last executing test programs: 5.432404358s ago: executing program 2 (id=5228): socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x50}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) (fail_nth: 50) 4.901516734s ago: executing program 2 (id=5231): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8000000002009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80c0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb1af00f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d586270f9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333aab1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486c9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d75007606000000b2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7f01e0873c9c5c604108ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e91017343e3dc6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000000de00d23dd63b7761d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a38e7868dc32e132124ecf52327631b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f1370d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd038c1817f0d4652a29353b05b16b3c5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df625a47bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04eda001aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f4125377960604f521df5e325efe395a4e3b7ca8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd020000000000000000000000d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685f0400000000000000ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0f6f03160ec875b92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c14233d597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cb2791add8279c491fa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466e0000000000000000008e5f9004e01fe2b177c5f443d09de4ba8f72d534405f9e7807c864bbca5893376420e38cf47a3660a2ab17b20baa271aa9eaffc19b50f291f51a7cc935023382bd80d7bca313636f3aaa6b788b233097bd545d9bf9715fbf"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a00)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="3ee8b6e466d32e33ed1f55a0edda878cfdcc9d922cb87e5cd367fdd1a9256bcd0b7aba2ee407490708346ad37b0c4a478e4f5557b37b984d838ec8485f8baa5b0c1308c8b64b9ee480c4624c548107f202a1478ff72deebb1d18e2f0267da1084e7ef3442b0fb9e09f346a325a8569ad93c4093dc05c912e9814ab01e4913716e8135c3def42306c273d1071d148d06e0501", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8ba4c75e93e9e97, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000010000000000000f00000018440000faffffff0000000000000002000000000100000000000000060000006f44000004000000443230000000000085000000b1000000851000"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, r8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006911160000000000851000000200000085000000d300000095000000000000009500a50500000000"], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x6, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3d}, 0x70) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg(r3, &(0x7f0000000980)={&(0x7f00000002c0)=@generic, 0x80, &(0x7f0000000900)=[{&(0x7f0000000640)=""/74, 0x4a}, {&(0x7f0000000800)=""/224, 0xe0}], 0x2, &(0x7f0000000940)=""/43, 0x2b}, 0x2000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000880), 0x0, 0x75}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0, 0xa00000000000000}, 0x20) 3.421031981s ago: executing program 2 (id=5240): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0xdc1, 0x8, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x2, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x2b, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x7, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x20000000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000e00, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r8], 0x12) 2.516380952s ago: executing program 3 (id=5243): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_bp={0x0, 0xa}, 0x104405, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x1, 0xaea}, 0x4104, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0xa7) socketpair(0x10, 0x2, 0x8, &(0x7f0000000000)) 2.481184462s ago: executing program 1 (id=5244): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0xff8d}, 0x3004c085) 2.478347862s ago: executing program 2 (id=5245): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[], 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180), 0x0, 0xe9, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, 0x0, 0x9a) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000300000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xd, 0x2b, &(0x7f0000000c40)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000f8ffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000000085", @ANYRES32=r2, @ANYBLOB="000000000000000008e3050002000000cd43004004000000bf91000000000000b7020000020000008500000001000000b7000000000000009500000000000000"], 0x0, 0x1, 0x6, &(0x7f0000000000)=""/6, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000020015f5ad6b9e60", @ANYRES32=0x1, @ANYBLOB="33d700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000400"/25], 0x50) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x11, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r7, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x7b, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r10, 0x29, 0x18, 0x0, 0xfcd8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 2.419889102s ago: executing program 0 (id=5246): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2c, 0x3, 0x0) close(r0) 2.333767353s ago: executing program 1 (id=5247): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0x7}, 0x104101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1, 0x0, 0x0, 0xff88}, 0x480c0) 2.299223934s ago: executing program 0 (id=5248): r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x19c565, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x0, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0x0, 0xa, 0x904813a5, 0x4, 0x0, 0x7fffffff, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000240), 0x6}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890b, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r2], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001280)="c13eae1df4f3a3526656eb7f2288768fe7d9fcce523e0cd732be4bff1e7b3db30c10158c5a565c25cee98b0247410673a69e0943ab9d58c7b5ffd4fa0e5d7b63ddbe004fcd3f21d16e04ef76af971a6b6e287025f35f2febe104d67d00bbfcdcfb3d7564aecba9c3036977ab69bc1a23b9e0ca2448eff6933da4bd970be6e47cb61fc7961176e89f55d5a029743c806506cf6806fefb3b8624a02a5a136b7950e7bf4ce68924b6d26fa582f4c122fb8d3b06a6e74ed8d3d24680"}, {&(0x7f0000001340)="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"}, {&(0x7f0000002340)="37140dac7aea8ce8b823fd2c8c5d526bc7875db39347232fb41680eb7dc0e3b310043384ef7c28ac7ff3bc2a633e8f927fe552d29d4cd87adc8a882eabbed5eed29ae785b2e89f2c49a31b794a46e9bb06eb70138759d1dc1f131828df85051904021a21c09be4ae29d88e49e2d2ef651154f9e1ce0d8aefb8f7b5bf53f01464249195ab61be3e6da828e351c1e6338948bb32cf0024e06313185749829128bcdb749f1025a28981663fd8c089b6d779455779ce6f46871fe1"}, {&(0x7f0000002400)="c49d3a2a3da533c16a2afb158d49a7796275a3060d8ac60264711e7305cc31b4c3754d6220db758c655a92eb87ead3ae7261c39fb7ca"}], 0x3, 0x0, 0x0, 0x35}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000004c0)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1a, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x94, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780), 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) recvmsg$unix(r3, &(0x7f0000001240)={&(0x7f00000010c0), 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/80, 0x50}], 0x1, &(0x7f0000001200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x121) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0xc6b}, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r8) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x80, 0x0, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000000000008075570100040000007b76feff10000000b1a5feff040000001834000003000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000f991576df000000000b7020000000000008500000086000000831001000800000018000000090000000000000009000000691bfcff10000000950000"], &(0x7f0000000380)='GPL\x00', 0xeb, 0x9d, &(0x7f00000003c0)=""/157, 0x40f00, 0x6, '\x00', r4, 0x25, r5, 0x8, &(0x7f00000007c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x1, 0x80}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000980)=[r6, r7, r0, r9], &(0x7f00000009c0)=[{0x4, 0x2, 0x5, 0xc}, {0x0, 0x2, 0x2, 0xa}, {0x3, 0x3, 0xc, 0xb}, {0x5, 0x5, 0x10, 0x7}, {0x0, 0x2, 0x5, 0x3}, {0x3, 0x3, 0x5, 0xc}, {0x5, 0x3, 0x4, 0x8}], 0x10, 0x100}, 0x94) r10 = perf_event_open$cgroup(&(0x7f00000001c0)={0x7, 0x80, 0x9, 0x3, 0xf, 0x4, 0x0, 0x3, 0x20028, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140), 0x5}, 0x1000, 0x1, 0x1ff, 0x4, 0xfff, 0x2, 0x6, 0x0, 0x5, 0x0, 0xf6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_QUERY_BPF(r10, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB="0506000000000000000000d6c5136f00000000000000000000000040"]) r11 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r11, &(0x7f0000001080)={&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000b00)=""/220, 0xdc}, {&(0x7f0000000c00)=""/128, 0x80}, {&(0x7f0000000c80)=""/119, 0x77}, {&(0x7f0000000d00)=""/140, 0x8c}, {&(0x7f0000000dc0)=""/88, 0x58}, {&(0x7f0000000e40)=""/255, 0xff}], 0x6, &(0x7f0000000fc0)=""/143, 0x8f}, 0x10142) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[@ANYBLOB="001000001a00911c01000000000041da81"], 0xfe33) 2.102939416s ago: executing program 3 (id=5249): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000002c0)={r1}) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x72, 0x0, 0x0) close(r1) socket$kcm(0xa, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00), 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x85, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r8, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) 1.421574234s ago: executing program 1 (id=5250): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8000000002009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80c0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb1af00f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d586270f9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333aab1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486c9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d75007606000000b2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7f01e0873c9c5c604108ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e91017343e3dc6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000000de00d23dd63b7761d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a38e7868dc32e132124ecf52327631b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f1370d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd038c1817f0d4652a29353b05b16b3c5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df625a47bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04eda001aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f4125377960604f521df5e325efe395a4e3b7ca8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd020000000000000000000000d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685f0400000000000000ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0f6f03160ec875b92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c14233d597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cb2791add8279c491fa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466e0000000000000000008e5f9004e01fe2b177c5f443d09de4ba8f72d534405f9e7807c864bbca5893376420e38cf47a3660a2ab17b20baa271aa9eaffc19b50f291f51a7cc935023382bd80d7bca313636f3aaa6b788b233097bd545d9bf9715fbf"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a00)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="3ee8b6e466d32e33ed1f55a0edda878cfdcc9d922cb87e5cd367fdd1a9256bcd0b7aba2ee407490708346ad37b0c4a478e4f5557b37b984d838ec8485f8baa5b0c1308c8b64b9ee480c4624c548107f202a1478ff72deebb1d18e2f0267da1084e7ef3442b0fb9e09f346a325a8569ad93c4093dc05c912e9814ab01e4913716e8135c3def42306c273d1071d148d06e0501", @ANYRES64=0x0], 0x10) sendmsg$unix(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="e687", 0x2}], 0x1, 0x0, 0x0, 0x44190}, 0x2004c001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8ba4c75e93e9e97, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000010000000000000f00000018440000faffffff0000000000000002000000000100000000000000060000006f44000004000000443230000000000085000000b1000000851000"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r9, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, r9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006911160000000000851000000200000085000000d300000095000000000000009500a50500000000"], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x6, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3d}, 0x70) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg(r4, &(0x7f0000000980)={&(0x7f00000002c0)=@generic, 0x80, &(0x7f0000000900)=[{&(0x7f0000000640)=""/74, 0x4a}, {&(0x7f0000000800)=""/224, 0xe0}], 0x2, &(0x7f0000000940)=""/43, 0x2b}, 0x2000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000880), 0x0, 0x75}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0, 0xa00000000000000}, 0x20) 1.420668704s ago: executing program 2 (id=5251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0901020028000b05d25a806f8c6394f90324fc600d00030009000100ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 1.359321685s ago: executing program 3 (id=5252): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000091102f000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 1.350302534s ago: executing program 0 (id=5253): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0xdc1, 0x8, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x2, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x2b, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x7, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x20000000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000e00, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r8], 0x12) 1.001690249s ago: executing program 3 (id=5254): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080013002d03010000000000950017b8000000006916000000000000bf67000000000000350607000fff07206706000002000000160300000ee6fe5fbf500000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f19de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03cc86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800030cffa651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a60100c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40446d7074be86a912a5ac00f7ffffffffffffff000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000001fe4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642894cacd473b543ccb5f0d7b63924f17c67b00631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809f905f12f6106f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad0fceee5f339550130a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3116dbc7e2bf2402a75fd7a557317c66dd255ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d644b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a6749b94a42b25e9321fc2cc17dc4a29b9cba8ded5de439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f3b563ab9000000ff000000000077a99fb5b0a43749ca477c9c7ca20bd428d8f77bb920ad0db4c1da671bfad7f109b776476a54939e621232cd115ba9f37057ad891fea2353f3ad9c042c64a5ecf80f4e4cf927ae39347c22822375c26edf2754695c16780429e03759691adb63553e9c4561528ded5f35bb20e98b2e6d01dbfcde82608359c50881324524db0dbe21efba4f0fc338f4b0b11cb028d1063b3bacaab92fb7f9d2971440f873ec261d54c1570adef8004c91896fcd74c9e03dfd9a781210c0346ed1b02a44c64adad8a3f238a8ddf7207c45057c02e922b942f15ddcfbfb00"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 957.705509ms ago: executing program 2 (id=5255): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="5c00000015006b03004e21000af32c6e020675f80025030040010000002c740e17d34460bc24eab5fac905251e6182949a36c23d3b48dfd8cdbf9364c9f8ffffffffffffffd0bdd70000b6c0504bb9189d5208eddedf0cd7ecc1c31b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x400000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 941.322169ms ago: executing program 0 (id=5256): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xe}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d", 0x18}], 0x2}, 0xfffd) 881.52099ms ago: executing program 1 (id=5257): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80000001, 0x171301, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x21ed000000000, 0x5}, 0x802, 0x1, 0x5, 0x9, 0x3, 0x8, 0x6, 0x0, 0x7f, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200006600000000000000ce00000085000000d000000095000bac4ddf0000000000000abebdc2ffe8985e7eeeb3c7b478c9c2434ca5399ec94a91810a3f755999b17279aa51693184cc8bf641aa1f25cef4303f79c3cfa4935dd33cefa89a5561adaf324a6744cd5db1464c30"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) sendmsg$kcm(r6, 0x0, 0x8004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x13, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x1, 0xd, 0x0, 0x8, 0xffffffffffffffff, 0x4}, @map_idx={0x18, 0xf, 0x5, 0x0, 0xd}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}], &(0x7f0000000380)='GPL\x00', 0xed, 0xf7, &(0x7f0000000500)=""/247, 0x41100, 0x28, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000680)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0), &(0x7f0000000700)=[{0x1, 0x3, 0x6}], 0x10, 0x3}, 0x94) 653.836623ms ago: executing program 0 (id=5258): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, 0x0, &(0x7f0000000140)='syzkaller\x00', 0xc634, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140), 0x1}, 0xc54) (fail_nth: 30) 626.465693ms ago: executing program 1 (id=5259): r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000bc0)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x110, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000700000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 286.968377ms ago: executing program 3 (id=5260): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000002c0)={r1}) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x72, 0x0, 0x0) close(r1) socket$kcm(0xa, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00), 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x85, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r8, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) 94.085379ms ago: executing program 1 (id=5261): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x40305828, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x41, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x8004745a, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000030000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bc0900000000000035090100000000009500000000000000b702000000000000db9af8fff1000000b5090000000000007b9af8ff00000000be8a00000000000007080000f8ffffffbf9400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r3, &(0x7f0000003780)={&(0x7f0000000040)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f00000036c0)=[{&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000003340)="d98a5b595776d0bcaf3ed2901095c261cca89b1e45cb0d8a2968ab6cfe5ca727e23d6f3c1eb7fb9426d258135ab261e594ae53984340dfef1e97040d7d6941f2a828e2b81e7ee6cae3b5509ebadefa477cdb623526ab0162da1058b29edbd61a46a1e5a521d2f9ec5096a26de10d465b756f099019473525f6543071d422461a58934e942d505706ff1fa2a7282cb4aaf65f931d32745215777850e129f5b2e8405530064b136503f1ad1cbc589d8ad20f7dc77c24c5f7ad1835", 0xba}, {&(0x7f0000003400)="24c6a6b52841d28f72c4b39de2be36069638b3fc3f4221d97ed8dfcfa6dcfb169dbd240a26625d17b01aa2148545231204fa8927c7f0cedeb00d9afd224fa6d192c24bffd0a5cb683a5caa8499bd7283b8bbee912eb506998bccbe16a4e0ba0bdc074fa074d8c633e184d795d9f7512fad2ced", 0x73}, {&(0x7f0000003480)="844f80bf114485106d360c9864716ec7ecb54c74dabf7fc25e44f0ed0f34d0ed7320eb03535feca12e5a61015338a6df1c18eb48bb6f1aa0043e8d8464e0cf49f5739b3a8e7e31d175d6327ff5caa60eaa9e88cedcd4ac2a16904133ae0ea2907122f37abeee25ef62ed1d0f5ae93b75a7162a0eae2ab502126afeba92598d95b25a2bfeccdaba3ffa605975fe82d7624eeb89307fb570f875929f3af4054d5a15014313ef5e43d3d59336061c0f38a6c38479681236efe4e128742f36ccfa47f168794954755693918b17092004d341f28f3a9d2d7f08890db23907a4a0bcbafd4e6a37a96b14b789", 0xe9}, {&(0x7f0000003580)="a4244b0196e7ad8742533eb9f664c9d5025a43e6a68beabb7e69636c2eee6bcc84f03393a6fea36be76fda09bae115f752c059463e81b89e42695efea0bcbdaac79a902a45e9f1a7b291317cb1c41dc2cefbd4c424e7267572241a869e61e5b566a14f0b67ac6f306060d6442c27371714a41d3e51eb7e77ed73d9b9a77fd134dcd6f05baff009be5e743fc3aa", 0x8d}, {&(0x7f0000003640)="8b354c719b53178ce9bf8368a1ed401800343f33b68553184e637d282107a6b4eb6e8c687c9620ae27d3e5e2cd98d8ba938853e187655849130f01ebfb0147e0fd7ba255d838d68edf8b86d00dd7da5d708bfd009205cd7d3a019113eb2f16ea199ecc4f", 0x64}], 0x7, &(0x7f0000003740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0xc184) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000000)) 33.83499ms ago: executing program 0 (id=5262): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000091102f000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 0s ago: executing program 3 (id=5263): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (fail_nth: 39) kernel console output (not intermixed with test programs): 997] ? clear_bhb_loop+0x40/0x90 [ 909.159675][T19997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 909.165675][T19997] RIP: 0033:0x7f2b5239cdd9 [ 909.170117][T19997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.189916][T19997] RSP: 002b:00007f2b531ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 909.198608][T19997] RAX: ffffffffffffffda RBX: 00007f2b52616090 RCX: 00007f2b5239cdd9 [ 909.206592][T19997] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 000000000000000f [ 909.215022][T19997] RBP: 00007f2b531ac090 R08: 0000000000000000 R09: 0000000000000000 [ 909.223219][T19997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.231738][T19997] R13: 00007f2b52616128 R14: 00007f2b52616090 R15: 00007ffdbeacad28 [ 909.239923][T19997] [ 909.971469][T20012] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 911.297164][T20043] netlink: 'syz.2.4453': attribute type 3 has an invalid length. [ 911.305468][T20043] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4453'. [ 911.351612][T20042] FAULT_INJECTION: forcing a failure. [ 911.351612][T20042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 911.375708][T20042] CPU: 1 PID: 20042 Comm: syz.0.4452 Not tainted syzkaller #0 [ 911.383290][T20042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 911.393502][T20042] Call Trace: [ 911.396839][T20042] [ 911.399826][T20042] dump_stack_lvl+0x18c/0x250 [ 911.404607][T20042] ? show_regs_print_info+0x20/0x20 [ 911.409965][T20042] ? load_image+0x420/0x420 [ 911.414753][T20042] ? __might_fault+0xaa/0x120 [ 911.419773][T20042] ? __lock_acquire+0x7d40/0x7d40 [ 911.424993][T20042] should_fail_ex+0x39d/0x4d0 [ 911.429958][T20042] _copy_from_iter+0x1d9/0x12e0 [ 911.435052][T20042] ? rep_movs_alternative+0x4a/0x90 [ 911.440410][T20042] ? _copy_from_iter+0x24e/0x12e0 [ 911.445677][T20042] ? __virt_addr_valid+0x18c/0x540 [ 911.450983][T20042] ? __lock_acquire+0x7d40/0x7d40 [ 911.456170][T20042] ? copyout_mc+0x70/0x70 [ 911.460587][T20042] ? copyout_mc+0x70/0x70 [ 911.465066][T20042] ? __virt_addr_valid+0x18c/0x540 [ 911.470269][T20042] ? page_copy_sane+0x16a/0x270 [ 911.475226][T20042] copy_page_from_iter+0x7b/0x100 [ 911.480420][T20042] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 911.486348][T20042] tun_get_user+0x15db/0x3ca0 [ 911.491231][T20042] ? aa_file_perm+0x11b/0xee0 [ 911.496027][T20042] ? rcu_read_unlock+0xa0/0xa0 [ 911.500912][T20042] ? tun_get+0x1c/0x2e0 [ 911.505152][T20042] ? __lock_acquire+0x7d40/0x7d40 [ 911.510271][T20042] ? tun_get+0x1c/0x2e0 [ 911.514622][T20042] tun_chr_write_iter+0x119/0x200 [ 911.519743][T20042] vfs_write+0x46c/0x990 [ 911.524254][T20042] ? file_end_write+0x250/0x250 [ 911.529201][T20042] ? __fget_files+0x43d/0x4b0 [ 911.534170][T20042] ? __fdget_pos+0x1d8/0x330 [ 911.538816][T20042] ? ksys_write+0x75/0x260 [ 911.543310][T20042] ksys_write+0x150/0x260 [ 911.547817][T20042] ? __ia32_sys_read+0x90/0x90 [ 911.552840][T20042] ? lockdep_hardirqs_on+0x98/0x150 [ 911.558174][T20042] do_syscall_64+0x55/0xa0 [ 911.562649][T20042] ? clear_bhb_loop+0x40/0x90 [ 911.567563][T20042] ? clear_bhb_loop+0x40/0x90 [ 911.572401][T20042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.578374][T20042] RIP: 0033:0x7ff4c4f9cdd9 [ 911.582850][T20042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.602722][T20042] RSP: 002b:00007ff4c5e80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 911.611213][T20042] RAX: ffffffffffffffda RBX: 00007ff4c5215fa0 RCX: 00007ff4c4f9cdd9 [ 911.619630][T20042] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 911.627698][T20042] RBP: 00007ff4c5e80090 R08: 0000000000000000 R09: 0000000000000000 [ 911.635754][T20042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 911.644007][T20042] R13: 00007ff4c5216038 R14: 00007ff4c5215fa0 R15: 00007fff8d8b8598 [ 911.652130][T20042] [ 911.831846][T20047] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 911.950800][T20052] netlink: 'syz.2.4455': attribute type 10 has an invalid length. [ 913.169235][T20084] netlink: 43479 bytes leftover after parsing attributes in process `syz.2.4466'. [ 914.062133][T20096] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 914.084308][T20098] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 914.157440][T20096] netlink: 'syz.1.4470': attribute type 3 has an invalid length. [ 914.193803][T20096] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.4470'. [ 914.284190][T20102] netlink: 'syz.3.4473': attribute type 6 has an invalid length. [ 914.292213][T20102] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4473'. [ 914.537763][T20109] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4474'. [ 914.587024][T20109] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4474'. [ 914.649812][T20109] .`: (slave bond_slave_0): Releasing backup interface [ 914.704875][T20109] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 915.994939][T20135] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.4482'. [ 916.608894][T20142] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4485'. [ 916.650850][T20142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.683568][T20142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.714094][T20142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.735605][T20142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.763567][T20142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.779621][T20142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.792058][T20142] batadv_slave_1: entered promiscuous mode [ 917.795012][T20156] netlink: 'syz.3.4490': attribute type 21 has an invalid length. [ 917.803215][T20156] netlink: 'syz.3.4490': attribute type 3 has an invalid length. [ 917.833495][T20156] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4490'. [ 918.950728][T20176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 919.185018][T20180] FAULT_INJECTION: forcing a failure. [ 919.185018][T20180] name failslab, interval 1, probability 0, space 0, times 0 [ 919.203987][T20180] CPU: 1 PID: 20180 Comm: syz.3.4496 Not tainted syzkaller #0 [ 919.211523][T20180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 919.221622][T20180] Call Trace: [ 919.224936][T20180] [ 919.227901][T20180] dump_stack_lvl+0x18c/0x250 [ 919.232635][T20180] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 919.238864][T20180] ? show_regs_print_info+0x20/0x20 [ 919.244127][T20180] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 919.250343][T20180] ? dump_stack+0x9/0x20 [ 919.254630][T20180] should_fail_ex+0x39d/0x4d0 [ 919.259447][T20180] should_failslab+0x9/0x20 [ 919.264082][T20180] slab_pre_alloc_hook+0x59/0x310 [ 919.269163][T20180] ? lockdep_hardirqs_on+0x98/0x150 [ 919.274492][T20180] ? tomoyo_encode+0x28b/0x540 [ 919.279387][T20180] ? tomoyo_encode+0x28b/0x540 [ 919.284197][T20180] __kmem_cache_alloc_node+0x53/0x250 [ 919.289630][T20180] ? tomoyo_encode+0x28b/0x540 [ 919.294449][T20180] __kmalloc+0xa4/0x230 [ 919.298677][T20180] tomoyo_encode+0x28b/0x540 [ 919.303323][T20180] tomoyo_realpath_from_path+0x592/0x5d0 [ 919.309020][T20180] tomoyo_path_number_perm+0x248/0x620 [ 919.314547][T20180] ? tomoyo_path_number_perm+0x217/0x620 [ 919.320253][T20180] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 919.325771][T20180] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 919.331739][T20180] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 919.337792][T20180] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 919.344180][T20180] ? tomoyo_file_ioctl+0x11/0x30 [ 919.349176][T20180] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 919.354783][T20180] security_file_ioctl+0x70/0xa0 [ 919.359805][T20180] __se_sys_ioctl+0x48/0x170 [ 919.364460][T20180] do_syscall_64+0x55/0xa0 [ 919.369228][T20180] ? clear_bhb_loop+0x40/0x90 [ 919.374048][T20180] ? clear_bhb_loop+0x40/0x90 [ 919.378966][T20180] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 919.385045][T20180] RIP: 0033:0x7f31b559cdd9 [ 919.389509][T20180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.409876][T20180] RSP: 002b:00007f31b642f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 919.418531][T20180] RAX: ffffffffffffffda RBX: 00007f31b5815fa0 RCX: 00007f31b559cdd9 [ 919.426557][T20180] RDX: 0000000000000000 RSI: 0000000080047437 RDI: 0000000000000005 [ 919.434583][T20180] RBP: 00007f31b642f090 R08: 0000000000000000 R09: 0000000000000000 [ 919.442704][T20180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.450814][T20180] R13: 00007f31b5816038 R14: 00007f31b5815fa0 R15: 00007ffd81ef52c8 [ 919.458872][T20180] [ 919.480368][T20186] netlink: 'syz.2.4499': attribute type 6 has an invalid length. [ 919.488434][T20186] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4499'. [ 919.536102][T20180] ERROR: Out of memory at tomoyo_realpath_from_path. [ 919.830737][T20192] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 919.845448][T20192] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 921.799949][T20214] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4508'. [ 921.864385][T20214] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.984657][T20220] netlink: 'syz.0.4510': attribute type 6 has an invalid length. [ 922.003451][T20220] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4510'. [ 922.041531][T20221] syz.3.4509: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 922.065862][T20221] CPU: 1 PID: 20221 Comm: syz.3.4509 Not tainted syzkaller #0 [ 922.073515][T20221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 922.083711][T20221] Call Trace: [ 922.087028][T20221] [ 922.090072][T20221] dump_stack_lvl+0x18c/0x250 [ 922.094818][T20221] ? show_regs_print_info+0x20/0x20 [ 922.100157][T20221] ? load_image+0x420/0x420 [ 922.104700][T20221] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 922.111433][T20221] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 922.118051][T20221] warn_alloc+0x246/0x340 [ 922.122580][T20221] ? stack_trace_save+0xaa/0x100 [ 922.127559][T20221] ? zone_watermark_ok_safe+0x230/0x230 [ 922.133307][T20221] ? kasan_set_track+0x5f/0x70 [ 922.138101][T20221] ? kasan_set_track+0x4e/0x70 [ 922.142923][T20221] ? __kasan_kmalloc+0x8f/0xa0 [ 922.147716][T20221] ? xsk_init_queue+0xad/0x100 [ 922.152582][T20221] ? xsk_setsockopt+0x4e5/0x760 [ 922.157546][T20221] ? do_sock_setsockopt+0x175/0x1a0 [ 922.162763][T20221] ? __x64_sys_setsockopt+0x182/0x200 [ 922.168164][T20221] __vmalloc_node_range+0x126/0x1330 [ 922.173859][T20221] ? free_vm_area+0x50/0x50 [ 922.178431][T20221] vmalloc_user+0x74/0x80 [ 922.182896][T20221] ? xskq_create+0xbf/0x170 [ 922.187533][T20221] xskq_create+0xbf/0x170 [ 922.192071][T20221] xsk_init_queue+0xad/0x100 [ 922.196785][T20221] xsk_setsockopt+0x4e5/0x760 [ 922.201495][T20221] ? xsk_poll+0x680/0x680 [ 922.205854][T20221] ? __fget_files+0x28/0x4b0 [ 922.210558][T20221] ? __fget_files+0x28/0x4b0 [ 922.215565][T20221] ? aa_sock_opt_perm+0x74/0x100 [ 922.220621][T20221] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 922.226558][T20221] ? security_socket_setsockopt+0x7e/0xa0 [ 922.232569][T20221] ? xsk_poll+0x680/0x680 [ 922.237012][T20221] do_sock_setsockopt+0x175/0x1a0 [ 922.242148][T20221] ? __fdget+0x180/0x210 [ 922.246432][T20221] __x64_sys_setsockopt+0x182/0x200 [ 922.251655][T20221] do_syscall_64+0x55/0xa0 [ 922.256111][T20221] ? clear_bhb_loop+0x40/0x90 [ 922.260820][T20221] ? clear_bhb_loop+0x40/0x90 [ 922.265524][T20221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 922.271442][T20221] RIP: 0033:0x7f31b559cdd9 [ 922.275967][T20221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.296024][T20221] RSP: 002b:00007f31b63ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 922.304723][T20221] RAX: ffffffffffffffda RBX: 00007f31b5816180 RCX: 00007f31b559cdd9 [ 922.312839][T20221] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 922.321018][T20221] RBP: 00007f31b5632d69 R08: 0000000000000004 R09: 0000000000000000 [ 922.329011][T20221] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 922.337272][T20221] R13: 00007f31b5816218 R14: 00007f31b5816180 R15: 00007ffd81ef52c8 [ 922.345369][T20221] [ 922.354984][T20221] Mem-Info: [ 922.358291][T20221] active_anon:5926 inactive_anon:0 isolated_anon:0 [ 922.358291][T20221] active_file:19252 inactive_file:40279 isolated_file:0 [ 922.358291][T20221] unevictable:768 dirty:466 writeback:0 [ 922.358291][T20221] slab_reclaimable:10790 slab_unreclaimable:94765 [ 922.358291][T20221] mapped:24881 shmem:1404 pagetables:566 [ 922.358291][T20221] sec_pagetables:0 bounce:0 [ 922.358291][T20221] kernel_misc_reclaimable:0 [ 922.358291][T20221] free:1340531 free_pcp:9568 free_cma:0 [ 922.474941][T20221] Node 0 active_anon:23564kB inactive_anon:0kB active_file:77008kB inactive_file:160912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101372kB dirty:1868kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10640kB pagetables:2144kB sec_pagetables:0kB all_unreclaimable? no [ 922.576029][T20223] netlink: 'syz.1.4511': attribute type 1 has an invalid length. [ 922.603621][T20223] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.4511'. [ 922.613998][T20221] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 922.713581][T20221] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 922.808086][T20221] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 922.834421][T20221] Node 0 DMA32 free:1443292kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:23424kB inactive_anon:0kB active_file:77008kB inactive_file:160080kB unevictable:1536kB writepending:1868kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:23712kB local_pcp:15976kB free_cma:0kB [ 922.898150][T20231] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4512'. [ 922.908732][T20221] lowmem_reserve[]: 0 0 0 0 0 [ 922.915107][T20221] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 922.987969][T20221] lowmem_reserve[]: 0 0 0 0 0 [ 923.053576][T20221] Node 1 Normal free:3894804kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19304kB local_pcp:11972kB free_cma:0kB [ 923.173490][T20221] lowmem_reserve[]: 0 0 0 0 0 [ 923.193292][T20221] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 923.209178][T20221] Node 0 DMA32: 2214*4kB (UME) 2278*8kB (UME) 968*16kB (UME) 765*32kB (UME) 379*64kB (UME) 195*128kB (UME) 82*256kB (UME) 36*512kB (UM) 22*1024kB (UM) 11*2048kB (ME) 304*4096kB (UM) = 1445928kB [ 923.271189][T20221] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 923.309969][T20221] Node 1 Normal: 165*4kB (UME) 52*8kB (UME) 32*16kB (UME) 65*32kB (UME) 17*64kB (UME) 5*128kB (UE) 1*256kB (U) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3894804kB [ 923.339900][T20221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 923.357547][T20221] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 923.368508][T20221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 923.382377][T20221] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 923.398740][T20221] 60894 total pagecache pages [ 923.404060][T20221] 0 pages in swap cache [ 923.408262][T20221] Free swap = 124996kB [ 923.412447][T20221] Total swap = 124996kB [ 923.424781][T20221] 2097051 pages RAM [ 923.428828][T20221] 0 pages HighMem/MovableOnly [ 923.434639][T20221] 416927 pages reserved [ 923.438993][T20221] 0 pages cma reserved [ 923.527964][T20240] netlink: 'syz.1.4516': attribute type 21 has an invalid length. [ 930.239658][T20324] bridge0: entered promiscuous mode [ 930.252012][T20321] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.4542'. [ 930.255043][T20323] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.4542'. [ 930.261756][T20324] bridge0: entered allmulticast mode [ 931.620044][T20356] netlink: 'syz.3.4556': attribute type 21 has an invalid length. [ 931.649566][T20356] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4556'. [ 931.650420][T20354] cgroup: fork rejected by pids controller in /syz2 [ 931.796544][T20359] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.4557'. [ 931.822235][T20359] openvswitch: netlink: Duplicate key (type 0). [ 931.908888][T20363] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 931.955903][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.963468][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.000030][T20361] sock: sock_timestamping_bind_phc: sock not bind to device [ 932.603304][T18447] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.239341][T18447] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.382689][T18447] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.489925][T18447] batman_adv: batadv0: Removing interface: netdevsim0 [ 933.535057][T18447] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.229643][T20391] syzkaller0: entered promiscuous mode [ 934.258035][T20391] syzkaller0: entered allmulticast mode [ 934.367193][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 934.387425][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 934.400131][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 934.411104][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 934.419337][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 934.427888][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 934.661531][T20413] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 936.510124][T13409] Bluetooth: hci3: command tx timeout [ 937.940315][T20442] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 937.959466][T20442] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 938.654162][T13409] Bluetooth: hci3: command tx timeout [ 940.081348][T20493] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4593'. [ 940.227934][T20498] netlink: 'syz.3.4594': attribute type 7 has an invalid length. [ 940.489516][T20498] netlink: 17799 bytes leftover after parsing attributes in process `syz.3.4594'. [ 940.505070][T20404] chnl_net:caif_netlink_parms(): no params data found [ 940.663924][T13409] Bluetooth: hci3: command tx timeout [ 941.164627][T20404] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.254069][T20404] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.272743][T20404] bridge_slave_0: entered allmulticast mode [ 941.306623][T20404] bridge_slave_0: entered promiscuous mode [ 941.374747][T18447] hsr_slave_0: left promiscuous mode [ 941.394550][T18447] hsr_slave_1: left promiscuous mode [ 941.412842][T18447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.439461][T18447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.470928][T18447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.519885][T18447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.743678][T13409] Bluetooth: hci3: command tx timeout [ 943.132433][T18447] veth1_vlan: left promiscuous mode [ 944.452741][T18447] team0 (unregistering): Port device team_slave_1 removed [ 944.533266][T18447] team0 (unregistering): Port device C removed [ 945.241923][T20404] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.249893][T20404] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.258039][T20404] bridge_slave_1: entered allmulticast mode [ 945.271256][T20404] bridge_slave_1: entered promiscuous mode [ 945.315428][T20404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.365278][T20404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.441668][T20404] team0: Port device team_slave_0 added [ 945.469248][T20404] team0: Port device team_slave_1 added [ 945.611923][T20404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.642540][T20404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.744649][T20404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.802339][T20404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.837878][T20404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.943521][T20404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.027039][T20561] netlink: 'syz.1.4606': attribute type 10 has an invalid length. [ 946.225148][T20561] team0 (unregistering): Port device team_slave_0 removed [ 946.249583][T20561] team0 (unregistering): Port device team_slave_1 removed [ 946.651370][T20404] hsr_slave_0: entered promiscuous mode [ 946.688543][T20404] hsr_slave_1: entered promiscuous mode [ 946.704789][T20404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 946.712436][T20404] Cannot create hsr debugfs directory [ 946.746604][T20569] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4609'. [ 947.641988][T20595] FAULT_INJECTION: forcing a failure. [ 947.641988][T20595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 947.664271][T20595] CPU: 1 PID: 20595 Comm: syz.1.4613 Not tainted syzkaller #0 [ 947.671810][T20595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 947.681885][T20595] Call Trace: [ 947.685356][T20595] [ 947.688394][T20595] dump_stack_lvl+0x18c/0x250 [ 947.693277][T20595] ? show_regs_print_info+0x20/0x20 [ 947.698590][T20595] ? load_image+0x420/0x420 [ 947.703120][T20595] ? __lock_acquire+0x7d40/0x7d40 [ 947.708173][T20595] ? snprintf+0xe9/0x140 [ 947.712523][T20595] should_fail_ex+0x39d/0x4d0 [ 947.717411][T20595] _copy_to_user+0x2f/0xa0 [ 947.721934][T20595] simple_read_from_buffer+0xe7/0x150 [ 947.727336][T20595] proc_fail_nth_read+0x1e8/0x260 [ 947.732479][T20595] ? proc_fault_inject_write+0x360/0x360 [ 947.738222][T20595] ? fsnotify_perm+0x271/0x5e0 [ 947.743007][T20595] ? proc_fault_inject_write+0x360/0x360 [ 947.748664][T20595] vfs_read+0x28b/0x970 [ 947.752945][T20595] ? kernel_read+0x1e0/0x1e0 [ 947.757553][T20595] ? __fget_files+0x28/0x4b0 [ 947.762249][T20595] ? __fget_files+0x28/0x4b0 [ 947.766860][T20595] ? __fget_files+0x43d/0x4b0 [ 947.771581][T20595] ? __fdget_pos+0x2a3/0x330 [ 947.776362][T20595] ? ksys_read+0x75/0x260 [ 947.780712][T20595] ksys_read+0x150/0x260 [ 947.785065][T20595] ? vfs_write+0x990/0x990 [ 947.789508][T20595] ? lockdep_hardirqs_on+0x98/0x150 [ 947.794726][T20595] do_syscall_64+0x55/0xa0 [ 947.799240][T20595] ? clear_bhb_loop+0x40/0x90 [ 947.803940][T20595] ? clear_bhb_loop+0x40/0x90 [ 947.808729][T20595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 947.814817][T20595] RIP: 0033:0x7f2b5235d60e [ 947.819339][T20595] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 947.840154][T20595] RSP: 002b:00007f2b531ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 947.848677][T20595] RAX: ffffffffffffffda RBX: 00007f2b531cd6c0 RCX: 00007f2b5235d60e [ 947.856674][T20595] RDX: 000000000000000f RSI: 00007f2b531cd0a0 RDI: 0000000000000007 [ 947.864746][T20595] RBP: 00007f2b531cd090 R08: 0000000000000000 R09: 0000000000000000 [ 947.872802][T20595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.880972][T20595] R13: 00007f2b52616038 R14: 00007f2b52615fa0 R15: 00007ffdbeacad28 [ 947.889064][T20595] [ 948.286758][T20609] tap0: tun_chr_ioctl cmd 1074025675 [ 948.292157][T20609] tap0: persist enabled [ 948.700967][T20604] tap0: tun_chr_ioctl cmd 21731 [ 948.848762][T20611] tap0: tun_chr_ioctl cmd 1074025675 [ 948.854897][T20611] tap0: persist enabled [ 949.644321][T20643] FAULT_INJECTION: forcing a failure. [ 949.644321][T20643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 949.685781][T20643] CPU: 1 PID: 20643 Comm: syz.0.4623 Not tainted syzkaller #0 [ 949.693325][T20643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 949.703609][T20643] Call Trace: [ 949.706930][T20643] [ 949.709908][T20643] dump_stack_lvl+0x18c/0x250 [ 949.714650][T20643] ? show_regs_print_info+0x20/0x20 [ 949.720233][T20643] ? load_image+0x420/0x420 [ 949.724966][T20643] ? __might_fault+0xaa/0x120 [ 949.729660][T20643] should_fail_ex+0x39d/0x4d0 [ 949.734367][T20643] copyin+0x1a/0x90 [ 949.738320][T20643] _copy_from_iter+0x404/0x12e0 [ 949.743236][T20643] ? copyin+0x70/0x90 [ 949.747263][T20643] ? copyout_mc+0x70/0x70 [ 949.751912][T20643] ? copyout_mc+0x70/0x70 [ 949.756375][T20643] ? __virt_addr_valid+0x18c/0x540 [ 949.761593][T20643] ? page_copy_sane+0x16a/0x270 [ 949.766917][T20643] copy_page_from_iter+0x7b/0x100 [ 949.772081][T20643] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 949.777950][T20643] packet_sendmsg+0x33ff/0x4c30 [ 949.782851][T20643] ? __might_sleep+0xe0/0xe0 [ 949.787477][T20643] ? mark_lock+0x94/0x320 [ 949.791849][T20643] ? __lock_acquire+0x1273/0x7d40 [ 949.796905][T20643] ? aa_sk_perm+0x83c/0x970 [ 949.801524][T20643] ? packet_getsockopt+0xad0/0xad0 [ 949.806664][T20643] ? tomoyo_gc_thread+0x8d0/0x1410 [ 949.811829][T20643] ? aa_sock_msg_perm+0x94/0x150 [ 949.816875][T20643] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 949.822266][T20643] ? security_socket_sendmsg+0x80/0xa0 [ 949.828177][T20643] ? packet_getsockopt+0xad0/0xad0 [ 949.833893][T20643] ____sys_sendmsg+0x5ba/0x960 [ 949.838974][T20643] ? __lock_acquire+0x7d40/0x7d40 [ 949.844022][T20643] ? __asan_memset+0x22/0x40 [ 949.848639][T20643] ? __sys_sendmsg_sock+0x30/0x30 [ 949.853677][T20643] ? __import_iovec+0x3fa/0x850 [ 949.858550][T20643] ? import_iovec+0x73/0xa0 [ 949.863196][T20643] ___sys_sendmsg+0x2a6/0x360 [ 949.868014][T20643] ? __sys_sendmsg+0x2a0/0x2a0 [ 949.872827][T20643] ? __lock_acquire+0x7d40/0x7d40 [ 949.878178][T20643] __se_sys_sendmsg+0x1c2/0x2b0 [ 949.883254][T20643] ? __x64_sys_sendmsg+0x80/0x80 [ 949.888340][T20643] ? lockdep_hardirqs_on+0x98/0x150 [ 949.893582][T20643] do_syscall_64+0x55/0xa0 [ 949.898034][T20643] ? clear_bhb_loop+0x40/0x90 [ 949.902729][T20643] ? clear_bhb_loop+0x40/0x90 [ 949.907567][T20643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 949.913494][T20643] RIP: 0033:0x7ff4c4f9cdd9 [ 949.918020][T20643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.937911][T20643] RSP: 002b:00007ff4c5e80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.946343][T20643] RAX: ffffffffffffffda RBX: 00007ff4c5215fa0 RCX: 00007ff4c4f9cdd9 [ 949.954507][T20643] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 949.962491][T20643] RBP: 00007ff4c5e80090 R08: 0000000000000000 R09: 0000000000000000 [ 949.970587][T20643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 949.978671][T20643] R13: 00007ff4c5216038 R14: 00007ff4c5215fa0 R15: 00007fff8d8b8598 [ 949.986681][T20643] [ 952.415551][T20638] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4621'. [ 952.668631][T20663] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4627'. [ 952.678501][T20663] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4627'. [ 953.025404][T20660] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4627'. [ 953.057790][T20663] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4627'. [ 953.381771][T20404] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 953.409347][T20404] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 953.427776][T20404] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 953.455992][T20404] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 953.650771][T20685] netlink: 'syz.3.4632': attribute type 10 has an invalid length. [ 953.883848][T20685] team_slave_1: left promiscuous mode [ 953.910406][T20685] team_slave_1: left allmulticast mode [ 954.059281][T20685] team0 (unregistering): Port device team_slave_1 removed [ 954.208807][T20404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.295341][T20404] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.337315][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.344791][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.371272][T20703] netlink: 'syz.0.4634': attribute type 29 has an invalid length. [ 954.426842][T18413] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.434212][T18413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.473583][T20703] netlink: 'syz.0.4634': attribute type 29 has an invalid length. [ 955.319369][T20404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.452634][T20404] veth0_vlan: entered promiscuous mode [ 955.511165][T20404] veth1_vlan: entered promiscuous mode [ 955.577421][T20404] veth0_macvtap: entered promiscuous mode [ 955.601324][T20404] veth1_macvtap: entered promiscuous mode [ 955.644160][T20404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.678543][T20404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.714302][T20404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.745759][T20404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.762647][T20404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.775277][T20404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.803416][T20404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.823929][T20404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.853449][T20404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.880302][T20404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.892907][T20404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.905733][T20404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.928774][T20404] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.956693][T20404] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.974544][T20404] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.005306][T20404] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.260334][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.280135][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.327151][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.335943][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.622894][T20753] sit0: entered allmulticast mode [ 956.856997][T20757] sit0: entered promiscuous mode [ 957.826194][T20772] netlink: 'syz.3.4646': attribute type 29 has an invalid length. [ 957.861376][T20772] netlink: 'syz.3.4646': attribute type 29 has an invalid length. [ 958.096669][T20778] netlink: 3787 bytes leftover after parsing attributes in process `syz.2.4648'. [ 958.380767][T20786] netlink: 'syz.2.4650': attribute type 10 has an invalid length. [ 958.399154][T20784] FAULT_INJECTION: forcing a failure. [ 958.399154][T20784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.429512][T20784] CPU: 0 PID: 20784 Comm: syz.0.4649 Not tainted syzkaller #0 [ 958.437065][T20784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 958.447772][T20784] Call Trace: [ 958.451109][T20784] [ 958.454166][T20784] dump_stack_lvl+0x18c/0x250 [ 958.458988][T20784] ? show_regs_print_info+0x20/0x20 [ 958.464242][T20784] ? load_image+0x420/0x420 [ 958.468817][T20784] ? __might_fault+0xaa/0x120 [ 958.473557][T20784] ? __lock_acquire+0x7d40/0x7d40 [ 958.478652][T20784] should_fail_ex+0x39d/0x4d0 [ 958.483741][T20784] _copy_from_iter+0x1d9/0x12e0 [ 958.483744][T20786] team0: Device vxcan1 is of different type [ 958.488662][T20784] ? rep_movs_alternative+0x4a/0x90 [ 958.488696][T20784] ? _copy_from_iter+0x24e/0x12e0 [ 958.488723][T20784] ? __virt_addr_valid+0x18c/0x540 [ 958.488750][T20784] ? __lock_acquire+0x7d40/0x7d40 [ 958.488774][T20784] ? copyout_mc+0x70/0x70 [ 958.488804][T20784] ? copyout_mc+0x70/0x70 [ 958.488831][T20784] ? __virt_addr_valid+0x18c/0x540 [ 958.488861][T20784] ? page_copy_sane+0x16a/0x270 [ 958.488893][T20784] copy_page_from_iter+0x7b/0x100 [ 958.488926][T20784] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 958.488967][T20784] unix_stream_sendmsg+0x562/0xbf0 [ 958.489004][T20784] ? unix_show_fdinfo+0x270/0x270 [ 958.489022][T20784] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 958.489050][T20784] ? aa_sock_msg_perm+0x94/0x150 [ 958.489077][T20784] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 958.489100][T20784] ? security_socket_sendmsg+0x80/0xa0 [ 958.489123][T20784] ? unix_show_fdinfo+0x270/0x270 [ 958.489144][T20784] ____sys_sendmsg+0x5ba/0x960 [ 958.489174][T20784] ? __asan_memset+0x22/0x40 [ 958.489200][T20784] ? __sys_sendmsg_sock+0x30/0x30 [ 958.489218][T20784] ? __import_iovec+0x5f2/0x850 [ 958.489246][T20784] ? import_iovec+0x73/0xa0 [ 958.489271][T20784] ___sys_sendmsg+0x2a6/0x360 [ 958.612141][T20784] ? get_pid_task+0x20/0x1e0 [ 958.616861][T20784] ? __sys_sendmsg+0x2a0/0x2a0 [ 958.621835][T20784] ? __lock_acquire+0x7d40/0x7d40 [ 958.626989][T20784] __se_sys_sendmsg+0x1c2/0x2b0 [ 958.631946][T20784] ? __x64_sys_sendmsg+0x80/0x80 [ 958.637091][T20784] ? lockdep_hardirqs_on+0x98/0x150 [ 958.642316][T20784] do_syscall_64+0x55/0xa0 [ 958.646834][T20784] ? clear_bhb_loop+0x40/0x90 [ 958.651745][T20784] ? clear_bhb_loop+0x40/0x90 [ 958.656451][T20784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 958.662363][T20784] RIP: 0033:0x7ff4c4f9cdd9 [ 958.666802][T20784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.686625][T20784] RSP: 002b:00007ff4c5e80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 958.695108][T20784] RAX: ffffffffffffffda RBX: 00007ff4c5215fa0 RCX: 00007ff4c4f9cdd9 [ 958.703181][T20784] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 958.711251][T20784] RBP: 00007ff4c5e80090 R08: 0000000000000000 R09: 0000000000000000 [ 958.719237][T20784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 958.727220][T20784] R13: 00007ff4c5216038 R14: 00007ff4c5215fa0 R15: 00007fff8d8b8598 [ 958.735241][T20784] [ 959.335222][T20802] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4653'. [ 959.791849][T20808] delete_channel: no stack [ 959.847037][T20816] netlink: 763 bytes leftover after parsing attributes in process `syz.3.4658'. [ 962.902598][T20861] netlink: 'syz.2.4670': attribute type 29 has an invalid length. [ 962.946432][T20864] netlink: 'syz.1.4671': attribute type 21 has an invalid length. [ 962.949974][T20861] netlink: 'syz.2.4670': attribute type 29 has an invalid length. [ 965.365156][T20901] netlink: 'syz.2.4678': attribute type 4 has an invalid length. [ 966.261842][T20940] netlink: 'syz.1.4688': attribute type 21 has an invalid length. [ 966.295621][T20940] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4688'. [ 966.476391][T20949] FAULT_INJECTION: forcing a failure. [ 966.476391][T20949] name failslab, interval 1, probability 0, space 0, times 0 [ 966.508092][T20949] CPU: 0 PID: 20949 Comm: syz.2.4691 Not tainted syzkaller #0 [ 966.515638][T20949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 966.525749][T20949] Call Trace: [ 966.529072][T20949] [ 966.532042][T20949] dump_stack_lvl+0x18c/0x250 [ 966.536773][T20949] ? sctp_sendmsg+0x1575/0x28c0 [ 966.541704][T20949] ? ___sys_sendmsg+0x2a6/0x360 [ 966.546922][T20949] ? show_regs_print_info+0x20/0x20 [ 966.552216][T20949] ? load_image+0x420/0x420 [ 966.556881][T20949] should_fail_ex+0x39d/0x4d0 [ 966.561718][T20949] should_failslab+0x9/0x20 [ 966.566273][T20949] slab_pre_alloc_hook+0x59/0x310 [ 966.571585][T20949] ? sctp_add_bind_addr+0x8c/0x360 [ 966.576768][T20949] __kmem_cache_alloc_node+0x53/0x250 [ 966.582278][T20949] ? sctp_add_bind_addr+0x8c/0x360 [ 966.587604][T20949] kmalloc_trace+0x2a/0xe0 [ 966.592068][T20949] sctp_add_bind_addr+0x8c/0x360 [ 966.597141][T20949] sctp_copy_local_addr_list+0x315/0x4f0 [ 966.603007][T20949] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 966.608764][T20949] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 966.614874][T20949] ? sctp_v4_is_any+0x35/0x60 [ 966.619758][T20949] ? sctp_copy_one_addr+0x8c/0x350 [ 966.624913][T20949] sctp_bind_addr_copy+0xb3/0x3c0 [ 966.630064][T20949] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 966.636441][T20949] sctp_connect_new_asoc+0x2f9/0x6a0 [ 966.641854][T20949] ? __sctp_connect+0xd80/0xd80 [ 966.646824][T20949] ? __local_bh_enable_ip+0x13a/0x1c0 [ 966.652238][T20949] ? _local_bh_enable+0xa0/0xa0 [ 966.657292][T20949] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 966.663146][T20949] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 966.669095][T20949] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 966.674772][T20949] ? security_sctp_bind_connect+0x89/0xb0 [ 966.680560][T20949] sctp_sendmsg+0x1575/0x28c0 [ 966.685297][T20949] ? sctp_getsockopt+0xb60/0xb60 [ 966.690378][T20949] ? aa_sk_perm+0x83c/0x970 [ 966.694937][T20949] ? aa_af_perm+0x330/0x330 [ 966.699491][T20949] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 966.705999][T20949] ? sock_rps_record_flow+0x19/0x3f0 [ 966.709751][T20951] FAULT_INJECTION: forcing a failure. [ 966.709751][T20951] name failslab, interval 1, probability 0, space 0, times 0 [ 966.711322][T20949] ? inet_sendmsg+0x7c/0x2f0 [ 966.728568][T20949] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 966.733903][T20949] ? security_socket_sendmsg+0x80/0xa0 [ 966.739396][T20949] ? inet_send_prepare+0x260/0x260 [ 966.744541][T20949] ____sys_sendmsg+0x5ba/0x960 [ 966.749374][T20949] ? __lock_acquire+0x7d40/0x7d40 [ 966.754430][T20949] ? __asan_memset+0x22/0x40 [ 966.759233][T20949] ? __sys_sendmsg_sock+0x30/0x30 [ 966.764311][T20949] ? __import_iovec+0x5f2/0x850 [ 966.769221][T20949] ? import_iovec+0x73/0xa0 [ 966.773769][T20949] ___sys_sendmsg+0x2a6/0x360 [ 966.778477][T20949] ? get_pid_task+0x20/0x1e0 [ 966.783102][T20949] ? __sys_sendmsg+0x2a0/0x2a0 [ 966.787912][T20949] ? __lock_acquire+0x7d40/0x7d40 [ 966.793081][T20949] __se_sys_sendmsg+0x1c2/0x2b0 [ 966.797980][T20949] ? __x64_sys_sendmsg+0x80/0x80 [ 966.802969][T20949] ? lockdep_hardirqs_on+0x98/0x150 [ 966.808204][T20949] do_syscall_64+0x55/0xa0 [ 966.812666][T20949] ? clear_bhb_loop+0x40/0x90 [ 966.817374][T20949] ? clear_bhb_loop+0x40/0x90 [ 966.822103][T20949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 966.828197][T20949] RIP: 0033:0x7fcd5f99cdd9 [ 966.832816][T20949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.852560][T20949] RSP: 002b:00007fcd6081e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 966.861026][T20949] RAX: ffffffffffffffda RBX: 00007fcd5fc15fa0 RCX: 00007fcd5f99cdd9 [ 966.869032][T20949] RDX: 0000000000004000 RSI: 0000200000000e40 RDI: 0000000000000003 [ 966.877232][T20949] RBP: 00007fcd6081e090 R08: 0000000000000000 R09: 0000000000000000 [ 966.885409][T20949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 966.893398][T20949] R13: 00007fcd5fc16038 R14: 00007fcd5fc15fa0 R15: 00007ffcb1c5f2c8 [ 966.901407][T20949] [ 966.904443][T20951] CPU: 1 PID: 20951 Comm: syz.1.4692 Not tainted syzkaller #0 [ 966.911958][T20951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 966.922061][T20951] Call Trace: [ 966.925390][T20951] [ 966.928378][T20951] dump_stack_lvl+0x18c/0x250 [ 966.933109][T20951] ? sctp_sendmsg+0x1575/0x28c0 [ 966.938100][T20951] ? ___sys_sendmsg+0x2a6/0x360 [ 966.943002][T20951] ? show_regs_print_info+0x20/0x20 [ 966.948269][T20951] ? load_image+0x420/0x420 [ 966.952844][T20951] should_fail_ex+0x39d/0x4d0 [ 966.957578][T20951] should_failslab+0x9/0x20 [ 966.962228][T20951] slab_pre_alloc_hook+0x59/0x310 [ 966.967311][T20951] ? sctp_add_bind_addr+0x8c/0x360 [ 966.972492][T20951] __kmem_cache_alloc_node+0x53/0x250 [ 966.977916][T20951] ? sctp_add_bind_addr+0x8c/0x360 [ 966.983070][T20951] kmalloc_trace+0x2a/0xe0 [ 966.987638][T20951] sctp_add_bind_addr+0x8c/0x360 [ 966.992614][T20951] sctp_copy_local_addr_list+0x315/0x4f0 [ 966.998271][T20951] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 967.004012][T20951] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 967.010100][T20951] ? sctp_v6_is_any+0x64/0x70 [ 967.014817][T20951] ? sctp_copy_one_addr+0x8c/0x350 [ 967.019972][T20951] sctp_bind_addr_copy+0xb3/0x3c0 [ 967.025035][T20951] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 967.031410][T20951] sctp_connect_new_asoc+0x2f9/0x6a0 [ 967.036745][T20951] ? __sctp_connect+0xd80/0xd80 [ 967.041626][T20951] ? __local_bh_enable_ip+0x13a/0x1c0 [ 967.047024][T20951] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 967.052589][T20951] ? security_sctp_bind_connect+0x89/0xb0 [ 967.058329][T20951] sctp_sendmsg+0x1575/0x28c0 [ 967.063035][T20951] ? sctp_getsockopt+0xb60/0xb60 [ 967.068074][T20951] ? aa_sk_perm+0x83c/0x970 [ 967.072602][T20951] ? aa_af_perm+0x330/0x330 [ 967.077212][T20951] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 967.083738][T20951] ? sock_rps_record_flow+0x19/0x3f0 [ 967.089081][T20951] ? inet_sendmsg+0xe9/0x2f0 [ 967.093723][T20951] ? inet_send_prepare+0x260/0x260 [ 967.098886][T20951] ____sys_sendmsg+0x5ba/0x960 [ 967.103767][T20951] ? __lock_acquire+0x7d40/0x7d40 [ 967.108935][T20951] ? __asan_memset+0x22/0x40 [ 967.113601][T20951] ? __sys_sendmsg_sock+0x30/0x30 [ 967.118655][T20951] ? __import_iovec+0x5f2/0x850 [ 967.123529][T20951] ? import_iovec+0x73/0xa0 [ 967.128069][T20951] ___sys_sendmsg+0x2a6/0x360 [ 967.132878][T20951] ? get_pid_task+0x20/0x1e0 [ 967.137527][T20951] ? __sys_sendmsg+0x2a0/0x2a0 [ 967.142336][T20951] ? __lock_acquire+0x7d40/0x7d40 [ 967.147489][T20951] __se_sys_sendmsg+0x1c2/0x2b0 [ 967.152357][T20951] ? __x64_sys_sendmsg+0x80/0x80 [ 967.157429][T20951] ? lockdep_hardirqs_on+0x98/0x150 [ 967.162707][T20951] do_syscall_64+0x55/0xa0 [ 967.167140][T20951] ? clear_bhb_loop+0x40/0x90 [ 967.171848][T20951] ? clear_bhb_loop+0x40/0x90 [ 967.176546][T20951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 967.182707][T20951] RIP: 0033:0x7f2b5239cdd9 [ 967.187160][T20951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.206804][T20951] RSP: 002b:00007f2b531cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 967.215243][T20951] RAX: ffffffffffffffda RBX: 00007f2b52615fa0 RCX: 00007f2b5239cdd9 [ 967.223320][T20951] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 967.231657][T20951] RBP: 00007f2b531cd090 R08: 0000000000000000 R09: 0000000000000000 [ 967.239727][T20951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 967.247732][T20951] R13: 00007f2b52616038 R14: 00007f2b52615fa0 R15: 00007ffdbeacad28 [ 967.255741][T20951] [ 967.362375][T20955] FAULT_INJECTION: forcing a failure. [ 967.362375][T20955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.384231][T20955] CPU: 0 PID: 20955 Comm: syz.0.4694 Not tainted syzkaller #0 [ 967.391784][T20955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 967.401885][T20955] Call Trace: [ 967.405210][T20955] [ 967.408182][T20955] dump_stack_lvl+0x18c/0x250 [ 967.412930][T20955] ? show_regs_print_info+0x20/0x20 [ 967.418196][T20955] ? load_image+0x420/0x420 [ 967.422761][T20955] ? __might_fault+0xaa/0x120 [ 967.427583][T20955] ? __lock_acquire+0x7d40/0x7d40 [ 967.432650][T20955] should_fail_ex+0x39d/0x4d0 [ 967.437456][T20955] _copy_from_user+0x2f/0xe0 [ 967.442071][T20955] ___sys_sendmsg+0x1c7/0x360 [ 967.446766][T20955] ? get_pid_task+0x20/0x1e0 [ 967.451384][T20955] ? __sys_sendmsg+0x2a0/0x2a0 [ 967.456189][T20955] ? __lock_acquire+0x7d40/0x7d40 [ 967.461249][T20955] __se_sys_sendmsg+0x1c2/0x2b0 [ 967.466219][T20955] ? __x64_sys_sendmsg+0x80/0x80 [ 967.471267][T20955] ? lockdep_hardirqs_on+0x98/0x150 [ 967.476487][T20955] do_syscall_64+0x55/0xa0 [ 967.480920][T20955] ? clear_bhb_loop+0x40/0x90 [ 967.485702][T20955] ? clear_bhb_loop+0x40/0x90 [ 967.490396][T20955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 967.496390][T20955] RIP: 0033:0x7ff4c4f9cdd9 [ 967.500931][T20955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.520640][T20955] RSP: 002b:00007ff4c5e80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 967.529182][T20955] RAX: ffffffffffffffda RBX: 00007ff4c5215fa0 RCX: 00007ff4c4f9cdd9 [ 967.537272][T20955] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 967.545263][T20955] RBP: 00007ff4c5e80090 R08: 0000000000000000 R09: 0000000000000000 [ 967.553472][T20955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.561552][T20955] R13: 00007ff4c5216038 R14: 00007ff4c5215fa0 R15: 00007fff8d8b8598 [ 967.569551][T20955] [ 967.755019][T20959] netlink: 'syz.3.4696': attribute type 10 has an invalid length. [ 967.822376][T20959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.905699][T20959] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 968.230098][T20971] netlink: 'syz.1.4699': attribute type 10 has an invalid length. [ 968.732622][T20985] netlink: 'syz.0.4706': attribute type 3 has an invalid length. [ 968.746505][T20985] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4706'. [ 968.996114][T20988] mac80211_hwsim hwsim41 ..ãc¤±: renamed from wlan1 [ 969.028240][T20988] netlink: 'syz.0.4707': attribute type 5 has an invalid length. [ 969.044204][T20988] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.4707'. [ 969.464993][T20997] netlink: 'syz.3.4711': attribute type 3 has an invalid length. [ 969.500508][T20997] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4711'. [ 969.671425][T21003] netlink: 'syz.0.4713': attribute type 9 has an invalid length. [ 969.712389][T21003] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4713'. [ 971.005034][T13409] Bluetooth: hci1: unexpected event for opcode 0xdc46 [ 971.675228][T21038] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4724'. [ 972.408701][T21052] sock: sock_set_timeout: `syz.1.4727' (pid 21052) tries to set negative timeout [ 972.736223][T13409] Bluetooth: hci0: unexpected event for opcode 0xdc46 [ 972.886068][T21058] FAULT_INJECTION: forcing a failure. [ 972.886068][T21058] name failslab, interval 1, probability 0, space 0, times 0 [ 972.984397][T21058] CPU: 0 PID: 21058 Comm: syz.0.4728 Not tainted syzkaller #0 [ 972.992050][T21058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 973.002276][T21058] Call Trace: [ 973.005608][T21058] [ 973.008591][T21058] dump_stack_lvl+0x18c/0x250 [ 973.013737][T21058] ? sctp_sendmsg+0x1575/0x28c0 [ 973.018853][T21058] ? ___sys_sendmsg+0x2a6/0x360 [ 973.023765][T21058] ? show_regs_print_info+0x20/0x20 [ 973.029118][T21058] ? load_image+0x420/0x420 [ 973.033734][T21058] should_fail_ex+0x39d/0x4d0 [ 973.038485][T21058] should_failslab+0x9/0x20 [ 973.043043][T21058] slab_pre_alloc_hook+0x59/0x310 [ 973.048129][T21058] ? sctp_add_bind_addr+0x8c/0x360 [ 973.053368][T21058] __kmem_cache_alloc_node+0x53/0x250 [ 973.058795][T21058] ? sctp_add_bind_addr+0x8c/0x360 [ 973.063937][T21058] kmalloc_trace+0x2a/0xe0 [ 973.068388][T21058] sctp_add_bind_addr+0x8c/0x360 [ 973.073373][T21058] sctp_copy_local_addr_list+0x315/0x4f0 [ 973.079043][T21058] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 973.084801][T21058] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 973.090909][T21058] ? sctp_v4_is_any+0x35/0x60 [ 973.095615][T21058] ? sctp_copy_one_addr+0x8c/0x350 [ 973.100761][T21058] sctp_bind_addr_copy+0xb3/0x3c0 [ 973.106077][T21058] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 973.112620][T21058] sctp_connect_new_asoc+0x2f9/0x6a0 [ 973.118037][T21058] ? __sctp_connect+0xd80/0xd80 [ 973.122909][T21058] ? __local_bh_enable_ip+0x13a/0x1c0 [ 973.128318][T21058] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 973.133891][T21058] ? security_sctp_bind_connect+0x89/0xb0 [ 973.139697][T21058] sctp_sendmsg+0x1575/0x28c0 [ 973.144518][T21058] ? sctp_getsockopt+0xb60/0xb60 [ 973.149481][T21058] ? aa_sk_perm+0x83c/0x970 [ 973.154030][T21058] ? aa_af_perm+0x330/0x330 [ 973.158733][T21058] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 973.165178][T21058] ? sock_rps_record_flow+0x19/0x3f0 [ 973.170509][T21058] ? inet_sendmsg+0xe9/0x2f0 [ 973.175211][T21058] ? inet_send_prepare+0x260/0x260 [ 973.180358][T21058] ____sys_sendmsg+0x5ba/0x960 [ 973.185215][T21058] ? __lock_acquire+0x7d40/0x7d40 [ 973.190311][T21058] ? __asan_memset+0x22/0x40 [ 973.195034][T21058] ? __sys_sendmsg_sock+0x30/0x30 [ 973.200207][T21058] ? __import_iovec+0x5f2/0x850 [ 973.205119][T21058] ? import_iovec+0x73/0xa0 [ 973.209668][T21058] ___sys_sendmsg+0x2a6/0x360 [ 973.214413][T21058] ? __sys_sendmsg+0x2a0/0x2a0 [ 973.219251][T21058] ? trace_call_bpf+0xc3/0x6c0 [ 973.224101][T21058] __se_sys_sendmsg+0x1c2/0x2b0 [ 973.229041][T21058] ? __x64_sys_sendmsg+0x80/0x80 [ 973.234037][T21058] ? lockdep_hardirqs_on+0x98/0x150 [ 973.239270][T21058] do_syscall_64+0x55/0xa0 [ 973.243714][T21058] ? clear_bhb_loop+0x40/0x90 [ 973.248420][T21058] ? clear_bhb_loop+0x40/0x90 [ 973.253127][T21058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 973.259069][T21058] RIP: 0033:0x7ff4c4f9cdd9 [ 973.263518][T21058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.283334][T21058] RSP: 002b:00007ff4c5e80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 973.291878][T21058] RAX: ffffffffffffffda RBX: 00007ff4c5215fa0 RCX: 00007ff4c4f9cdd9 [ 973.300029][T21058] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 973.308027][T21058] RBP: 00007ff4c5e80090 R08: 0000000000000000 R09: 0000000000000000 [ 973.316853][T21058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 973.325356][T21058] R13: 00007ff4c5216038 R14: 00007ff4c5215fa0 R15: 00007fff8d8b8598 [ 973.333499][T21058] [ 974.684960][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 974.697378][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 974.710285][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 974.734146][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 974.744733][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 974.752729][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 975.422057][T18447] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.736016][T18447] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.823696][ T5782] Bluetooth: hci0: command tx timeout [ 976.979763][T18447] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.187134][T18447] batman_adv: batadv0: Removing interface: netdevsim0 [ 977.246870][T18447] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.955115][T21071] chnl_net:caif_netlink_parms(): no params data found [ 978.568253][T21071] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.575775][T21071] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.583838][T21071] bridge_slave_0: entered allmulticast mode [ 978.591783][T21071] bridge_slave_0: entered promiscuous mode [ 978.601422][T21071] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.609042][T21071] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.650160][T21071] bridge_slave_1: entered allmulticast mode [ 978.699069][T21071] bridge_slave_1: entered promiscuous mode [ 978.904242][ T5782] Bluetooth: hci0: command tx timeout [ 979.279221][T21071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.219375][T21071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.983662][ T5782] Bluetooth: hci0: command tx timeout [ 980.997886][T21071] team0: Port device team_slave_0 added [ 981.035251][T21116] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4744'. [ 981.250603][T21071] team0: Port device team_slave_1 added [ 981.493919][T21071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 981.501044][T21071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.530248][T21125] netlink: 'syz.2.4746': attribute type 64 has an invalid length. [ 981.537874][T21071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 981.678573][T21071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.705612][T21071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.736320][T21071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 981.764910][T21125] netlink: 'syz.2.4746': attribute type 64 has an invalid length. [ 982.057116][T21071] hsr_slave_0: entered promiscuous mode [ 982.149951][T21071] hsr_slave_1: entered promiscuous mode [ 982.200710][T21071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 982.221605][T21071] Cannot create hsr debugfs directory [ 983.027657][T21151] netlink: 'syz.2.4759': attribute type 9 has an invalid length. [ 983.064865][ T5782] Bluetooth: hci0: command tx timeout [ 983.213773][T21151] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4759'. [ 984.710983][T21165] bˆ¡cÊRݘOC‰ÿæ: renamed from lo (while UP) [ 985.832669][T21181] netlink: 'syz.2.4761': attribute type 3 has an invalid length. [ 985.904158][T21180] tap1: tun_chr_ioctl cmd 1074025677 [ 985.909774][T21181] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4761'. [ 985.909839][T21180] tap1: linktype set to 778 [ 986.246197][T21171] tap1: tun_chr_ioctl cmd 2147767511 [ 986.861727][T21193] sctp: [Deprecated]: syz.0.4765 (pid 21193) Use of struct sctp_assoc_value in delayed_ack socket option. [ 986.861727][T21193] Use struct sctp_sack_info instead [ 987.591924][T21071] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 987.733491][T18447] hsr_slave_0: left promiscuous mode [ 987.804141][T18447] hsr_slave_1: left promiscuous mode [ 987.862999][T18447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.903710][T18447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.952159][T18447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.970575][T18447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.985216][T18447] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 987.999032][T18447] batman_adv: batadv0: Removing interface: virt_wifi0 [ 988.009414][T18447] bridge_slave_1: left allmulticast mode [ 988.024173][T18447] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.106789][T18447] bridge_slave_0: left promiscuous mode [ 988.122671][T18447] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.292884][T18447] veth1_vlan: left promiscuous mode [ 988.327543][T18447] veth0_vlan: left promiscuous mode [ 990.387306][T18447] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.215291][T18447] .` (unregistering): Released all slaves [ 991.415004][T21071] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 991.439382][T21071] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 991.506545][T21222] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4771'. [ 991.516268][T21222] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4771'. [ 991.553841][T21228] netlink: 'syz.2.4772': attribute type 21 has an invalid length. [ 991.561824][T21228] IPv6: NLM_F_CREATE should be specified when creating new route [ 991.624289][T21228] IPv6: Can't replace route, no match found [ 991.684541][T21071] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 991.998172][T21071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.123795][T21241] netlink: 'syz.2.4775': attribute type 10 has an invalid length. [ 992.217161][T21071] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.288632][T18444] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.296304][T18444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.373986][T18444] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.381279][T18444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 992.544545][T21247] netlink: 'syz.3.4777': attribute type 12 has an invalid length. [ 992.577359][T21247] netlink: 'syz.3.4777': attribute type 11 has an invalid length. [ 992.623020][T21247] netlink: 188816 bytes leftover after parsing attributes in process `syz.3.4777'. [ 993.415082][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.421697][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.445282][T21071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 993.673024][T21071] veth0_vlan: entered promiscuous mode [ 993.715313][T21071] veth1_vlan: entered promiscuous mode [ 993.804644][T21274] tun0: tun_chr_ioctl cmd 1074025675 [ 993.810358][T21274] tun0: persist enabled [ 993.890680][T21071] veth0_macvtap: entered promiscuous mode [ 993.904088][T21280] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 993.910718][T21280] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 993.937477][T21274] tun0: tun_chr_ioctl cmd 1074025675 [ 993.942962][T21274] tun0: persist disabled [ 994.107098][T21071] veth1_macvtap: entered promiscuous mode [ 994.203279][T21071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.242810][T21071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.266312][T21071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.307821][T21071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.341009][T21071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 994.373194][T21071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 994.402821][T21071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.433717][T21071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 994.445219][T21071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.455739][T21071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 994.469387][T21071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.509433][T21071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 994.579739][T21071] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.609517][T21071] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.639420][T21071] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.664482][T21071] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.733830][T18447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.759141][T18447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.882205][T18413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.893484][T18413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.110090][T21334] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4792'. [ 998.129125][T21361] FAULT_INJECTION: forcing a failure. [ 998.129125][T21361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.164676][T21361] CPU: 0 PID: 21361 Comm: syz.1.4803 Not tainted syzkaller #0 [ 998.172416][T21361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 998.182618][T21361] Call Trace: [ 998.186037][T21361] [ 998.189274][T21361] dump_stack_lvl+0x18c/0x250 [ 998.194015][T21361] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 998.200340][T21361] ? show_regs_print_info+0x20/0x20 [ 998.205653][T21361] ? load_image+0x420/0x420 [ 998.210251][T21361] should_fail_ex+0x39d/0x4d0 [ 998.215098][T21361] _copy_from_user+0x2f/0xe0 [ 998.219821][T21361] csum_and_copy_from_iter+0x476/0x14a0 [ 998.225468][T21361] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 998.231331][T21361] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 998.237387][T21361] ? lock_chain_count+0x20/0x20 [ 998.242320][T21361] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 998.248629][T21361] ip_generic_getfrag+0x163/0x2f0 [ 998.253708][T21361] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 998.259932][T21361] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 998.264854][T21361] __ip6_append_data+0x1ed8/0x3c50 [ 998.270152][T21361] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 998.275072][T21361] ? ip6_setup_cork+0xfe0/0xfe0 [ 998.280001][T21361] ip6_append_data+0x1b0/0x350 [ 998.284833][T21361] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 998.289733][T21361] udpv6_sendmsg+0xbe4/0x2390 [ 998.294537][T21361] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 998.299479][T21361] ? udp_v6_early_demux+0xf80/0xf80 [ 998.304744][T21361] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 998.311141][T21361] ? inet_send_prepare+0x1b3/0x260 [ 998.316333][T21361] ? _local_bh_enable+0xa0/0xa0 [ 998.321243][T21361] ? inet_send_prepare+0x1b3/0x260 [ 998.326630][T21361] ? inet_send_prepare+0x1b3/0x260 [ 998.332326][T21361] ? inet6_sendmsg+0x5f/0xd0 [ 998.336971][T21361] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 998.342332][T21361] ____sys_sendmsg+0x5ba/0x960 [ 998.347243][T21361] ? __lock_acquire+0x7d40/0x7d40 [ 998.352421][T21361] ? __asan_memset+0x22/0x40 [ 998.357084][T21361] ? __sys_sendmsg_sock+0x30/0x30 [ 998.362283][T21361] ? __import_iovec+0x3fa/0x850 [ 998.367483][T21361] ? import_iovec+0x73/0xa0 [ 998.372231][T21361] ___sys_sendmsg+0x2a6/0x360 [ 998.376968][T21361] ? __sys_sendmsg+0x2a0/0x2a0 [ 998.381817][T21361] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 998.388148][T21361] __se_sys_sendmsg+0x1c2/0x2b0 [ 998.393156][T21361] ? __x64_sys_sendmsg+0x80/0x80 [ 998.398186][T21361] ? lockdep_hardirqs_on+0x98/0x150 [ 998.403536][T21361] do_syscall_64+0x55/0xa0 [ 998.408007][T21361] ? clear_bhb_loop+0x40/0x90 [ 998.412748][T21361] ? clear_bhb_loop+0x40/0x90 [ 998.417485][T21361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 998.423447][T21361] RIP: 0033:0x7fe300b9cdd9 [ 998.427918][T21361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.447839][T21361] RSP: 002b:00007fe301a45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 998.456421][T21361] RAX: ffffffffffffffda RBX: 00007fe300e15fa0 RCX: 00007fe300b9cdd9 [ 998.464464][T21361] RDX: 000000000000ff00 RSI: 0000200000000380 RDI: 0000000000000007 [ 998.472492][T21361] RBP: 00007fe301a45090 R08: 0000000000000000 R09: 0000000000000000 [ 998.480698][T21361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.488808][T21361] R13: 00007fe300e16038 R14: 00007fe300e15fa0 R15: 00007ffd44516f78 [ 998.497028][T21361] [ 998.668665][T21373] netlink: 'syz.0.4808': attribute type 3 has an invalid length. [ 998.693486][T21373] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4808'. [ 999.045465][T21391] netlink: 'syz.3.4811': attribute type 10 has an invalid length. [ 999.132248][T21392] netlink: 'syz.0.4812': attribute type 21 has an invalid length. [ 999.154100][T21392] IPv6: Can't replace route, no match found [ 999.689330][T21407] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4820'. [ 1002.039922][T21439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1002.047454][T21439] IPv6: NLM_F_CREATE should be set when creating new route [ 1002.055223][T21439] IPv6: NLM_F_CREATE should be set when creating new route [ 1002.062708][T21439] IPv6: NLM_F_CREATE should be set when creating new route [ 1002.260385][T21443] FAULT_INJECTION: forcing a failure. [ 1002.260385][T21443] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.322006][T21443] CPU: 1 PID: 21443 Comm: syz.2.4834 Not tainted syzkaller #0 [ 1002.329553][T21443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1002.339745][T21443] Call Trace: [ 1002.343255][T21443] [ 1002.346396][T21443] dump_stack_lvl+0x18c/0x250 [ 1002.351133][T21443] ? sctp_sendmsg+0x1575/0x28c0 [ 1002.356111][T21443] ? ___sys_sendmsg+0x2a6/0x360 [ 1002.361002][T21443] ? show_regs_print_info+0x20/0x20 [ 1002.366251][T21443] ? load_image+0x420/0x420 [ 1002.371429][T21443] should_fail_ex+0x39d/0x4d0 [ 1002.376249][T21443] should_failslab+0x9/0x20 [ 1002.380802][T21443] slab_pre_alloc_hook+0x59/0x310 [ 1002.385970][T21443] ? sctp_add_bind_addr+0x8c/0x360 [ 1002.391129][T21443] __kmem_cache_alloc_node+0x53/0x250 [ 1002.396555][T21443] ? sctp_add_bind_addr+0x8c/0x360 [ 1002.401796][T21443] kmalloc_trace+0x2a/0xe0 [ 1002.406257][T21443] sctp_add_bind_addr+0x8c/0x360 [ 1002.411326][T21443] sctp_copy_local_addr_list+0x315/0x4f0 [ 1002.417113][T21443] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 1002.422885][T21443] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1002.429007][T21443] ? sctp_v4_is_any+0x35/0x60 [ 1002.433729][T21443] ? sctp_copy_one_addr+0x8c/0x350 [ 1002.438888][T21443] sctp_bind_addr_copy+0xb3/0x3c0 [ 1002.443955][T21443] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1002.450505][T21443] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1002.455837][T21443] ? __sctp_connect+0xd80/0xd80 [ 1002.460733][T21443] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1002.466240][T21443] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1002.472015][T21443] ? security_sctp_bind_connect+0x89/0xb0 [ 1002.477816][T21443] sctp_sendmsg+0x1575/0x28c0 [ 1002.482650][T21443] ? sctp_getsockopt+0xb60/0xb60 [ 1002.487629][T21443] ? aa_sk_perm+0x83c/0x970 [ 1002.492196][T21443] ? aa_af_perm+0x330/0x330 [ 1002.496821][T21443] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1002.503368][T21443] ? sock_rps_record_flow+0x19/0x3f0 [ 1002.508704][T21443] ? inet_sendmsg+0xe9/0x2f0 [ 1002.513328][T21443] ? inet_send_prepare+0x260/0x260 [ 1002.518485][T21443] ____sys_sendmsg+0x5ba/0x960 [ 1002.523283][T21443] ? __lock_acquire+0x7d40/0x7d40 [ 1002.528354][T21443] ? __asan_memset+0x22/0x40 [ 1002.533259][T21443] ? __sys_sendmsg_sock+0x30/0x30 [ 1002.538398][T21443] ? __import_iovec+0x5f2/0x850 [ 1002.543296][T21443] ? import_iovec+0x73/0xa0 [ 1002.547933][T21443] ___sys_sendmsg+0x2a6/0x360 [ 1002.552649][T21443] ? __sys_sendmsg+0x2a0/0x2a0 [ 1002.557573][T21443] ? trace_call_bpf+0xc3/0x6c0 [ 1002.562407][T21443] __se_sys_sendmsg+0x1c2/0x2b0 [ 1002.567340][T21443] ? __x64_sys_sendmsg+0x80/0x80 [ 1002.572332][T21443] ? lockdep_hardirqs_on+0x98/0x150 [ 1002.577567][T21443] do_syscall_64+0x55/0xa0 [ 1002.582014][T21443] ? clear_bhb_loop+0x40/0x90 [ 1002.586741][T21443] ? clear_bhb_loop+0x40/0x90 [ 1002.591453][T21443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1002.597383][T21443] RIP: 0033:0x7fcd5f99cdd9 [ 1002.601829][T21443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.621656][T21443] RSP: 002b:00007fcd6081e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1002.630220][T21443] RAX: ffffffffffffffda RBX: 00007fcd5fc15fa0 RCX: 00007fcd5f99cdd9 [ 1002.638218][T21443] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000005 [ 1002.646216][T21443] RBP: 00007fcd6081e090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.654306][T21443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1002.662564][T21443] R13: 00007fcd5fc16038 R14: 00007fcd5fc15fa0 R15: 00007ffcb1c5f2c8 [ 1002.670682][T21443] [ 1003.797101][T21451] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4838'. [ 1003.900720][T21451] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4838'. [ 1003.917507][T21456] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4838'. [ 1003.936529][T21451] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4838'. [ 1004.234756][T21464] FAULT_INJECTION: forcing a failure. [ 1004.234756][T21464] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.292054][T21464] CPU: 0 PID: 21464 Comm: syz.2.4840 Not tainted syzkaller #0 [ 1004.299610][T21464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1004.309722][T21464] Call Trace: [ 1004.313215][T21464] [ 1004.316185][T21464] dump_stack_lvl+0x18c/0x250 [ 1004.321000][T21464] ? show_regs_print_info+0x20/0x20 [ 1004.326344][T21464] ? load_image+0x420/0x420 [ 1004.330907][T21464] ? __might_sleep+0xe0/0xe0 [ 1004.335568][T21464] ? __lock_acquire+0x7d40/0x7d40 [ 1004.340665][T21464] ? lock_chain_count+0x20/0x20 [ 1004.345567][T21464] should_fail_ex+0x39d/0x4d0 [ 1004.350310][T21464] should_failslab+0x9/0x20 [ 1004.355045][T21464] slab_pre_alloc_hook+0x59/0x310 [ 1004.360120][T21464] ? _raw_spin_unlock+0x40/0x40 [ 1004.365014][T21464] ? string+0x26d/0x2b0 [ 1004.369210][T21464] ? __request_module+0x2d1/0x600 [ 1004.374368][T21464] __kmem_cache_alloc_node+0x53/0x250 [ 1004.379788][T21464] ? __request_module+0x2d1/0x600 [ 1004.384852][T21464] kmalloc_trace+0x2a/0xe0 [ 1004.389317][T21464] __request_module+0x2d1/0x600 [ 1004.394300][T21464] ? module_enforce_rwx_sections+0x150/0x150 [ 1004.400423][T21464] ? dev_load+0x21/0x1f0 [ 1004.404720][T21464] ? bpf_lsm_capable+0x9/0x10 [ 1004.409534][T21464] ? dev_load+0x21/0x1f0 [ 1004.413823][T21464] dev_load+0x18b/0x1f0 [ 1004.418024][T21464] dev_ioctl+0x837/0x1140 [ 1004.422491][T21464] sock_ioctl+0x74c/0x7e0 [ 1004.426899][T21464] ? sock_poll+0x3e0/0x3e0 [ 1004.431369][T21464] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1004.436445][T21464] ? security_file_ioctl+0x80/0xa0 [ 1004.441734][T21464] ? sock_poll+0x3e0/0x3e0 [ 1004.446203][T21464] __se_sys_ioctl+0xfd/0x170 [ 1004.450856][T21464] do_syscall_64+0x55/0xa0 [ 1004.455504][T21464] ? clear_bhb_loop+0x40/0x90 [ 1004.460333][T21464] ? clear_bhb_loop+0x40/0x90 [ 1004.465061][T21464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1004.471174][T21464] RIP: 0033:0x7fcd5f99cdd9 [ 1004.475630][T21464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.495635][T21464] RSP: 002b:00007fcd607fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1004.504197][T21464] RAX: ffffffffffffffda RBX: 00007fcd5fc16090 RCX: 00007fcd5f99cdd9 [ 1004.512215][T21464] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 000000000000000f [ 1004.520229][T21464] RBP: 00007fcd607fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.528265][T21464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.536369][T21464] R13: 00007fcd5fc16128 R14: 00007fcd5fc16090 R15: 00007ffcb1c5f2c8 [ 1004.544516][T21464] [ 1006.019417][T21502] netlink: 'syz.1.4855': attribute type 8 has an invalid length. [ 1006.027758][T21502] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4855'. [ 1006.229601][T21512] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4859'. [ 1007.174627][T21536] FAULT_INJECTION: forcing a failure. [ 1007.174627][T21536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1007.193996][T21536] CPU: 1 PID: 21536 Comm: syz.0.4866 Not tainted syzkaller #0 [ 1007.201557][T21536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1007.211688][T21536] Call Trace: [ 1007.215054][T21536] [ 1007.218071][T21536] dump_stack_lvl+0x18c/0x250 [ 1007.222853][T21536] ? show_regs_print_info+0x20/0x20 [ 1007.228139][T21536] ? load_image+0x420/0x420 [ 1007.232922][T21536] ? __might_fault+0xaa/0x120 [ 1007.237687][T21536] ? __lock_acquire+0x7d40/0x7d40 [ 1007.242825][T21536] should_fail_ex+0x39d/0x4d0 [ 1007.247599][T21536] _copy_from_iter+0x1d9/0x12e0 [ 1007.252632][T21536] ? rep_movs_alternative+0x4a/0x90 [ 1007.257944][T21536] ? _copy_from_iter+0x24e/0x12e0 [ 1007.263079][T21536] ? __virt_addr_valid+0x18c/0x540 [ 1007.268301][T21536] ? __lock_acquire+0x7d40/0x7d40 [ 1007.273438][T21536] ? copyout_mc+0x70/0x70 [ 1007.277878][T21536] ? copyout_mc+0x70/0x70 [ 1007.282552][T21536] ? __virt_addr_valid+0x18c/0x540 [ 1007.287772][T21536] ? page_copy_sane+0x16a/0x270 [ 1007.292717][T21536] copy_page_from_iter+0x7b/0x100 [ 1007.297838][T21536] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1007.303856][T21536] tun_get_user+0x15db/0x3ca0 [ 1007.308684][T21536] ? aa_file_perm+0x11b/0xee0 [ 1007.313468][T21536] ? rcu_read_unlock+0xa0/0xa0 [ 1007.318362][T21536] ? tun_get+0x1c/0x2e0 [ 1007.322607][T21536] ? __lock_acquire+0x7d40/0x7d40 [ 1007.327822][T21536] ? tun_get+0x1c/0x2e0 [ 1007.332101][T21536] tun_chr_write_iter+0x119/0x200 [ 1007.335373][T21540] netlink: 'syz.2.4867': attribute type 21 has an invalid length. [ 1007.337368][T21536] vfs_write+0x46c/0x990 [ 1007.337434][T21536] ? file_end_write+0x250/0x250 [ 1007.354854][T21536] ? __fget_files+0x43d/0x4b0 [ 1007.359657][T21536] ? __fdget_pos+0x1d8/0x330 [ 1007.364333][T21536] ? ksys_write+0x75/0x260 [ 1007.368852][T21536] ksys_write+0x150/0x260 [ 1007.373385][T21536] ? __ia32_sys_read+0x90/0x90 [ 1007.378250][T21536] ? lockdep_hardirqs_on+0x98/0x150 [ 1007.383644][T21536] do_syscall_64+0x55/0xa0 [ 1007.385307][T21540] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4867'. [ 1007.388191][T21536] ? clear_bhb_loop+0x40/0x90 [ 1007.388225][T21536] ? clear_bhb_loop+0x40/0x90 [ 1007.388265][T21536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1007.388294][T21536] RIP: 0033:0x7ff4c4f9cdd9 [ 1007.388321][T21536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.437724][T21536] RSP: 002b:00007ff4c5e80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1007.446242][T21536] RAX: ffffffffffffffda RBX: 00007ff4c5215fa0 RCX: 00007ff4c4f9cdd9 [ 1007.454370][T21536] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 1007.463029][T21536] RBP: 00007ff4c5e80090 R08: 0000000000000000 R09: 0000000000000000 [ 1007.471159][T21536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1007.479284][T21536] R13: 00007ff4c5216038 R14: 00007ff4c5215fa0 R15: 00007fff8d8b8598 [ 1007.487383][T21536] [ 1008.060354][T21551] netlink: 'syz.3.4870': attribute type 10 has an invalid length. [ 1008.083249][T21551] mac80211_hwsim hwsim38 wlan1: left allmulticast mode [ 1008.838850][T21561] syzkaller0: entered promiscuous mode [ 1008.855780][T21561] syzkaller0: entered allmulticast mode [ 1012.588277][T21576] netlink: 'syz.3.4878': attribute type 21 has an invalid length. [ 1012.609831][T21576] IPv6: NLM_F_CREATE should be specified when creating new route [ 1012.634795][T21576] IPv6: Can't replace route, no match found [ 1012.996866][T21582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1013.007970][T21582] IPv6: NLM_F_CREATE should be set when creating new route [ 1014.075706][T13409] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1014.087789][T13409] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1014.180203][T13409] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1014.191970][T13409] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1014.200469][T13409] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1014.208364][T13409] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1014.789648][T21602] chnl_net:caif_netlink_parms(): no params data found [ 1015.168067][T21613] netlink: 'syz.0.4891': attribute type 21 has an invalid length. [ 1015.235122][T21613] IPv6: Can't replace route, no match found [ 1015.250491][T21602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.262686][T21602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.299091][T21602] bridge_slave_0: entered allmulticast mode [ 1015.316923][T21602] bridge_slave_0: entered promiscuous mode [ 1015.336837][T21602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.353622][T21602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.361007][T21602] bridge_slave_1: entered allmulticast mode [ 1015.397170][T21602] bridge_slave_1: entered promiscuous mode [ 1015.446891][T21633] netlink: 'syz.2.4896': attribute type 6 has an invalid length. [ 1015.465630][T21633] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4896'. [ 1015.673180][T18444] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.760896][T21602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.818171][T21602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.939922][T18444] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.027715][T21602] team0: Port device team_slave_0 added [ 1016.051265][T21602] team0: Port device team_slave_1 added [ 1016.105588][T21642] netlink: 'syz.0.4897': attribute type 10 has an invalid length. [ 1016.140166][T21642] team0: Device hsr_slave_0 failed to register rx_handler [ 1016.263813][T13409] Bluetooth: hci4: command tx timeout [ 1016.279521][T18444] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.705168][T18444] batman_adv: batadv0: Removing interface: netdevsim0 [ 1016.817911][T18444] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.901413][T21602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.953357][T21602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.013451][T21602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.032941][T21602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.050752][T21602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.123561][T21602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.185361][T21657] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4902'. [ 1017.233530][T21657] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4902'. [ 1017.284888][T21657] bond0: (slave bond_slave_0): Releasing backup interface [ 1017.405144][T21657] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1017.730265][T21602] hsr_slave_0: entered promiscuous mode [ 1017.801778][T21602] hsr_slave_1: entered promiscuous mode [ 1018.361003][T13409] Bluetooth: hci4: command tx timeout [ 1020.174035][T21711] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4914'. [ 1020.426285][T13409] Bluetooth: hci4: command tx timeout [ 1021.341292][T21602] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1021.645300][T21602] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1021.762308][T21602] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1022.067984][T21602] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1022.503436][T13409] Bluetooth: hci4: command tx timeout [ 1022.534060][T21602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1022.735938][T21602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1022.826951][T18447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.834362][T18447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1022.884173][T18447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.891382][T18447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.142950][T21774] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4931'. [ 1024.418681][T21602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.455052][T18444] hsr_slave_0: left promiscuous mode [ 1024.469997][T18444] hsr_slave_1: left promiscuous mode [ 1024.490139][T18444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.507596][T18444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.529279][T18444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.552596][T18444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.581867][T18444] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1024.607090][T18444] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1024.704098][T18444] veth1_vlan: left promiscuous mode [ 1024.735536][T18444] veth0_vlan: left promiscuous mode [ 1026.808932][T18444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.394064][T18444] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1027.471326][T18444] bond0 (unregistering): Released all slaves [ 1027.523379][T21784] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4933'. [ 1027.532987][T21784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.544277][T21784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.563481][T21784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.575115][T21784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.585677][T21784] batadv_slave_1: entered promiscuous mode [ 1027.654000][T21801] bridge0: port 3(syz_tun) entered blocking state [ 1027.683651][T21801] bridge0: port 3(syz_tun) entered disabled state [ 1027.724527][T21801] syz_tun: entered allmulticast mode [ 1027.731415][T21801] syz_tun: entered promiscuous mode [ 1027.754450][T21801] bridge0: port 3(syz_tun) entered blocking state [ 1027.761075][T21801] bridge0: port 3(syz_tun) entered forwarding state [ 1028.088478][T21602] veth0_vlan: entered promiscuous mode [ 1028.112099][T21602] veth1_vlan: entered promiscuous mode [ 1028.128488][T21815] netlink: 'syz.2.4943': attribute type 21 has an invalid length. [ 1028.138007][T21815] netlink: 'syz.2.4943': attribute type 3 has an invalid length. [ 1028.146527][T21815] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4943'. [ 1028.212631][T21602] veth0_macvtap: entered promiscuous mode [ 1028.230625][T21602] veth1_macvtap: entered promiscuous mode [ 1028.269085][T21602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.281232][T21602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.292040][T21602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.304880][T21602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.319505][T21602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1028.331854][T21602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.344331][T21602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.355273][T21602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.368253][T21602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.378434][T21602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.394528][T21602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.407526][T21602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1028.459288][T21602] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.485610][T21602] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.500081][T21602] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.509938][T21602] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.647926][T18447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.668873][T18447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.714446][T18454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.743728][T18454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.407494][T21840] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4952'. [ 1029.436474][T21840] bridge_slave_1: default FDB implementation only supports local addresses [ 1029.995576][T21840] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4952'. [ 1031.286029][T21863] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4958'. [ 1032.802614][T21884] FAULT_INJECTION: forcing a failure. [ 1032.802614][T21884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1032.854407][T21884] CPU: 1 PID: 21884 Comm: syz.0.4965 Not tainted syzkaller #0 [ 1032.861948][T21884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1032.872018][T21884] Call Trace: [ 1032.875400][T21884] [ 1032.878400][T21884] dump_stack_lvl+0x18c/0x250 [ 1032.883159][T21884] ? show_regs_print_info+0x20/0x20 [ 1032.888479][T21884] ? load_image+0x420/0x420 [ 1032.893007][T21884] ? __lock_acquire+0x7d40/0x7d40 [ 1032.898046][T21884] ? snprintf+0xe9/0x140 [ 1032.902338][T21884] should_fail_ex+0x39d/0x4d0 [ 1032.907133][T21884] _copy_to_user+0x2f/0xa0 [ 1032.911571][T21884] simple_read_from_buffer+0xe7/0x150 [ 1032.917058][T21884] proc_fail_nth_read+0x1e8/0x260 [ 1032.922117][T21884] ? proc_fault_inject_write+0x360/0x360 [ 1032.927952][T21884] ? fsnotify_perm+0x271/0x5e0 [ 1032.932936][T21884] ? proc_fault_inject_write+0x360/0x360 [ 1032.938615][T21884] vfs_read+0x28b/0x970 [ 1032.942839][T21884] ? kernel_read+0x1e0/0x1e0 [ 1032.947641][T21884] ? __fget_files+0x28/0x4b0 [ 1032.952254][T21884] ? __fget_files+0x28/0x4b0 [ 1032.956864][T21884] ? __fget_files+0x43d/0x4b0 [ 1032.961582][T21884] ? __fdget_pos+0x2a3/0x330 [ 1032.966207][T21884] ? ksys_read+0x75/0x260 [ 1032.970578][T21884] ksys_read+0x150/0x260 [ 1032.974858][T21884] ? vfs_write+0x990/0x990 [ 1032.979310][T21884] ? lockdep_hardirqs_on+0x98/0x150 [ 1032.984540][T21884] do_syscall_64+0x55/0xa0 [ 1032.989243][T21884] ? clear_bhb_loop+0x40/0x90 [ 1032.993942][T21884] ? clear_bhb_loop+0x40/0x90 [ 1032.998638][T21884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1033.004552][T21884] RIP: 0033:0x7ff4c4f5d60e [ 1033.008983][T21884] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1033.028786][T21884] RSP: 002b:00007ff4c5e7ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1033.037253][T21884] RAX: ffffffffffffffda RBX: 00007ff4c5e806c0 RCX: 00007ff4c4f5d60e [ 1033.045261][T21884] RDX: 000000000000000f RSI: 00007ff4c5e800a0 RDI: 0000000000000006 [ 1033.053256][T21884] RBP: 00007ff4c5e80090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.061247][T21884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.069325][T21884] R13: 00007ff4c5216038 R14: 00007ff4c5215fa0 R15: 00007fff8d8b8598 [ 1033.077330][T21884] [ 1034.268243][T21918] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4979'. [ 1034.319035][T21918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.178647][T13409] Bluetooth: hci1: unexpected event for opcode 0xdc46 [ 1035.394806][T21940] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4987'. [ 1035.464250][T21940] veth0_macvtap: left promiscuous mode [ 1035.858332][T21945] FAULT_INJECTION: forcing a failure. [ 1035.858332][T21945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1035.884530][T21945] CPU: 0 PID: 21945 Comm: syz.0.4988 Not tainted syzkaller #0 [ 1035.892424][T21945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1035.902739][T21945] Call Trace: [ 1035.906091][T21945] [ 1035.909086][T21945] dump_stack_lvl+0x18c/0x250 [ 1035.913839][T21945] ? show_regs_print_info+0x20/0x20 [ 1035.919082][T21945] ? load_image+0x420/0x420 [ 1035.923640][T21945] ? __might_fault+0xaa/0x120 [ 1035.928398][T21945] ? __lock_acquire+0x7d40/0x7d40 [ 1035.933561][T21945] should_fail_ex+0x39d/0x4d0 [ 1035.938303][T21945] _copy_from_user+0x2f/0xe0 [ 1035.942935][T21945] __sys_bpf+0x23e/0x890 [ 1035.947348][T21945] ? bpf_link_show_fdinfo+0x390/0x390 [ 1035.952817][T21945] ? lock_chain_count+0x20/0x20 [ 1035.957735][T21945] __x64_sys_bpf+0x7c/0x90 [ 1035.962279][T21945] do_syscall_64+0x55/0xa0 [ 1035.966750][T21945] ? clear_bhb_loop+0x40/0x90 [ 1035.971559][T21945] ? clear_bhb_loop+0x40/0x90 [ 1035.976277][T21945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1035.982210][T21945] RIP: 0033:0x7ff4c4f9cdd9 [ 1035.986666][T21945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.006488][T21945] RSP: 002b:00007ff4c5e80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1036.014947][T21945] RAX: ffffffffffffffda RBX: 00007ff4c5215fa0 RCX: 00007ff4c4f9cdd9 [ 1036.023043][T21945] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1036.031164][T21945] RBP: 00007ff4c5e80090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.039566][T21945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.047617][T21945] R13: 00007ff4c5216038 R14: 00007ff4c5215fa0 R15: 00007fff8d8b8598 [ 1036.055678][T21945] [ 1036.378860][T21950] netlink: 'syz.0.4988': attribute type 10 has an invalid length. [ 1036.422191][T21936] netlink: 'syz.2.4986': attribute type 10 has an invalid length. [ 1036.939727][T21936] batman_adv: batadv0: Adding interface: netdevsim0 [ 1037.002369][T21936] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1037.064959][T21936] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1037.167118][T21953] netlink: 'syz.3.4989': attribute type 10 has an invalid length. [ 1037.204834][T21953] batman_adv: batadv0: Adding interface: netdevsim0 [ 1037.254685][T21953] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1037.373400][T21953] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1038.472577][T13409] Bluetooth: hci1: unexpected event for opcode 0xdc46 [ 1038.671717][T21977] netlink: 'syz.3.4994': attribute type 39 has an invalid length. [ 1039.215860][T21980] syzkaller0: entered promiscuous mode [ 1039.233591][T21980] syzkaller0: entered allmulticast mode [ 1042.176851][T22007] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.5004'. [ 1043.544769][T22033] netlink: 'syz.2.5013': attribute type 46 has an invalid length. [ 1043.601137][T22033] C: renamed from team_slave_0 (while UP) [ 1043.690102][T22033] netlink: 'syz.2.5013': attribute type 3 has an invalid length. [ 1043.722025][T22033] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5013'. [ 1044.667285][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1044.684959][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1044.700451][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1044.742012][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1044.756653][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1044.846701][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1045.210912][ T145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.382352][ T145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.578865][ T145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.716927][ T145] batman_adv: batadv0: Removing interface: ÿÿÿÿÿÿ [ 1045.869008][ T145] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.910524][T22057] chnl_net:caif_netlink_parms(): no params data found [ 1046.173655][T22095] netlink: 127924 bytes leftover after parsing attributes in process `syz.1.5036'. [ 1046.183668][T22095] netlink: 16384 bytes leftover after parsing attributes in process `syz.1.5036'. [ 1046.405144][T22057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.427751][T22057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.461268][T22057] bridge_slave_0: entered allmulticast mode [ 1046.489577][T22057] bridge_slave_0: entered promiscuous mode [ 1046.574149][T22057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.625166][T22057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.632511][T22057] bridge_slave_1: entered allmulticast mode [ 1046.710487][T22057] bridge_slave_1: entered promiscuous mode [ 1046.875915][T22102] netlink: 'syz.1.5038': attribute type 9 has an invalid length. [ 1046.894076][T22102] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5038'. [ 1046.945914][T22057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.993836][T13409] Bluetooth: hci2: command tx timeout [ 1047.029513][T22057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.300837][T22111] FAULT_INJECTION: forcing a failure. [ 1047.300837][T22111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1047.330566][T22111] CPU: 0 PID: 22111 Comm: syz.2.5041 Not tainted syzkaller #0 [ 1047.338117][T22111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1047.348395][T22111] Call Trace: [ 1047.351736][T22111] [ 1047.354706][T22111] dump_stack_lvl+0x18c/0x250 [ 1047.359462][T22111] ? show_regs_print_info+0x20/0x20 [ 1047.364736][T22111] ? load_image+0x420/0x420 [ 1047.369296][T22111] ? __might_fault+0xaa/0x120 [ 1047.374032][T22111] ? __lock_acquire+0x7d40/0x7d40 [ 1047.379115][T22111] should_fail_ex+0x39d/0x4d0 [ 1047.383851][T22111] _copy_from_iter+0x1d9/0x12e0 [ 1047.388837][T22111] ? rep_movs_alternative+0x4a/0x90 [ 1047.394083][T22111] ? _copy_from_iter+0x24e/0x12e0 [ 1047.399167][T22111] ? __virt_addr_valid+0x18c/0x540 [ 1047.404329][T22111] ? __lock_acquire+0x7d40/0x7d40 [ 1047.409406][T22111] ? copyout_mc+0x70/0x70 [ 1047.413808][T22111] ? copyout_mc+0x70/0x70 [ 1047.418356][T22111] ? __virt_addr_valid+0x18c/0x540 [ 1047.423521][T22111] ? page_copy_sane+0x16a/0x270 [ 1047.428427][T22111] copy_page_from_iter+0x7b/0x100 [ 1047.433523][T22111] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1047.439370][T22111] unix_stream_sendmsg+0x562/0xbf0 [ 1047.444519][T22111] ? unix_show_fdinfo+0x270/0x270 [ 1047.449555][T22111] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1047.455991][T22111] ? aa_sock_msg_perm+0x94/0x150 [ 1047.460953][T22111] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1047.466355][T22111] ? security_socket_sendmsg+0x80/0xa0 [ 1047.471827][T22111] ? unix_show_fdinfo+0x270/0x270 [ 1047.476955][T22111] ____sys_sendmsg+0x5ba/0x960 [ 1047.481802][T22111] ? __asan_memset+0x22/0x40 [ 1047.486505][T22111] ? __sys_sendmsg_sock+0x30/0x30 [ 1047.491541][T22111] ? __import_iovec+0x5f2/0x850 [ 1047.496415][T22111] ? import_iovec+0x73/0xa0 [ 1047.500945][T22111] ___sys_sendmsg+0x2a6/0x360 [ 1047.505840][T22111] ? __sys_sendmsg+0x2a0/0x2a0 [ 1047.510642][T22111] ? __lock_acquire+0x7d40/0x7d40 [ 1047.515711][T22111] __se_sys_sendmsg+0x1c2/0x2b0 [ 1047.520579][T22111] ? __x64_sys_sendmsg+0x80/0x80 [ 1047.525643][T22111] ? lockdep_hardirqs_on+0x98/0x150 [ 1047.530870][T22111] do_syscall_64+0x55/0xa0 [ 1047.535299][T22111] ? clear_bhb_loop+0x40/0x90 [ 1047.539993][T22111] ? clear_bhb_loop+0x40/0x90 [ 1047.544686][T22111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1047.550635][T22111] RIP: 0033:0x7fcd5f99cdd9 [ 1047.555066][T22111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.574794][T22111] RSP: 002b:00007fcd607fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1047.583403][T22111] RAX: ffffffffffffffda RBX: 00007fcd5fc16090 RCX: 00007fcd5f99cdd9 [ 1047.591397][T22111] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000004 [ 1047.599503][T22111] RBP: 00007fcd607fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1047.607492][T22111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1047.615582][T22111] R13: 00007fcd5fc16128 R14: 00007fcd5fc16090 R15: 00007ffcb1c5f2c8 [ 1047.623587][T22111] [ 1047.712953][T22057] team0: Port device team_slave_0 added [ 1047.767576][T22057] team0: Port device team_slave_1 added [ 1047.822114][T22114] delete_channel: no stack [ 1048.068123][T22057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.100224][T22057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.141175][T22057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.063546][T13409] Bluetooth: hci2: command tx timeout [ 1049.381927][T22057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.413536][T22057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.446060][T22147] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5048'. [ 1049.463909][T22057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.834230][T22057] hsr_slave_0: entered promiscuous mode [ 1049.862695][T22057] hsr_slave_1: entered promiscuous mode [ 1049.878458][T22057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1050.553388][T22057] Cannot create hsr debugfs directory [ 1051.143657][T13409] Bluetooth: hci2: command tx timeout [ 1052.570525][T22201] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5062'. [ 1053.225520][T13409] Bluetooth: hci2: command tx timeout [ 1053.320745][T22201] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1053.731561][T22057] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1053.783012][T22057] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1053.837457][T22057] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1053.932440][T22227] netlink: 'syz.1.5070': attribute type 3 has an invalid length. [ 1053.988499][T22227] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5070'. [ 1054.409050][T22057] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1054.426034][T22240] netlink: 'syz.1.5072': attribute type 21 has an invalid length. [ 1054.442143][T22240] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5072'. [ 1054.533684][ T145] hsr_slave_0: left promiscuous mode [ 1054.550632][ T145] hsr_slave_1: left promiscuous mode [ 1054.574369][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.599614][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.622655][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.641572][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.760099][ T145] veth0_macvtap: left promiscuous mode [ 1054.906626][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.923580][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.315800][ T145] team0 (unregistering): Port device team_slave_1 removed [ 1056.393131][ T145] team0 (unregistering): Port device  removed [ 1056.994473][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 1057.212048][T22289] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.5079'. [ 1057.330347][T22057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.507100][T22057] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.738929][T18763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.746153][T18763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.782359][T18763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.789641][T18763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.855387][T22057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1059.020675][T22057] veth0_vlan: entered promiscuous mode [ 1059.061419][T22057] veth1_vlan: entered promiscuous mode [ 1059.191119][T22057] veth0_macvtap: entered promiscuous mode [ 1059.271670][T22333] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5090'. [ 1059.328962][T22333] bond0: (slave bond_slave_0): Releasing backup interface [ 1059.412420][T22333] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1059.459862][T22057] veth1_macvtap: entered promiscuous mode [ 1059.577558][T22057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.629747][T22057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.692086][T22057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.753341][T22057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.799007][T22057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.838923][T22057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.881596][T22057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1059.926327][T22350] netlink: 'syz.1.5094': attribute type 21 has an invalid length. [ 1059.964067][T22350] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5094'. [ 1060.018717][T22057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.063920][T22057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.103865][T22057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.133760][T22057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.192740][T22057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.246631][T22057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.325717][T22057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.381706][T22057] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.410908][T22057] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.428540][T22057] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.441550][T22057] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.480474][T22362] netlink: 'syz.1.5097': attribute type 1 has an invalid length. [ 1060.513909][T22362] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.5097'. [ 1060.754854][T18444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.762838][T18444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.836222][T18413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.861540][T18413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.997215][T22379] netlink: 'syz.2.5102': attribute type 1 has an invalid length. [ 1062.047493][T22379] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5102'. [ 1062.369885][T22385] syzkaller0: entered promiscuous mode [ 1062.391862][T22385] syzkaller0: entered allmulticast mode [ 1063.600231][T13409] Bluetooth: hci3: unexpected event for opcode 0xdc46 [ 1066.627096][T22419] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5116'. [ 1068.754267][T22455] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5130'. [ 1068.882584][T22454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1069.013526][T22461] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5133'. [ 1071.101420][T22494] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5146'. [ 1071.260785][T22494] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1071.561608][T22501] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5143'. [ 1074.576688][T22536] netlink: 'syz.2.5158': attribute type 21 has an invalid length. [ 1074.596813][T22536] netlink: 'syz.2.5158': attribute type 1 has an invalid length. [ 1074.665542][T22536] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5158'. [ 1077.740567][T22572] FAULT_INJECTION: forcing a failure. [ 1077.740567][T22572] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.753631][T22572] CPU: 1 PID: 22572 Comm: syz.1.5171 Not tainted syzkaller #0 [ 1077.761234][T22572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1077.771344][T22572] Call Trace: [ 1077.774663][T22572] [ 1077.777641][T22572] dump_stack_lvl+0x18c/0x250 [ 1077.782388][T22572] ? rt6_nlmsg_size+0xd0/0x490 [ 1077.787572][T22572] ? show_regs_print_info+0x20/0x20 [ 1077.792920][T22572] ? load_image+0x420/0x420 [ 1077.797477][T22572] ? rt6_nlmsg_size+0xd0/0x490 [ 1077.802304][T22572] ? __lock_acquire+0x7d40/0x7d40 [ 1077.807372][T22572] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1077.812880][T22572] should_fail_ex+0x39d/0x4d0 [ 1077.817635][T22572] should_failslab+0x9/0x20 [ 1077.822188][T22572] slab_pre_alloc_hook+0x59/0x310 [ 1077.827358][T22572] ? rt6_nlmsg_size+0x404/0x490 [ 1077.832260][T22572] ? nsim_fib_event_nb+0xe0b/0x1080 [ 1077.837508][T22572] kmem_cache_alloc_node+0x60/0x320 [ 1077.842768][T22572] ? __alloc_skb+0x103/0x2c0 [ 1077.847518][T22572] __alloc_skb+0x103/0x2c0 [ 1077.852210][T22572] inet6_rt_notify+0xb4/0x240 [ 1077.856944][T22572] ? atomic_notifier_call_chain+0x16e/0x180 [ 1077.862904][T22572] fib6_del+0x10d2/0x1580 [ 1077.867302][T22572] ? fib6_del+0x5f1/0x1580 [ 1077.871803][T22572] ? fib6_locate_1+0x6c0/0x6c0 [ 1077.876714][T22572] ? do_raw_spin_lock+0x11f/0x2c0 [ 1077.881820][T22572] ? __ip6_del_rt+0x8c/0x170 [ 1077.886561][T22572] __ip6_del_rt+0x97/0x170 [ 1077.891213][T22572] ip6_del_rt+0xc2/0x110 [ 1077.895636][T22572] ? rt6_get_route_info+0x7f0/0x7f0 [ 1077.900902][T22572] ? cleanup_prefix_route+0x109/0x530 [ 1077.906332][T22572] ipv6_del_addr+0x6f7/0x8e0 [ 1077.910992][T22572] inet6_addr_del+0x4d3/0x690 [ 1077.915754][T22572] addrconf_del_ifaddr+0x122/0x180 [ 1077.920944][T22572] ? inet6_addr_add+0xb60/0xb60 [ 1077.925852][T22572] ? __lock_acquire+0x7d40/0x7d40 [ 1077.930928][T22572] ? slab_free_freelist_hook+0x130/0x1a0 [ 1077.936621][T22572] inet6_ioctl+0x11d/0x2d0 [ 1077.941091][T22572] ? inet6_getname+0x650/0x650 [ 1077.945914][T22572] ? tomoyo_path_number_perm+0x5b4/0x620 [ 1077.951608][T22572] ? tomoyo_path_number_perm+0x217/0x620 [ 1077.957324][T22572] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1077.962869][T22572] sock_do_ioctl+0xfc/0x310 [ 1077.967442][T22572] ? sock_show_fdinfo+0xb0/0xb0 [ 1077.972382][T22572] sock_ioctl+0x5ba/0x7e0 [ 1077.976775][T22572] ? sock_poll+0x3e0/0x3e0 [ 1077.981355][T22572] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1077.986374][T22572] ? security_file_ioctl+0x80/0xa0 [ 1077.991557][T22572] ? sock_poll+0x3e0/0x3e0 [ 1077.996025][T22572] __se_sys_ioctl+0xfd/0x170 [ 1078.000938][T22572] do_syscall_64+0x55/0xa0 [ 1078.005403][T22572] ? clear_bhb_loop+0x40/0x90 [ 1078.010335][T22572] ? clear_bhb_loop+0x40/0x90 [ 1078.015069][T22572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1078.021019][T22572] RIP: 0033:0x7fe300b9cdd9 [ 1078.025497][T22572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.045353][T22572] RSP: 002b:00007fe301a45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1078.053828][T22572] RAX: ffffffffffffffda RBX: 00007fe300e15fa0 RCX: 00007fe300b9cdd9 [ 1078.062031][T22572] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000003 [ 1078.070049][T22572] RBP: 00007fe301a45090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.078160][T22572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1078.086181][T22572] R13: 00007fe300e16038 R14: 00007fe300e15fa0 R15: 00007ffd44516f78 [ 1078.094316][T22572] [ 1079.739119][T22596] sock: sock_timestamping_bind_phc: sock not bind to device [ 1079.768179][T22596] sock: sock_timestamping_bind_phc: sock not bind to device [ 1081.471191][T22630] netlink: 11006 bytes leftover after parsing attributes in process `syz.0.5191'. [ 1081.514734][T22634] syzkaller0: entered promiscuous mode [ 1081.520559][T22634] syzkaller0: entered allmulticast mode [ 1081.843215][T22645] FAULT_INJECTION: forcing a failure. [ 1081.843215][T22645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1081.887279][T22645] CPU: 1 PID: 22645 Comm: syz.1.5196 Not tainted syzkaller #0 [ 1081.894848][T22645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1081.905215][T22645] Call Trace: [ 1081.908633][T22645] [ 1081.911589][T22645] dump_stack_lvl+0x18c/0x250 [ 1081.916399][T22645] ? show_regs_print_info+0x20/0x20 [ 1081.921622][T22645] ? load_image+0x420/0x420 [ 1081.926195][T22645] ? __might_fault+0xaa/0x120 [ 1081.931000][T22645] should_fail_ex+0x39d/0x4d0 [ 1081.935798][T22645] copyin+0x1a/0x90 [ 1081.939633][T22645] _copy_from_iter+0x404/0x12e0 [ 1081.944523][T22645] ? copyin+0x70/0x90 [ 1081.949109][T22645] ? copyout_mc+0x70/0x70 [ 1081.953488][T22645] ? copyout_mc+0x70/0x70 [ 1081.957873][T22645] ? __virt_addr_valid+0x18c/0x540 [ 1081.963020][T22645] ? page_copy_sane+0x16a/0x270 [ 1081.967903][T22645] copy_page_from_iter+0x7b/0x100 [ 1081.972961][T22645] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1081.978891][T22645] packet_sendmsg+0x33ff/0x4c30 [ 1081.983794][T22645] ? __might_sleep+0xe0/0xe0 [ 1081.988405][T22645] ? mark_lock+0x94/0x320 [ 1081.992840][T22645] ? __lock_acquire+0x1273/0x7d40 [ 1081.997895][T22645] ? aa_sk_perm+0x83c/0x970 [ 1082.002601][T22645] ? packet_getsockopt+0xad0/0xad0 [ 1082.007831][T22645] ? tomoyo_gc_thread+0x8d0/0x1410 [ 1082.013063][T22645] ? aa_sock_msg_perm+0x94/0x150 [ 1082.018023][T22645] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1082.023332][T22645] ? security_socket_sendmsg+0x80/0xa0 [ 1082.028817][T22645] ? packet_getsockopt+0xad0/0xad0 [ 1082.034023][T22645] ____sys_sendmsg+0x5ba/0x960 [ 1082.038809][T22645] ? __lock_acquire+0x7d40/0x7d40 [ 1082.043866][T22645] ? __asan_memset+0x22/0x40 [ 1082.048478][T22645] ? __sys_sendmsg_sock+0x30/0x30 [ 1082.053512][T22645] ? __import_iovec+0x3fa/0x850 [ 1082.058392][T22645] ? import_iovec+0x73/0xa0 [ 1082.062913][T22645] ___sys_sendmsg+0x2a6/0x360 [ 1082.067696][T22645] ? __sys_sendmsg+0x2a0/0x2a0 [ 1082.072498][T22645] ? trace_call_bpf+0xc3/0x6c0 [ 1082.077312][T22645] __se_sys_sendmsg+0x1c2/0x2b0 [ 1082.082713][T22645] ? __x64_sys_sendmsg+0x80/0x80 [ 1082.087686][T22645] ? lockdep_hardirqs_on+0x98/0x150 [ 1082.092995][T22645] do_syscall_64+0x55/0xa0 [ 1082.097433][T22645] ? clear_bhb_loop+0x40/0x90 [ 1082.102313][T22645] ? clear_bhb_loop+0x40/0x90 [ 1082.107101][T22645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1082.113013][T22645] RIP: 0033:0x7fe300b9cdd9 [ 1082.117448][T22645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.137073][T22645] RSP: 002b:00007fe301a45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1082.145603][T22645] RAX: ffffffffffffffda RBX: 00007fe300e15fa0 RCX: 00007fe300b9cdd9 [ 1082.153635][T22645] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 1082.161630][T22645] RBP: 00007fe301a45090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.169627][T22645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1082.177722][T22645] R13: 00007fe300e16038 R14: 00007fe300e15fa0 R15: 00007ffd44516f78 [ 1082.185756][T22645] [ 1082.972811][T22660] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5203'. [ 1083.008593][T22660] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1083.141697][T22663] netlink: 'syz.1.5202': attribute type 10 has an invalid length. [ 1083.158496][T22663] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5202'. [ 1083.171432][T22663] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 1083.186408][T22663] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.217859][T22663] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 1083.550582][T22671] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5207'. [ 1083.581490][T22671] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5207'. [ 1083.604816][T22671] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5207'. [ 1083.918521][T13409] Bluetooth: hci3: unexpected event for opcode 0xdc46 [ 1086.542443][T22671] syz.3.5207 (22671) used greatest stack depth: 18208 bytes left [ 1087.076119][T22702] netlink: 763 bytes leftover after parsing attributes in process `syz.2.5216'. [ 1087.751931][T22716] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5221'. [ 1088.462403][T22737] FAULT_INJECTION: forcing a failure. [ 1088.462403][T22737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1088.480385][T22737] CPU: 1 PID: 22737 Comm: syz.2.5228 Not tainted syzkaller #0 [ 1088.487924][T22737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1088.498114][T22737] Call Trace: [ 1088.501501][T22737] [ 1088.504469][T22737] dump_stack_lvl+0x18c/0x250 [ 1088.509202][T22737] ? show_regs_print_info+0x20/0x20 [ 1088.514459][T22737] ? load_image+0x420/0x420 [ 1088.519166][T22737] ? __might_fault+0xaa/0x120 [ 1088.523893][T22737] ? __lock_acquire+0x7d40/0x7d40 [ 1088.528988][T22737] should_fail_ex+0x39d/0x4d0 [ 1088.533716][T22737] _copy_from_user+0x2f/0xe0 [ 1088.538341][T22737] csum_and_copy_from_iter+0x1f3/0x14a0 [ 1088.544036][T22737] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 1088.549691][T22737] ? __kmem_cache_alloc_node+0x13a/0x250 [ 1088.555345][T22737] ? __alloc_skb+0x138/0x2c0 [ 1088.559955][T22737] ? rcu_is_watching+0x15/0xb0 [ 1088.564763][T22737] ip_generic_getfrag+0x163/0x2f0 [ 1088.569934][T22737] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1088.574841][T22737] ? skb_put+0x11b/0x210 [ 1088.579119][T22737] __ip_append_data+0x2f11/0x3d40 [ 1088.584291][T22737] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1088.589177][T22737] ? ip_setup_cork+0x860/0x860 [ 1088.593991][T22737] ? ip_setup_cork+0x530/0x860 [ 1088.598776][T22737] ip_make_skb+0x22b/0x440 [ 1088.603243][T22737] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1088.608148][T22737] ? ip_flush_pending_frames+0x250/0x250 [ 1088.613828][T22737] udp_sendmsg+0x1ade/0x23b0 [ 1088.618633][T22737] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1088.623505][T22737] ? udp_cmsg_send+0x350/0x350 [ 1088.628393][T22737] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1088.634400][T22737] ? lock_chain_count+0x20/0x20 [ 1088.639268][T22737] ? inet_sendmsg+0x14b/0x2f0 [ 1088.643979][T22737] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1088.649367][T22737] ? _local_bh_enable+0xa0/0xa0 [ 1088.654236][T22737] ? inet_sendmsg+0x14b/0x2f0 [ 1088.659021][T22737] ? inet_sendmsg+0x14b/0x2f0 [ 1088.663720][T22737] ? inet_send_prepare+0x260/0x260 [ 1088.668952][T22737] ____sys_sendmsg+0x5ba/0x960 [ 1088.673732][T22737] ? __lock_acquire+0x7d40/0x7d40 [ 1088.678781][T22737] ? __sys_sendmsg_sock+0x30/0x30 [ 1088.683824][T22737] ? __import_iovec+0x5f2/0x850 [ 1088.688698][T22737] ? import_iovec+0x73/0xa0 [ 1088.693217][T22737] ___sys_sendmsg+0x2a6/0x360 [ 1088.697920][T22737] ? __sys_sendmsg+0x2a0/0x2a0 [ 1088.702714][T22737] ? __lock_acquire+0x7d40/0x7d40 [ 1088.707775][T22737] __se_sys_sendmsg+0x1c2/0x2b0 [ 1088.712642][T22737] ? __x64_sys_sendmsg+0x80/0x80 [ 1088.717705][T22737] ? lockdep_hardirqs_on+0x98/0x150 [ 1088.722924][T22737] do_syscall_64+0x55/0xa0 [ 1088.727358][T22737] ? clear_bhb_loop+0x40/0x90 [ 1088.732170][T22737] ? clear_bhb_loop+0x40/0x90 [ 1088.736967][T22737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1088.742876][T22737] RIP: 0033:0x7fcd5f99cdd9 [ 1088.747321][T22737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.767292][T22737] RSP: 002b:00007fcd6081e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1088.775728][T22737] RAX: ffffffffffffffda RBX: 00007fcd5fc15fa0 RCX: 00007fcd5f99cdd9 [ 1088.783723][T22737] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000007 [ 1088.791810][T22737] RBP: 00007fcd6081e090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.799803][T22737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1088.807876][T22737] R13: 00007fcd5fc16038 R14: 00007fcd5fc15fa0 R15: 00007ffcb1c5f2c8 [ 1088.815880][T22737] [ 1090.595277][ T5782] Bluetooth: hci3: unexpected event for opcode 0xdc46 [ 1091.745227][T22787] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.5248'. [ 1092.566934][T22799] netlink: 'syz.2.5251': attribute type 1 has an invalid length. [ 1092.613433][T22799] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.5251'. [ 1093.250104][T22818] FAULT_INJECTION: forcing a failure. [ 1093.250104][T22818] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.251216][T22820] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5259'. [ 1093.289669][T22818] CPU: 0 PID: 22818 Comm: syz.0.5258 Not tainted syzkaller #0 [ 1093.297221][T22818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1093.307417][T22818] Call Trace: [ 1093.310735][T22818] [ 1093.313711][T22818] dump_stack_lvl+0x18c/0x250 [ 1093.318443][T22818] ? sctp_sendmsg+0x1575/0x28c0 [ 1093.323336][T22818] ? ___sys_sendmsg+0x2a6/0x360 [ 1093.328339][T22818] ? show_regs_print_info+0x20/0x20 [ 1093.333708][T22818] ? load_image+0x420/0x420 [ 1093.338285][T22818] should_fail_ex+0x39d/0x4d0 [ 1093.343023][T22818] should_failslab+0x9/0x20 [ 1093.347578][T22818] slab_pre_alloc_hook+0x59/0x310 [ 1093.352662][T22818] ? sctp_add_bind_addr+0x8c/0x360 [ 1093.357827][T22818] __kmem_cache_alloc_node+0x53/0x250 [ 1093.363529][T22818] ? sctp_add_bind_addr+0x8c/0x360 [ 1093.368685][T22818] kmalloc_trace+0x2a/0xe0 [ 1093.373159][T22818] sctp_add_bind_addr+0x8c/0x360 [ 1093.378331][T22818] sctp_copy_local_addr_list+0x315/0x4f0 [ 1093.384148][T22818] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 1093.389926][T22818] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1093.396262][T22818] ? sctp_v4_is_any+0x35/0x60 [ 1093.401000][T22818] ? sctp_copy_one_addr+0x8c/0x350 [ 1093.406170][T22818] sctp_bind_addr_copy+0xb3/0x3c0 [ 1093.411257][T22818] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1093.417738][T22818] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1093.423099][T22818] ? __sctp_connect+0xd80/0xd80 [ 1093.428000][T22818] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1093.433427][T22818] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1093.439032][T22818] ? security_sctp_bind_connect+0x89/0xb0 [ 1093.444824][T22818] sctp_sendmsg+0x1575/0x28c0 [ 1093.449832][T22818] ? sctp_getsockopt+0xb60/0xb60 [ 1093.454815][T22818] ? aa_sk_perm+0x83c/0x970 [ 1093.459382][T22818] ? aa_af_perm+0x330/0x330 [ 1093.463935][T22818] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1093.470583][T22818] ? sock_rps_record_flow+0x19/0x3f0 [ 1093.476129][T22818] ? inet_sendmsg+0xe9/0x2f0 [ 1093.480766][T22818] ? inet_send_prepare+0x260/0x260 [ 1093.485923][T22818] ____sys_sendmsg+0x5ba/0x960 [ 1093.490835][T22818] ? __lock_acquire+0x7d40/0x7d40 [ 1093.495922][T22818] ? __asan_memset+0x22/0x40 [ 1093.500569][T22818] ? __sys_sendmsg_sock+0x30/0x30 [ 1093.505721][T22818] ? __import_iovec+0x5f2/0x850 [ 1093.510817][T22818] ? import_iovec+0x73/0xa0 [ 1093.515384][T22818] ___sys_sendmsg+0x2a6/0x360 [ 1093.520117][T22818] ? __sys_sendmsg+0x2a0/0x2a0 [ 1093.524959][T22818] ? __lock_acquire+0x7d40/0x7d40 [ 1093.530089][T22818] __se_sys_sendmsg+0x1c2/0x2b0 [ 1093.535080][T22818] ? __x64_sys_sendmsg+0x80/0x80 [ 1093.540086][T22818] ? lockdep_hardirqs_on+0x98/0x150 [ 1093.545349][T22818] do_syscall_64+0x55/0xa0 [ 1093.549819][T22818] ? clear_bhb_loop+0x40/0x90 [ 1093.554557][T22818] ? clear_bhb_loop+0x40/0x90 [ 1093.559298][T22818] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1093.565417][T22818] RIP: 0033:0x7f6cb219cdd9 [ 1093.569881][T22818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.589809][T22818] RSP: 002b:00007f6cb03f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1093.598282][T22818] RAX: ffffffffffffffda RBX: 00007f6cb2415fa0 RCX: 00007f6cb219cdd9 [ 1093.606401][T22818] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000003 [ 1093.614418][T22818] RBP: 00007f6cb03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.622609][T22818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1093.630721][T22818] R13: 00007f6cb2416038 R14: 00007f6cb2415fa0 R15: 00007fff9463e5b8 [ 1093.638761][T22818] [ 1093.851510][ C0] [ 1093.851521][ C0] ================================ [ 1093.851528][ C0] WARNING: inconsistent lock state [ 1093.851534][ C0] syzkaller #0 Not tainted [ 1093.851545][ C0] -------------------------------- [ 1093.851550][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 1093.851558][ C0] syz.1.5261/22826 [HC2[2]:SC0[0]:HE0:SE1] takes: [ 1093.851578][ C0] ffff88805cef6aa0 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 1093.851628][ C0] {INITIAL USE} state was registered at: [ 1093.851635][ C0] lock_acquire+0x19e/0x420 [ 1093.851654][ C0] _raw_spin_lock+0x2e/0x40 [ 1093.851673][ C0] htab_lock_bucket+0x17d/0x300 [ 1093.851689][ C0] htab_lru_map_delete_elem+0x1a4/0x650 [ 1093.851706][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 1093.851726][ C0] bpf_overflow_handler+0x1fc/0x510 [ 1093.851748][ C0] __perf_event_overflow+0x447/0x630 [ 1093.851764][ C0] perf_swevent_event+0x319/0x570 [ 1093.851781][ C0] perf_bp_event+0x319/0x430 [ 1093.851798][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 1093.851817][ C0] notifier_call_chain+0x197/0x380 [ 1093.851837][ C0] atomic_notifier_call_chain+0xda/0x180 [ 1093.851856][ C0] notify_die+0x145/0x1a0 [ 1093.851874][ C0] notify_debug+0x2e/0x50 [ 1093.851888][ C0] noist_exc_debug+0x77/0x120 [ 1093.851903][ C0] asm_exc_debug+0x33/0x40 [ 1093.851920][ C0] irq event stamp: 1926 [ 1093.851926][ C0] hardirqs last enabled at (1925): [] noist_exc_debug+0xf2/0x120 [ 1093.851946][ C0] hardirqs last disabled at (1926): [] irqentry_enter+0x13/0x50 [ 1093.851967][ C0] softirqs last enabled at (1882): [] __irq_exit_rcu+0xd3/0x190 [ 1093.851985][ C0] softirqs last disabled at (1857): [] __irq_exit_rcu+0xd3/0x190 [ 1093.852003][ C0] [ 1093.852003][ C0] other info that might help us debug this: [ 1093.852009][ C0] Possible unsafe locking scenario: [ 1093.852009][ C0] [ 1093.852013][ C0] CPU0 [ 1093.852017][ C0] ---- [ 1093.852020][ C0] lock(&htab->lockdep_key); [ 1093.852030][ C0] [ 1093.852034][ C0] lock(&htab->lockdep_key); [ 1093.852043][ C0] [ 1093.852043][ C0] *** DEADLOCK *** [ 1093.852043][ C0] [ 1093.852047][ C0] 1 lock held by syz.1.5261/22826: [ 1093.852056][ C0] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: perf_event_output_forward+0xb9/0x3e0 [ 1093.852094][ C0] [ 1093.852094][ C0] stack backtrace: [ 1093.852099][ C0] CPU: 0 PID: 22826 Comm: syz.1.5261 Not tainted syzkaller #0 [ 1093.852114][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1093.852123][ C0] Call Trace: [ 1093.852130][ C0] <#DB> [ 1093.852138][ C0] dump_stack_lvl+0x18c/0x250 [ 1093.852167][ C0] ? show_regs_print_info+0x20/0x20 [ 1093.852203][ C0] ? print_usage_bug+0x475/0x690 [ 1093.852222][ C0] ? verify_lock_unused+0x18/0x140 [ 1093.852248][ C0] lock_acquire+0x2c2/0x420 [ 1093.852273][ C0] ? htab_lock_bucket+0x17d/0x300 [ 1093.852303][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1093.852342][ C0] _raw_spin_lock+0x2e/0x40 [ 1093.852358][ C0] ? htab_lock_bucket+0x17d/0x300 [ 1093.852374][ C0] htab_lock_bucket+0x17d/0x300 [ 1093.852397][ C0] ? htab_lru_map_delete_node+0x760/0x760 [ 1093.852422][ C0] ? verify_lock_unused+0x18/0x140 [ 1093.852443][ C0] ? jhash+0x34e/0x740 [ 1093.852466][ C0] htab_lru_map_delete_elem+0x1a4/0x650 [ 1093.852493][ C0] ? htab_lru_map_update_elem+0x990/0x990 [ 1093.852512][ C0] ? perf_callchain+0x220/0x220 [ 1093.852545][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 1093.852569][ C0] bpf_overflow_handler+0x1fc/0x510 [ 1093.852599][ C0] ? __perf_event_overflow+0x4f8/0x630 [ 1093.852616][ C0] ? bpf_overflow_handler+0xde/0x510 [ 1093.852639][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 1093.852676][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 1093.852703][ C0] __perf_event_overflow+0x447/0x630 [ 1093.852736][ C0] perf_swevent_event+0x319/0x570 [ 1093.852762][ C0] ? perf_tp_event+0x1520/0x1520 [ 1093.852784][ C0] ? perf_trace_buf_alloc+0x290/0x290 [ 1093.852825][ C0] perf_bp_event+0x319/0x430 [ 1093.852856][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 1093.852933][ C0] ? lock_acquire+0x2c2/0x420 [ 1093.852988][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 1093.853020][ C0] notifier_call_chain+0x197/0x380 [ 1093.853046][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 1093.853071][ C0] atomic_notifier_call_chain+0xda/0x180 [ 1093.853097][ C0] notify_die+0x145/0x1a0 [ 1093.853125][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 1093.853171][ C0] notify_debug+0x2e/0x50 [ 1093.853189][ C0] exc_debug+0xde/0x140 [ 1093.853213][ C0] asm_exc_debug+0x1e/0x40 [ 1093.853232][ C0] RIP: 0010:__get_user_nocheck_8+0xd/0x20 [ 1093.853250][ C0] Code: fa 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 ca [ 1093.853263][ C0] RSP: 0000:ffffc9000c427638 EFLAGS: 00040806 [ 1093.853276][ C0] RAX: 0000200000000300 RBX: 00000000ffffffff RCX: 1ffff92001884ee6 [ 1093.853288][ C0] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 0000000000000000 [ 1093.853307][ C0] RBP: 0000200000000300 R08: 000000000000007f R09: 0000000000000000 [ 1093.853318][ C0] R10: dffffc0000000000 R11: fffffbfff2238ca1 R12: 0000000000000001 [ 1093.853329][ C0] R13: 1ffff92001884ee4 R14: 000000000000007f R15: dffffc0000000000 [ 1093.853370][ C0] [ 1093.853376][ C0] [ 1093.853382][ C0] perf_callchain_user+0xbe4/0x15c0 [ 1093.853429][ C0] get_perf_callchain+0x394/0x510 [ 1093.853454][ C0] ? put_callchain_entry+0xb0/0xb0 [ 1093.853481][ C0] ? __perf_event_header__init_id+0x3be/0x480 [ 1093.853508][ C0] perf_prepare_sample+0x3c7/0x1df0 [ 1093.853539][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1093.853561][ C0] ? perf_callchain+0x220/0x220 [ 1093.853597][ C0] perf_event_output_forward+0x187/0x3e0 [ 1093.853617][ C0] ? perf_event_output_forward+0xb9/0x3e0 [ 1093.853637][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 1093.853657][ C0] ? verify_lock_unused+0x140/0x140 [ 1093.853684][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1093.853713][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 1093.853739][ C0] __perf_event_overflow+0x447/0x630 [ 1093.853772][ C0] perf_swevent_hrtimer+0x439/0x610 [ 1093.853802][ C0] ? cpu_clock_event_read+0x40/0x40 [ 1093.853870][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1093.853892][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1093.853931][ C0] __hrtimer_run_queues+0x4e1/0xc40 [ 1093.853950][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 1093.853984][ C0] ? cpu_clock_event_read+0x40/0x40 [ 1093.854016][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1093.854035][ C0] ? read_tsc+0x9/0x20 [ 1093.854050][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1093.854086][ C0] hrtimer_interrupt+0x3c9/0x9c0 [ 1093.854149][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 1093.854175][ C0] sysvec_apic_timer_interrupt+0x51/0xc0 [ 1093.854197][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1093.854217][ C0] RIP: 0033:0x7fe300b7bb7d [ 1093.854233][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc [ 1093.854246][ C0] RSP: 002b:00007fe301a448a8 EFLAGS: 00000283 [ 1093.854260][ C0] RAX: 0000000000000300 RBX: 00007fe301a44de0 RCX: 2f666c65732f636f [ 1093.854272][ C0] RDX: 0000200000000300 RSI: 00007fe300c5d0c0 RDI: 0000200000000300 [ 1093.854284][ C0] RBP: 0000200000000300 R08: 00007fe301a45010 R09: 00000000ffffffff [ 1093.854305][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1093.854316][ C0] R13: 0000000000000073 R14: 00007fe300c32033 R15: 00007fe301a44ea0 [ 1093.854357][ C0] [ 1094.642898][T22829] FAULT_INJECTION: forcing a failure. [ 1094.642898][T22829] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.680600][T22829] CPU: 1 PID: 22829 Comm: syz.3.5263 Not tainted syzkaller #0 [ 1094.688216][T22829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1094.698410][T22829] Call Trace: [ 1094.701726][T22829] [ 1094.704876][T22829] dump_stack_lvl+0x18c/0x250 [ 1094.709676][T22829] ? slab_pre_alloc_hook+0x31/0x310 [ 1094.714880][T22829] ? show_regs_print_info+0x20/0x20 [ 1094.720095][T22829] ? load_image+0x420/0x420 [ 1094.724622][T22829] ? __might_sleep+0xe0/0xe0 [ 1094.729324][T22829] ? __lock_acquire+0x7d40/0x7d40 [ 1094.734381][T22829] ? do_user_addr_fault+0xb39/0x12c0 [ 1094.739705][T22829] should_fail_ex+0x39d/0x4d0 [ 1094.744393][T22829] should_failslab+0x9/0x20 [ 1094.748938][T22829] slab_pre_alloc_hook+0x59/0x310 [ 1094.753985][T22829] kmem_cache_alloc_node+0x60/0x320 [ 1094.759202][T22829] ? __alloc_skb+0x103/0x2c0 [ 1094.763798][T22829] __alloc_skb+0x103/0x2c0 [ 1094.768234][T22829] alloc_skb_with_frags+0xca/0x7b0 [ 1094.773368][T22829] ? perf_trace_lock+0xfc/0x3b0 [ 1094.778260][T22829] sock_alloc_send_pskb+0x883/0x9a0 [ 1094.783473][T22829] ? sock_kzfree_s+0x50/0x50 [ 1094.788119][T22829] ? __lock_acquire+0x7d40/0x7d40 [ 1094.793189][T22829] ? sk_wake_async+0x6a/0x280 [ 1094.797904][T22829] ? sock_def_readable+0xad/0x420 [ 1094.802956][T22829] ? sock_def_readable+0x2ac/0x420 [ 1094.808178][T22829] unix_stream_sendmsg+0x48b/0xbf0 [ 1094.813315][T22829] ? unix_show_fdinfo+0x270/0x270 [ 1094.818366][T22829] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1094.824801][T22829] ? aa_sock_msg_perm+0x94/0x150 [ 1094.829937][T22829] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1094.835239][T22829] ? security_socket_sendmsg+0x80/0xa0 [ 1094.840718][T22829] ? unix_show_fdinfo+0x270/0x270 [ 1094.845847][T22829] ____sys_sendmsg+0x5ba/0x960 [ 1094.850626][T22829] ? __might_sleep+0xe0/0xe0 [ 1094.855234][T22829] ? __asan_memset+0x22/0x40 [ 1094.859836][T22829] ? __sys_sendmsg_sock+0x30/0x30 [ 1094.864885][T22829] ? __import_iovec+0x5f2/0x850 [ 1094.869752][T22829] ? import_iovec+0x73/0xa0 [ 1094.874271][T22829] ___sys_sendmsg+0x2a6/0x360 [ 1094.879243][T22829] ? __sys_sendmsg+0x2a0/0x2a0 [ 1094.884136][T22829] ? lock_release+0xb5/0x8c0 [ 1094.888825][T22829] ? ksys_write+0x1c4/0x260 [ 1094.893376][T22829] ? __lock_acquire+0x7d40/0x7d40 [ 1094.898428][T22829] __se_sys_sendmsg+0x1c2/0x2b0 [ 1094.903319][T22829] ? __x64_sys_sendmsg+0x80/0x80 [ 1094.908371][T22829] do_syscall_64+0x55/0xa0 [ 1094.912795][T22829] ? clear_bhb_loop+0x40/0x90 [ 1094.917504][T22829] ? clear_bhb_loop+0x40/0x90 [ 1094.922219][T22829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1094.929554][T22829] RIP: 0033:0x7fe69ad9cdd9 [ 1094.933993][T22829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.954104][T22829] RSP: 002b:00007fe69bd45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1094.962529][T22829] RAX: ffffffffffffffda RBX: 00007fe69b015fa0 RCX: 00007fe69ad9cdd9 [ 1094.970523][T22829] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 1094.978719][T22829] RBP: 00007fe69bd45090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.986810][T22829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1094.994797][T22829] R13: 00007fe69b016038 R14: 00007fe69b015fa0 R15: 00007ffe2207f608 [ 1095.002810][T22829] [ 1097.863344][T13409] Bluetooth: hci0: command 0x0406 tx timeout