13108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.058341][T13108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.076972][T13108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.107764][T13108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.155209][T13108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.185182][T13377] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2512'. [ 466.192554][T13108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.211186][T13108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.221589][T13108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.468358][ T2912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.489954][T13387] FAULT_INJECTION: forcing a failure. [ 466.489954][T13387] name failslab, interval 1, probability 0, space 0, times 0 [ 466.519520][ T2912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.535054][T13387] CPU: 0 PID: 13387 Comm: syz.3.2515 Not tainted syzkaller #0 [ 466.542569][T13387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 466.552647][T13387] Call Trace: [ 466.555961][T13387] [ 466.558932][T13387] dump_stack_lvl+0x18c/0x250 [ 466.563632][T13387] ? show_regs_print_info+0x20/0x20 [ 466.568853][T13387] ? load_image+0x420/0x420 [ 466.573369][T13387] ? __might_sleep+0xe0/0xe0 [ 466.577965][T13387] ? __lock_acquire+0x7d80/0x7d80 [ 466.582997][T13387] should_fail_ex+0x394/0x4c0 [ 466.587676][T13387] should_failslab+0x9/0x20 [ 466.592179][T13387] slab_pre_alloc_hook+0x59/0x300 [ 466.597210][T13387] ? tomoyo_encode+0x2ad/0x570 [ 466.601977][T13387] ? tomoyo_encode+0x2ad/0x570 [ 466.606735][T13387] __kmem_cache_alloc_node+0x53/0x250 [ 466.612110][T13387] ? tomoyo_encode+0x2ad/0x570 [ 466.616870][T13387] __kmalloc+0xa7/0x240 [ 466.621029][T13387] tomoyo_encode+0x2ad/0x570 [ 466.625622][T13387] tomoyo_realpath_from_path+0x57c/0x5c0 [ 466.631250][T13387] ? tomoyo_domain+0xd6/0x120 [ 466.635927][T13387] tomoyo_path_number_perm+0x248/0x5e0 [ 466.641383][T13387] ? tomoyo_path_number_perm+0x217/0x5e0 [ 466.647018][T13387] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 466.652485][T13387] ? ksys_write+0x1d2/0x260 [ 466.657012][T13387] ? __fget_files+0x28/0x460 [ 466.661607][T13387] security_file_ioctl+0x70/0xa0 [ 466.666541][T13387] __se_sys_ioctl+0x48/0x170 [ 466.671128][T13387] do_syscall_64+0x55/0xb0 [ 466.675536][T13387] ? clear_bhb_loop+0x40/0x90 [ 466.680202][T13387] ? clear_bhb_loop+0x40/0x90 [ 466.684882][T13387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.690767][T13387] RIP: 0033:0x7fd153b9e019 [ 466.695179][T13387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.714776][T13387] RSP: 002b:00007fd1549f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 466.723206][T13387] RAX: ffffffffffffffda RBX: 00007fd153e25fa0 RCX: 00007fd153b9e019 [ 466.731169][T13387] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006 [ 466.739138][T13387] RBP: 00007fd1549f5090 R08: 0000000000000000 R09: 0000000000000000 [ 466.747103][T13387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.755067][T13387] R13: 00007fd153e26038 R14: 00007fd153e25fa0 R15: 00007ffdec287d58 [ 466.763041][T13387] [ 466.799437][T13387] ERROR: Out of memory at tomoyo_realpath_from_path. [ 466.807595][ T2912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.817345][ T2912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.148071][T13405] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2447'. [ 467.179394][T13403] netlink: 'syz.3.2518': attribute type 21 has an invalid length. [ 467.204938][T13403] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2518'. [ 467.924986][ T2998] wlan1: Trigger new scan to find an IBSS to join [ 469.281784][T13464] netlink: 'syz.0.2532': attribute type 19 has an invalid length. [ 470.416392][T13504] netlink: 'syz.4.2541': attribute type 21 has an invalid length. [ 470.502166][T13504] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2541'. [ 472.575298][T13526] netlink: 'syz.0.2547': attribute type 1 has an invalid length. [ 472.592633][T13526] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2547'. [ 472.897375][ T2998] wlan1: Trigger new scan to find an IBSS to join [ 473.643104][T13560] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2558'. [ 474.310778][ T12] wlan1: Creating new IBSS network, BSSID 22:ad:4c:8a:f4:a8 [ 474.486377][T13571] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2562'. [ 476.462559][T13607] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2575'. [ 476.628690][T13616] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2580'. [ 476.664158][T13616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.700176][T13640] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2588'. [ 477.747139][T13640] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2588'. [ 478.611368][T13650] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2592'. [ 478.681727][T13650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 479.022674][T13662] FAULT_INJECTION: forcing a failure. [ 479.022674][T13662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.039576][T13662] CPU: 1 PID: 13662 Comm: syz.0.2597 Not tainted syzkaller #0 [ 479.047078][T13662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 479.057152][T13662] Call Trace: [ 479.060447][T13662] [ 479.063395][T13662] dump_stack_lvl+0x18c/0x250 [ 479.068142][T13662] ? show_regs_print_info+0x20/0x20 [ 479.073354][T13662] ? load_image+0x420/0x420 [ 479.077884][T13662] ? __might_fault+0xaa/0x120 [ 479.082554][T13662] ? __lock_acquire+0x7d80/0x7d80 [ 479.087573][T13662] should_fail_ex+0x394/0x4c0 [ 479.092247][T13662] _copy_to_user+0x2f/0xa0 [ 479.096656][T13662] bpf_test_finish+0x4e7/0x650 [ 479.101549][T13662] ? bpf_test_run+0x174/0x870 [ 479.106221][T13662] ? convert_skb_to___skb+0x420/0x420 [ 479.111596][T13662] bpf_prog_test_run_skb+0x1135/0x18f0 [ 479.117060][T13662] ? cpu_online+0x60/0x60 [ 479.121385][T13662] bpf_prog_test_run+0x31f/0x390 [ 479.126318][T13662] __sys_bpf+0x49d/0x890 [ 479.130554][T13662] ? bpf_link_show_fdinfo+0x390/0x390 [ 479.135924][T13662] ? lock_chain_count+0x20/0x20 [ 479.140773][T13662] __x64_sys_bpf+0x7c/0x90 [ 479.145189][T13662] do_syscall_64+0x55/0xb0 [ 479.149607][T13662] ? clear_bhb_loop+0x40/0x90 [ 479.154378][T13662] ? clear_bhb_loop+0x40/0x90 [ 479.159049][T13662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.164933][T13662] RIP: 0033:0x7f75be79e019 [ 479.169339][T13662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.188944][T13662] RSP: 002b:00007f75bf710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 479.197349][T13662] RAX: ffffffffffffffda RBX: 00007f75bea25fa0 RCX: 00007f75be79e019 [ 479.205312][T13662] RDX: 0000000000000050 RSI: 00002000000007c0 RDI: 000000000000000a [ 479.213275][T13662] RBP: 00007f75bf710090 R08: 0000000000000000 R09: 0000000000000000 [ 479.221233][T13662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.229192][T13662] R13: 00007f75bea26038 R14: 00007f75bea25fa0 R15: 00007fff2c28bbd8 [ 479.237166][T13662] [ 479.616746][T13676] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2600'. [ 480.747450][T13691] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2605'. [ 480.776970][T13691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 480.811846][T13698] netlink: 'syz.1.2608': attribute type 29 has an invalid length. [ 480.823162][T13698] netlink: 'syz.1.2608': attribute type 29 has an invalid length. [ 480.837708][T13695] netlink: 'syz.1.2608': attribute type 29 has an invalid length. [ 480.985136][T13702] netlink: 'syz.4.2609': attribute type 21 has an invalid length. [ 481.004616][T13702] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2609'. [ 481.032029][T13702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2609'. [ 481.358997][T13708] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2610'. [ 481.386550][T13708] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2610'. [ 482.107381][T13708] bond0: (slave bond_slave_0): Releasing backup interface [ 482.129929][T13708] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 482.220875][T13699] delete_channel: no stack [ 482.636319][T13736] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2621'. [ 482.720674][T13736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 483.174756][T13763] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2626'. [ 483.416667][T13774] syz.0.2631 (13774) used obsolete PPPIOCDETACH ioctl [ 487.885017][T13837] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2654'. [ 488.921304][T13881] netlink: 'syz.3.2673': attribute type 10 has an invalid length. [ 488.945034][T13881] hsr0: entered promiscuous mode [ 488.988400][T13881] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 489.010122][T13881] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 489.023363][T13881] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 489.040354][T13881] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 489.939581][T13920] netlink: 'syz.0.2688': attribute type 25 has an invalid length. [ 490.435199][T13941] netlink: 'syz.1.2699': attribute type 2 has an invalid length. [ 490.472924][T13941] netlink: 'syz.1.2699': attribute type 1 has an invalid length. [ 490.499670][T13941] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2699'. [ 491.048715][T13961] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2707'. [ 491.058341][T13961] FAULT_INJECTION: forcing a failure. [ 491.058341][T13961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.081242][T13961] CPU: 1 PID: 13961 Comm: syz.1.2707 Not tainted syzkaller #0 [ 491.088765][T13961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 491.098851][T13961] Call Trace: [ 491.102153][T13961] [ 491.105096][T13961] dump_stack_lvl+0x18c/0x250 [ 491.109840][T13961] ? show_regs_print_info+0x20/0x20 [ 491.115069][T13961] ? load_image+0x420/0x420 [ 491.119620][T13961] ? __lock_acquire+0x7d80/0x7d80 [ 491.124682][T13961] ? snprintf+0xe9/0x140 [ 491.128961][T13961] should_fail_ex+0x394/0x4c0 [ 491.133648][T13961] _copy_to_user+0x2f/0xa0 [ 491.138068][T13961] simple_read_from_buffer+0xe7/0x150 [ 491.143441][T13961] proc_fail_nth_read+0x1e8/0x260 [ 491.148474][T13961] ? proc_fault_inject_write+0x360/0x360 [ 491.154111][T13961] ? fsnotify_perm+0x271/0x5e0 [ 491.158870][T13961] ? proc_fault_inject_write+0x360/0x360 [ 491.164501][T13961] vfs_read+0x298/0x990 [ 491.168670][T13961] ? kernel_read+0x1e0/0x1e0 [ 491.173258][T13961] ? __fget_files+0x28/0x460 [ 491.177846][T13961] ? __fget_files+0x3fc/0x460 [ 491.182536][T13961] ? __fdget_pos+0x2a3/0x330 [ 491.187126][T13961] ? ksys_read+0x74/0x260 [ 491.191457][T13961] ksys_read+0x151/0x260 [ 491.195699][T13961] ? vfs_write+0x9a0/0x9a0 [ 491.200118][T13961] ? lockdep_hardirqs_on+0x98/0x150 [ 491.205321][T13961] do_syscall_64+0x55/0xb0 [ 491.209736][T13961] ? clear_bhb_loop+0x40/0x90 [ 491.214411][T13961] ? clear_bhb_loop+0x40/0x90 [ 491.219083][T13961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.224969][T13961] RIP: 0033:0x7f2c46b5e84e [ 491.229400][T13961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 491.249009][T13961] RSP: 002b:00007f2c47b21fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 491.257453][T13961] RAX: ffffffffffffffda RBX: 00007f2c47b226c0 RCX: 00007f2c46b5e84e [ 491.265415][T13961] RDX: 000000000000000f RSI: 00007f2c47b220a0 RDI: 0000000000000004 [ 491.273383][T13961] RBP: 00007f2c47b22090 R08: 0000000000000000 R09: 0000000000000000 [ 491.281355][T13961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 491.289331][T13961] R13: 00007f2c46e26038 R14: 00007f2c46e25fa0 R15: 00007ffd5b4d2048 [ 491.297317][T13961] [ 492.913218][T14005] netlink: 'syz.4.2724': attribute type 1 has an invalid length. [ 492.931078][T14005] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2724'. [ 496.523316][T14042] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2738'. [ 497.473156][T14077] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2752'. [ 498.264720][T14105] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2764'. [ 498.457729][T14111] netlink: 'syz.1.2765': attribute type 1 has an invalid length. [ 498.479336][T14111] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2765'. [ 499.279548][T14142] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2776'. [ 500.525980][T14171] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2787'. [ 500.794719][T14191] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2793'. [ 501.528456][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.534879][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.628000][T14212] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2801'. [ 503.389373][T14251] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2815'. [ 503.902898][T14231] delete_channel: no stack [ 504.338706][ T2980] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 506.728852][T14286] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2826'. [ 506.748517][T14286] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2826'. [ 507.330166][T14293] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2829'. [ 507.526293][T14286] bond0: (slave bond_slave_0): Releasing backup interface [ 507.624129][T14286] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 507.737062][T14280] delete_channel: no stack [ 507.795584][T14300] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2831'. [ 508.391410][T14322] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2840'. [ 509.317050][T14325] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2841'. [ 509.758893][T14348] syzkaller0: entered promiscuous mode [ 509.766474][T14348] syzkaller0: entered allmulticast mode [ 510.000358][T14354] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2852'. [ 510.030311][T14323] delete_channel: no stack [ 510.878366][T14369] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2850'. [ 510.914111][T14369] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2850'. [ 511.008508][T14348] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2850'. [ 513.693093][T14390] __nla_validate_parse: 1 callbacks suppressed [ 513.693110][T14390] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2862'. [ 515.189542][T14392] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2861'. [ 515.199925][T14392] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2861'. [ 515.211975][T14392] bond0: (slave bond_slave_0): Releasing backup interface [ 515.237143][T14392] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 515.302926][T14383] delete_channel: no stack [ 515.947411][T14418] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2872'. [ 516.208414][T14427] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2875'. [ 516.231455][T14420] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2873'. [ 516.486502][T14437] IPv6: NLM_F_CREATE should be specified when creating new route [ 516.709314][T14442] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2883'. [ 516.981728][T14423] delete_channel: no stack [ 519.238352][T14470] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2893'. [ 519.294882][T14470] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2893'. [ 519.334565][T14470] bond0: (slave bond_slave_0): Releasing backup interface [ 519.360449][T14470] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 519.421702][T14472] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2894'. [ 523.426270][T14466] delete_channel: no stack [ 523.940040][T14489] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2896'. [ 524.797705][T14498] netlink: 'syz.4.2904': attribute type 1 has an invalid length. [ 524.826411][T14498] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.2904'. [ 525.285373][T14506] netlink: 'syz.3.2907': attribute type 10 has an invalid length. [ 525.826871][T14506] team0: Device wg1 is of different type [ 525.904111][T14513] netlink: 'syz.4.2909': attribute type 10 has an invalid length. [ 526.000170][T14513] team0: Port device wlan1 added [ 526.159824][T14519] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2912'. [ 526.445534][T14527] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.2916'. [ 526.515258][T14529] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.2916'. [ 527.853753][T14549] netlink: 'syz.0.2922': attribute type 10 has an invalid length. [ 527.946061][T14549] team0: Device wg1 is of different type [ 528.081370][T14552] netlink: 'syz.4.2925': attribute type 10 has an invalid length. [ 528.209119][T14552] team0: Device wg1 is of different type [ 528.900356][T14558] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2926'. [ 528.921432][T14563] FAULT_INJECTION: forcing a failure. [ 528.921432][T14563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.012544][T14563] CPU: 1 PID: 14563 Comm: syz.3.2927 Not tainted syzkaller #0 [ 529.020081][T14563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 529.030156][T14563] Call Trace: [ 529.033449][T14563] [ 529.036393][T14563] dump_stack_lvl+0x18c/0x250 [ 529.041093][T14563] ? show_regs_print_info+0x20/0x20 [ 529.046314][T14563] ? load_image+0x420/0x420 [ 529.050843][T14563] ? __lock_acquire+0x7d80/0x7d80 [ 529.055892][T14563] should_fail_ex+0x394/0x4c0 [ 529.060594][T14563] _copy_from_user+0x2f/0xe0 [ 529.065205][T14563] bpf_prog_test_run_skb+0x267/0x18f0 [ 529.070615][T14563] ? __fget_files+0x28/0x460 [ 529.075232][T14563] ? __fget_files+0x3fc/0x460 [ 529.079939][T14563] ? cpu_online+0x60/0x60 [ 529.084283][T14563] bpf_prog_test_run+0x31f/0x390 [ 529.089239][T14563] __sys_bpf+0x49d/0x890 [ 529.093509][T14563] ? bpf_link_show_fdinfo+0x390/0x390 [ 529.098914][T14563] ? lock_chain_count+0x20/0x20 [ 529.103794][T14563] __x64_sys_bpf+0x7c/0x90 [ 529.108229][T14563] do_syscall_64+0x55/0xb0 [ 529.112660][T14563] ? clear_bhb_loop+0x40/0x90 [ 529.117352][T14563] ? clear_bhb_loop+0x40/0x90 [ 529.122044][T14563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 529.127951][T14563] RIP: 0033:0x7fd153b9e019 [ 529.132378][T14563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.152007][T14563] RSP: 002b:00007fd1549f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 529.160443][T14563] RAX: ffffffffffffffda RBX: 00007fd153e25fa0 RCX: 00007fd153b9e019 [ 529.168430][T14563] RDX: 0000000000000022 RSI: 00002000000000c0 RDI: 000000000000000a [ 529.176416][T14563] RBP: 00007fd1549f5090 R08: 0000000000000000 R09: 0000000000000000 [ 529.184399][T14563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.192379][T14563] R13: 00007fd153e26038 R14: 00007fd153e25fa0 R15: 00007ffdec287d58 [ 529.200378][T14563] [ 532.439123][T14596] FAULT_INJECTION: forcing a failure. [ 532.439123][T14596] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 532.475247][T14596] CPU: 0 PID: 14596 Comm: syz.3.2940 Not tainted syzkaller #0 [ 532.482773][T14596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 532.492850][T14596] Call Trace: [ 532.496143][T14596] [ 532.499097][T14596] dump_stack_lvl+0x18c/0x250 [ 532.503800][T14596] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.509976][T14596] ? show_regs_print_info+0x20/0x20 [ 532.515197][T14596] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.521385][T14596] should_fail_ex+0x394/0x4c0 [ 532.526097][T14596] prepare_alloc_pages+0x1e1/0x5b0 [ 532.531238][T14596] __alloc_pages+0x134/0x460 [ 532.535850][T14596] ? zone_statistics+0x170/0x170 [ 532.540818][T14596] ? alloc_pages+0x4e1/0x740 [ 532.545428][T14596] ? do_raw_spin_unlock+0x121/0x230 [ 532.550661][T14596] __get_free_pages+0xc/0x30 [ 532.555270][T14596] kasan_populate_vmalloc_pte+0x35/0x100 [ 532.560931][T14596] __apply_to_page_range+0x860/0xdd0 [ 532.566266][T14596] ? kasan_populate_vmalloc+0x70/0x70 [ 532.571671][T14596] ? apply_to_page_range+0x50/0x50 [ 532.576808][T14596] ? do_raw_spin_unlock+0x121/0x230 [ 532.582032][T14596] alloc_vmap_area+0x1d26/0x1e50 [ 532.587020][T14596] ? vm_map_ram+0xcf0/0xcf0 [ 532.591548][T14596] ? rcu_is_watching+0x15/0xb0 [ 532.596341][T14596] __get_vm_area_node+0x162/0x370 [ 532.601412][T14596] __vmalloc_node_range+0x36f/0x1320 [ 532.606732][T14596] ? dev_map_alloc+0x1f6/0x4c0 [ 532.611538][T14596] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.617723][T14596] ? free_vm_area+0x50/0x50 [ 532.622262][T14596] bpf_map_area_alloc+0xf1/0x110 [ 532.627225][T14596] ? dev_map_alloc+0x1f6/0x4c0 [ 532.632009][T14596] dev_map_alloc+0x1f6/0x4c0 [ 532.636622][T14596] map_create+0x877/0x12f0 [ 532.641059][T14596] ? __sanitizer_cov_trace_switch+0x65/0xe0 [ 532.646976][T14596] __sys_bpf+0x651/0x890 [ 532.651237][T14596] ? trace_irq_disable+0x37/0xe0 [ 532.656201][T14596] ? bpf_link_show_fdinfo+0x390/0x390 [ 532.661603][T14596] __x64_sys_bpf+0x7c/0x90 [ 532.666034][T14596] do_syscall_64+0x55/0xb0 [ 532.670557][T14596] ? clear_bhb_loop+0x40/0x90 [ 532.675248][T14596] ? clear_bhb_loop+0x40/0x90 [ 532.679926][T14596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 532.685813][T14596] RIP: 0033:0x7fd153b9e019 [ 532.690223][T14596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.709824][T14596] RSP: 002b:00007fd1549f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 532.718235][T14596] RAX: ffffffffffffffda RBX: 00007fd153e25fa0 RCX: 00007fd153b9e019 [ 532.726201][T14596] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 0000000000000000 [ 532.734184][T14596] RBP: 00007fd1549f5090 R08: 0000000000000000 R09: 0000000000000000 [ 532.742146][T14596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.750106][T14596] R13: 00007fd153e26038 R14: 00007fd153e25fa0 R15: 00007ffdec287d58 [ 532.758083][T14596] [ 536.201349][T14620] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2951'. [ 536.397436][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 536.557032][T14634] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2957'. [ 536.650087][T14634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.691301][T14634] bond0 (unregistering): Released all slaves [ 540.597520][T14675] netlink: 'syz.4.2973': attribute type 1 has an invalid length. [ 540.606492][T14675] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.2973'. [ 543.539348][T14689] netlink: 'syz.3.2979': attribute type 27 has an invalid length. [ 543.559678][T14689] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2979'. [ 543.572953][T14689] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 543.596372][T14687] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2978'. [ 543.657816][T14689] netlink: 'syz.3.2979': attribute type 6 has an invalid length. [ 543.676362][T14689] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2979'. [ 543.696797][T14687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.714311][T14687] bond0 (unregistering): Released all slaves [ 544.294592][T14705] netlink: 'syz.1.2986': attribute type 1 has an invalid length. [ 544.312090][T14705] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2986'. [ 544.387671][T14712] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2988'. [ 547.641663][T14728] netlink: 'syz.1.2994': attribute type 10 has an invalid length. [ 547.654976][T14728] netlink: 'syz.1.2994': attribute type 25 has an invalid length. [ 547.670268][T14725] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2995'. [ 547.772141][T14725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.798685][T14725] bond0 (unregistering): Released all slaves [ 547.837224][T14728] netlink: 'syz.1.2994': attribute type 12 has an invalid length. [ 547.854700][T14728] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2994'. [ 548.048587][T14737] netlink: 'syz.3.2997': attribute type 1 has an invalid length. [ 548.071142][T14737] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2997'. [ 548.316945][T14751] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2999'. [ 551.367990][T14761] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3005'. [ 552.027344][T14780] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3008'. [ 552.273885][T14782] netlink: 'syz.0.3010': attribute type 1 has an invalid length. [ 552.281880][T14782] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.3010'. [ 552.852113][T14797] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3013'. [ 552.876287][T14801] netlink: 'syz.1.3016': attribute type 10 has an invalid length. [ 552.901768][T14801] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3016'. [ 555.708079][ T2912] hsr_slave_0: left promiscuous mode [ 555.935716][ T2912] hsr_slave_1: left promiscuous mode [ 555.993283][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.025030][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.073034][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.084246][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.108070][ T2912] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 556.146314][ T2912] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 556.701245][ T2912] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 557.033186][ T2912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.075555][ T2912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.395615][ T2912] bond0 (unregistering): Released all slaves [ 557.718070][T14839] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3026'. [ 557.829529][T14839] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 557.872760][T14839] CPU: 0 PID: 14839 Comm: syz.0.3026 Not tainted syzkaller #0 [ 557.880353][T14839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 557.890461][T14839] Call Trace: [ 557.893780][T14839] [ 557.896757][T14839] dump_stack_lvl+0x18c/0x250 [ 557.901495][T14839] ? show_regs_print_info+0x20/0x20 [ 557.906748][T14839] ? load_image+0x420/0x420 [ 557.911354][T14839] sysfs_warn_dup+0x8e/0xa0 [ 557.915915][T14839] sysfs_do_create_link_sd+0xc0/0x110 [ 557.921349][T14839] device_add_class_symlinks+0x1cf/0x240 [ 557.927049][T14839] device_add+0x4f9/0xc40 [ 557.931445][T14839] wiphy_register+0x1d99/0x2ac0 [ 557.936499][T14839] ? cfg80211_event_work+0x40/0x40 [ 557.941658][T14839] ? minstrel_ht_alloc+0x88a/0x990 [ 557.946960][T14839] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 557.953179][T14839] ieee80211_register_hw+0x2dd8/0x3b30 [ 557.958777][T14839] ? ieee80211_register_hw+0xed1/0x3b30 [ 557.964400][T14839] ? ieee80211_tasklet_handler+0x20/0x20 [ 557.970076][T14839] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 557.976096][T14839] ? __debug_object_init+0xec/0x450 [ 557.981361][T14839] ? __asan_memset+0x22/0x40 [ 557.986006][T14839] ? __hrtimer_init+0x189/0x270 [ 557.990930][T14839] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 557.996778][T14839] ? mac80211_hwsim_free+0x220/0x220 [ 558.002107][T14839] ? rcu_is_watching+0x15/0xb0 [ 558.006934][T14839] ? kstrndup+0xbd/0x140 [ 558.011269][T14839] hwsim_new_radio_nl+0xdad/0x1a70 [ 558.016457][T14839] ? __nla_validate+0x50/0x50 [ 558.021240][T14839] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 558.027644][T14839] ? __nla_parse+0x40/0x50 [ 558.032115][T14839] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 558.038508][T14839] genl_family_rcv_msg_doit+0x21a/0x310 [ 558.044105][T14839] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 558.050045][T14839] ? bpf_lsm_capable+0x9/0x10 [ 558.054742][T14839] ? security_capable+0x89/0xb0 [ 558.059631][T14839] genl_rcv_msg+0x611/0x7a0 [ 558.064179][T14839] ? genl_bind+0x360/0x360 [ 558.068611][T14839] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 558.074961][T14839] ? perf_trace_lock+0x303/0x3b0 [ 558.079913][T14839] ? __kasan_kmalloc_large+0x8b/0xa0 [ 558.085236][T14839] netlink_rcv_skb+0x235/0x4c0 [ 558.090101][T14839] ? genl_bind+0x360/0x360 [ 558.094536][T14839] ? netlink_ack+0x1160/0x1160 [ 558.099353][T14839] ? __lock_acquire+0x7d80/0x7d80 [ 558.104424][T14839] ? down_read+0x1ac/0x2e0 [ 558.108866][T14839] genl_rcv+0x28/0x40 [ 558.112862][T14839] netlink_unicast+0x7b1/0x930 [ 558.117669][T14839] netlink_sendmsg+0x8d0/0xbf0 [ 558.122490][T14839] ? netlink_getsockopt+0x590/0x590 [ 558.127721][T14839] ? apparmor_socket_sendmsg+0x8e/0x330 [ 558.133288][T14839] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 558.138587][T14839] ? security_socket_sendmsg+0x80/0xa0 [ 558.144067][T14839] ? netlink_getsockopt+0x590/0x590 [ 558.149302][T14839] ____sys_sendmsg+0x61b/0x980 [ 558.154188][T14839] ? __asan_memset+0x22/0x40 [ 558.158801][T14839] ? __sys_sendmsg_sock+0x30/0x30 [ 558.163840][T14839] ? __import_iovec+0x5f2/0x850 [ 558.168739][T14839] ? import_iovec+0x73/0xa0 [ 558.173270][T14839] ___sys_sendmsg+0x2a6/0x360 [ 558.178016][T14839] ? __sys_sendmsg+0x2b0/0x2b0 [ 558.182946][T14839] __se_sys_sendmsg+0x1d0/0x2c0 [ 558.187819][T14839] ? __x64_sys_sendmsg+0x80/0x80 [ 558.192809][T14839] ? lockdep_hardirqs_on+0x98/0x150 [ 558.198031][T14839] do_syscall_64+0x55/0xb0 [ 558.202472][T14839] ? clear_bhb_loop+0x40/0x90 [ 558.207176][T14839] ? clear_bhb_loop+0x40/0x90 [ 558.211915][T14839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 558.217826][T14839] RIP: 0033:0x7f75be79e019 [ 558.222257][T14839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.241891][T14839] RSP: 002b:00007f75bf6ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.250324][T14839] RAX: ffffffffffffffda RBX: 00007f75bea26090 RCX: 00007f75be79e019 [ 558.258397][T14839] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 558.266380][T14839] RBP: 00007f75be83500c R08: 0000000000000000 R09: 0000000000000000 [ 558.274379][T14839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.282375][T14839] R13: 00007f75bea26128 R14: 00007f75bea26090 R15: 00007fff2c28bbd8 [ 558.290411][T14839] [ 558.642943][T14844] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3028'. [ 560.322752][T14842] Bluetooth: hci0: command 0x0406 tx timeout [ 562.207398][T14867] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3037'. [ 562.321600][T14873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 562.329097][T14873] IPv6: NLM_F_CREATE should be set when creating new route [ 562.336843][T14873] IPv6: NLM_F_CREATE should be set when creating new route [ 562.344381][T14873] IPv6: NLM_F_CREATE should be set when creating new route [ 563.006613][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.013780][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.573370][T14892] FAULT_INJECTION: forcing a failure. [ 563.573370][T14892] name failslab, interval 1, probability 0, space 0, times 0 [ 563.586122][T14892] CPU: 1 PID: 14892 Comm: syz.4.3045 Not tainted syzkaller #0 [ 563.588289][T14888] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3044'. [ 563.593584][T14892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 563.593598][T14892] Call Trace: [ 563.593607][T14892] [ 563.593616][T14892] dump_stack_lvl+0x18c/0x250 [ 563.593643][T14892] ? show_regs_print_info+0x20/0x20 [ 563.593664][T14892] ? load_image+0x420/0x420 [ 563.593699][T14892] should_fail_ex+0x394/0x4c0 [ 563.593725][T14892] should_failslab+0x9/0x20 [ 563.593748][T14892] slab_pre_alloc_hook+0x59/0x300 [ 563.593779][T14892] kmem_cache_alloc+0x5a/0x2c0 [ 563.593802][T14892] ? skb_clone+0x1eb/0x370 [ 563.593857][T14892] skb_clone+0x1eb/0x370 [ 563.593880][T14892] bpf_clone_redirect+0x16d/0x4a0 [ 563.666392][T14892] bpf_prog_5e3b4e18def6d727+0x5e/0x63 [ 563.671882][T14892] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 563.677716][T14892] ? perf_trace_preemptirq_template+0xac/0x330 [ 563.683907][T14892] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 563.689913][T14892] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 563.695218][T14892] ? lock_chain_count+0x20/0x20 [ 563.700089][T14892] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 563.706363][T14892] ? __local_bh_disable_ip+0x108/0x1a0 [ 563.711844][T14892] ? __cant_sleep+0x220/0x220 [ 563.716535][T14892] ? __local_bh_enable_ip+0x13a/0x1c0 [ 563.721928][T14892] ? _local_bh_enable+0xa0/0xa0 [ 563.726809][T14892] ? bpf_test_timer_continue+0x135/0x380 [ 563.732490][T14892] ? bpf_test_run+0x174/0x870 [ 563.737190][T14892] bpf_test_run+0x2df/0x870 [ 563.741732][T14892] ? bpf_test_run+0x174/0x870 [ 563.746438][T14892] ? dst_hold+0x70/0x70 [ 563.750618][T14892] ? eth_get_headlen+0x210/0x210 [ 563.755658][T14892] ? convert___skb_to_skb+0x3d/0x590 [ 563.760969][T14892] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 563.766383][T14892] ? cpu_online+0x60/0x60 [ 563.770738][T14892] bpf_prog_test_run+0x31f/0x390 [ 563.775696][T14892] __sys_bpf+0x49d/0x890 [ 563.780014][T14892] ? bpf_link_show_fdinfo+0x390/0x390 [ 563.785421][T14892] ? lock_chain_count+0x20/0x20 [ 563.790346][T14892] __x64_sys_bpf+0x7c/0x90 [ 563.794789][T14892] do_syscall_64+0x55/0xb0 [ 563.799235][T14892] ? clear_bhb_loop+0x40/0x90 [ 563.803937][T14892] ? clear_bhb_loop+0x40/0x90 [ 563.808637][T14892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 563.814555][T14892] RIP: 0033:0x7f35e179e019 [ 563.818991][T14892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.838621][T14892] RSP: 002b:00007f35e2728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 563.847075][T14892] RAX: ffffffffffffffda RBX: 00007f35e1a25fa0 RCX: 00007f35e179e019 [ 563.855088][T14892] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 563.863093][T14892] RBP: 00007f35e2728090 R08: 0000000000000000 R09: 0000000000000000 [ 563.871091][T14892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 563.879089][T14892] R13: 00007f35e1a26038 R14: 00007f35e1a25fa0 R15: 00007ffead6d8228 [ 563.887282][T14892] [ 566.774750][T14903] netlink: 'syz.1.3050': attribute type 9 has an invalid length. [ 566.824294][T14903] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3050'. [ 566.865006][T14901] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3049'. [ 566.925023][T14906] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3051'. [ 567.195013][T14917] netlink: 'syz.3.3055': attribute type 10 has an invalid length. [ 567.264698][T14917] team0: Port device wlan1 added [ 567.611868][T14933] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3059'. [ 567.891455][T14935] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3062'. [ 569.669936][ T1008] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 570.165841][T14842] Bluetooth: hci3: command 0x0406 tx timeout [ 570.664683][T14957] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3067'. [ 570.674957][T14957] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3067'. [ 570.691883][T14951] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3067'. [ 570.716387][T14959] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 570.736075][T14956] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3067'. [ 570.914826][T14963] netlink: 'syz.0.3072': attribute type 1 has an invalid length. [ 570.936098][T14963] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.3072'. [ 570.989532][T14970] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3073'. [ 571.010140][T14971] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3074'. [ 572.883042][ T2912] wlan1: Trigger new scan to find an IBSS to join [ 574.221879][T14985] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3080'. [ 574.303611][T14986] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3079'. [ 574.339316][T12682] unregister_netdevice: waiting for syz_tun to become free. Usage count = 3 [ 574.348566][T12682] ref_tracker: syz_tun@ffff88806177c5b8 has 1/2 users at [ 574.348566][T12682] dst_init+0xc0/0x470 [ 574.348566][T12682] dst_alloc+0x12e/0x170 [ 574.348566][T12682] ip_route_output_key_hash_rcu+0x14a2/0x2350 [ 574.348566][T12682] ip_route_output_key_hash+0x1f3/0x330 [ 574.348566][T12682] ip_route_output_flow+0x2a/0x150 [ 574.348566][T12682] geneve_link_config+0x1a6/0x670 [ 574.348566][T12682] geneve_newlink+0x151/0x1c0 [ 574.348566][T12682] rtnl_newlink+0x15a0/0x2170 [ 574.348566][T12682] rtnetlink_rcv_msg+0x843/0xf90 [ 574.348566][T12682] netlink_rcv_skb+0x235/0x4c0 [ 574.348566][T12682] netlink_unicast+0x7b1/0x930 [ 574.348566][T12682] netlink_sendmsg+0x8d0/0xbf0 [ 574.348566][T12682] __sys_sendto+0x4a9/0x6b0 [ 574.348566][T12682] __x64_sys_sendto+0xde/0xf0 [ 574.348566][T12682] do_syscall_64+0x55/0xb0 [ 574.348566][T12682] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 574.348566][T12682] [ 574.445672][T12682] ref_tracker: syz_tun@ffff88806177c5b8 has 1/2 users at [ 574.445672][T12682] fib_check_nh+0xd1a/0x1a50 [ 574.445672][T12682] fib_create_info+0x135b/0x2390 [ 574.445672][T12682] fib_table_insert+0xc6/0x1af0 [ 574.445672][T12682] fib_magic+0x2ce/0x3b0 [ 574.445672][T12682] fib_add_ifaddr+0x376/0x5d0 [ 574.445672][T12682] fib_netdev_event+0x389/0x490 [ 574.445672][T12682] notifier_call_chain+0x18f/0x380 [ 574.445672][T12682] __dev_notify_flags+0x1ab/0x310 [ 574.445672][T12682] dev_change_flags+0xde/0x1a0 [ 574.445672][T12682] do_setlink+0xb69/0x3f40 [ 574.445672][T12682] rtnl_newlink+0x1848/0x2170 [ 574.445672][T12682] rtnetlink_rcv_msg+0x843/0xf90 [ 574.445672][T12682] netlink_rcv_skb+0x235/0x4c0 [ 574.445672][T12682] netlink_unicast+0x7b1/0x930 [ 574.445672][T12682] netlink_sendmsg+0x8d0/0xbf0 [ 574.445672][T12682] __sys_sendto+0x4a9/0x6b0 [ 574.445672][T12682] [ 575.285567][T14842] Bluetooth: hci4: command 0x0406 tx timeout [ 575.871557][T14985] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3080'. [ 577.922675][ T3504] wlan1: Trigger new scan to find an IBSS to join [ 578.833533][ T2912] wlan1: Creating new IBSS network, BSSID ca:d7:28:ac:fe:c0 [ 580.405428][T14842] Bluetooth: hci5: command 0x0406 tx timeout