last executing test programs: 27.118897592s ago: executing program 2 (id=12912): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0xd, &(0x7f0000001140)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x6, 0x8b, &(0x7f0000000000)=""/139}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 27.006265001s ago: executing program 2 (id=12914): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000300feff020037153e370248018000", 0x29}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x11, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000060000000b0000800000000a020000000000000000000001000000000a004f000b"], &(0x7f00000002c0)=""/5, 0x46, 0x5, 0x1, 0x4}, 0x28) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x4, 0x98, 0x4, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x20}, 0xffff, 0x3}, 0x80, 0x0}, 0x2600c055) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0xff, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) close(r9) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060006c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0xfffc, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x10b8}, 0x0) sendmsg$unix(r1, &(0x7f0000000980)={&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000003c0)="87008fc35784da28596ec3fdd0188fd38152a4707c9da0d20a8cee42bcb3837eb99fcb30be84c3e061ed8bd948a6f26693c0b75ef4ab990c87213c95a3f45c0d083d17321be17105c3e7bf24a10413", 0x4f}, {&(0x7f0000000640)="aa9a68e129ef78d2ef22b07d7bc0a433794ff6dea068a363c4f8427a77e3e6d31a2045ece5bb35791068218de373dbbff9fc92deeddf651d16566923964133eca8804bb7b6e91b720171abd4f04d4b8085ac922a1075f08b8f38dd9a5c2052f566dab6539f5b31406134af86f3cf4d790a33ea201dfe901bac78412c15da2635c1f9b157b871ac71030cf441e18d05b8cebe846deb23eb63a18ec398afe53cd9d08f385b2e6d0fd56d4496cf594e7960e769cbb56995f5ee21657465f4af7a676c1003b5d5e80bdfe989d0fa55c7267017241c6e51", 0xd5}], 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="34000000010000000100000001000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x40}, 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xd}, 0x338bd4001d9e672f) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) socketpair(0x2, 0x3, 0x1, &(0x7f0000000300)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/32}, 0x20) 26.600425378s ago: executing program 2 (id=12919): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x14242, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa3000a0000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000018000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 26.362374177s ago: executing program 2 (id=12923): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x14242, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040)=r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302c00dbf6e97158cf474fec87891f6d76745b686158"], 0x280) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x8) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0xb}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000005c0)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10048, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 25.975927012s ago: executing program 2 (id=12926): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000300feff020037153e370248018000", 0x29}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x11, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000060000000b0000800000000a020000000000000000000001000000000a004f000b0000000000000a050000000461"], &(0x7f00000002c0)=""/5, 0x46, 0x5, 0x1, 0x4}, 0x28) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x4, 0x98, 0x4, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x20}, 0xffff, 0x3}, 0x80, 0x0}, 0x2600c055) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0xff, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) close(r9) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060006c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0xfffc, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x10b8}, 0x0) sendmsg$unix(r1, &(0x7f0000000980)={&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000003c0)="87008fc35784da28596ec3fdd0188fd38152a4707c9da0d20a8cee42bcb3837eb99fcb30be84c3e061ed8bd948a6f26693c0b75ef4ab990c87213c95a3f45c0d083d17321be17105c3e7bf24a10413", 0x4f}, {&(0x7f0000000640)="aa9a68e129ef78d2ef22b07d7bc0a433794ff6dea068a363c4f8427a77e3e6d31a2045ece5bb35791068218de373dbbff9fc92deeddf651d16566923964133eca8804bb7b6e91b720171abd4f04d4b8085ac922a1075f08b8f38dd9a5c2052f566dab6539f5b31406134af86f3cf4d790a33ea201dfe901bac78412c15da2635c1f9b157b871ac71030cf441e18d05b8cebe846deb23eb63a18ec398afe53cd9d08f385b2e6d0fd56d4496cf594e7960e769cbb56995f5ee21657465f4af7a676c1003b5d5e80bdfe989d0fa55c7267017241c6e51", 0xd5}], 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="34000000010000000100000001000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x40}, 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xd}, 0x338bd4001d9e672f) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) socketpair(0x2, 0x3, 0x1, &(0x7f0000000300)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/32}, 0x20) 25.886060087s ago: executing program 2 (id=12927): r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b80)=""/161, 0xa1}], 0x1}, 0x4003) setsockopt$sock_attach_bpf(r0, 0x6, 0x4, &(0x7f0000000200), 0x4) 22.210884118s ago: executing program 3 (id=12954): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, 0x0, 0x2000) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 21.814972584s ago: executing program 3 (id=12956): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b904020000000080000000001500100014200d00090009000d2000000401a80016000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e81cef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92954b43370e970100", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x0, 0x3, 0x0, 0xfae, 0x2402c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x1, @perf_bp={0x0, 0x1}, 0x91400, 0xca, 0xfffffffd, 0x9, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="001000001a00911c01"], 0xfe33) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x7fff}, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x20000000}, 0x8}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 21.714811741s ago: executing program 0 (id=12957): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108420, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x40004000}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000eeffb704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x100000010, 0x1d66ef49}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000000000000000437a028000000000009500000000e200006a9b06eebac405a6ea212bc813c41debc634ebb389c0b70dfb14d728fd2e5d6f7b0183458cdfa35db73fd281756906cad7c265cd8f12434bbdad206b75254e4386329f7d657b2a49779d3133cf37578aa6b3a21878f2a86fd80631f70adabf0da11c6e270adaef92ea79485f5cd67d5fcb039920fd7bd9fa488920eb"], 0x0, 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x6, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$sock(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x20000810) socketpair(0x6, 0x2, 0x7, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf93", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x2f, 0x0, &(0x7f0000010000)="b9fa0307110800a6a4321ab9a703c8e0ffff00124000638477fbac141416e00003f511f8be4c73c30e251f5ce0fa0a", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.542704129s ago: executing program 1 (id=12958): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000000e80)={&(0x7f0000000740)=@in={0x2, 0x4e21, @private=0xa010101}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)="99", 0x1}], 0x1}, 0x20000040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x2, 0x8, 0x2, 0x4}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x2, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000280)="e9", 0x0}, 0x20) sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) (async) sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r0) (async) close(r0) sendmsg$kcm(r0, &(0x7f00000022c0)={&(0x7f0000000040)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f0000002200)=[{&(0x7f00000001c0)="34bce8f7188fddd5cca02095a3e17206829a16c57bc485677d514cada9eea575e58cb8d6935c60c8d8c8b0f953e477cab323d35a4dc0917ee08ffebfbe3bda4d26fe8c09992e9cb12fd73b5387a42868daee7802dcba3eec374c706aee74090ea8374cfa1890caebebcdd9100a1531356558999ba175b823c6ac3c2624b3a504d6d68c56b5a9a78e282769a2ef1907ed3c15e464a1a0502f26210df9a05bb4b7fb8166dacbef9b15a15491cb11526e3330dc2a49b12845487173cbe529d6acc7c5c73bb644ef1fff11e44440c3c9510ba1380463dd0a297f85e9927732620a61", 0xe0}, {&(0x7f0000000300)="7ee42d84ae42d43c4ff68a66897ad9ad44fefcc62b53d42b043fac027f7dc6004e5bc8246a81d9fe850991e9034cafa4c262e9280d50354d723f342beac51f6bcbe5ae5991552c95b9af13e5b18ec3e93e2403f09bcf119f542d14fd66e5b86818f0e6f079aa3c05d400a4f31999274c474c84fa28826a59c1d3699c3b1887d5ea0dae7dbb3371d1a0e2688438e27ab10a1099378156b369a19acbfea0fe1190468fb4e56d3c6d71292c5dc5ebebcfce077d84a648049f923dcee9021029fbb142c529ac37bc35d8a6fddb638dfe7237b8dda2208096", 0xd6}, {&(0x7f00000004c0)="d8d51929af1fa5856c8f0526869ee144312383a32f7019e69fa4c763ab5d6738b926d962e664f6a30179d9b2f53f6f2e951400a5064def90cc7900515f232997d5807e9586ce6fd2baab05649cd8452fef91bb69f32f084eaa5063b1c2e7e819fbb4ca94befebc7d33e0ce70090bfabed6188b837932b2c319e784361fc3a053208227557f52596ae5f651d8bc4328fbaebbf95286b3a8643a84e6728c5758376b7a8527d5821f64d62a59c6c9a3fffda2456f1ed52e4c51af9216fb0c7f1e", 0xbf}, {&(0x7f0000000580)="de69c59b50456770610f4906adbc851196b1c4d26cdd062132c5fd3a2d306506abebea77d967351a36d61f3ff31ae2f751ddfea1fe8dfd0416e3832ca0c71b06e90cc44b6c4f48a88e0c4e70fef7d50a0a7f8148ba47fa25b3cbd2c3c405f8d7285979bcc7cf8f4732f08a15ff5652c0141578cbc8984352a900d4023810894accfc266d27bb7f", 0x87}, {&(0x7f0000000880)="a5f0ef3aea43b3ae72b01720fb00f477d868be6f069c5981302ee64d3dca5075950627abe34dbf6bccc2619a885d5f54599c822c21e07a0d6750b097f19d96c70b5c1396de860ba12e2d965766ac21a5ace74868a7b03b76198702042d5fee684c8bdd62c9547dd2d67a44824eff37aafb17153f31ce30353e41f9320008246c27a139ce8f74396d2dafd97548580b3021e95bdad082777b6a2ceb5dc3f69add0103", 0xa2}, {&(0x7f0000000980)="581f441336be25ec2f43b9407800c6837f326a64d48c0c3c7bbf495455cc82309f3fcc8676567ce87f29e4bfb71198c3d3aa0990128e4afbdf93ef3944ecf163bdc2132947c34554368f368f1d53cd4054d03d11290d8ec2f0896536ada836ebecd8ca6e5d25055d9fe8258f92b0c80f036d63cd173584b001267a15b9adef92893f88f24a1486f2052dfcd3fc3fe1d2bcb0a6d0c3666313620f5493c9ca18412285805a57e07d10f2eef5ea34f3e8175c1c926f9d0051036c11be7ef21738f9631a2fa622d5ac549010b05034a4d91693e83bd192", 0xd5}, {&(0x7f0000000a80)="1c6f41b5f6d5eb57bd51aa67f1041319853f432fc8f55950b6cab8bf861abf6b9a31c8744ae40a96c9d5fe2f129125e1aa6927355a3a79a85b80f5c6339b954f45f60c5c4076a30cf39e0898b1253b9e5276cbc973d15b0a0e090567d7bbbded4a8f", 0x62}, {&(0x7f0000002300)="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", 0x102e}, {&(0x7f0000002100)="857cb37433a16a577532f0e46c62a355d5905e6700ed3e0d298b9f450f0970893407feb68118548cc840bcb086ddfc795c95f1c4893296d636ea4be8e897dfc45184457dd30ba35bacc146f7df04bff3743547f92c28afd7ac812581a1913dde7e41b20defc33587717990590cfa7b5a15bdd9e00463eabef12ac02f8994f660566316bf11789dc6e5293b8d1e4fe65756850ee653512ad27baa5636457ba9ae8e228646f111976bf4c124c9419a895c3fb8c4bd5ce2dee3531ad3880084cd4a8c068e0cbf81685930b7063a7c", 0xcd}], 0x9}, 0x804) 21.338889563s ago: executing program 3 (id=12959): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x110904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0xad, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x20000000) 21.278853483s ago: executing program 1 (id=12960): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x4, 0x10000, 0x9e4, 0x5, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8000000c8, 0x4, 0x9, 0x4, 0x8, 0x0, 0x0, 0x40, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x3, 0x1, 0x0, 0x420b0, r2, 0xb, '\x00', r3, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 21.11877048s ago: executing program 3 (id=12961): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x3, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x28e000000000000, 0xc6000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xfffffffffffffff9}, 0x1a040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000004bd638a112f56c09dcf4a4215d58a179c53a9dd63a83b1d538b591ca1989d3715299bf62f78d98259a8576934630d7e1b41d2a6e237edbcd8d1ad59a7102e7b0d540cc823886d57da335e0611363755155e84921ae8b7b3271d7abecca15f3c1759809bd7000193873cc402c38ed6950842fe8197013f8774e792f57553aee2da1c90ba8d7243b22da3ce5298fa105edaef88a6433e4140eb4f0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004000000000000000088a3b0fb04a0bf2", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a80000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={0xffffffffffffffff, 0x5, 0x8e, 0x0, &(0x7f0000000880)="25509cb475df63f5017d3647b1904c4a7a848515743a952187dbca0fa78e23c5826bf93c2bf82aa5907cca99c9c0067157e45350defabe5c0036b43f39825987c2406c218ffb9b354cf2478d33977fba6a52b87b2fef2fb02bc8994a2fdd85f6ebbab19155001089d72db22aaa680503b469e7bb39f96824f13adac94643bdc067c294224bab29500efac63988e5", 0x0, 0x40d01, 0x0, 0x0, 0xcb50c50a886f713c, 0x0, 0x0, 0x5, 0x0, 0xfc}, 0x73) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1c, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='rdma.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000380)=0x4, 0x12) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03f88c000b05d25a806b8c6f94f90524fc6010b88b1080fc8b10001300", 0x1f}], 0x1}, 0x20000050) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x400400, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r3, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000740)=r8) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x4, 0x3, 0x9, 0x8, 0x0, 0x9, 0x5340, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xd687fef6, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x20, 0x5, 0x8, 0x0, 0x3, 0x101, 0xb, 0x0, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xaf1a5b54318a4a34) 18.462870861s ago: executing program 1 (id=12962): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0xd, &(0x7f0000001140)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x6, 0x8b, &(0x7f0000000000)=""/139}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a11800150006", 0x21}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 18.095834792s ago: executing program 3 (id=12963): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000bc0)={r3, r2, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x4, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x402, 0xfffffffffffffffd, 0x7, 0x7, 0x0, 0x40000000}, r3, 0x9, 0xffffffffffffffff, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', r4, 0x4000, r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x40001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305829, &(0x7f0000000040)=0xe9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b904020000000080000000001500100014200d00090009000d2000000401a80016000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92954b43370e970100", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x0, 0x3, 0x0, 0xfae, 0x2402c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x1, @perf_bp={0x0, 0x1}, 0x91400, 0xca, 0xfffffffd, 0x9, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) socketpair(0x27, 0x800, 0x3, &(0x7f00000001c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r10, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r9}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r11, &(0x7f0000000000), 0x0}, 0x20) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="001000001a00911c01"], 0xfe33) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x7fff}, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x20000000}, 0x8}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r7], 0x9a) 18.050422329s ago: executing program 0 (id=12964): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000300feff020037153e370248018000", 0x29}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x11, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000060000000b0000800000000a020000000000000000000001000000000a004f000b0000000000000a0500000004616100"], &(0x7f00000002c0)=""/5, 0x46, 0x5, 0x1, 0x4}, 0x28) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x4, 0x98, 0x4, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x20}, 0xffff, 0x3}, 0x80, 0x0}, 0x2600c055) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0xff, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) close(r9) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060006c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0xfffc, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x10b8}, 0x0) sendmsg$unix(r1, &(0x7f0000000980)={&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000003c0)="87008fc35784da28596ec3fdd0188fd38152a4707c9da0d20a8cee42bcb3837eb99fcb30be84c3e061ed8bd948a6f26693c0b75ef4ab990c87213c95a3f45c0d083d17321be17105c3e7bf24a10413", 0x4f}, {&(0x7f0000000640)="aa9a68e129ef78d2ef22b07d7bc0a433794ff6dea068a363c4f8427a77e3e6d31a2045ece5bb35791068218de373dbbff9fc92deeddf651d16566923964133eca8804bb7b6e91b720171abd4f04d4b8085ac922a1075f08b8f38dd9a5c2052f566dab6539f5b31406134af86f3cf4d790a33ea201dfe901bac78412c15da2635c1f9b157b871ac71030cf441e18d05b8cebe846deb23eb63a18ec398afe53cd9d08f385b2e6d0fd56d4496cf594e7960e769cbb56995f5ee21657465f4af7a676c1003b5d5e80bdfe989d0fa55c7267017241c6e51", 0xd5}], 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="34000000010000000100000001000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x40}, 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xd}, 0x338bd4001d9e672f) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) socketpair(0x2, 0x3, 0x1, &(0x7f0000000300)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/32}, 0x20) 18.019023714s ago: executing program 1 (id=12965): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x9}, 0x8210, 0x4, 0x403, 0xaaf04684de878bda, 0x4e3, 0x6, 0x74, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = syz_clone(0x21000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001c000000850000001500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) 17.56630365s ago: executing program 1 (id=12966): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e000000ffff000000f0ffff0300000001a0", @ANYRES32=0x1, @ANYBLOB="07000000000000000000000000000000000000007bba117beafe7a395edffd79c18bce36f33ac2135bd159f52b5938ce158822", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10004) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000680)={&(0x7f0000000180)="87f6f0926799687d0950e0d0d364d700f61e718e598398e6fe71b1d682122801e860c20bd43ada78c0529e9e1f46e6c903b78f9169e7efcf2f402398411dc670c26651f5af55604671b474e90b313f88cd163095ca10da004d38cae0d70faa459afc7e188062e326e1add959644aab8190aca871d8b72220535617ef3145bc241404b6547805d0a70a5362d550d69e14e1b8fdd7fd83cd4fb8ae", &(0x7f0000000380)=""/97, &(0x7f0000000580)="762a057029af0446cea3363d74434070111241c73f69f6e39673dff0eb6948a73a3bc6d83bec93d55429adcbb104aaf7bdccaa7e9c5e87201a7867e9afe4b9591c1296de15b360b7116140742a6535", &(0x7f0000000600)="5a13977eac5b06dce16a318dc4661d72f6b7fa74bfc049299a6480549ad900fa38755f6e32844ba80b28323521f6757539af3d49f1eef073db5b9be46d7b381d6fc7e27b4909d0b924988e3c1bf72d3067f6039b6a9c823178a7c598487b09c10eaceaff6efa98b56b", 0x5, r1}, 0x38) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[], 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000c39af0ff01000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000054080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef", 0x7d}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a", 0x15}, {&(0x7f0000000180)}], 0x4}, 0x0) 17.56489415s ago: executing program 0 (id=12967): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000340)="d1", 0xfffd}], 0x1}, 0xc54) (fail_nth: 30) 17.186241143s ago: executing program 3 (id=12968): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2000) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 17.045538256s ago: executing program 1 (id=12969): r0 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[], 0xfefb) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0), 0x161) sendmsg$inet(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000001, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x23, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000000c0)=r5, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000940)={r5, r5}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x2, 0xd1, &(0x7f0000000000)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0xb1850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x88e0}, 0x2085, 0x0, 0x0, 0x0, 0x1000000000000, 0x80002, 0x331, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xc, r6, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, 0x0) 17.039977147s ago: executing program 0 (id=12970): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000081) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000004000000bb7f1ad04d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) (fail_nth: 2) 15.802897723s ago: executing program 0 (id=12971): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1ffffffffffffef3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x80000, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000340), 0x2}, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7f) socket$kcm(0x10, 0x400000002, 0x0) (async) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x8902, &(0x7f00000005c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000600)='memory.current\x00', 0xf0, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x4}, 0x10000, 0x0, 0x80000001, 0x5, 0xd, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x1000000000007}, 0x0, 0x9, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a00000080000000064242"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f00000001c0)='P', 0x0, 0x5c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x50) (async) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800020000000000000000000018200000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 15.729203256s ago: executing program 0 (id=12972): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0xd, &(0x7f0000001140)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x6, 0x8b, &(0x7f0000000000)=""/139}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e", 0x27}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 2.074252845s ago: executing program 32 (id=12968): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2000) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 1.032644748s ago: executing program 33 (id=12969): r0 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[], 0xfefb) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0), 0x161) sendmsg$inet(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000001, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x23, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000000c0)=r5, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000940)={r5, r5}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x2, 0xd1, &(0x7f0000000000)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0xb1850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x88e0}, 0x2085, 0x0, 0x0, 0x0, 0x1000000000000, 0x80002, 0x331, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xc, r6, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, 0x0) 0s ago: executing program 34 (id=12972): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0xd, &(0x7f0000001140)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x6, 0x8b, &(0x7f0000000000)=""/139}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e", 0x27}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) kernel console output (not intermixed with test programs): 10663] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.12293'. [ 2496.389134][ T6673] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2497.604207][T10685] openvswitch: netlink: Tunnel attr 11913 out of range max 16 [ 2497.787684][T10705] validate_nla: 7 callbacks suppressed [ 2497.787705][T10705] netlink: 'syz.2.12307': attribute type 10 has an invalid length. [ 2497.904147][T10705] __nla_validate_parse: 3 callbacks suppressed [ 2497.904175][T10705] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12307'. [ 2498.149101][T10714] netlink: 196 bytes leftover after parsing attributes in process `syz.0.12310'. [ 2498.278318][T10718] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12312'. [ 2498.634639][T10728] netlink: 'syz.3.12316': attribute type 10 has an invalid length. [ 2498.770863][T10733] netlink: 'syz.0.12319': attribute type 10 has an invalid length. [ 2498.932060][T10733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2498.986763][T10733] team0: Port device batadv0 added [ 2499.227473][T10745] netlink: 'syz.0.12320': attribute type 10 has an invalid length. [ 2499.239771][T10745] netlink: 55 bytes leftover after parsing attributes in process `syz.0.12320'. [ 2499.387826][T10748] FAULT_INJECTION: forcing a failure. [ 2499.387826][T10748] name failslab, interval 1, probability 0, space 0, times 0 [ 2499.401350][T10748] CPU: 0 PID: 10748 Comm: syz.1.12323 Not tainted syzkaller #0 [ 2499.408931][T10748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2499.419013][T10748] Call Trace: [ 2499.422343][T10748] [ 2499.425319][T10748] dump_stack_lvl+0x18c/0x250 [ 2499.430040][T10748] ? show_regs_print_info+0x20/0x20 [ 2499.435325][T10748] ? load_image+0x420/0x420 [ 2499.439869][T10748] ? __lock_acquire+0x1262/0x7d80 [ 2499.444936][T10748] should_fail_ex+0x394/0x4c0 [ 2499.449660][T10748] should_failslab+0x9/0x20 [ 2499.454209][T10748] slab_pre_alloc_hook+0x59/0x300 [ 2499.459274][T10748] ? mark_lock+0x94/0x320 [ 2499.463654][T10748] ? ___neigh_create+0x6f4/0x23d0 [ 2499.468716][T10748] ? ___neigh_create+0x6f4/0x23d0 [ 2499.473771][T10748] __kmem_cache_alloc_node+0x53/0x250 [ 2499.479183][T10748] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2499.485291][T10748] ? ___neigh_create+0x6f4/0x23d0 [ 2499.490364][T10748] __kmalloc+0xa7/0x240 [ 2499.494618][T10748] ___neigh_create+0x6f4/0x23d0 [ 2499.499530][T10748] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2499.505748][T10748] ? lockdep_hardirqs_on+0x98/0x150 [ 2499.510992][T10748] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2499.517195][T10748] ip_neigh_gw4+0x351/0x4d0 [ 2499.521735][T10748] ? ip_finish_output2+0x1260/0x1260 [ 2499.527050][T10748] ? mark_lock+0x94/0x320 [ 2499.531415][T10748] ? ip_finish_output2+0x45a/0x1260 [ 2499.536630][T10748] ip_finish_output2+0xf99/0x1260 [ 2499.541685][T10748] ? ip_copy_metadata+0x79e/0xd80 [ 2499.546741][T10748] ? ip_fragment+0x210/0x210 [ 2499.551374][T10748] ? ip_fast_csum+0x1ee/0x2b0 [ 2499.556082][T10748] ? ip_fraglist_prepare+0x371/0x570 [ 2499.561409][T10748] ip_do_fragment+0x1135/0x1730 [ 2499.566308][T10748] ? ip_fragment+0x210/0x210 [ 2499.570934][T10748] ip_send_skb+0x12f/0x1d0 [ 2499.575374][T10748] udp_send_skb+0xa7d/0x1440 [ 2499.580007][T10748] udp_sendmsg+0x77d/0x23d0 [ 2499.584550][T10748] ? ip_skb_dst_mtu+0x870/0x870 [ 2499.589444][T10748] ? udp_cmsg_send+0x350/0x350 [ 2499.594254][T10748] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2499.600695][T10748] ? aa_sock_msg_perm+0x94/0x150 [ 2499.605673][T10748] ? sock_rps_record_flow+0x19/0x3f0 [ 2499.610993][T10748] ? inet_sendmsg+0x7e/0x2a0 [ 2499.615692][T10748] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2499.621019][T10748] ? inet_send_prepare+0x250/0x250 [ 2499.626148][T10748] ____sys_sendmsg+0x61b/0x980 [ 2499.630945][T10748] ? __asan_memset+0x22/0x40 [ 2499.635572][T10748] ? __sys_sendmsg_sock+0x30/0x30 [ 2499.640622][T10748] ? __import_iovec+0x3fa/0x850 [ 2499.645507][T10748] ? import_iovec+0x73/0xa0 [ 2499.650043][T10748] ___sys_sendmsg+0x2a6/0x360 [ 2499.654752][T10748] ? __sys_sendmsg+0x2b0/0x2b0 [ 2499.659566][T10748] ? ktime_get+0x7f/0x280 [ 2499.663939][T10748] __se_sys_sendmsg+0x1d0/0x2c0 [ 2499.668822][T10748] ? __x64_sys_sendmsg+0x80/0x80 [ 2499.673799][T10748] ? lockdep_hardirqs_on+0x98/0x150 [ 2499.679019][T10748] do_syscall_64+0x55/0xb0 [ 2499.683469][T10748] ? clear_bhb_loop+0x40/0x90 [ 2499.688181][T10748] ? clear_bhb_loop+0x40/0x90 [ 2499.692898][T10748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2499.698821][T10748] RIP: 0033:0x7f1f87d9e159 [ 2499.703277][T10748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2499.722919][T10748] RSP: 002b:00007f1f88cf2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2499.731376][T10748] RAX: ffffffffffffffda RBX: 00007f1f88025fa0 RCX: 00007f1f87d9e159 [ 2499.739377][T10748] RDX: 0000000000044000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 2499.747376][T10748] RBP: 00007f1f88cf2090 R08: 0000000000000000 R09: 0000000000000000 [ 2499.755380][T10748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2499.763381][T10748] R13: 00007f1f88026038 R14: 00007f1f88025fa0 R15: 00007ffd6f4f6e28 [ 2499.771395][T10748] [ 2499.846184][T10751] netlink: 'syz.0.12322': attribute type 10 has an invalid length. [ 2499.854518][T10752] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12324'. [ 2501.207633][T10776] netlink: 'syz.3.12331': attribute type 10 has an invalid length. [ 2501.222574][T10776] netlink: 55 bytes leftover after parsing attributes in process `syz.3.12331'. [ 2501.420927][T10784] netlink: 'syz.0.12333': attribute type 10 has an invalid length. [ 2501.561575][T10788] netlink: 'syz.1.12343': attribute type 10 has an invalid length. [ 2501.569957][T10788] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12343'. [ 2501.739117][T10791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2501.746679][T10791] IPv6: NLM_F_CREATE should be set when creating new route [ 2501.754343][T10791] IPv6: NLM_F_CREATE should be set when creating new route [ 2501.761974][T10791] IPv6: NLM_F_CREATE should be set when creating new route [ 2501.798090][T10791] netlink: 'syz.3.12335': attribute type 9 has an invalid length. [ 2501.806753][T10791] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.12335'. [ 2502.402810][T10812] netlink: 'syz.2.12345': attribute type 10 has an invalid length. [ 2502.508913][T10815] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12346'. [ 2502.912653][T10823] validate_nla: 1 callbacks suppressed [ 2502.912672][T10823] netlink: 'syz.2.12348': attribute type 10 has an invalid length. [ 2502.944261][T10823] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12348'. [ 2502.977996][T10828] netlink: 'syz.3.12349': attribute type 21 has an invalid length. [ 2502.987059][T10828] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12349'. [ 2503.079192][T10828] netlink: 'syz.3.12349': attribute type 10 has an invalid length. [ 2503.418001][T10840] FAULT_INJECTION: forcing a failure. [ 2503.418001][T10840] name failslab, interval 1, probability 0, space 0, times 0 [ 2503.450440][T10840] CPU: 0 PID: 10840 Comm: syz.2.12353 Not tainted syzkaller #0 [ 2503.458155][T10840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2503.468252][T10840] Call Trace: [ 2503.471559][T10840] [ 2503.474541][T10840] dump_stack_lvl+0x18c/0x250 [ 2503.479269][T10840] ? show_regs_print_info+0x20/0x20 [ 2503.484517][T10840] ? load_image+0x420/0x420 [ 2503.489062][T10840] ? __might_sleep+0xe0/0xe0 [ 2503.493698][T10840] ? __lock_acquire+0x7d80/0x7d80 [ 2503.498772][T10840] should_fail_ex+0x394/0x4c0 [ 2503.503504][T10840] should_failslab+0x9/0x20 [ 2503.508081][T10840] slab_pre_alloc_hook+0x59/0x300 [ 2503.513160][T10840] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 2503.518930][T10840] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 2503.524686][T10840] __kmem_cache_alloc_node+0x53/0x250 [ 2503.530115][T10840] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 2503.535879][T10840] __kmalloc+0xa7/0x240 [ 2503.540083][T10840] tomoyo_realpath_from_path+0xe6/0x5c0 [ 2503.545672][T10840] ? tomoyo_domain+0xd6/0x120 [ 2503.550419][T10840] tomoyo_path_number_perm+0x248/0x5e0 [ 2503.555936][T10840] ? tomoyo_path_number_perm+0x217/0x5e0 [ 2503.561627][T10840] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2503.567149][T10840] ? ksys_write+0x1d2/0x260 [ 2503.571737][T10840] ? __fget_files+0x28/0x460 [ 2503.576394][T10840] security_file_ioctl+0x70/0xa0 [ 2503.581388][T10840] __se_sys_ioctl+0x48/0x170 [ 2503.586028][T10840] do_syscall_64+0x55/0xb0 [ 2503.590490][T10840] ? clear_bhb_loop+0x40/0x90 [ 2503.595309][T10840] ? clear_bhb_loop+0x40/0x90 [ 2503.600035][T10840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2503.605978][T10840] RIP: 0033:0x7fb436f9e159 [ 2503.610435][T10840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2503.630130][T10840] RSP: 002b:00007fb437dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2503.638599][T10840] RAX: ffffffffffffffda RBX: 00007fb437225fa0 RCX: 00007fb436f9e159 [ 2503.646609][T10840] RDX: 0000200000000080 RSI: 0000000000008b19 RDI: 0000000000000005 [ 2503.654616][T10840] RBP: 00007fb437dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 2503.662631][T10840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2503.670651][T10840] R13: 00007fb437226038 R14: 00007fb437225fa0 R15: 00007ffe1d9ede48 [ 2503.678680][T10840] [ 2503.685817][T10840] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2503.926387][T10848] netlink: 'syz.3.12356': attribute type 10 has an invalid length. [ 2504.504476][T10861] netlink: 'syz.0.12360': attribute type 10 has an invalid length. [ 2504.555719][T10861] netlink: 55 bytes leftover after parsing attributes in process `syz.0.12360'. [ 2505.472896][T10882] netlink: 'syz.1.12367': attribute type 10 has an invalid length. [ 2505.638560][T10887] FAULT_INJECTION: forcing a failure. [ 2505.638560][T10887] name failslab, interval 1, probability 0, space 0, times 0 [ 2505.665593][T10887] CPU: 0 PID: 10887 Comm: syz.3.12368 Not tainted syzkaller #0 [ 2505.673273][T10887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2505.683374][T10887] Call Trace: [ 2505.686693][T10887] [ 2505.689667][T10887] dump_stack_lvl+0x18c/0x250 [ 2505.694428][T10887] ? sctp_sendmsg+0x1519/0x27b0 [ 2505.699330][T10887] ? ___sys_sendmsg+0x2a6/0x360 [ 2505.704230][T10887] ? show_regs_print_info+0x20/0x20 [ 2505.709475][T10887] ? load_image+0x420/0x420 [ 2505.714034][T10887] should_fail_ex+0x394/0x4c0 [ 2505.718757][T10887] should_failslab+0x9/0x20 [ 2505.723304][T10887] slab_pre_alloc_hook+0x59/0x300 [ 2505.728380][T10887] ? sctp_add_bind_addr+0x8c/0x360 [ 2505.733550][T10887] __kmem_cache_alloc_node+0x53/0x250 [ 2505.738989][T10887] ? sctp_add_bind_addr+0x8c/0x360 [ 2505.744164][T10887] kmalloc_trace+0x2a/0xe0 [ 2505.748634][T10887] sctp_add_bind_addr+0x8c/0x360 [ 2505.753608][T10887] sctp_copy_local_addr_list+0x31b/0x4e0 [ 2505.759280][T10887] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 2505.765036][T10887] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 2505.771141][T10887] ? sctp_v4_is_any+0x35/0x60 [ 2505.775870][T10887] ? sctp_copy_one_addr+0x8c/0x350 [ 2505.781026][T10887] sctp_bind_addr_copy+0xb3/0x3c0 [ 2505.786081][T10887] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2505.792433][T10887] sctp_connect_new_asoc+0x2f9/0x6a0 [ 2505.797774][T10887] ? __sctp_connect+0xd80/0xd80 [ 2505.802649][T10887] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2505.808080][T10887] ? _local_bh_enable+0xa0/0xa0 [ 2505.812959][T10887] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2505.818802][T10887] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2505.824640][T10887] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2505.830226][T10887] ? security_sctp_bind_connect+0x89/0xb0 [ 2505.835986][T10887] sctp_sendmsg+0x1519/0x27b0 [ 2505.840711][T10887] ? sctp_getsockopt+0xb60/0xb60 [ 2505.845686][T10887] ? aa_af_perm+0x330/0x330 [ 2505.850234][T10887] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2505.856681][T10887] ? sock_rps_record_flow+0x19/0x3f0 [ 2505.862004][T10887] ? inet_sendmsg+0x7e/0x2a0 [ 2505.866615][T10887] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2505.871952][T10887] ? inet_send_prepare+0x250/0x250 [ 2505.877100][T10887] ____sys_sendmsg+0x61b/0x980 [ 2505.881907][T10887] ? __asan_memset+0x22/0x40 [ 2505.886530][T10887] ? __sys_sendmsg_sock+0x30/0x30 [ 2505.891583][T10887] ? __import_iovec+0x5f2/0x850 [ 2505.896486][T10887] ? import_iovec+0x73/0xa0 [ 2505.901031][T10887] ___sys_sendmsg+0x2a6/0x360 [ 2505.905749][T10887] ? get_pid_task+0x20/0x1e0 [ 2505.910376][T10887] ? __sys_sendmsg+0x2b0/0x2b0 [ 2505.915183][T10887] ? __lock_acquire+0x7d80/0x7d80 [ 2505.920254][T10887] __se_sys_sendmsg+0x1d0/0x2c0 [ 2505.925166][T10887] ? __x64_sys_sendmsg+0x80/0x80 [ 2505.930148][T10887] ? lockdep_hardirqs_on+0x98/0x150 [ 2505.935378][T10887] do_syscall_64+0x55/0xb0 [ 2505.939823][T10887] ? clear_bhb_loop+0x40/0x90 [ 2505.944537][T10887] ? clear_bhb_loop+0x40/0x90 [ 2505.949249][T10887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2505.955182][T10887] RIP: 0033:0x7fdf1699e159 [ 2505.959617][T10887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2505.979244][T10887] RSP: 002b:00007fdf17800028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2505.987693][T10887] RAX: ffffffffffffffda RBX: 00007fdf16c25fa0 RCX: 00007fdf1699e159 [ 2505.995714][T10887] RDX: 000000000000c000 RSI: 0000200000000e40 RDI: 0000000000000003 [ 2506.003705][T10887] RBP: 00007fdf17800090 R08: 0000000000000000 R09: 0000000000000000 [ 2506.011700][T10887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2506.019695][T10887] R13: 00007fdf16c26038 R14: 00007fdf16c25fa0 R15: 00007ffdec05bdd8 [ 2506.027713][T10887] [ 2506.120822][T10894] netlink: 'syz.2.12371': attribute type 10 has an invalid length. [ 2506.199577][T10894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2506.229805][T10894] batadv0: entered promiscuous mode [ 2506.265369][T10894] batadv0: entered allmulticast mode [ 2506.289642][T10894] team0: Port device batadv0 added [ 2506.453553][T10900] netlink: 'syz.3.12372': attribute type 10 has an invalid length. [ 2506.481872][T10900] netlink: 55 bytes leftover after parsing attributes in process `syz.3.12372'. [ 2506.590388][T10898] syzkaller0: entered promiscuous mode [ 2506.597384][T10898] syzkaller0: entered allmulticast mode [ 2506.611719][ T6616] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2506.621707][ T6616] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2509.791603][T10924] netlink: 'syz.1.12377': attribute type 10 has an invalid length. [ 2510.602331][T10951] ªªªªªª: renamed from vlan0 (while UP) [ 2510.901341][T10958] netlink: 'syz.0.12389': attribute type 10 has an invalid length. [ 2511.134267][T10964] syzkaller0: entered promiscuous mode [ 2511.141565][T10964] syzkaller0: entered allmulticast mode [ 2511.177449][T10970] netlink: 'syz.2.12394': attribute type 2 has an invalid length. [ 2511.220979][T10970] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12394'. [ 2514.637823][T10999] netlink: 'syz.0.12401': attribute type 10 has an invalid length. [ 2514.914655][T11011] netlink: 168 bytes leftover after parsing attributes in process `syz.2.12406'. [ 2515.047221][T11017] syzkaller0: entered promiscuous mode [ 2515.052781][T11017] syzkaller0: entered allmulticast mode [ 2515.249305][T11022] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12409'. [ 2515.280192][T11023] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.12409'. [ 2515.363982][T11025] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.12410'. [ 2515.377419][T11025] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 2515.463835][T11027] netlink: 'syz.3.12410': attribute type 29 has an invalid length. [ 2517.351247][T11016] netlink: 'syz.1.12408': attribute type 2 has an invalid length. [ 2517.373050][T11027] netlink: 'syz.3.12410': attribute type 29 has an invalid length. [ 2517.648360][T11034] netlink: 'syz.3.12412': attribute type 10 has an invalid length. [ 2518.757310][T11058] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.12420'. [ 2519.218050][T11067] syzkaller0: entered promiscuous mode [ 2519.232622][T11067] syzkaller0: entered allmulticast mode [ 2521.800373][T11080] mac80211_hwsim hwsim82 wlan0: entered promiscuous mode [ 2521.809491][T11080] mac80211_hwsim hwsim82 wlan0: entered allmulticast mode [ 2521.954723][T11087] netlink: 'syz.1.12430': attribute type 10 has an invalid length. [ 2523.848732][T11108] netlink: 'syz.3.12438': attribute type 4 has an invalid length. [ 2524.224467][T11119] netlink: 'syz.3.12442': attribute type 10 has an invalid length. [ 2524.447340][T11131] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.12444'. [ 2525.284094][T11145] syzkaller0: entered promiscuous mode [ 2525.304109][T11145] syzkaller0: entered allmulticast mode [ 2525.508444][T11159] netlink: 'syz.0.12454': attribute type 3 has an invalid length. [ 2525.524827][T11159] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12454'. [ 2527.419600][ T6638] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2528.195627][T11156] syzkaller0: entered promiscuous mode [ 2528.201289][T11156] syzkaller0: entered allmulticast mode [ 2528.213646][T11170] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12457'. [ 2529.224517][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.232409][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.333577][T11185] FAULT_INJECTION: forcing a failure. [ 2529.333577][T11185] name failslab, interval 1, probability 0, space 0, times 0 [ 2529.346798][T11185] CPU: 1 PID: 11185 Comm: syz.0.12461 Not tainted syzkaller #0 [ 2529.354426][T11185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2529.364558][T11185] Call Trace: [ 2529.367909][T11185] [ 2529.370910][T11185] dump_stack_lvl+0x18c/0x250 [ 2529.375686][T11185] ? show_regs_print_info+0x20/0x20 [ 2529.380982][T11185] ? load_image+0x420/0x420 [ 2529.385583][T11185] ? __might_sleep+0xe0/0xe0 [ 2529.390263][T11185] ? __lock_acquire+0x7d80/0x7d80 [ 2529.395374][T11185] should_fail_ex+0x394/0x4c0 [ 2529.400137][T11185] should_failslab+0x9/0x20 [ 2529.404688][T11185] slab_pre_alloc_hook+0x59/0x300 [ 2529.409807][T11185] kmem_cache_alloc_node+0x5e/0x310 [ 2529.415048][T11185] ? __alloc_skb+0x103/0x2c0 [ 2529.419692][T11185] __alloc_skb+0x103/0x2c0 [ 2529.424171][T11185] sctp_packet_transmit+0x2ef/0x2950 [ 2529.429524][T11185] ? sctp_v4_get_saddr+0x9d/0xf0 [ 2529.434590][T11185] ? sctp_packet_append_chunk+0xafa/0x1040 [ 2529.440514][T11185] sctp_packet_singleton+0x230/0x330 [ 2529.445869][T11185] ? sctp_outq_select_transport+0x590/0x590 [ 2529.451865][T11185] ? sctp_outq_select_transport+0x480/0x590 [ 2529.457799][T11185] ? sctp_transport_burst_limited+0x197/0x280 [ 2529.463935][T11185] sctp_outq_flush+0x4fc/0x32e0 [ 2529.468883][T11185] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2529.474820][T11185] ? _raw_spin_unlock+0x40/0x40 [ 2529.479730][T11185] ? rcu_is_watching+0x15/0xb0 [ 2529.484581][T11185] ? sctp_outq_tail+0x8a0/0x8a0 [ 2529.489521][T11185] ? sctp_outq_uncork+0x4d/0xa0 [ 2529.494437][T11185] sctp_do_sm+0x5455/0x5b80 [ 2529.499033][T11185] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 2529.504983][T11185] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 2529.510163][T11185] ? __sk_mem_raise_allocated+0x97b/0x11e0 [ 2529.516041][T11185] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 2529.521473][T11185] sctp_sendmsg_to_asoc+0x1009/0x17f0 [ 2529.526962][T11185] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 2529.532838][T11185] ? __sctp_connect+0xd80/0xd80 [ 2529.537735][T11185] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2529.543158][T11185] ? _local_bh_enable+0xa0/0xa0 [ 2529.548064][T11185] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2529.553936][T11185] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2529.559805][T11185] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2529.565428][T11185] ? security_sctp_bind_connect+0x89/0xb0 [ 2529.571228][T11185] sctp_sendmsg+0x1afa/0x27b0 [ 2529.576056][T11185] ? sctp_getsockopt+0xb60/0xb60 [ 2529.581084][T11185] ? aa_af_perm+0x330/0x330 [ 2529.585667][T11185] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2529.592134][T11185] ? sock_rps_record_flow+0x19/0x3f0 [ 2529.597473][T11185] ? inet_sendmsg+0x7e/0x2a0 [ 2529.602114][T11185] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2529.607460][T11185] ? inet_send_prepare+0x250/0x250 [ 2529.612622][T11185] ____sys_sendmsg+0x61b/0x980 [ 2529.617459][T11185] ? __asan_memset+0x22/0x40 [ 2529.622106][T11185] ? __sys_sendmsg_sock+0x30/0x30 [ 2529.627182][T11185] ? __import_iovec+0x5f2/0x850 [ 2529.632122][T11185] ? import_iovec+0x73/0xa0 [ 2529.636733][T11185] ___sys_sendmsg+0x2a6/0x360 [ 2529.641482][T11185] ? __sys_sendmsg+0x2b0/0x2b0 [ 2529.646366][T11185] ? __lock_acquire+0x7d80/0x7d80 [ 2529.651542][T11185] __se_sys_sendmsg+0x1d0/0x2c0 [ 2529.656462][T11185] ? __x64_sys_sendmsg+0x80/0x80 [ 2529.661494][T11185] ? lockdep_hardirqs_on+0x98/0x150 [ 2529.666764][T11185] do_syscall_64+0x55/0xb0 [ 2529.671284][T11185] ? clear_bhb_loop+0x40/0x90 [ 2529.676061][T11185] ? clear_bhb_loop+0x40/0x90 [ 2529.680801][T11185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2529.686747][T11185] RIP: 0033:0x7f8938d9e159 [ 2529.691221][T11185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2529.710880][T11185] RSP: 002b:00007f8936ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2529.719355][T11185] RAX: ffffffffffffffda RBX: 00007f8939025fa0 RCX: 00007f8938d9e159 [ 2529.727376][T11185] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 2529.735394][T11185] RBP: 00007f8936ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 2529.743416][T11185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2529.751430][T11185] R13: 00007f8939026038 R14: 00007f8939025fa0 R15: 00007ffd71547b98 [ 2529.759488][T11185] [ 2531.600671][T11174] netlink: 'syz.1.12458': attribute type 10 has an invalid length. [ 2531.859985][T11216] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12469'. [ 2531.877076][T11212] FAULT_INJECTION: forcing a failure. [ 2531.877076][T11212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2531.878359][T11216] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12469'. [ 2531.912519][T11216] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12469'. [ 2531.923262][T11212] CPU: 0 PID: 11212 Comm: syz.2.12473 Not tainted syzkaller #0 [ 2531.930850][T11212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2531.940940][T11212] Call Trace: [ 2531.944259][T11212] [ 2531.947233][T11212] dump_stack_lvl+0x18c/0x250 [ 2531.951967][T11212] ? show_regs_print_info+0x20/0x20 [ 2531.957207][T11212] ? load_image+0x420/0x420 [ 2531.961761][T11212] ? __might_fault+0xaa/0x120 [ 2531.966471][T11212] ? __lock_acquire+0x7d80/0x7d80 [ 2531.971534][T11212] should_fail_ex+0x394/0x4c0 [ 2531.976259][T11212] _copy_to_user+0x2f/0xa0 [ 2531.980726][T11212] bpf_test_finish+0x4e7/0x650 [ 2531.985560][T11212] ? dst_hold+0x70/0x70 [ 2531.989761][T11212] ? convert_skb_to___skb+0x420/0x420 [ 2531.995175][T11212] ? bpf_prog_test_run_xdp+0x721/0x1140 [ 2532.000767][T11212] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 2532.006181][T11212] ? __lock_acquire+0x7d80/0x7d80 [ 2532.011254][T11212] ? dev_put+0x80/0x80 [ 2532.015399][T11212] ? dev_put+0x80/0x80 [ 2532.019515][T11212] bpf_prog_test_run+0x31f/0x390 [ 2532.024513][T11212] __sys_bpf+0x49d/0x890 [ 2532.028795][T11212] ? bpf_link_show_fdinfo+0x560/0x560 [ 2532.034209][T11212] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2532.040423][T11212] __x64_sys_bpf+0x7c/0x90 [ 2532.044883][T11212] do_syscall_64+0x55/0xb0 [ 2532.049332][T11212] ? clear_bhb_loop+0x40/0x90 [ 2532.054049][T11212] ? clear_bhb_loop+0x40/0x90 [ 2532.058771][T11212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2532.064707][T11212] RIP: 0033:0x7fb436f9e159 [ 2532.069162][T11212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2532.088809][T11212] RSP: 002b:00007fb437dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2532.097270][T11212] RAX: ffffffffffffffda RBX: 00007fb437225fa0 RCX: 00007fb436f9e159 [ 2532.105284][T11212] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 2532.113299][T11212] RBP: 00007fb437dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 2532.121297][T11212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2532.129300][T11212] R13: 00007fb437226038 R14: 00007fb437225fa0 R15: 00007ffe1d9ede48 [ 2532.137326][T11212] [ 2532.165752][T11218] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12469'. [ 2532.304630][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12475'. [ 2532.554128][T11232] netlink: 'syz.2.12477': attribute type 10 has an invalid length. [ 2533.160044][T29691] Bluetooth: hci3: unexpected event 0x03 length: 151 > 11 [ 2533.373646][T11247] syzkaller0: entered promiscuous mode [ 2533.389203][T11247] syzkaller0: entered allmulticast mode [ 2533.410058][T11256] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12484'. [ 2533.458989][T11256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2533.599011][T11272] netlink: 'syz.1.12488': attribute type 10 has an invalid length. [ 2533.639883][T11273] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.12487'. [ 2533.652277][T11273] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 2533.759557][T11277] netlink: 'syz.2.12487': attribute type 29 has an invalid length. [ 2537.091664][T11277] netlink: 'syz.2.12487': attribute type 29 has an invalid length. [ 2537.206796][T11288] netlink: 'syz.2.12494': attribute type 10 has an invalid length. [ 2537.214778][T11288] netlink: 2 bytes leftover after parsing attributes in process `syz.2.12494'. [ 2537.252358][T11288] batadv_slave_1: entered promiscuous mode [ 2537.275821][T11288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2537.290909][T11288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2537.670232][T11302] netlink: 'syz.3.12499': attribute type 10 has an invalid length. [ 2540.766105][T11315] netlink: 'syz.2.12505': attribute type 10 has an invalid length. [ 2540.784710][T11315] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12505'. [ 2540.923569][T11325] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.12507'. [ 2540.934991][T11325] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.12507'. [ 2541.423628][T11337] netlink: 'syz.3.12512': attribute type 21 has an invalid length. [ 2541.435399][T11337] IPv6: NLM_F_CREATE should be specified when creating new route [ 2541.468302][T11337] IPv6: Can't replace route, no match found [ 2541.524928][T11339] netlink: 'syz.2.12513': attribute type 10 has an invalid length. [ 2541.569342][T11337] netlink: 'syz.3.12512': attribute type 10 has an invalid length. [ 2541.720862][T11337] team0: Device wg1 is of different type [ 2542.058857][T11349] netlink: 'syz.1.12516': attribute type 10 has an invalid length. [ 2542.093440][T11349] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12516'. [ 2542.448417][T11367] netlink: 'syz.0.12532': attribute type 21 has an invalid length. [ 2542.468506][T11367] netlink: 164 bytes leftover after parsing attributes in process `syz.0.12532'. [ 2542.680174][T11375] netlink: 'syz.2.12527': attribute type 10 has an invalid length. [ 2543.497726][T11393] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12535'. [ 2543.527173][T11391] netlink: 'syz.0.12534': attribute type 10 has an invalid length. [ 2543.535192][T11391] netlink: 55 bytes leftover after parsing attributes in process `syz.0.12534'. [ 2543.608108][T11397] netlink: 'syz.3.12537': attribute type 21 has an invalid length. [ 2543.633059][T11397] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12537'. [ 2544.029166][T11408] syz.0.12542[11408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2544.029786][T11408] syz.0.12542[11408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2544.054825][T11410] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12543'. [ 2544.090006][T11410] netlink: del zone limit has 4 unknown bytes [ 2544.476122][T11418] netlink: 'syz.2.12546': attribute type 10 has an invalid length. [ 2544.484449][T11418] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12546'. [ 2544.543820][T11420] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12547'. [ 2544.559495][T11422] netlink: 176 bytes leftover after parsing attributes in process `syz.1.12548'. [ 2545.232473][T11443] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.12557'. [ 2545.266954][T11443] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2545.276305][T11440] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12556'. [ 2545.341750][T11443] openvswitch: netlink: Message has 1 unknown bytes. [ 2545.367106][T11440] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 2545.625023][T11445] netlink: 'syz.3.12558': attribute type 10 has an invalid length. [ 2546.036720][T11464] sctp: [Deprecated]: syz.3.12566 (pid 11464) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2546.036720][T11464] Use struct sctp_sack_info instead [ 2546.305807][T11477] netlink: 'syz.0.12572': attribute type 10 has an invalid length. [ 2546.645994][T11484] cgroup: fork rejected by pids controller in /syz0 [ 2546.915214][T11593] FAULT_INJECTION: forcing a failure. [ 2546.915214][T11593] name failslab, interval 1, probability 0, space 0, times 0 [ 2546.934045][T11593] CPU: 1 PID: 11593 Comm: syz.2.12579 Not tainted syzkaller #0 [ 2546.941678][T11593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2546.951786][T11593] Call Trace: [ 2546.955104][T11593] [ 2546.958076][T11593] dump_stack_lvl+0x18c/0x250 [ 2546.962845][T11593] ? show_regs_print_info+0x20/0x20 [ 2546.968107][T11593] ? load_image+0x420/0x420 [ 2546.972705][T11593] ? __lock_acquire+0x7d80/0x7d80 [ 2546.977793][T11593] ? verify_lock_unused+0x140/0x140 [ 2546.983057][T11593] should_fail_ex+0x394/0x4c0 [ 2546.987813][T11593] should_failslab+0x9/0x20 [ 2546.992393][T11593] slab_pre_alloc_hook+0x59/0x300 [ 2546.997478][T11593] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 2547.003084][T11593] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 2547.008719][T11593] __kmem_cache_alloc_node+0x53/0x250 [ 2547.014146][T11593] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 2547.019751][T11593] __kmalloc+0xa7/0x240 [ 2547.023948][T11593] bpf_prog_test_run_skb+0x242/0x18f0 [ 2547.029390][T11593] ? __fget_files+0x28/0x460 [ 2547.034009][T11593] ? __fget_files+0x3fc/0x460 [ 2547.038750][T11593] ? cpu_online+0x60/0x60 [ 2547.043124][T11593] bpf_prog_test_run+0x31f/0x390 [ 2547.048091][T11593] __sys_bpf+0x49d/0x890 [ 2547.052392][T11593] ? bpf_link_show_fdinfo+0x560/0x560 [ 2547.057820][T11593] ? lock_chain_count+0x20/0x20 [ 2547.062712][T11593] __x64_sys_bpf+0x7c/0x90 [ 2547.067174][T11593] do_syscall_64+0x55/0xb0 [ 2547.071619][T11593] ? clear_bhb_loop+0x40/0x90 [ 2547.076331][T11593] ? clear_bhb_loop+0x40/0x90 [ 2547.081065][T11593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2547.086995][T11593] RIP: 0033:0x7fb436f9e159 [ 2547.091476][T11593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2547.111137][T11593] RSP: 002b:00007fb437dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2547.119584][T11593] RAX: ffffffffffffffda RBX: 00007fb437225fa0 RCX: 00007fb436f9e159 [ 2547.127591][T11593] RDX: 0000000000000024 RSI: 0000200000000640 RDI: 000000000000000a [ 2547.135590][T11593] RBP: 00007fb437dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 2547.143584][T11593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2547.151576][T11593] R13: 00007fb437226038 R14: 00007fb437225fa0 R15: 00007ffe1d9ede48 [ 2547.159595][T11593] [ 2547.182413][T11595] netlink: del zone limit has 4 unknown bytes [ 2547.531684][T32485] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2547.627663][T32485] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2547.731095][T32485] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2547.789515][T11603] __nla_validate_parse: 8 callbacks suppressed [ 2547.789533][T11603] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12584'. [ 2547.870350][T11611] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.12592'. [ 2547.907705][T11608] delete_channel: no stack [ 2547.939350][T32485] team0: Port device netdevsim0 removed [ 2547.967990][T32485] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2548.136323][T11614] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12595'. [ 2548.441964][ T8350] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2548.452619][ T8350] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2548.462007][ T8350] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2548.476296][ T8350] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2548.484416][ T8350] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2548.514100][ T8350] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2548.561175][T11624] netlink: 'syz.2.12587': attribute type 29 has an invalid length. [ 2548.681016][T11626] netlink: 168 bytes leftover after parsing attributes in process `syz.1.12589'. [ 2548.698242][T11624] netlink: 'syz.2.12587': attribute type 29 has an invalid length. [ 2548.916689][T11641] FAULT_INJECTION: forcing a failure. [ 2548.916689][T11641] name failslab, interval 1, probability 0, space 0, times 0 [ 2548.965625][T11641] CPU: 1 PID: 11641 Comm: syz.1.12590 Not tainted syzkaller #0 [ 2548.973270][T11641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2548.983367][T11641] Call Trace: [ 2548.986758][T11641] [ 2548.989725][T11641] dump_stack_lvl+0x18c/0x250 [ 2548.994475][T11641] ? sctp_sendmsg+0x1519/0x27b0 [ 2548.999387][T11641] ? ___sys_sendmsg+0x2a6/0x360 [ 2549.004301][T11641] ? show_regs_print_info+0x20/0x20 [ 2549.009554][T11641] ? load_image+0x420/0x420 [ 2549.014115][T11641] should_fail_ex+0x394/0x4c0 [ 2549.018858][T11641] should_failslab+0x9/0x20 [ 2549.023451][T11641] slab_pre_alloc_hook+0x59/0x300 [ 2549.028538][T11641] ? sctp_add_bind_addr+0x8c/0x360 [ 2549.033716][T11641] __kmem_cache_alloc_node+0x53/0x250 [ 2549.039167][T11641] ? sctp_add_bind_addr+0x8c/0x360 [ 2549.044349][T11641] kmalloc_trace+0x2a/0xe0 [ 2549.048889][T11641] sctp_add_bind_addr+0x8c/0x360 [ 2549.053891][T11641] sctp_copy_local_addr_list+0x31b/0x4e0 [ 2549.059590][T11641] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 2549.065374][T11641] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 2549.071610][T11641] ? sctp_v4_is_any+0x35/0x60 [ 2549.076347][T11641] ? sctp_copy_one_addr+0x8c/0x350 [ 2549.081528][T11641] sctp_bind_addr_copy+0xb3/0x3c0 [ 2549.086613][T11641] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2549.092980][T11641] sctp_connect_new_asoc+0x2f9/0x6a0 [ 2549.098301][T11641] ? __sctp_connect+0xd80/0xd80 [ 2549.103182][T11641] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2549.108601][T11641] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2549.114209][T11641] ? security_sctp_bind_connect+0x89/0xb0 [ 2549.119973][T11641] sctp_sendmsg+0x1519/0x27b0 [ 2549.124730][T11641] ? sctp_getsockopt+0xb60/0xb60 [ 2549.129730][T11641] ? aa_af_perm+0x330/0x330 [ 2549.134299][T11641] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2549.140769][T11641] ? sock_rps_record_flow+0x19/0x3f0 [ 2549.146096][T11641] ? inet_sendmsg+0xce/0x2a0 [ 2549.150727][T11641] ? inet_send_prepare+0x250/0x250 [ 2549.155888][T11641] ____sys_sendmsg+0x61b/0x980 [ 2549.160693][T11641] ? __asan_memset+0x22/0x40 [ 2549.165314][T11641] ? __sys_sendmsg_sock+0x30/0x30 [ 2549.170363][T11641] ? __import_iovec+0x5f2/0x850 [ 2549.175269][T11641] ? import_iovec+0x73/0xa0 [ 2549.179817][T11641] ___sys_sendmsg+0x2a6/0x360 [ 2549.184529][T11641] ? get_pid_task+0x20/0x1e0 [ 2549.189158][T11641] ? __sys_sendmsg+0x2b0/0x2b0 [ 2549.193979][T11641] ? __lock_acquire+0x7d80/0x7d80 [ 2549.199052][T11641] __se_sys_sendmsg+0x1d0/0x2c0 [ 2549.203945][T11641] ? __x64_sys_sendmsg+0x80/0x80 [ 2549.208928][T11641] ? lockdep_hardirqs_on+0x98/0x150 [ 2549.214155][T11641] do_syscall_64+0x55/0xb0 [ 2549.218597][T11641] ? clear_bhb_loop+0x40/0x90 [ 2549.223308][T11641] ? clear_bhb_loop+0x40/0x90 [ 2549.228018][T11641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2549.233941][T11641] RIP: 0033:0x7f1f87d9e159 [ 2549.238384][T11641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2549.258043][T11641] RSP: 002b:00007f1f88cf2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2549.266485][T11641] RAX: ffffffffffffffda RBX: 00007f1f88025fa0 RCX: 00007f1f87d9e159 [ 2549.274485][T11641] RDX: 0000000004000044 RSI: 0000200000000300 RDI: 0000000000000003 [ 2549.282485][T11641] RBP: 00007f1f88cf2090 R08: 0000000000000000 R09: 0000000000000000 [ 2549.290482][T11641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2549.298494][T11641] R13: 00007f1f88026038 R14: 00007f1f88025fa0 R15: 00007ffd6f4f6e28 [ 2549.306508][T11641] [ 2550.586144][T29691] Bluetooth: hci3: command tx timeout [ 2552.533909][T11664] netlink: 'syz.2.12596': attribute type 39 has an invalid length. [ 2552.566567][T11664] macvlan0: entered promiscuous mode [ 2552.572689][T11664] macvlan0: entered allmulticast mode [ 2552.585656][T11664] veth1_vlan: entered allmulticast mode [ 2552.646979][T29691] Bluetooth: hci3: command tx timeout [ 2553.068737][T11673] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12598'. [ 2553.521238][T11688] netlink: 168 bytes leftover after parsing attributes in process `syz.1.12601'. [ 2553.718719][T11621] chnl_net:caif_netlink_parms(): no params data found [ 2554.128022][T11710] netlink: 'syz.1.12605': attribute type 3 has an invalid length. [ 2554.146615][T11710] netlink: 104524 bytes leftover after parsing attributes in process `syz.1.12605'. [ 2554.329018][T11621] bridge0: port 1(bridge_slave_0) entered blocking state [ 2554.357084][T11621] bridge0: port 1(bridge_slave_0) entered disabled state [ 2554.364385][T11621] bridge_slave_0: entered allmulticast mode [ 2554.405253][T11621] bridge_slave_0: entered promiscuous mode [ 2554.427770][T11621] bridge0: port 2(bridge_slave_1) entered blocking state [ 2554.434981][T11621] bridge0: port 2(bridge_slave_1) entered disabled state [ 2554.456489][T11621] bridge_slave_1: entered allmulticast mode [ 2554.464038][T11621] bridge_slave_1: entered promiscuous mode [ 2554.508554][T32485] hsr_slave_0: left promiscuous mode [ 2554.529396][T32485] hsr_slave_1: left promiscuous mode [ 2554.537536][T32485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2554.545027][T32485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2554.554183][T32485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2554.562208][T32485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2554.570676][T32485] bridge_slave_1: left allmulticast mode [ 2554.576936][T32485] bridge_slave_1: left promiscuous mode [ 2554.582764][T32485] bridge0: port 2(bridge_slave_1) entered disabled state [ 2554.596407][T32485] bridge_slave_0: left allmulticast mode [ 2554.602194][T32485] bridge_slave_0: left promiscuous mode [ 2554.609094][T32485] bridge0: port 1(bridge_slave_0) entered disabled state [ 2554.658549][T32485] veth1_macvtap: left promiscuous mode [ 2554.670589][T32485] veth1_vlan: left promiscuous mode [ 2554.676125][T32485] veth0_vlan: left promiscuous mode [ 2554.725679][T29691] Bluetooth: hci3: command tx timeout [ 2555.420522][T32485] team0 (unregistering): Port device team_slave_1 removed [ 2555.470563][T32485] team0 (unregistering): Port device team_slave_0 removed [ 2555.515465][T32485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2555.568968][T32485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2555.830168][T32485] team0 (unregistering): Port device batadv0 removed [ 2555.925266][T32485] bond0 (unregistering): Released all slaves [ 2556.051615][T11718] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12608'. [ 2556.075657][T11723] netlink: 168 bytes leftover after parsing attributes in process `syz.1.12610'. [ 2556.108826][T11621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2556.160749][T11621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2556.268125][T11621] team0: Port device team_slave_0 added [ 2556.277871][T11621] team0: Port device team_slave_1 added [ 2556.356941][T11621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2556.368978][T11621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2556.433109][T11621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2556.458192][T11621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2556.492147][T11621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2556.541963][T11621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2556.676321][T11621] hsr_slave_0: entered promiscuous mode [ 2556.701501][T11621] hsr_slave_1: entered promiscuous mode [ 2556.805661][T29691] Bluetooth: hci3: command tx timeout [ 2556.974640][T11739] hsr0: entered promiscuous mode [ 2556.987311][T11739] hsr0: entered allmulticast mode [ 2556.992408][T11739] hsr_slave_0: entered allmulticast mode [ 2557.015341][T11739] hsr_slave_1: entered allmulticast mode [ 2557.449997][T11757] netlink: 168 bytes leftover after parsing attributes in process `syz.3.12619'. [ 2557.573295][T11759] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12620'. [ 2557.841913][T11621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2557.907262][T11621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2557.931381][T11621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2557.949482][T11621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2558.126264][T11621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2558.147353][T11621] 8021q: adding VLAN 0 to HW filter on device team0 [ 2558.190550][T32485] bridge0: port 1(bridge_slave_0) entered blocking state [ 2558.197937][T32485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2558.224207][T11779] FAULT_INJECTION: forcing a failure. [ 2558.224207][T11779] name failslab, interval 1, probability 0, space 0, times 0 [ 2558.243800][T32485] bridge0: port 2(bridge_slave_1) entered blocking state [ 2558.251077][T32485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2558.272835][T11779] CPU: 0 PID: 11779 Comm: syz.3.12625 Not tainted syzkaller #0 [ 2558.280467][T11779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2558.290564][T11779] Call Trace: [ 2558.293871][T11779] [ 2558.296818][T11779] dump_stack_lvl+0x18c/0x250 [ 2558.301543][T11779] ? sctp_sendmsg+0x1519/0x27b0 [ 2558.306415][T11779] ? ___sys_sendmsg+0x2a6/0x360 [ 2558.311303][T11779] ? show_regs_print_info+0x20/0x20 [ 2558.316519][T11779] ? load_image+0x420/0x420 [ 2558.321057][T11779] should_fail_ex+0x394/0x4c0 [ 2558.325768][T11779] should_failslab+0x9/0x20 [ 2558.330296][T11779] slab_pre_alloc_hook+0x59/0x300 [ 2558.335347][T11779] ? sctp_add_bind_addr+0x8c/0x360 [ 2558.340493][T11779] __kmem_cache_alloc_node+0x53/0x250 [ 2558.345935][T11779] ? sctp_add_bind_addr+0x8c/0x360 [ 2558.351090][T11779] kmalloc_trace+0x2a/0xe0 [ 2558.355555][T11779] sctp_add_bind_addr+0x8c/0x360 [ 2558.360539][T11779] sctp_copy_local_addr_list+0x31b/0x4e0 [ 2558.366201][T11779] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 2558.371954][T11779] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 2558.378060][T11779] ? sctp_v6_is_any+0x64/0x70 [ 2558.382776][T11779] ? sctp_copy_one_addr+0x8c/0x350 [ 2558.387918][T11779] sctp_bind_addr_copy+0xb3/0x3c0 [ 2558.392974][T11779] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2558.399322][T11779] sctp_connect_new_asoc+0x2f9/0x6a0 [ 2558.404627][T11779] ? __sctp_connect+0xd80/0xd80 [ 2558.409498][T11779] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2558.414891][T11779] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2558.420463][T11779] ? security_sctp_bind_connect+0x89/0xb0 [ 2558.426234][T11779] sctp_sendmsg+0x1519/0x27b0 [ 2558.430942][T11779] ? sctp_getsockopt+0xb60/0xb60 [ 2558.435909][T11779] ? aa_af_perm+0x330/0x330 [ 2558.440446][T11779] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2558.446880][T11779] ? sock_rps_record_flow+0x19/0x3f0 [ 2558.452182][T11779] ? inet_sendmsg+0xce/0x2a0 [ 2558.456782][T11779] ? inet_send_prepare+0x250/0x250 [ 2558.461918][T11779] ____sys_sendmsg+0x61b/0x980 [ 2558.466740][T11779] ? __asan_memset+0x22/0x40 [ 2558.471356][T11779] ? __sys_sendmsg_sock+0x30/0x30 [ 2558.476402][T11779] ? __import_iovec+0x5f2/0x850 [ 2558.481283][T11779] ? import_iovec+0x73/0xa0 [ 2558.485827][T11779] ___sys_sendmsg+0x2a6/0x360 [ 2558.490530][T11779] ? get_pid_task+0x20/0x1e0 [ 2558.495143][T11779] ? __sys_sendmsg+0x2b0/0x2b0 [ 2558.499949][T11779] ? __lock_acquire+0x7d80/0x7d80 [ 2558.505007][T11779] __se_sys_sendmsg+0x1d0/0x2c0 [ 2558.509882][T11779] ? __x64_sys_sendmsg+0x80/0x80 [ 2558.514875][T11779] ? lockdep_hardirqs_on+0x98/0x150 [ 2558.520095][T11779] do_syscall_64+0x55/0xb0 [ 2558.524530][T11779] ? clear_bhb_loop+0x40/0x90 [ 2558.529242][T11779] ? clear_bhb_loop+0x40/0x90 [ 2558.533944][T11779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2558.539860][T11779] RIP: 0033:0x7fdf1699e159 [ 2558.544298][T11779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2558.563929][T11779] RSP: 002b:00007fdf17800028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2558.572401][T11779] RAX: ffffffffffffffda RBX: 00007fdf16c25fa0 RCX: 00007fdf1699e159 [ 2558.580392][T11779] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 2558.588379][T11779] RBP: 00007fdf17800090 R08: 0000000000000000 R09: 0000000000000000 [ 2558.596383][T11779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2558.604390][T11779] R13: 00007fdf16c26038 R14: 00007fdf16c25fa0 R15: 00007ffdec05bdd8 [ 2558.612388][T11779] [ 2558.623391][ T6673] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2558.988314][T11794] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12630'. [ 2559.011641][T11795] netlink: 168 bytes leftover after parsing attributes in process `syz.2.12629'. [ 2559.377739][T11621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2559.592176][T11621] veth0_vlan: entered promiscuous mode [ 2559.643338][T11621] veth1_vlan: entered promiscuous mode [ 2559.751851][T11621] veth0_macvtap: entered promiscuous mode [ 2559.800362][T11621] veth1_macvtap: entered promiscuous mode [ 2559.866529][T11621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2559.905537][T11621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2559.925613][T11621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2559.945612][T11621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2559.984339][T11621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2560.011889][T11621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2560.057436][T11621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2560.072235][T11621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2560.104150][T11621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2560.124473][T11621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2560.164474][T11836] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12640'. [ 2560.203077][T11621] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2560.219929][T11621] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2560.235617][T11621] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2560.249458][T11621] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2560.512256][T11845] netlink: 'syz.1.12642': attribute type 10 has an invalid length. [ 2560.551968][ T6616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2560.599054][ T6616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2560.692682][ T6637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2560.713771][ T6637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2560.830815][T11849] sit0: left promiscuous mode [ 2561.109611][T11867] FAULT_INJECTION: forcing a failure. [ 2561.109611][T11867] name failslab, interval 1, probability 0, space 0, times 0 [ 2561.201305][T11867] CPU: 1 PID: 11867 Comm: syz.1.12645 Not tainted syzkaller #0 [ 2561.208958][T11867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2561.219059][T11867] Call Trace: [ 2561.222393][T11867] [ 2561.225378][T11867] dump_stack_lvl+0x18c/0x250 [ 2561.230116][T11867] ? sctp_sendmsg+0x1519/0x27b0 [ 2561.235034][T11867] ? ___sys_sendmsg+0x2a6/0x360 [ 2561.239974][T11867] ? show_regs_print_info+0x20/0x20 [ 2561.245243][T11867] ? load_image+0x420/0x420 [ 2561.249842][T11867] should_fail_ex+0x394/0x4c0 [ 2561.254598][T11867] should_failslab+0x9/0x20 [ 2561.259173][T11867] slab_pre_alloc_hook+0x59/0x300 [ 2561.264281][T11867] ? sctp_add_bind_addr+0x8c/0x360 [ 2561.269475][T11867] __kmem_cache_alloc_node+0x53/0x250 [ 2561.274929][T11867] ? sctp_add_bind_addr+0x8c/0x360 [ 2561.280113][T11867] kmalloc_trace+0x2a/0xe0 [ 2561.284598][T11867] sctp_add_bind_addr+0x8c/0x360 [ 2561.289619][T11867] sctp_copy_local_addr_list+0x31b/0x4e0 [ 2561.295350][T11867] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 2561.301145][T11867] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 2561.307299][T11867] ? sctp_v6_is_any+0x64/0x70 [ 2561.312059][T11867] ? sctp_copy_one_addr+0x8c/0x350 [ 2561.317250][T11867] sctp_bind_addr_copy+0xb3/0x3c0 [ 2561.322360][T11867] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2561.328754][T11867] sctp_connect_new_asoc+0x2f9/0x6a0 [ 2561.334105][T11867] ? __sctp_connect+0xd80/0xd80 [ 2561.339011][T11867] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2561.344463][T11867] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2561.350087][T11867] ? security_sctp_bind_connect+0x89/0xb0 [ 2561.355902][T11867] sctp_sendmsg+0x1519/0x27b0 [ 2561.360698][T11867] ? sctp_getsockopt+0xb60/0xb60 [ 2561.365715][T11867] ? aa_af_perm+0x330/0x330 [ 2561.370296][T11867] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2561.376785][T11867] ? sock_rps_record_flow+0x19/0x3f0 [ 2561.382132][T11867] ? inet_sendmsg+0xce/0x2a0 [ 2561.386790][T11867] ? inet_send_prepare+0x250/0x250 [ 2561.391974][T11867] ____sys_sendmsg+0x61b/0x980 [ 2561.396815][T11867] ? __sys_sendmsg_sock+0x30/0x30 [ 2561.401909][T11867] ? __import_iovec+0x5f2/0x850 [ 2561.406850][T11867] ? import_iovec+0x73/0xa0 [ 2561.411428][T11867] ___sys_sendmsg+0x2a6/0x360 [ 2561.416225][T11867] ? __sys_sendmsg+0x2b0/0x2b0 [ 2561.421094][T11867] ? __lock_acquire+0x7d80/0x7d80 [ 2561.426240][T11867] __se_sys_sendmsg+0x1d0/0x2c0 [ 2561.431177][T11867] ? __x64_sys_sendmsg+0x80/0x80 [ 2561.436208][T11867] ? lockdep_hardirqs_on+0x98/0x150 [ 2561.441469][T11867] do_syscall_64+0x55/0xb0 [ 2561.445949][T11867] ? clear_bhb_loop+0x40/0x90 [ 2561.450700][T11867] ? clear_bhb_loop+0x40/0x90 [ 2561.455457][T11867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2561.461442][T11867] RIP: 0033:0x7f1f87d9e159 [ 2561.465919][T11867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2561.485591][T11867] RSP: 002b:00007f1f88cf2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2561.494082][T11867] RAX: ffffffffffffffda RBX: 00007f1f88025fa0 RCX: 00007f1f87d9e159 [ 2561.502140][T11867] RDX: 00000000000480c4 RSI: 00002000000017c0 RDI: 0000000000000004 [ 2561.510183][T11867] RBP: 00007f1f88cf2090 R08: 0000000000000000 R09: 0000000000000000 [ 2561.518216][T11867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2561.526248][T11867] R13: 00007f1f88026038 R14: 00007f1f88025fa0 R15: 00007ffd6f4f6e28 [ 2561.534301][T11867] [ 2561.613757][T11864] netlink: 'syz.0.12583': attribute type 10 has an invalid length. [ 2561.630403][T11864] netlink: 55 bytes leftover after parsing attributes in process `syz.0.12583'. [ 2561.833087][T11873] netlink: 'syz.2.12646': attribute type 2 has an invalid length. [ 2561.854023][T11881] netlink: 'syz.2.12646': attribute type 2 has an invalid length. [ 2562.186833][T11889] netlink: 'syz.1.12647': attribute type 7 has an invalid length. [ 2562.220588][T11889] netlink: 140 bytes leftover after parsing attributes in process `syz.1.12647'. [ 2562.629561][T11905] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12651'. [ 2562.876667][T11915] netlink: 'syz.3.12654': attribute type 10 has an invalid length. [ 2563.957212][T11940] netlink: 'syz.2.12660': attribute type 10 has an invalid length. [ 2564.345206][T11948] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12662'. [ 2564.700558][T11960] netlink: 'syz.2.12667': attribute type 10 has an invalid length. [ 2564.726739][T11961] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12675'. [ 2565.684872][T11980] netlink: 'syz.0.12674': attribute type 10 has an invalid length. [ 2565.703751][T11980] veth0_macvtap: left promiscuous mode [ 2565.973147][T11985] netlink: 'syz.1.12677': attribute type 10 has an invalid length. [ 2565.981703][T11985] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12677'. [ 2565.999950][T11988] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12678'. [ 2566.209588][T11990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2566.277623][T11995] netlink: 'syz.0.12681': attribute type 10 has an invalid length. [ 2566.373529][T11995] team0: Port device netdevsim0 added [ 2566.907167][T12012] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12687'. [ 2566.971726][T12012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2567.041236][T12011] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12688'. [ 2567.060970][T12014] netlink: 168 bytes leftover after parsing attributes in process `syz.2.12689'. [ 2567.084915][T12017] netlink: 176 bytes leftover after parsing attributes in process `syz.0.12690'. [ 2567.256704][T12021] team0: left allmulticast mode [ 2567.261644][T12021] team_slave_1: left allmulticast mode [ 2567.274185][T12021] bond0: left allmulticast mode [ 2567.279709][T12021] bond_slave_0: left allmulticast mode [ 2567.285310][T12021] bond_slave_1: left allmulticast mode [ 2567.301211][T12021] @0Ù: left allmulticast mode [ 2567.310763][T12021] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 2567.319075][T12021] batadv0: left allmulticast mode [ 2567.324628][T12021] team0: left promiscuous mode [ 2567.341624][T12021] team_slave_1: left promiscuous mode [ 2567.350177][T12021] bond0: left promiscuous mode [ 2567.358209][T12021] bond_slave_0: left promiscuous mode [ 2567.363934][T12021] bond_slave_1: left promiscuous mode [ 2567.393085][T12021] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 2567.403446][T12021] batadv0: left promiscuous mode [ 2567.413014][T12021] bridge0: port 4(team0) entered disabled state [ 2567.431444][T12021] bridge0: port 3(dummy0) entered disabled state [ 2567.448074][T12021] bridge_slave_1: left allmulticast mode [ 2567.456694][T12021] bridge0: port 2(bridge_slave_1) entered disabled state [ 2567.596232][T12023] netlink: 'syz.3.12691': attribute type 10 has an invalid length. [ 2568.053916][T12045] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12699'. [ 2568.135887][T12049] netlink: 168 bytes leftover after parsing attributes in process `syz.1.12700'. [ 2568.310010][T12052] FAULT_INJECTION: forcing a failure. [ 2568.310010][T12052] name failslab, interval 1, probability 0, space 0, times 0 [ 2568.342193][T12052] CPU: 1 PID: 12052 Comm: syz.3.12701 Not tainted syzkaller #0 [ 2568.349843][T12052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2568.359929][T12052] Call Trace: [ 2568.363236][T12052] [ 2568.366198][T12052] dump_stack_lvl+0x18c/0x250 [ 2568.370929][T12052] ? show_regs_print_info+0x20/0x20 [ 2568.376178][T12052] ? load_image+0x420/0x420 [ 2568.380726][T12052] ? __might_sleep+0xe0/0xe0 [ 2568.385356][T12052] ? __lock_acquire+0x7d80/0x7d80 [ 2568.390444][T12052] should_fail_ex+0x394/0x4c0 [ 2568.395181][T12052] should_failslab+0x9/0x20 [ 2568.399740][T12052] slab_pre_alloc_hook+0x59/0x300 [ 2568.404808][T12052] ? __uprobe_register+0x19e/0x760 [ 2568.409960][T12052] __kmem_cache_alloc_node+0x53/0x250 [ 2568.415385][T12052] ? __uprobe_register+0x19e/0x760 [ 2568.420528][T12052] kmalloc_trace+0x2a/0xe0 [ 2568.424983][T12052] __uprobe_register+0x19e/0x760 [ 2568.429965][T12052] ? pcpu_alloc+0x11e7/0x1880 [ 2568.434681][T12052] probe_event_enable+0x3f9/0xb20 [ 2568.439740][T12052] ? fetch_store_string+0x280/0x280 [ 2568.444971][T12052] perf_trace_event_init+0x4d4/0x9b0 [ 2568.450306][T12052] perf_uprobe_init+0x12e/0x190 [ 2568.455198][T12052] perf_uprobe_event_init+0xe6/0x180 [ 2568.460529][T12052] perf_try_init_event+0x12b/0x3c0 [ 2568.465680][T12052] ? perf_event_alloc+0xb23/0x2150 [ 2568.470824][T12052] perf_event_alloc+0xed4/0x2150 [ 2568.475804][T12052] ? find_lively_task_by_vpid+0x19/0x290 [ 2568.481491][T12052] ? find_lively_task_by_vpid+0x19/0x290 [ 2568.487192][T12052] __se_sys_perf_event_open+0x796/0x1d40 [ 2568.492880][T12052] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 2568.498673][T12052] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 2568.504367][T12052] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2568.510304][T12052] ? __x64_sys_perf_event_open+0x20/0xc0 [ 2568.515977][T12052] do_syscall_64+0x55/0xb0 [ 2568.520436][T12052] ? clear_bhb_loop+0x40/0x90 [ 2568.525163][T12052] ? clear_bhb_loop+0x40/0x90 [ 2568.529899][T12052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2568.535847][T12052] RIP: 0033:0x7fdf1699e159 [ 2568.540291][T12052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2568.559937][T12052] RSP: 002b:00007fdf17800028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2568.568388][T12052] RAX: ffffffffffffffda RBX: 00007fdf16c25fa0 RCX: 00007fdf1699e159 [ 2568.576397][T12052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 2568.584403][T12052] RBP: 00007fdf17800090 R08: 0000000000000000 R09: 0000000000000000 [ 2568.592402][T12052] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2568.600493][T12052] R13: 00007fdf16c26038 R14: 00007fdf16c25fa0 R15: 00007ffdec05bdd8 [ 2568.608505][T12052] [ 2568.712595][T12054] FAULT_INJECTION: forcing a failure. [ 2568.712595][T12054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2568.763838][T12054] CPU: 1 PID: 12054 Comm: syz.1.12702 Not tainted syzkaller #0 [ 2568.771442][T12054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2568.781524][T12054] Call Trace: [ 2568.784830][T12054] [ 2568.787824][T12054] dump_stack_lvl+0x18c/0x250 [ 2568.792552][T12054] ? show_regs_print_info+0x20/0x20 [ 2568.797790][T12054] ? load_image+0x420/0x420 [ 2568.802337][T12054] ? __lock_acquire+0x7d80/0x7d80 [ 2568.807406][T12054] ? snprintf+0xe9/0x140 [ 2568.811694][T12054] should_fail_ex+0x394/0x4c0 [ 2568.816418][T12054] _copy_to_user+0x2f/0xa0 [ 2568.820882][T12054] simple_read_from_buffer+0xe7/0x150 [ 2568.826295][T12054] proc_fail_nth_read+0x1e8/0x260 [ 2568.831362][T12054] ? proc_fault_inject_write+0x360/0x360 [ 2568.837079][T12054] ? fsnotify_perm+0x271/0x5e0 [ 2568.841920][T12054] ? proc_fault_inject_write+0x360/0x360 [ 2568.847600][T12054] vfs_read+0x298/0x990 [ 2568.851807][T12054] ? kernel_read+0x1e0/0x1e0 [ 2568.856462][T12054] ? __fget_files+0x28/0x460 [ 2568.861097][T12054] ? __fget_files+0x3fc/0x460 [ 2568.865819][T12054] ? __fdget_pos+0x2a3/0x330 [ 2568.870448][T12054] ? ksys_read+0x74/0x260 [ 2568.874817][T12054] ksys_read+0x151/0x260 [ 2568.879100][T12054] ? vfs_write+0x9a0/0x9a0 [ 2568.883580][T12054] ? lockdep_hardirqs_on+0x98/0x150 [ 2568.888796][T12054] do_syscall_64+0x55/0xb0 [ 2568.893225][T12054] ? clear_bhb_loop+0x40/0x90 [ 2568.897926][T12054] ? clear_bhb_loop+0x40/0x90 [ 2568.902630][T12054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2568.908538][T12054] RIP: 0033:0x7f1f87d5e98e [ 2568.912965][T12054] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2568.932595][T12054] RSP: 002b:00007f1f88cf1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2568.941027][T12054] RAX: ffffffffffffffda RBX: 00007f1f88cf26c0 RCX: 00007f1f87d5e98e [ 2568.949011][T12054] RDX: 000000000000000f RSI: 00007f1f88cf20a0 RDI: 000000000000000a [ 2568.957002][T12054] RBP: 00007f1f88cf2090 R08: 0000000000000000 R09: 0000000000000000 [ 2568.965008][T12054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2568.972991][T12054] R13: 00007f1f88026038 R14: 00007f1f88025fa0 R15: 00007ffd6f4f6e28 [ 2568.980989][T12054] [ 2569.135045][T12058] netlink: 'syz.0.12703': attribute type 10 has an invalid length. [ 2569.545920][T12070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2569.573159][T12072] __nla_validate_parse: 1 callbacks suppressed [ 2569.573176][T12072] netlink: 168 bytes leftover after parsing attributes in process `syz.3.12710'. [ 2569.682510][T12076] netlink: 'syz.2.12709': attribute type 9 has an invalid length. [ 2569.704552][T12076] netlink: 167672 bytes leftover after parsing attributes in process `syz.2.12709'. [ 2569.764731][T12078] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12711'. [ 2569.798877][T12073] netlink: 'syz.2.12709': attribute type 9 has an invalid length. [ 2569.833289][T12073] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12709'. [ 2570.380379][T12092] netlink: 'syz.3.12716': attribute type 10 has an invalid length. [ 2570.388627][T12092] netlink: 55 bytes leftover after parsing attributes in process `syz.3.12716'. [ 2570.523477][T12098] FAULT_INJECTION: forcing a failure. [ 2570.523477][T12098] name failslab, interval 1, probability 0, space 0, times 0 [ 2570.550690][T12098] CPU: 1 PID: 12098 Comm: syz.2.12718 Not tainted syzkaller #0 [ 2570.558316][T12098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2570.568420][T12098] Call Trace: [ 2570.571742][T12098] [ 2570.574714][T12098] dump_stack_lvl+0x18c/0x250 [ 2570.579486][T12098] ? show_regs_print_info+0x20/0x20 [ 2570.584748][T12098] ? load_image+0x420/0x420 [ 2570.589308][T12098] ? __might_sleep+0xe0/0xe0 [ 2570.593954][T12098] ? __lock_acquire+0x7d80/0x7d80 [ 2570.599048][T12098] should_fail_ex+0x394/0x4c0 [ 2570.603796][T12098] should_failslab+0x9/0x20 [ 2570.608367][T12098] slab_pre_alloc_hook+0x59/0x300 [ 2570.613460][T12098] ? sk_prot_alloc+0xe7/0x210 [ 2570.618203][T12098] ? sk_prot_alloc+0xe7/0x210 [ 2570.622912][T12098] __kmem_cache_alloc_node+0x53/0x250 [ 2570.628336][T12098] ? sk_prot_alloc+0xe7/0x210 [ 2570.633047][T12098] __kmalloc+0xa7/0x240 [ 2570.637248][T12098] sk_prot_alloc+0xe7/0x210 [ 2570.641783][T12098] ? sk_alloc+0x24/0x350 [ 2570.646071][T12098] sk_alloc+0x3a/0x350 [ 2570.650172][T12098] ? bpf_ctx_init+0x154/0x190 [ 2570.654889][T12098] bpf_prog_test_run_skb+0x371/0x18f0 [ 2570.660317][T12098] ? __fget_files+0x28/0x460 [ 2570.664943][T12098] ? __fget_files+0x3fc/0x460 [ 2570.669660][T12098] ? cpu_online+0x60/0x60 [ 2570.674038][T12098] bpf_prog_test_run+0x31f/0x390 [ 2570.679015][T12098] __sys_bpf+0x49d/0x890 [ 2570.683294][T12098] ? bpf_link_show_fdinfo+0x560/0x560 [ 2570.688731][T12098] ? lock_chain_count+0x20/0x20 [ 2570.693613][T12098] __x64_sys_bpf+0x7c/0x90 [ 2570.698069][T12098] do_syscall_64+0x55/0xb0 [ 2570.702518][T12098] ? clear_bhb_loop+0x40/0x90 [ 2570.707231][T12098] ? clear_bhb_loop+0x40/0x90 [ 2570.711952][T12098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2570.717891][T12098] RIP: 0033:0x7fb436f9e159 [ 2570.722329][T12098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2570.741960][T12098] RSP: 002b:00007fb437dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2570.750496][T12098] RAX: ffffffffffffffda RBX: 00007fb437225fa0 RCX: 00007fb436f9e159 [ 2570.758494][T12098] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 2570.766492][T12098] RBP: 00007fb437dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 2570.774485][T12098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2570.782467][T12098] R13: 00007fb437226038 R14: 00007fb437225fa0 R15: 00007ffe1d9ede48 [ 2570.790459][T12098] [ 2570.845385][T12102] netlink: 168 bytes leftover after parsing attributes in process `syz.0.12719'. [ 2571.050492][T12109] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12722'. [ 2571.305399][T12118] FAULT_INJECTION: forcing a failure. [ 2571.305399][T12118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2571.322622][T12118] CPU: 1 PID: 12118 Comm: syz.2.12726 Not tainted syzkaller #0 [ 2571.330221][T12118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2571.340310][T12118] Call Trace: [ 2571.343638][T12118] [ 2571.346598][T12118] dump_stack_lvl+0x18c/0x250 [ 2571.351323][T12118] ? show_regs_print_info+0x20/0x20 [ 2571.356567][T12118] ? load_image+0x420/0x420 [ 2571.361119][T12118] ? __lock_acquire+0x7d80/0x7d80 [ 2571.366189][T12118] ? snprintf+0xe9/0x140 [ 2571.370482][T12118] should_fail_ex+0x394/0x4c0 [ 2571.375220][T12118] _copy_to_user+0x2f/0xa0 [ 2571.379681][T12118] simple_read_from_buffer+0xe7/0x150 [ 2571.385102][T12118] proc_fail_nth_read+0x1e8/0x260 [ 2571.388090][T12111] netlink: 'syz.1.12723': attribute type 3 has an invalid length. [ 2571.390156][T12118] ? proc_fault_inject_write+0x360/0x360 [ 2571.390194][T12118] ? fsnotify_perm+0x271/0x5e0 [ 2571.390223][T12118] ? proc_fault_inject_write+0x360/0x360 [ 2571.390252][T12118] vfs_read+0x298/0x990 [ 2571.390284][T12118] ? kernel_read+0x1e0/0x1e0 [ 2571.390313][T12118] ? __fget_files+0x28/0x460 [ 2571.390340][T12118] ? __fget_files+0x3fc/0x460 [ 2571.390375][T12118] ? __fdget_pos+0x2a3/0x330 [ 2571.390399][T12118] ? ksys_read+0x74/0x260 [ 2571.390427][T12118] ksys_read+0x151/0x260 [ 2571.390458][T12118] ? vfs_write+0x9a0/0x9a0 [ 2571.390488][T12118] ? lockdep_hardirqs_on+0x98/0x150 [ 2571.390513][T12118] do_syscall_64+0x55/0xb0 [ 2571.390538][T12118] ? clear_bhb_loop+0x40/0x90 [ 2571.464497][T12118] ? clear_bhb_loop+0x40/0x90 [ 2571.469228][T12118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2571.475183][T12118] RIP: 0033:0x7fb436f5e98e [ 2571.479628][T12118] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2571.486124][T12111] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.12723'. [ 2571.499250][T12118] RSP: 002b:00007fb437dd5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2571.499275][T12118] RAX: ffffffffffffffda RBX: 00007fb437dd66c0 RCX: 00007fb436f5e98e [ 2571.499290][T12118] RDX: 000000000000000f RSI: 00007fb437dd60a0 RDI: 0000000000000004 [ 2571.499301][T12118] RBP: 00007fb437dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 2571.499314][T12118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2571.499327][T12118] R13: 00007fb437226038 R14: 00007fb437225fa0 R15: 00007ffe1d9ede48 [ 2571.499356][T12118] [ 2571.780046][T12127] netlink: 168 bytes leftover after parsing attributes in process `syz.2.12729'. [ 2572.539508][T12140] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12734'. [ 2572.696033][T12145] netlink: 'syz.2.12735': attribute type 39 has an invalid length. [ 2573.916839][T12177] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 2573.996903][T12177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2574.420395][T12186] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 2574.453465][T12186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2574.481704][T12186] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 2574.521918][T12190] FAULT_INJECTION: forcing a failure. [ 2574.521918][T12190] name failslab, interval 1, probability 0, space 0, times 0 [ 2574.530286][T12186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2574.550750][T12190] CPU: 0 PID: 12190 Comm: syz.2.12752 Not tainted syzkaller #0 [ 2574.558359][T12190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2574.568442][T12190] Call Trace: [ 2574.571746][T12190] [ 2574.574708][T12190] dump_stack_lvl+0x18c/0x250 [ 2574.579432][T12190] ? show_regs_print_info+0x20/0x20 [ 2574.584692][T12190] ? load_image+0x420/0x420 [ 2574.589243][T12190] ? __might_sleep+0xe0/0xe0 [ 2574.593873][T12190] ? __lock_acquire+0x7d80/0x7d80 [ 2574.598945][T12190] should_fail_ex+0x394/0x4c0 [ 2574.603665][T12190] should_failslab+0x9/0x20 [ 2574.608214][T12190] slab_pre_alloc_hook+0x59/0x300 [ 2574.613326][T12190] kmem_cache_alloc_node+0x5e/0x310 [ 2574.618575][T12190] ? __alloc_skb+0x103/0x2c0 [ 2574.623216][T12190] __alloc_skb+0x103/0x2c0 [ 2574.627720][T12190] alloc_skb_with_frags+0xcd/0x7a0 [ 2574.632893][T12190] sock_alloc_send_pskb+0x883/0x9a0 [ 2574.638156][T12190] ? sock_kzfree_s+0x50/0x50 [ 2574.642803][T12190] tun_get_user+0xa44/0x3d30 [ 2574.647452][T12190] ? aa_file_perm+0x3e3/0xee0 [ 2574.652188][T12190] ? rcu_read_unlock+0xa0/0xa0 [ 2574.657018][T12190] ? tun_get+0x1c/0x2e0 [ 2574.661248][T12190] ? __lock_acquire+0x7d80/0x7d80 [ 2574.666343][T12190] ? tun_get+0x1c/0x2e0 [ 2574.670540][T12190] tun_chr_write_iter+0x119/0x200 [ 2574.675606][T12190] vfs_write+0x474/0x9a0 [ 2574.679892][T12190] ? file_end_write+0x250/0x250 [ 2574.684791][T12190] ? __fget_files+0x3fc/0x460 [ 2574.689519][T12190] ? __fdget_pos+0x1d8/0x330 [ 2574.694147][T12190] ? ksys_write+0x74/0x260 [ 2574.698609][T12190] ksys_write+0x151/0x260 [ 2574.702997][T12190] ? __ia32_sys_read+0x90/0x90 [ 2574.707812][T12190] ? lockdep_hardirqs_on+0x98/0x150 [ 2574.713054][T12190] do_syscall_64+0x55/0xb0 [ 2574.717512][T12190] ? clear_bhb_loop+0x40/0x90 [ 2574.722262][T12190] ? clear_bhb_loop+0x40/0x90 [ 2574.726987][T12190] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2574.732943][T12190] RIP: 0033:0x7fb436f9e159 [ 2574.737401][T12190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2574.757073][T12190] RSP: 002b:00007fb437dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2574.765566][T12190] RAX: ffffffffffffffda RBX: 00007fb437225fa0 RCX: 00007fb436f9e159 [ 2574.773572][T12190] RDX: 000000000000ffc0 RSI: 0000200000000000 RDI: 00000000000000c8 [ 2574.781572][T12190] RBP: 00007fb437dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 2574.789570][T12190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2574.797579][T12190] R13: 00007fb437226038 R14: 00007fb437225fa0 R15: 00007ffe1d9ede48 [ 2574.805607][T12190] [ 2575.189364][T12199] netlink: 'syz.2.12756': attribute type 8 has an invalid length. [ 2575.341314][T12204] netlink: 'syz.1.12757': attribute type 10 has an invalid length. [ 2575.406703][T12204] __nla_validate_parse: 2 callbacks suppressed [ 2575.406720][T12204] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12757'. [ 2575.468802][T12206] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12759'. [ 2575.508424][T12211] netlink: 176 bytes leftover after parsing attributes in process `syz.2.12760'. [ 2575.623970][T12213] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12761'. [ 2576.711267][T12237] netlink: 176 bytes leftover after parsing attributes in process `syz.3.12770'. [ 2576.765699][T12239] netlink: 'syz.2.12771': attribute type 10 has an invalid length. [ 2576.774592][T12239] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12771'. [ 2578.331522][T12272] netlink: 176 bytes leftover after parsing attributes in process `syz.2.12782'. [ 2578.363203][T12273] netlink: 'syz.0.12783': attribute type 10 has an invalid length. [ 2578.385601][T12273] netlink: 55 bytes leftover after parsing attributes in process `syz.0.12783'. [ 2580.195554][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12790'. [ 2580.516594][T12302] netlink: 'syz.2.12794': attribute type 10 has an invalid length. [ 2580.541657][T12302] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12794'. [ 2580.566226][T12304] netlink: 176 bytes leftover after parsing attributes in process `syz.1.12793'. [ 2581.217782][T12314] netlink: 'syz.2.12799': attribute type 3 has an invalid length. [ 2581.256343][T12314] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12799'. [ 2581.296174][T12314] netlink: 'syz.2.12799': attribute type 63 has an invalid length. [ 2581.318675][T12314] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12799'. [ 2581.415188][T12316] netlink: 'syz.2.12799': attribute type 9 has an invalid length. [ 2581.464468][T12316] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12799'. [ 2582.272788][T12319] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.12800'. [ 2582.345094][T12331] netlink: 176 bytes leftover after parsing attributes in process `syz.0.12804'. [ 2583.270496][T12368] netlink: 176 bytes leftover after parsing attributes in process `syz.1.12819'. [ 2584.169838][T12395] netlink: 176 bytes leftover after parsing attributes in process `syz.3.12830'. [ 2585.240839][T12412] syzkaller0: entered promiscuous mode [ 2585.251093][T12412] syzkaller0: entered allmulticast mode [ 2587.995622][T12422] netlink: 176 bytes leftover after parsing attributes in process `syz.3.12839'. [ 2588.198916][T12430] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12843'. [ 2588.429891][T12438] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12845'. [ 2588.439372][T12438] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12845'. [ 2588.450707][T12437] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12845'. [ 2588.559293][T12442] syzkaller0: entered promiscuous mode [ 2588.567390][T12442] syzkaller0: entered allmulticast mode [ 2588.632029][T12448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2588.640536][T12448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2588.958580][T12448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2588.971307][T12448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2590.661685][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.668179][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.641149][T12455] netlink: 176 bytes leftover after parsing attributes in process `syz.2.12852'. [ 2591.840762][T12468] FAULT_INJECTION: forcing a failure. [ 2591.840762][T12468] name failslab, interval 1, probability 0, space 0, times 0 [ 2591.856317][T12468] CPU: 1 PID: 12468 Comm: syz.2.12855 Not tainted syzkaller #0 [ 2591.863952][T12468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2591.874063][T12468] Call Trace: [ 2591.877392][T12468] [ 2591.880373][T12468] dump_stack_lvl+0x18c/0x250 [ 2591.885120][T12468] ? show_regs_print_info+0x20/0x20 [ 2591.890381][T12468] ? load_image+0x420/0x420 [ 2591.894945][T12468] ? __might_sleep+0xe0/0xe0 [ 2591.899599][T12468] ? __lock_acquire+0x7d80/0x7d80 [ 2591.904680][T12468] should_fail_ex+0x394/0x4c0 [ 2591.909416][T12468] should_failslab+0x9/0x20 [ 2591.913983][T12468] slab_pre_alloc_hook+0x59/0x300 [ 2591.919083][T12468] ? kvmalloc_node+0x70/0x180 [ 2591.923834][T12468] ? kvmalloc_node+0x70/0x180 [ 2591.928564][T12468] __kmem_cache_alloc_node+0x53/0x250 [ 2591.934021][T12468] ? kvmalloc_node+0x70/0x180 [ 2591.938768][T12468] __kmalloc_node+0xa6/0x240 [ 2591.943439][T12468] kvmalloc_node+0x70/0x180 [ 2591.948013][T12468] page_pool_create+0x1eb/0x5c0 [ 2591.952936][T12468] __veth_napi_enable_range+0x198/0x700 [ 2591.958637][T12468] ? __skb_frag_ref+0x1c0/0x1c0 [ 2591.963544][T12468] ? netif_napi_add_weight+0x890/0xba0 [ 2591.969071][T12468] veth_napi_enable_range+0xd0/0x150 [ 2591.974419][T12468] veth_set_features+0x1c8/0x2a0 [ 2591.979418][T12468] __netdev_update_features+0x957/0x1790 [ 2591.985223][T12468] ? dev_xdp_attach+0x1030/0x1030 [ 2591.990329][T12468] ? __might_fault+0xaa/0x120 [ 2591.995080][T12468] ? __lock_acquire+0x7d80/0x7d80 [ 2592.000185][T12468] ? aa_get_newest_label+0xfd/0x5c0 [ 2592.005445][T12468] ? __might_fault+0xaa/0x120 [ 2592.010177][T12468] ? __might_fault+0xc6/0x120 [ 2592.014904][T12468] ? __might_fault+0xaa/0x120 [ 2592.019645][T12468] ethtool_set_one_feature+0x2a8/0x2f0 [ 2592.025158][T12468] ? apparmor_capable+0x137/0x1a0 [ 2592.030332][T12468] ? ethtool_get_one_feature+0x280/0x280 [ 2592.036072][T12468] ? security_capable+0x89/0xb0 [ 2592.040991][T12468] dev_ethtool+0xfd7/0x18d0 [ 2592.045582][T12468] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 2592.051880][T12468] ? __lock_acquire+0x7d80/0x7d80 [ 2592.056989][T12468] ? __might_fault+0xaa/0x120 [ 2592.061722][T12468] ? full_name_hash+0x92/0xe0 [ 2592.066466][T12468] ? dev_load+0x21/0x1f0 [ 2592.070754][T12468] dev_ioctl+0x392/0x1140 [ 2592.075151][T12468] sock_do_ioctl+0x239/0x310 [ 2592.079808][T12468] ? sock_show_fdinfo+0xb0/0xb0 [ 2592.084750][T12468] sock_ioctl+0x5be/0x7e0 [ 2592.089166][T12468] ? sock_poll+0x3e0/0x3e0 [ 2592.093658][T12468] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2592.098653][T12468] ? security_file_ioctl+0x80/0xa0 [ 2592.103825][T12468] ? sock_poll+0x3e0/0x3e0 [ 2592.108320][T12468] __se_sys_ioctl+0xfd/0x170 [ 2592.112969][T12468] do_syscall_64+0x55/0xb0 [ 2592.117448][T12468] ? clear_bhb_loop+0x40/0x90 [ 2592.122192][T12468] ? clear_bhb_loop+0x40/0x90 [ 2592.126932][T12468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2592.132875][T12468] RIP: 0033:0x7fb436f9e159 [ 2592.137330][T12468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2592.156978][T12468] RSP: 002b:00007fb437db5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2592.165472][T12468] RAX: ffffffffffffffda RBX: 00007fb437226090 RCX: 00007fb436f9e159 [ 2592.173494][T12468] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002d [ 2592.181510][T12468] RBP: 00007fb437db5090 R08: 0000000000000000 R09: 0000000000000000 [ 2592.189537][T12468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2592.197559][T12468] R13: 00007fb437226128 R14: 00007fb437226090 R15: 00007ffe1d9ede48 [ 2592.205616][T12468] [ 2592.212362][T12470] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12857'. [ 2592.230861][T12468] page_pool_create() gave up with errno -12 [ 2592.240398][T12468] veth1_to_bond: set_features() failed (-12); wanted 0x000061164fdd59e9, left 0x000061164fdd19e9 [ 2592.263031][T12464] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12854'. [ 2592.304919][T12470] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12857'. [ 2592.314719][T12475] netlink: 144 bytes leftover after parsing attributes in process `syz.3.12858'. [ 2592.328995][T12475] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2592.569052][T12486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2592.583476][T12486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2592.617977][T12486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2592.638053][T12486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2593.051249][T12497] FAULT_INJECTION: forcing a failure. [ 2593.051249][T12497] name failslab, interval 1, probability 0, space 0, times 0 [ 2593.067501][T12497] CPU: 1 PID: 12497 Comm: syz.0.12866 Not tainted syzkaller #0 [ 2593.075146][T12497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2593.085252][T12497] Call Trace: [ 2593.088587][T12497] [ 2593.091558][T12497] dump_stack_lvl+0x18c/0x250 [ 2593.096307][T12497] ? show_regs_print_info+0x20/0x20 [ 2593.101559][T12497] ? load_image+0x420/0x420 [ 2593.106112][T12497] ? __might_sleep+0xe0/0xe0 [ 2593.110761][T12497] ? __lock_acquire+0x7d80/0x7d80 [ 2593.115853][T12497] should_fail_ex+0x394/0x4c0 [ 2593.120606][T12497] should_failslab+0x9/0x20 [ 2593.125167][T12497] slab_pre_alloc_hook+0x59/0x300 [ 2593.130254][T12497] ? up_read+0x20/0x20 [ 2593.134369][T12497] ? ipv6_add_addr+0x566/0x10d0 [ 2593.139269][T12497] __kmem_cache_alloc_node+0x53/0x250 [ 2593.144707][T12497] ? ipv6_add_addr+0x566/0x10d0 [ 2593.149607][T12497] kmalloc_trace+0x2a/0xe0 [ 2593.154080][T12497] ipv6_add_addr+0x566/0x10d0 [ 2593.158820][T12497] ? ipv6_count_addresses+0x190/0x190 [ 2593.164252][T12497] ? addrconf_add_ifaddr+0x147/0x1c0 [ 2593.169602][T12497] inet6_addr_add+0x563/0xb30 [ 2593.174345][T12497] addrconf_add_ifaddr+0x15a/0x1c0 [ 2593.179521][T12497] ? addrconf_set_dstaddr+0x320/0x320 [ 2593.184961][T12497] ? __lock_acquire+0x7d80/0x7d80 [ 2593.190035][T12497] ? slab_free_freelist_hook+0x130/0x1a0 [ 2593.195705][T12497] inet6_ioctl+0x14f/0x2d0 [ 2593.200157][T12497] ? inet6_getname+0x670/0x670 [ 2593.204957][T12497] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 2593.210625][T12497] ? tomoyo_path_number_perm+0x217/0x5e0 [ 2593.216311][T12497] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2593.221830][T12497] sock_do_ioctl+0xfc/0x310 [ 2593.226377][T12497] ? sock_show_fdinfo+0xb0/0xb0 [ 2593.231280][T12497] sock_ioctl+0x5be/0x7e0 [ 2593.235673][T12497] ? sock_poll+0x3e0/0x3e0 [ 2593.240154][T12497] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2593.245140][T12497] ? security_file_ioctl+0x80/0xa0 [ 2593.250293][T12497] ? sock_poll+0x3e0/0x3e0 [ 2593.254747][T12497] __se_sys_ioctl+0xfd/0x170 [ 2593.259380][T12497] do_syscall_64+0x55/0xb0 [ 2593.263828][T12497] ? clear_bhb_loop+0x40/0x90 [ 2593.268558][T12497] ? clear_bhb_loop+0x40/0x90 [ 2593.273266][T12497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2593.279199][T12497] RIP: 0033:0x7f149039e159 [ 2593.283638][T12497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2593.303279][T12497] RSP: 002b:00007f1491189028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2593.311725][T12497] RAX: ffffffffffffffda RBX: 00007f1490625fa0 RCX: 00007f149039e159 [ 2593.319718][T12497] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000000 [ 2593.327711][T12497] RBP: 00007f1491189090 R08: 0000000000000000 R09: 0000000000000000 [ 2593.335701][T12497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2593.343696][T12497] R13: 00007f1490626038 R14: 00007f1490625fa0 R15: 00007ffeab9854c8 [ 2593.351791][T12497] [ 2593.428112][T12499] netlink: 'syz.3.12867': attribute type 10 has an invalid length. [ 2593.840063][T12516] __nla_validate_parse: 2 callbacks suppressed [ 2593.840077][T12516] netlink: 176 bytes leftover after parsing attributes in process `syz.0.12873'. [ 2594.029063][T12522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2594.042967][T12522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2594.061243][T12522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2594.069653][T12522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2594.593485][T12539] FAULT_INJECTION: forcing a failure. [ 2594.593485][T12539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2594.628215][T12539] CPU: 0 PID: 12539 Comm: syz.1.12882 Not tainted syzkaller #0 [ 2594.635986][T12539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2594.646092][T12539] Call Trace: [ 2594.649420][T12539] [ 2594.652407][T12539] dump_stack_lvl+0x18c/0x250 [ 2594.657158][T12539] ? show_regs_print_info+0x20/0x20 [ 2594.662422][T12539] ? load_image+0x420/0x420 [ 2594.666990][T12539] ? __might_fault+0xaa/0x120 [ 2594.671750][T12539] ? __lock_acquire+0x7d80/0x7d80 [ 2594.676853][T12539] should_fail_ex+0x394/0x4c0 [ 2594.681600][T12539] _copy_from_user+0x2f/0xe0 [ 2594.686262][T12539] __sys_bpf+0x23e/0x890 [ 2594.690556][T12539] ? bpf_link_show_fdinfo+0x560/0x560 [ 2594.695977][T12539] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2594.702181][T12539] __x64_sys_bpf+0x7c/0x90 [ 2594.706643][T12539] do_syscall_64+0x55/0xb0 [ 2594.711112][T12539] ? clear_bhb_loop+0x40/0x90 [ 2594.715836][T12539] ? clear_bhb_loop+0x40/0x90 [ 2594.720563][T12539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2594.726500][T12539] RIP: 0033:0x7f1f87d9e159 [ 2594.730944][T12539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2594.750583][T12539] RSP: 002b:00007f1f88cf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2594.759031][T12539] RAX: ffffffffffffffda RBX: 00007f1f88025fa0 RCX: 00007f1f87d9e159 [ 2594.767037][T12539] RDX: 0000000000000052 RSI: 000020000000e000 RDI: 0000000000000005 [ 2594.775066][T12539] RBP: 00007f1f88cf2090 R08: 0000000000000000 R09: 0000000000000000 [ 2594.783059][T12539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2594.791051][T12539] R13: 00007f1f88026038 R14: 00007f1f88025fa0 R15: 00007ffd6f4f6e28 [ 2594.799077][T12539] [ 2594.815041][T12542] netlink: 176 bytes leftover after parsing attributes in process `syz.2.12883'. [ 2595.150136][T12552] netlink: 'syz.1.12887': attribute type 10 has an invalid length. [ 2598.350482][T12575] netlink: 176 bytes leftover after parsing attributes in process `syz.3.12892'. [ 2598.353968][T12578] netlink: 'syz.0.12893': attribute type 11 has an invalid length. [ 2598.371900][T12578] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.12893'. [ 2598.398894][T12578] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 2598.496226][T12577] netlink: 'syz.0.12893': attribute type 11 has an invalid length. [ 2598.524365][T12577] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.12893'. [ 2598.551367][T12577] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2598.580246][T12577] CPU: 1 PID: 12577 Comm: syz.0.12893 Not tainted syzkaller #0 [ 2598.587910][T12577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2598.598048][T12577] Call Trace: [ 2598.601395][T12577] [ 2598.604395][T12577] dump_stack_lvl+0x18c/0x250 [ 2598.609170][T12577] ? show_regs_print_info+0x20/0x20 [ 2598.614459][T12577] ? load_image+0x420/0x420 [ 2598.619096][T12577] sysfs_warn_dup+0x8e/0xa0 [ 2598.623690][T12577] sysfs_do_create_link_sd+0xc0/0x110 [ 2598.629177][T12577] device_add_class_symlinks+0x1cf/0x240 [ 2598.634905][T12577] device_add+0x4f9/0xc40 [ 2598.639345][T12577] wiphy_register+0x1d99/0x2ac0 [ 2598.644516][T12577] ? cfg80211_event_work+0x40/0x40 [ 2598.649713][T12577] ? minstrel_ht_alloc+0x88a/0x990 [ 2598.655040][T12577] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2598.661261][T12577] ieee80211_register_hw+0x2dd8/0x3b30 [ 2598.666857][T12577] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2598.672533][T12577] ? ieee80211_tasklet_handler+0x20/0x20 [ 2598.678262][T12577] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2598.684265][T12577] ? __debug_object_init+0xec/0x450 [ 2598.689569][T12577] ? __asan_memset+0x22/0x40 [ 2598.694249][T12577] ? __hrtimer_init+0x189/0x270 [ 2598.699204][T12577] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2598.705129][T12577] ? mac80211_hwsim_free+0x220/0x220 [ 2598.710499][T12577] ? rcu_is_watching+0x15/0xb0 [ 2598.715357][T12577] ? kstrndup+0xbd/0x140 [ 2598.719772][T12577] hwsim_new_radio_nl+0xdad/0x1a70 [ 2598.725000][T12577] ? __nla_validate+0x50/0x50 [ 2598.729814][T12577] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2598.736260][T12577] ? __nla_parse+0x40/0x50 [ 2598.740782][T12577] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2598.747228][T12577] genl_family_rcv_msg_doit+0x21a/0x310 [ 2598.752884][T12577] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2598.758894][T12577] ? bpf_lsm_capable+0x9/0x10 [ 2598.763646][T12577] ? security_capable+0x89/0xb0 [ 2598.768605][T12577] genl_rcv_msg+0x611/0x7a0 [ 2598.773218][T12577] ? genl_bind+0x360/0x360 [ 2598.777719][T12577] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2598.784150][T12577] ? ref_tracker_free+0x686/0x830 [ 2598.789248][T12577] ? __kasan_kmalloc_large+0x8b/0xa0 [ 2598.794713][T12577] netlink_rcv_skb+0x235/0x4c0 [ 2598.799573][T12577] ? genl_bind+0x360/0x360 [ 2598.804092][T12577] ? netlink_ack+0x1160/0x1160 [ 2598.809029][T12577] ? __lock_acquire+0x7d80/0x7d80 [ 2598.814198][T12577] ? down_read+0x1ac/0x2e0 [ 2598.818724][T12577] genl_rcv+0x28/0x40 [ 2598.822793][T12577] netlink_unicast+0x7b1/0x930 [ 2598.827688][T12577] netlink_sendmsg+0x8d0/0xbf0 [ 2598.832576][T12577] ? netlink_getsockopt+0x590/0x590 [ 2598.837871][T12577] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2598.843506][T12577] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2598.848866][T12577] ? security_socket_sendmsg+0x80/0xa0 [ 2598.854401][T12577] ? netlink_getsockopt+0x590/0x590 [ 2598.859687][T12577] ____sys_sendmsg+0x61b/0x980 [ 2598.864571][T12577] ? __asan_memset+0x22/0x40 [ 2598.869241][T12577] ? __sys_sendmsg_sock+0x30/0x30 [ 2598.874459][T12577] ? __import_iovec+0x5f2/0x850 [ 2598.879460][T12577] ? import_iovec+0x73/0xa0 [ 2598.884093][T12577] ___sys_sendmsg+0x2a6/0x360 [ 2598.888884][T12577] ? __sys_sendmsg+0x2b0/0x2b0 [ 2598.893925][T12577] __se_sys_sendmsg+0x1d0/0x2c0 [ 2598.898869][T12577] ? __x64_sys_sendmsg+0x80/0x80 [ 2598.903955][T12577] ? lockdep_hardirqs_on+0x98/0x150 [ 2598.909258][T12577] do_syscall_64+0x55/0xb0 [ 2598.913740][T12577] ? clear_bhb_loop+0x40/0x90 [ 2598.918467][T12577] ? clear_bhb_loop+0x40/0x90 [ 2598.923209][T12577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2598.929152][T12577] RIP: 0033:0x7f149039e159 [ 2598.933616][T12577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2598.953290][T12577] RSP: 002b:00007f1491189028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2598.961751][T12577] RAX: ffffffffffffffda RBX: 00007f1490625fa0 RCX: 00007f149039e159 [ 2598.969762][T12577] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 2598.977784][T12577] RBP: 00007f149043506b R08: 0000000000000000 R09: 0000000000000000 [ 2598.985802][T12577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2598.993819][T12577] R13: 00007f1490626038 R14: 00007f1490625fa0 R15: 00007ffeab9854c8 [ 2599.001879][T12577] [ 2599.559676][T12593] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.12896'. [ 2599.698894][T12598] netlink: 'syz.0.12899': attribute type 10 has an invalid length. [ 2599.713186][T12600] netlink: 'syz.2.12900': attribute type 5 has an invalid length. [ 2599.721439][T12600] netlink: 'syz.2.12900': attribute type 1 has an invalid length. [ 2599.729396][T12600] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.12900'. [ 2599.919732][T12605] netlink: 176 bytes leftover after parsing attributes in process `syz.2.12902'. [ 2600.974546][T12623] netlink: 'syz.1.12910': attribute type 29 has an invalid length. [ 2600.986808][T12623] netlink: 'syz.1.12910': attribute type 29 has an invalid length. [ 2600.997160][T12623] netlink: 'syz.1.12910': attribute type 29 has an invalid length. [ 2601.007628][T12623] netlink: 'syz.1.12910': attribute type 29 has an invalid length. [ 2601.034545][T12625] netlink: 'syz.1.12910': attribute type 29 has an invalid length. [ 2601.044524][T12623] netlink: 'syz.1.12910': attribute type 29 has an invalid length. [ 2601.056802][T12626] netlink: 'syz.1.12910': attribute type 29 has an invalid length. [ 2601.303881][T12630] netlink: 176 bytes leftover after parsing attributes in process `syz.2.12912'. [ 2601.480319][T12636] netlink: 176 bytes leftover after parsing attributes in process `syz.1.12922'. [ 2602.144782][T12662] netlink: 176 bytes leftover after parsing attributes in process `syz.3.12924'. [ 2603.176607][T25091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2603.193971][T25091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2603.202312][T25091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2603.217470][T25091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2603.239148][T25091] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2603.256024][T25091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2603.284929][T12689] FAULT_INJECTION: forcing a failure. [ 2603.284929][T12689] name failslab, interval 1, probability 0, space 0, times 0 [ 2603.304207][T12689] CPU: 0 PID: 12689 Comm: syz.3.12934 Not tainted syzkaller #0 [ 2603.311858][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2603.321961][T12689] Call Trace: [ 2603.325275][T12689] [ 2603.328293][T12689] dump_stack_lvl+0x18c/0x250 [ 2603.333020][T12689] ? sctp_sendmsg+0x1519/0x27b0 [ 2603.337921][T12689] ? ___sys_sendmsg+0x2a6/0x360 [ 2603.342828][T12689] ? show_regs_print_info+0x20/0x20 [ 2603.348135][T12689] ? load_image+0x420/0x420 [ 2603.352718][T12689] should_fail_ex+0x394/0x4c0 [ 2603.357461][T12689] should_failslab+0x9/0x20 [ 2603.362027][T12689] slab_pre_alloc_hook+0x59/0x300 [ 2603.367134][T12689] ? sctp_add_bind_addr+0x8c/0x360 [ 2603.372313][T12689] __kmem_cache_alloc_node+0x53/0x250 [ 2603.377752][T12689] ? sctp_add_bind_addr+0x8c/0x360 [ 2603.382909][T12689] kmalloc_trace+0x2a/0xe0 [ 2603.387365][T12689] sctp_add_bind_addr+0x8c/0x360 [ 2603.392378][T12689] sctp_copy_local_addr_list+0x31b/0x4e0 [ 2603.398050][T12689] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 2603.403803][T12689] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 2603.409897][T12689] ? sctp_v6_is_any+0x64/0x70 [ 2603.414638][T12689] ? sctp_copy_one_addr+0x8c/0x350 [ 2603.419848][T12689] sctp_bind_addr_copy+0xb3/0x3c0 [ 2603.424909][T12689] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2603.431266][T12689] sctp_connect_new_asoc+0x2f9/0x6a0 [ 2603.436578][T12689] ? __sctp_connect+0xd80/0xd80 [ 2603.441459][T12689] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2603.446873][T12689] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2603.452451][T12689] ? security_sctp_bind_connect+0x89/0xb0 [ 2603.458248][T12689] sctp_sendmsg+0x1519/0x27b0 [ 2603.462983][T12689] ? sctp_getsockopt+0xb60/0xb60 [ 2603.467960][T12689] ? aa_af_perm+0x330/0x330 [ 2603.472502][T12689] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2603.478968][T12689] ? sock_rps_record_flow+0x19/0x3f0 [ 2603.484305][T12689] ? inet_sendmsg+0xce/0x2a0 [ 2603.488921][T12689] ? inet_send_prepare+0x250/0x250 [ 2603.494069][T12689] ____sys_sendmsg+0x61b/0x980 [ 2603.498874][T12689] ? __sys_sendmsg_sock+0x30/0x30 [ 2603.503946][T12689] ? __import_iovec+0x5f2/0x850 [ 2603.508837][T12689] ? import_iovec+0x73/0xa0 [ 2603.513378][T12689] ___sys_sendmsg+0x2a6/0x360 [ 2603.518080][T12689] ? get_pid_task+0x20/0x1e0 [ 2603.522701][T12689] ? __sys_sendmsg+0x2b0/0x2b0 [ 2603.527511][T12689] ? __lock_acquire+0x7d80/0x7d80 [ 2603.532585][T12689] __se_sys_sendmsg+0x1d0/0x2c0 [ 2603.537466][T12689] ? __x64_sys_sendmsg+0x80/0x80 [ 2603.542448][T12689] ? lockdep_hardirqs_on+0x98/0x150 [ 2603.547677][T12689] do_syscall_64+0x55/0xb0 [ 2603.552298][T12689] ? clear_bhb_loop+0x40/0x90 [ 2603.557002][T12689] ? clear_bhb_loop+0x40/0x90 [ 2603.561744][T12689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2603.567668][T12689] RIP: 0033:0x7fdf1699e159 [ 2603.572113][T12689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2603.591784][T12689] RSP: 002b:00007fdf17800028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2603.600244][T12689] RAX: ffffffffffffffda RBX: 00007fdf16c25fa0 RCX: 00007fdf1699e159 [ 2603.608268][T12689] RDX: 00000000000480c4 RSI: 00002000000017c0 RDI: 0000000000000003 [ 2603.616259][T12689] RBP: 00007fdf17800090 R08: 0000000000000000 R09: 0000000000000000 [ 2603.624275][T12689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2603.632268][T12689] R13: 00007fdf16c26038 R14: 00007fdf16c25fa0 R15: 00007ffdec05bdd8 [ 2603.640276][T12689] [ 2603.664860][ T5163] bond0: (slave c@0Ù): Releasing backup interface [ 2603.694749][T12690] netlink: 176 bytes leftover after parsing attributes in process `syz.1.12933'. [ 2603.793950][ T6616] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2603.922870][ T6616] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2604.025262][ T6616] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2604.066075][T12706] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12939'. [ 2604.213061][ T6616] team0: Port device netdevsim0 removed [ 2604.232494][ T6616] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2604.529121][T12685] chnl_net:caif_netlink_parms(): no params data found [ 2604.612262][ T6616] tipc: Left network mode [ 2604.895058][T12729] netlink: 176 bytes leftover after parsing attributes in process `syz.0.12944'. [ 2604.995562][T12685] bridge0: port 1(bridge_slave_0) entered blocking state [ 2605.041851][T12685] bridge0: port 1(bridge_slave_0) entered disabled state [ 2605.055706][T12685] bridge_slave_0: entered allmulticast mode [ 2605.063203][T12685] bridge_slave_0: entered promiscuous mode [ 2605.072287][T12685] bridge0: port 2(bridge_slave_1) entered blocking state [ 2605.079569][T12685] bridge0: port 2(bridge_slave_1) entered disabled state [ 2605.087139][T12685] bridge_slave_1: entered allmulticast mode [ 2605.087328][T12734] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12946'. [ 2605.097681][T12685] bridge_slave_1: entered promiscuous mode [ 2605.154967][T12734] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12946'. [ 2605.224747][T12685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2605.286910][T29691] Bluetooth: hci0: command tx timeout [ 2605.360206][T12685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2605.571640][T12685] team0: Port device team_slave_0 added [ 2605.601540][T12685] team0: Port device team_slave_1 added [ 2605.949118][T12685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2605.967937][T12685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2606.046281][T12685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2606.204417][T12685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2606.223128][T12685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2606.287740][T12685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2606.309043][T12758] netlink: 176 bytes leftover after parsing attributes in process `syz.0.12953'. [ 2606.352390][T12762] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12954'. [ 2606.467346][T12762] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12954'. [ 2606.644288][T12685] hsr_slave_0: entered promiscuous mode [ 2606.686737][T12685] hsr_slave_1: entered promiscuous mode [ 2606.710141][T12685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2606.728136][T12685] Cannot create hsr debugfs directory [ 2606.770940][T12772] validate_nla: 3 callbacks suppressed [ 2606.770958][T12772] netlink: 'syz.3.12956': attribute type 22 has an invalid length. [ 2606.795651][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12956'. [ 2607.365744][T29691] Bluetooth: hci0: command tx timeout [ 2609.446313][T29691] Bluetooth: hci0: command tx timeout [ 2610.168542][T12796] tap0: tun_chr_ioctl cmd 1074025675 [ 2610.174198][T12796] tap0: persist enabled [ 2610.181924][T12797] tap0: tun_chr_ioctl cmd 1074025675 [ 2610.189813][T12797] tap0: persist enabled [ 2610.306633][T12811] netlink: 176 bytes leftover after parsing attributes in process `syz.1.12962'. [ 2610.695141][T12815] netlink: 'syz.3.12963': attribute type 22 has an invalid length. [ 2610.737501][T12815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12963'. [ 2610.845601][ T6616] hsr_slave_0: left promiscuous mode [ 2610.859996][ T6616] hsr_slave_1: left promiscuous mode [ 2610.879669][ T6616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2610.895685][ T6616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2610.919978][T12825] FAULT_INJECTION: forcing a failure. [ 2610.919978][T12825] name failslab, interval 1, probability 0, space 0, times 0 [ 2610.933746][T12825] CPU: 1 PID: 12825 Comm: syz.0.12967 Not tainted syzkaller #0 [ 2610.941345][T12825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2610.951439][T12825] Call Trace: [ 2610.954749][T12825] [ 2610.957742][T12825] dump_stack_lvl+0x18c/0x250 [ 2610.962478][T12825] ? sctp_sendmsg+0x1519/0x27b0 [ 2610.967386][T12825] ? ___sys_sendmsg+0x2a6/0x360 [ 2610.972300][T12825] ? show_regs_print_info+0x20/0x20 [ 2610.977576][T12825] ? load_image+0x420/0x420 [ 2610.982149][T12825] should_fail_ex+0x394/0x4c0 [ 2610.986875][T12825] should_failslab+0x9/0x20 [ 2610.991424][T12825] slab_pre_alloc_hook+0x59/0x300 [ 2610.996649][T12825] ? sctp_add_bind_addr+0x8c/0x360 [ 2611.001811][T12825] __kmem_cache_alloc_node+0x53/0x250 [ 2611.007256][T12825] ? sctp_add_bind_addr+0x8c/0x360 [ 2611.012438][T12825] kmalloc_trace+0x2a/0xe0 [ 2611.016915][T12825] sctp_add_bind_addr+0x8c/0x360 [ 2611.021918][T12825] sctp_copy_local_addr_list+0x31b/0x4e0 [ 2611.027604][T12825] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 2611.033400][T12825] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 2611.039536][T12825] ? sctp_v4_is_any+0x35/0x60 [ 2611.044269][T12825] ? sctp_copy_one_addr+0x8c/0x350 [ 2611.049460][T12825] sctp_bind_addr_copy+0xb3/0x3c0 [ 2611.054541][T12825] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2611.060926][T12825] sctp_connect_new_asoc+0x2f9/0x6a0 [ 2611.066279][T12825] ? __sctp_connect+0xd80/0xd80 [ 2611.071172][T12825] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2611.076620][T12825] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2611.082213][T12825] ? security_sctp_bind_connect+0x89/0xb0 [ 2611.088005][T12825] sctp_sendmsg+0x1519/0x27b0 [ 2611.092759][T12825] ? sctp_getsockopt+0xb60/0xb60 [ 2611.097764][T12825] ? aa_af_perm+0x330/0x330 [ 2611.102323][T12825] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2611.108778][T12825] ? sock_rps_record_flow+0x19/0x3f0 [ 2611.114124][T12825] ? inet_sendmsg+0xce/0x2a0 [ 2611.118761][T12825] ? inet_send_prepare+0x250/0x250 [ 2611.123914][T12825] ____sys_sendmsg+0x61b/0x980 [ 2611.128738][T12825] ? __asan_memset+0x22/0x40 [ 2611.133381][T12825] ? __sys_sendmsg_sock+0x30/0x30 [ 2611.138447][T12825] ? __import_iovec+0x5f2/0x850 [ 2611.143369][T12825] ? import_iovec+0x73/0xa0 [ 2611.147937][T12825] ___sys_sendmsg+0x2a6/0x360 [ 2611.152678][T12825] ? get_pid_task+0x20/0x1e0 [ 2611.157367][T12825] ? __sys_sendmsg+0x2b0/0x2b0 [ 2611.162206][T12825] ? __lock_acquire+0x7d80/0x7d80 [ 2611.167345][T12825] __se_sys_sendmsg+0x1d0/0x2c0 [ 2611.172246][T12825] ? perf_trace_preemptirq_template+0x269/0x330 [ 2611.178549][T12825] ? __x64_sys_sendmsg+0x80/0x80 [ 2611.183533][T12825] ? lockdep_hardirqs_on+0x98/0x150 [ 2611.188749][T12825] do_syscall_64+0x55/0xb0 [ 2611.193201][T12825] ? clear_bhb_loop+0x40/0x90 [ 2611.197909][T12825] ? clear_bhb_loop+0x40/0x90 [ 2611.202634][T12825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2611.208559][T12825] RIP: 0033:0x7f149039e159 [ 2611.212995][T12825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2611.232640][T12825] RSP: 002b:00007f1491189028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2611.241075][T12825] RAX: ffffffffffffffda RBX: 00007f1490625fa0 RCX: 00007f149039e159 [ 2611.249166][T12825] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000004 [ 2611.257165][T12825] RBP: 00007f1491189090 R08: 0000000000000000 R09: 0000000000000000 [ 2611.265166][T12825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2611.273156][T12825] R13: 00007f1490626038 R14: 00007f1490625fa0 R15: 00007ffeab9854c8 [ 2611.281156][T12825] [ 2611.315835][T12830] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12968'. [ 2611.339487][ T6616] veth1_macvtap: left promiscuous mode [ 2611.345244][ T6616] veth1_vlan: left allmulticast mode [ 2611.351180][ T6616] veth1_vlan: left promiscuous mode [ 2611.359401][ T6616] veth0_vlan: left promiscuous mode [ 2611.422312][T12832] FAULT_INJECTION: forcing a failure. [ 2611.422312][T12832] name failslab, interval 1, probability 0, space 0, times 0 [ 2611.455909][T12832] CPU: 0 PID: 12832 Comm: syz.0.12970 Not tainted syzkaller #0 [ 2611.463639][T12832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2611.473732][T12832] Call Trace: [ 2611.477054][T12832] [ 2611.480038][T12832] dump_stack_lvl+0x18c/0x250 [ 2611.484771][T12832] ? show_regs_print_info+0x20/0x20 [ 2611.490037][T12832] ? lockdep_hardirqs_on+0x98/0x150 [ 2611.495288][T12832] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2611.501514][T12832] should_fail_ex+0x394/0x4c0 [ 2611.506248][T12832] should_failslab+0x9/0x20 [ 2611.510802][T12832] slab_pre_alloc_hook+0x59/0x300 [ 2611.515901][T12832] ? __get_vm_area_node+0x125/0x370 [ 2611.521178][T12832] __kmem_cache_alloc_node+0x53/0x250 [ 2611.526599][T12832] ? __get_vm_area_node+0x125/0x370 [ 2611.527181][T29691] Bluetooth: hci0: command tx timeout [ 2611.531819][T12832] kmalloc_node_trace+0x26/0xe0 [ 2611.542093][T12832] __get_vm_area_node+0x125/0x370 [ 2611.547171][T12832] __vmalloc_node_range+0x36f/0x1320 [ 2611.552505][T12832] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 2611.558095][T12832] ? mark_lock+0x94/0x320 [ 2611.562489][T12832] ? __lock_acquire+0x1336/0x7d80 [ 2611.567585][T12832] ? aa_get_newest_label+0xfd/0x5c0 [ 2611.572844][T12832] ? free_vm_area+0x50/0x50 [ 2611.577409][T12832] ? end_current_label_crit_section+0x170/0x170 [ 2611.583705][T12832] ? verify_lock_unused+0x140/0x140 [ 2611.588943][T12832] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 2611.594558][T12832] __vmalloc+0x7a/0x90 [ 2611.598688][T12832] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 2611.604315][T12832] bpf_prog_alloc_no_stats+0x46/0x430 [ 2611.609767][T12832] bpf_prog_alloc+0x3d/0x1a0 [ 2611.614403][T12832] bpf_prog_load+0x6b2/0x1610 [ 2611.619157][T12832] ? map_freeze+0x420/0x420 [ 2611.623702][T12832] ? __might_fault+0xaa/0x120 [ 2611.628407][T12832] ? __lock_acquire+0x7d80/0x7d80 [ 2611.633468][T12832] ? file_end_write+0x159/0x250 [ 2611.638351][T12832] ? __might_fault+0xaa/0x120 [ 2611.643064][T12832] ? __might_fault+0xc6/0x120 [ 2611.647766][T12832] ? __might_fault+0xaa/0x120 [ 2611.652490][T12832] ? bpf_lsm_bpf+0x9/0x10 [ 2611.656900][T12832] ? security_bpf+0x7e/0xa0 [ 2611.661440][T12832] __sys_bpf+0x5ba/0x890 [ 2611.665719][T12832] ? bpf_link_show_fdinfo+0x560/0x560 [ 2611.671145][T12832] ? lock_chain_count+0x20/0x20 [ 2611.676038][T12832] __x64_sys_bpf+0x7c/0x90 [ 2611.680485][T12832] do_syscall_64+0x55/0xb0 [ 2611.684941][T12832] ? clear_bhb_loop+0x40/0x90 [ 2611.689648][T12832] ? clear_bhb_loop+0x40/0x90 [ 2611.694355][T12832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2611.700299][T12832] RIP: 0033:0x7f149039e159 [ 2611.704743][T12832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2611.724460][T12832] RSP: 002b:00007f1491189028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2611.732906][T12832] RAX: ffffffffffffffda RBX: 00007f1490625fa0 RCX: 00007f149039e159 [ 2611.740903][T12832] RDX: 000000000000004c RSI: 0000200000000900 RDI: 0000000000000005 [ 2611.748899][T12832] RBP: 00007f1491189090 R08: 0000000000000000 R09: 0000000000000000 [ 2611.756919][T12832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2611.764913][T12832] R13: 00007f1490626038 R14: 00007f1490625fa0 R15: 00007ffeab9854c8 [ 2611.772925][T12832] [ 2611.796269][T12832] syz.0.12970: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 2611.816717][T12832] CPU: 0 PID: 12832 Comm: syz.0.12970 Not tainted syzkaller #0 [ 2611.824319][T12832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2611.834429][T12832] Call Trace: [ 2611.837744][T12832] [ 2611.840713][T12832] dump_stack_lvl+0x18c/0x250 [ 2611.845445][T12832] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2611.851650][T12832] ? show_regs_print_info+0x20/0x20 [ 2611.856972][T12832] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2611.863186][T12832] ? dump_stack+0x9/0x20 [ 2611.867483][T12832] warn_alloc+0x246/0x340 [ 2611.871853][T12832] ? __get_vm_area_node+0x125/0x370 [ 2611.877121][T12832] ? zone_watermark_ok_safe+0x230/0x230 [ 2611.882721][T12832] ? rcu_is_watching+0x15/0xb0 [ 2611.887553][T12832] ? __get_vm_area_node+0x356/0x370 [ 2611.892814][T12832] __vmalloc_node_range+0x394/0x1320 [ 2611.898157][T12832] ? mark_lock+0x94/0x320 [ 2611.902536][T12832] ? __lock_acquire+0x1336/0x7d80 [ 2611.907620][T12832] ? aa_get_newest_label+0xfd/0x5c0 [ 2611.912871][T12832] ? free_vm_area+0x50/0x50 [ 2611.917416][T12832] ? end_current_label_crit_section+0x170/0x170 [ 2611.923713][T12832] ? verify_lock_unused+0x140/0x140 [ 2611.928958][T12832] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 2611.934543][T12832] __vmalloc+0x7a/0x90 [ 2611.938657][T12832] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 2611.944234][T12832] bpf_prog_alloc_no_stats+0x46/0x430 [ 2611.949648][T12832] bpf_prog_alloc+0x3d/0x1a0 [ 2611.954290][T12832] bpf_prog_load+0x6b2/0x1610 [ 2611.959038][T12832] ? map_freeze+0x420/0x420 [ 2611.963585][T12832] ? __might_fault+0xaa/0x120 [ 2611.968381][T12832] ? __lock_acquire+0x7d80/0x7d80 [ 2611.973450][T12832] ? file_end_write+0x159/0x250 [ 2611.978373][T12832] ? __might_fault+0xaa/0x120 [ 2611.983089][T12832] ? __might_fault+0xc6/0x120 [ 2611.987813][T12832] ? __might_fault+0xaa/0x120 [ 2611.992636][T12832] ? bpf_lsm_bpf+0x9/0x10 [ 2611.997014][T12832] ? security_bpf+0x7e/0xa0 [ 2612.001581][T12832] __sys_bpf+0x5ba/0x890 [ 2612.005892][T12832] ? bpf_link_show_fdinfo+0x560/0x560 [ 2612.011344][T12832] ? lock_chain_count+0x20/0x20 [ 2612.016263][T12832] __x64_sys_bpf+0x7c/0x90 [ 2612.020776][T12832] do_syscall_64+0x55/0xb0 [ 2612.025237][T12832] ? clear_bhb_loop+0x40/0x90 [ 2612.029960][T12832] ? clear_bhb_loop+0x40/0x90 [ 2612.034690][T12832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2612.040661][T12832] RIP: 0033:0x7f149039e159 [ 2612.045114][T12832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2612.064764][T12832] RSP: 002b:00007f1491189028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2612.073244][T12832] RAX: ffffffffffffffda RBX: 00007f1490625fa0 RCX: 00007f149039e159 [ 2612.081269][T12832] RDX: 000000000000004c RSI: 0000200000000900 RDI: 0000000000000005 [ 2612.089278][T12832] RBP: 00007f1491189090 R08: 0000000000000000 R09: 0000000000000000 [ 2612.097291][T12832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2612.105312][T12832] R13: 00007f1490626038 R14: 00007f1490625fa0 R15: 00007ffeab9854c8 [ 2612.113354][T12832] [ 2612.140230][T12832] Mem-Info: [ 2612.148188][T12832] active_anon:9736 inactive_anon:0 isolated_anon:0 [ 2612.148188][T12832] active_file:19728 inactive_file:40948 isolated_file:0 [ 2612.148188][T12832] unevictable:768 dirty:89 writeback:0 [ 2612.148188][T12832] slab_reclaimable:11100 slab_unreclaimable:93059 [ 2612.148188][T12832] mapped:26333 shmem:1364 pagetables:542 [ 2612.148188][T12832] sec_pagetables:0 bounce:0 [ 2612.148188][T12832] kernel_misc_reclaimable:0 [ 2612.148188][T12832] free:1335207 free_pcp:8704 free_cma:0 [ 2612.198674][T12832] Node 0 active_anon:38944kB inactive_anon:0kB active_file:78912kB inactive_file:163588kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105332kB dirty:356kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10596kB pagetables:2168kB sec_pagetables:0kB all_unreclaimable? no [ 2612.238323][T12832] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2612.270678][T12832] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2612.298875][T12832] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2612.305168][T12832] Node 0 DMA32 free:1429108kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:38904kB inactive_anon:0kB active_file:78912kB inactive_file:162768kB unevictable:1536kB writepending:356kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:15940kB local_pcp:3576kB free_cma:0kB [ 2612.343146][T12832] lowmem_reserve[]: 0 0 0 0 0 [ 2612.348128][T12832] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2612.375649][T12832] lowmem_reserve[]: 0 0 0 0 0 [ 2612.380533][T12832] Node 1 Normal free:3896352kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18584kB local_pcp:9452kB free_cma:0kB [ 2612.411130][T12832] lowmem_reserve[]: 0 0 0 0 0 [ 2612.416256][T12832] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2612.429790][T12832] Node 0 DMA32: 3009*4kB (UME) 1130*8kB (UME) 1440*16kB (ME) 1441*32kB (UME) 1764*64kB (UME) 1026*128kB (UME) 444*256kB (UM) 192*512kB (UM) 82*1024kB (UME) 14*2048kB (UME) 188*4096kB (UM) = 1429108kB [ 2612.451674][T12832] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2612.463850][T12832] Node 1 Normal: 172*4kB (UE) 50*8kB (UME) 6*16kB (ME) 58*32kB (UME) 19*64kB (UE) 7*128kB (UME) 2*256kB (UE) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3896352kB [ 2612.481702][T12832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2612.491376][T12832] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2612.500891][T12832] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2612.512078][T12832] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2612.521572][T12832] 62040 total pagecache pages [ 2612.526433][T12832] 0 pages in swap cache [ 2612.530614][T12832] Free swap = 124728kB [ 2612.534936][T12832] Total swap = 124996kB [ 2612.539215][T12832] 2097051 pages RAM [ 2612.543088][T12832] 0 pages HighMem/MovableOnly [ 2612.547985][T12832] 416965 pages reserved [ 2612.552260][T12832] 0 pages cma reserved [ 2626.605125][T25091] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2626.615715][T25091] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2626.624014][T25091] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2626.633603][T25091] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2626.645863][T25091] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2626.653239][T25091] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2627.634051][T29691] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2627.644672][T29691] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2627.652543][T29691] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2627.660747][T29691] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2627.670775][T29691] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2627.678432][T29691] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2628.682802][T29691] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2628.691934][T29691] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2628.701996][T29691] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2628.710222][T29691] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2628.719305][T29691] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2628.726663][T29691] Bluetooth: hci4: command tx timeout [ 2628.733104][ T8350] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2629.769513][T25091] Bluetooth: hci5: command tx timeout [ 2630.815828][ T8350] Bluetooth: hci4: command tx timeout [ 2630.815906][T25091] Bluetooth: hci6: command tx timeout [ 2631.855609][T25091] Bluetooth: hci5: command tx timeout [ 2632.885947][T25091] Bluetooth: hci6: command tx timeout [ 2632.891462][T25091] Bluetooth: hci4: command tx timeout [ 2633.925554][T25091] Bluetooth: hci5: command tx timeout [ 2634.965617][T25091] Bluetooth: hci4: command tx timeout [ 2634.965985][ T8350] Bluetooth: hci6: command tx timeout [ 2636.005600][ T8350] Bluetooth: hci5: command tx timeout [ 2637.045553][ T8350] Bluetooth: hci6: command tx timeout [ 2652.089886][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.096523][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2663.162009][T25091] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2663.171042][T25091] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2663.178904][T25091] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2663.188720][T25091] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2663.197134][T25091] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2663.204459][T25091] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2665.285663][T25091] Bluetooth: hci7: command tx timeout [ 2667.367294][T25091] Bluetooth: hci7: command tx timeout [ 2669.455607][T25091] Bluetooth: hci7: command tx timeout [ 2671.525599][T25091] Bluetooth: hci7: command tx timeout [ 2674.645577][ T8350] Bluetooth: hci3: command 0x0406 tx timeout [ 2687.190501][ T8350] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2687.209235][ T8350] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2687.218011][ T8350] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2687.227054][ T8350] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2687.234797][ T8350] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2687.242578][ T8350] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2688.184261][T25091] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2688.194233][T25091] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2688.203082][T25091] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2688.212657][T25091] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2688.220659][T25091] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2688.228350][T25091] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2689.221935][ T8350] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2689.230908][ T8350] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2689.240283][ T8350] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2689.250287][ T8350] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2689.259444][ T8350] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 2689.267722][ T8350] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2689.285822][T25091] Bluetooth: hci8: command tx timeout [ 2690.325706][T25091] Bluetooth: hci9: command tx timeout [ 2691.285620][T25091] Bluetooth: hci10: command tx timeout [ 2691.365623][T25091] Bluetooth: hci8: command tx timeout [ 2692.405727][T25091] Bluetooth: hci9: command tx timeout [ 2693.365525][T25091] Bluetooth: hci10: command tx timeout [ 2693.455620][T25091] Bluetooth: hci8: command tx timeout [ 2694.485611][T25091] Bluetooth: hci9: command tx timeout [ 2695.447372][T25091] Bluetooth: hci10: command tx timeout [ 2695.525728][T25091] Bluetooth: hci8: command tx timeout [ 2696.576399][T25091] Bluetooth: hci9: command tx timeout [ 2697.525639][T25091] Bluetooth: hci10: command tx timeout [ 2713.529448][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.536061][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2723.737075][ T8350] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2723.748182][ T8350] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2723.757747][ T8350] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2723.772350][T12878] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2723.780777][T12878] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 2723.789698][T12878] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2725.850283][T12878] Bluetooth: hci0: command 0x0406 tx timeout [ 2725.850312][T25091] Bluetooth: hci11: command tx timeout [ 2727.925842][ T8350] Bluetooth: hci11: command tx timeout [ 2730.007457][ T8350] Bluetooth: hci11: command tx timeout [ 2732.085802][ T8350] Bluetooth: hci11: command tx timeout [ 2747.783606][T25091] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2747.802968][T25091] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2747.811663][T25091] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2747.819891][T25091] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2747.828498][T25091] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 2747.837944][T25091] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2748.746293][T25091] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2748.756792][T25091] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2748.765074][T25091] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2748.774134][T25091] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2748.783900][T25091] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 2748.791848][T25091] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2749.266431][T25091] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2749.275844][T25091] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2749.283999][T25091] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2749.296945][T25091] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2749.304826][T25091] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 2749.312481][T25091] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 2749.925598][T12856] Bluetooth: hci12: command tx timeout [ 2750.885656][T12856] Bluetooth: hci13: command tx timeout [ 2751.365662][T12856] Bluetooth: hci14: command tx timeout [ 2751.449079][T12856] Bluetooth: hci5: command 0x0406 tx timeout [ 2751.455852][T12856] Bluetooth: hci4: command 0x0406 tx timeout [ 2751.462976][T29691] Bluetooth: hci6: command 0x0406 tx timeout [ 2752.005571][T25091] Bluetooth: hci12: command tx timeout [ 2752.965676][T25091] Bluetooth: hci13: command tx timeout [ 2753.445904][T25091] Bluetooth: hci14: command tx timeout [ 2754.087572][T25091] Bluetooth: hci12: command tx timeout [ 2755.045552][T25091] Bluetooth: hci13: command tx timeout [ 2755.525744][T25091] Bluetooth: hci14: command tx timeout [ 2756.165557][T25091] Bluetooth: hci12: command tx timeout [ 2757.125616][T25091] Bluetooth: hci13: command tx timeout [ 2757.605793][T25091] Bluetooth: hci14: command tx timeout [ 2761.525802][ T28] INFO: task dhcpcd:5436 blocked for more than 143 seconds. [ 2761.533298][ T28] Not tainted syzkaller #0 [ 2761.538624][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2761.547408][ T28] task:dhcpcd state:D stack:21032 pid:5436 ppid:5435 flags:0x00004002 [ 2761.557509][ T28] Call Trace: [ 2761.560830][ T28] [ 2761.563794][ T28] __schedule+0x15ae/0x4660 [ 2761.568443][ T28] ? lock_chain_count+0x20/0x20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2761.573334][ T28] ? asan.module_dtor+0x20/0x20 [ 2761.585626][ T28] ? __mutex_lock+0x66e/0xc80 [ 2761.590585][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 2761.605567][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2761.611771][ T28] schedule+0xbd/0x170 [ 2761.625428][ T28] schedule_preempt_disabled+0x13/0x20 [ 2761.630963][ T28] __mutex_lock+0x673/0xc80 [ 2761.645569][ T28] ? __kasan_kmalloc_large+0x8b/0xa0 [ 2761.650949][ T28] ? __mutex_lock+0x4d2/0xc80 [ 2761.665489][ T28] ? netlink_dump+0x77c/0xec0 [ 2761.670249][ T28] ? mutex_lock_nested+0x20/0x20 [ 2761.675239][ T28] ? __build_skb_around+0x245/0x3c0 [ 2761.695452][ T28] ? __alloc_skb+0x1b2/0x2c0 [ 2761.700129][ T28] netlink_dump+0x77c/0xec0 [ 2761.704693][ T28] ? netlink_lookup+0x200/0x200 [ 2761.725465][ T28] ? slab_free_freelist_hook+0x130/0x1a0 [ 2761.731174][ T28] ? netlink_recvmsg+0x5e7/0xe60 [ 2761.745430][ T28] ? kmem_cache_free+0xf8/0x290 [ 2761.750382][ T28] netlink_recvmsg+0x693/0xe60 [ 2761.755179][ T28] ? netlink_sendmsg+0xbf0/0xbf0 [ 2761.795443][ T28] ? aa_af_perm+0x330/0x330 [ 2761.800064][ T28] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 2761.813539][ T28] ? security_socket_recvmsg+0x89/0xb0 [ 2761.825449][ T28] ? netlink_sendmsg+0xbf0/0xbf0 [ 2761.830470][ T28] ____sys_recvmsg+0x2bd/0x5d0 [ 2761.835288][ T28] ? __sys_recvmsg_sock+0x50/0x50 [ 2761.845819][ T28] ? import_iovec+0x73/0xa0 [ 2761.850412][ T28] ___sys_recvmsg+0x214/0x590 [ 2761.855146][ T28] ? __sys_recvmsg+0x2a0/0x2a0 [ 2761.865455][ T28] __x64_sys_recvmsg+0x21e/0x2f0 [ 2761.871488][ T28] ? ___sys_recvmsg+0x590/0x590 [ 2761.886767][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 2761.892055][ T28] do_syscall_64+0x55/0xb0 [ 2761.896549][ T28] ? clear_bhb_loop+0x40/0x90 [ 2761.901283][ T28] ? clear_bhb_loop+0x40/0x90 [ 2761.906815][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2761.913060][ T28] RIP: 0033:0x7f17e094e407 [ 2761.917567][ T28] RSP: 002b:00007ffe10914510 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 2761.926153][ T28] RAX: ffffffffffffffda RBX: 00007f17e08c4740 RCX: 00007f17e094e407 [ 2761.934194][ T28] RDX: 0000000000000000 RSI: 00007ffe109145a0 RDI: 0000000000000011 [ 2761.942263][ T28] RBP: 00007ffe10914584 R08: 0000000000000000 R09: 0000000000000000 [ 2761.950383][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001ee4 [ 2761.958705][ T28] R13: 00007ffe10914590 R14: 00007ffe10914680 R15: 0000000000000000 [ 2761.966784][ T28] [ 2761.969882][ T28] INFO: task kworker/u4:41:6673 blocked for more than 143 seconds. [ 2761.978017][ T28] Not tainted syzkaller #0 [ 2761.982999][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2761.991857][ T28] task:kworker/u4:41 state:D stack:17576 pid:6673 ppid:2 flags:0x00004000 [ 2762.001164][ T28] Workqueue: events_unbound linkwatch_event [ 2762.008089][ T28] Call Trace: [ 2762.011428][ T28] [ 2762.014717][ T28] __schedule+0x15ae/0x4660 [ 2762.019468][ T28] ? asan.module_dtor+0x20/0x20 [ 2762.024386][ T28] ? __mutex_lock+0x66e/0xc80 [ 2762.029184][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 2762.034689][ T28] ? kthread_data+0x4f/0xc0 [ 2762.039314][ T28] ? wq_worker_sleeping+0x63/0x240 [ 2762.044480][ T28] schedule+0xbd/0x170 [ 2762.048662][ T28] schedule_preempt_disabled+0x13/0x20 [ 2762.054192][ T28] __mutex_lock+0x673/0xc80 [ 2762.058820][ T28] ? __mutex_lock+0x4d2/0xc80 [ 2762.063541][ T28] ? linkwatch_event+0xe/0x60 [ 2762.070162][ T28] ? mutex_lock_nested+0x20/0x20 [ 2762.075178][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 2762.080574][ T28] ? process_scheduled_works+0x975/0x1600 [ 2762.094938][ T28] ? process_scheduled_works+0x975/0x1600 [ 2762.100952][ T28] linkwatch_event+0xe/0x60 [ 2762.105618][ T28] process_scheduled_works+0xa60/0x1600 [ 2762.111218][ T28] ? worker_attach_to_pool+0x370/0x370 [ 2762.117143][ T28] ? assign_work+0x3cc/0x5d0 [ 2762.121822][ T28] worker_thread+0xa5e/0xfe0 [ 2762.126531][ T28] kthread+0x2fa/0x390 [ 2762.130650][ T28] ? pr_cont_work+0x550/0x550 [ 2762.135438][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2762.140080][ T28] ret_from_fork+0x48/0x80 [ 2762.144540][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2762.149217][ T28] ret_from_fork_asm+0x11/0x20 [ 2762.154063][ T28] [ 2762.157286][ T28] INFO: task syz-executor:12685 blocked for more than 143 seconds. [ 2762.165220][ T28] Not tainted syzkaller #0 [ 2762.170343][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2762.180711][ T28] task:syz-executor state:D stack:22344 pid:12685 ppid:1 flags:0x00004006 [ 2762.190120][ T28] Call Trace: [ 2762.193439][ T28] [ 2762.196509][ T28] __schedule+0x15ae/0x4660 [ 2762.201075][ T28] ? stack_trace_snprint+0xf0/0xf0 [ 2762.206381][ T28] ? __stack_depot_save+0x1f/0x660 [ 2762.211568][ T28] ? asan.module_dtor+0x20/0x20 [ 2762.216570][ T28] ? __mutex_lock+0x66e/0xc80 [ 2762.221576][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 2762.227158][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2762.233364][ T28] ? mutex_spin_on_owner+0x7d/0x330 [ 2762.238711][ T28] schedule+0xbd/0x170 [ 2762.242834][ T28] schedule_preempt_disabled+0x13/0x20 [ 2762.248444][ T28] __mutex_lock+0x673/0xc80 [ 2762.253003][ T28] ? __mutex_lock+0x4d2/0xc80 [ 2762.257837][ T28] ? nsim_destroy+0x3f/0x180 [ 2762.262542][ T28] ? mutex_lock_nested+0x20/0x20 [ 2762.267595][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 2762.272936][ T28] nsim_destroy+0x3f/0x180 [ 2762.277513][ T28] __nsim_dev_port_del+0x14d/0x1b0 [ 2762.282686][ T28] nsim_dev_reload_destroy+0x283/0x480 [ 2762.288261][ T28] nsim_drv_remove+0x58/0x170 [ 2762.293012][ T28] ? nsim_bus_probe+0x20/0x20 [ 2762.297849][ T28] device_release_driver_internal+0x408/0x6f0 [ 2762.304013][ T28] bus_remove_device+0x43b/0x520 [ 2762.309064][ T28] ? bus_probe_device+0x260/0x260 [ 2762.314128][ T28] ? up_write+0x1be/0x410 [ 2762.318675][ T28] ? kernfs_remove_by_name_ns+0x117/0x150 [ 2762.324722][ T28] device_del+0x51f/0x910 [ 2762.329162][ T28] ? kill_device+0x160/0x160 [ 2762.333820][ T28] ? __virt_addr_valid+0x10c/0x380 [ 2762.339100][ T28] device_unregister+0x20/0xc0 [ 2762.343944][ T28] del_device_store+0x2b6/0x370 [ 2762.348910][ T28] ? del_port_store+0x170/0x170 [ 2762.353822][ T28] ? sysfs_kf_write+0x187/0x2a0 [ 2762.358807][ T28] ? sysfs_kf_read+0x360/0x360 [ 2762.363613][ T28] kernfs_fop_write_iter+0x3a4/0x520 [ 2762.369022][ T28] vfs_write+0x474/0x9a0 [ 2762.373396][ T28] ? file_end_write+0x250/0x250 [ 2762.378710][ T28] ? __fdget_pos+0x2ba/0x330 [ 2762.383343][ T28] ksys_write+0x151/0x260 [ 2762.388103][ T28] ? __ia32_sys_read+0x90/0x90 [ 2762.392912][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 2762.398528][ T28] do_syscall_64+0x55/0xb0 [ 2762.403014][ T28] ? clear_bhb_loop+0x40/0x90 [ 2762.407802][ T28] ? clear_bhb_loop+0x40/0x90 [ 2762.412676][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2762.418690][ T28] RIP: 0033:0x7fb306f5e98e [ 2762.423479][ T28] RSP: 002b:00007ffdba77cfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2762.432134][ T28] RAX: ffffffffffffffda RBX: 000055555f5ef500 RCX: 00007fb306f5e98e [ 2762.440187][ T28] RDX: 0000000000000001 RSI: 00007ffdba77d060 RDI: 0000000000000005 [ 2762.448254][ T28] RBP: 00007fb3070358ee R08: 0000000000000000 R09: 0000000000000000 [ 2762.456364][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2762.464392][ T28] R13: 00007ffdba77d060 R14: 00007fb307d54620 R15: 0000000000000003 [ 2762.472742][ T28] [ 2762.475882][ T28] INFO: task syz.3.12968:12830 blocked for more than 144 seconds. [ 2762.483726][ T28] Not tainted syzkaller #0 [ 2762.489165][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2762.498068][ T28] task:syz.3.12968 state:D stack:25928 pid:12830 ppid:6935 flags:0x00004004 [ 2762.507535][ T28] Call Trace: [ 2762.510971][ T28] [ 2762.513933][ T28] __schedule+0x15ae/0x4660 [ 2762.518549][ T28] ? __stack_depot_save+0x1f/0x660 [ 2762.523883][ T28] ? __kasan_kmalloc+0x8f/0xa0 [ 2762.529215][ T28] ? __kmalloc_node_track_caller+0xb4/0x230 [ 2762.535177][ T28] ? __netlink_dump_start+0x57c/0x7a0 [ 2762.540797][ T28] ? asan.module_dtor+0x20/0x20 [ 2762.545809][ T28] ? __mutex_lock+0x66e/0xc80 [ 2762.550526][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 2762.556064][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2762.562270][ T28] schedule+0xbd/0x170 [ 2762.566583][ T28] schedule_preempt_disabled+0x13/0x20 [ 2762.572109][ T28] __mutex_lock+0x673/0xc80 [ 2762.576776][ T28] ? __mutex_lock+0x4d2/0xc80 [ 2762.581497][ T28] ? netlink_dump+0x77c/0xec0 [ 2762.586315][ T28] ? mutex_lock_nested+0x20/0x20 [ 2762.591317][ T28] ? __build_skb_around+0x245/0x3c0 [ 2762.596635][ T28] ? __alloc_skb+0x1b2/0x2c0 [ 2762.601276][ T28] netlink_dump+0x77c/0xec0 [ 2762.606832][ T28] ? netlink_lookup+0x200/0x200 [ 2762.611745][ T28] ? netlink_lookup+0x30/0x200 [ 2762.617511][ T28] ? netlink_lookup+0x30/0x200 [ 2762.622369][ T28] __netlink_dump_start+0x57c/0x7a0 [ 2762.629046][ T28] rtnetlink_rcv_msg+0xe19/0xf90 [ 2762.634023][ T28] ? rtnetlink_rcv_msg+0x220/0xf90 [ 2762.639934][ T28] ? rtnl_getlink+0xd20/0xd20 [ 2762.644664][ T28] ? rtnetlink_bind+0x80/0x80 [ 2762.649675][ T28] ? rtnl_getlink+0xd20/0xd20 [ 2762.654410][ T28] ? ref_tracker_free+0x686/0x830 [ 2762.659543][ T28] netlink_rcv_skb+0x235/0x4c0 [ 2762.664349][ T28] ? rtnetlink_bind+0x80/0x80 [ 2762.669188][ T28] ? netlink_ack+0x1160/0x1160 [ 2762.674022][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 2762.679147][ T28] ? netlink_deliver_tap+0x2e/0x1b0 [ 2762.684405][ T28] netlink_unicast+0x7b1/0x930 [ 2762.689291][ T28] netlink_sendmsg+0x8d0/0xbf0 [ 2762.694152][ T28] ? netlink_getsockopt+0x590/0x590 [ 2762.699501][ T28] ? apparmor_socket_sendmsg+0x170/0x330 [ 2762.705189][ T28] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2762.712453][ T28] ? security_socket_sendmsg+0x80/0xa0 [ 2762.718816][ T28] ? netlink_getsockopt+0x590/0x590 [ 2762.724075][ T28] ____sys_sendmsg+0x61b/0x980 [ 2762.731285][ T28] ? __asan_memset+0x22/0x40 [ 2762.736037][ T28] ? __sys_sendmsg_sock+0x30/0x30 [ 2762.741126][ T28] ? __import_iovec+0x5f2/0x850 [ 2762.748119][ T28] ? import_iovec+0x73/0xa0 [ 2762.752726][ T28] ___sys_sendmsg+0x2a6/0x360 [ 2762.757681][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 2762.762771][ T28] ? __sys_sendmsg+0x2b0/0x2b0 [ 2762.769568][ T28] __se_sys_sendmsg+0x1d0/0x2c0 [ 2762.774472][ T28] ? __x64_sys_sendmsg+0x80/0x80 [ 2762.779598][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 2762.784841][ T28] do_syscall_64+0x55/0xb0 [ 2762.791311][ T28] ? clear_bhb_loop+0x40/0x90 [ 2762.796161][ T28] ? clear_bhb_loop+0x40/0x90 [ 2762.800896][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2762.809471][ T28] RIP: 0033:0x7fdf1699e159 [ 2762.813929][ T28] RSP: 002b:00007fdf177df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2762.822531][ T28] RAX: ffffffffffffffda RBX: 00007fdf16c26090 RCX: 00007fdf1699e159 [ 2762.830729][ T28] RDX: 0000000020000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 2762.839192][ T28] RBP: 00007fdf16a3506b R08: 0000000000000000 R09: 0000000000000000 [ 2762.847358][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2762.855505][ T28] R13: 00007fdf16c26128 R14: 00007fdf16c26090 R15: 00007ffdec05bdd8 [ 2762.865607][ T28] [ 2762.868714][ T28] INFO: task syz.1.12969:12835 blocked for more than 144 seconds. [ 2762.878554][ T28] Not tainted syzkaller #0 [ 2762.883535][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2762.892410][ T28] task:syz.1.12969 state:D stack:28744 pid:12835 ppid:8348 flags:0x00004004 [ 2762.901799][ T28] Call Trace: [ 2762.905118][ T28] [ 2762.908225][ T28] __schedule+0x15ae/0x4660 [ 2762.912849][ T28] ? asan.module_dtor+0x20/0x20 [ 2762.917866][ T28] ? __mutex_lock+0x66e/0xc80 [ 2762.922601][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 2762.928276][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2762.934859][ T28] schedule+0xbd/0x170 [ 2762.939031][ T28] schedule_preempt_disabled+0x13/0x20 [ 2762.944546][ T28] __mutex_lock+0x673/0xc80 [ 2762.949182][ T28] ? __mutex_lock+0x4d2/0xc80 [ 2762.953911][ T28] ? br_ioctl_stub+0x1a9/0xd50 [ 2762.959734][ T28] ? mutex_lock_nested+0x20/0x20 [ 2762.964730][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 2762.970313][ T28] br_ioctl_stub+0x1a9/0xd50 [ 2762.974960][ T28] ? rcu_is_watching+0x15/0xb0 [ 2762.980739][ T28] ? rcu_read_unlock+0xa0/0xa0 [ 2762.985611][ T28] ? trace_contention_end+0x39/0xe0 [ 2762.990855][ T28] ? __mutex_lock+0x30d/0xc80 [ 2762.995716][ T28] ? mutex_lock_nested+0x20/0x20 [ 2763.000706][ T28] ? rcu_read_unlock+0xa0/0xa0 [ 2763.005545][ T28] sock_ioctl+0x4d7/0x7e0 [ 2763.010061][ T28] ? sock_poll+0x3e0/0x3e0 [ 2763.014544][ T28] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2763.019635][ T28] ? security_file_ioctl+0x80/0xa0 [ 2763.024803][ T28] ? sock_poll+0x3e0/0x3e0 [ 2763.029331][ T28] __se_sys_ioctl+0xfd/0x170 [ 2763.033964][ T28] do_syscall_64+0x55/0xb0 [ 2763.038787][ T28] ? clear_bhb_loop+0x40/0x90 [ 2763.043493][ T28] ? clear_bhb_loop+0x40/0x90 [ 2763.048322][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2763.054346][ T28] RIP: 0033:0x7f1f87d9e159 [ 2763.058872][ T28] RSP: 002b:00007f1f88cd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2763.067449][ T28] RAX: ffffffffffffffda RBX: 00007f1f88026090 RCX: 00007f1f87d9e159 [ 2763.075511][ T28] RDX: 0000200000000080 RSI: 00000000000089a0 RDI: 000000000000000c [ 2763.084584][ T28] RBP: 00007f1f87e3506b R08: 0000000000000000 R09: 0000000000000000 [ 2763.092798][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2763.101574][ T28] R13: 00007f1f88026128 R14: 00007f1f88026090 R15: 00007ffd6f4f6e28 [ 2763.109660][ T28] [ 2763.112736][ T28] INFO: task syz.0.12972:12844 blocked for more than 144 seconds. [ 2763.120673][ T28] Not tainted syzkaller #0 [ 2763.132654][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2763.141847][ T28] task:syz.0.12972 state:D stack:26504 pid:12844 ppid:11621 flags:0x00004004 [ 2763.151260][ T28] Call Trace: [ 2763.154573][ T28] [ 2763.159553][ T28] __schedule+0x15ae/0x4660 [ 2763.164129][ T28] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2763.170391][ T28] ? asan.module_dtor+0x20/0x20 [ 2763.175308][ T28] ? __mutex_lock+0x66e/0xc80 [ 2763.180833][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 2763.186451][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2763.192751][ T28] schedule+0xbd/0x170 [ 2763.197085][ T28] schedule_preempt_disabled+0x13/0x20 [ 2763.202637][ T28] __mutex_lock+0x673/0xc80 [ 2763.209291][ T28] ? __mutex_lock+0x4d2/0xc80 [ 2763.214026][ T28] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 2763.219283][ T28] ? mutex_lock_nested+0x20/0x20 [ 2763.224331][ T28] rtnetlink_rcv_msg+0x7ed/0xf90 [ 2763.231306][ T28] ? rtnetlink_rcv_msg+0x220/0xf90 [ 2763.236628][ T28] ? rtnetlink_bind+0x80/0x80 [ 2763.241709][ T28] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2763.249756][ T28] ? lock_chain_count+0x20/0x20 [ 2763.254698][ T28] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2763.260831][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 2763.268046][ T28] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2763.273494][ T28] ? _local_bh_enable+0xa0/0xa0 [ 2763.278456][ T28] ? __dev_queue_xmit+0x272/0x37e0 [ 2763.283633][ T28] ? __dev_queue_xmit+0x1329/0x37e0 [ 2763.290849][ T28] ? __dev_queue_xmit+0x272/0x37e0 [ 2763.296091][ T28] ? ref_tracker_free+0x686/0x830 [ 2763.301182][ T28] ? __kasan_kmalloc_large+0x8b/0xa0 [ 2763.308559][ T28] netlink_rcv_skb+0x235/0x4c0 [ 2763.313391][ T28] ? rtnetlink_bind+0x80/0x80 [ 2763.318184][ T28] ? netlink_ack+0x1160/0x1160 [ 2763.323024][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 2763.330312][ T28] ? netlink_deliver_tap+0x2e/0x1b0 [ 2763.335658][ T28] netlink_unicast+0x7b1/0x930 [ 2763.340482][ T28] netlink_sendmsg+0x8d0/0xbf0 [ 2763.347476][ T28] ? netlink_getsockopt+0x590/0x590 [ 2763.352741][ T28] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2763.358494][ T28] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2763.363850][ T28] ? security_socket_sendmsg+0x80/0xa0 [ 2763.371460][ T28] sock_write_iter+0x2dc/0x420 [ 2763.376411][ T28] ? sock_read_iter+0x3f0/0x3f0 [ 2763.381345][ T28] ? common_file_perm+0x198/0x1f0 [ 2763.388405][ T28] vfs_write+0x474/0x9a0 [ 2763.392733][ T28] ? file_end_write+0x250/0x250 [ 2763.397786][ T28] ? __fget_files+0x3fc/0x460 [ 2763.402539][ T28] ? __fdget_pos+0x1d8/0x330 [ 2763.408053][ T28] ? ksys_write+0x74/0x260 [ 2763.412553][ T28] ksys_write+0x151/0x260 [ 2763.417229][ T28] ? __ia32_sys_read+0x90/0x90 [ 2763.422072][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 2763.427388][ T28] do_syscall_64+0x55/0xb0 [ 2763.431861][ T28] ? clear_bhb_loop+0x40/0x90 [ 2763.436800][ T28] ? clear_bhb_loop+0x40/0x90 [ 2763.441696][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2763.448803][ T28] RIP: 0033:0x7f149039e159 [ 2763.453259][ T28] RSP: 002b:00007f1491189028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2763.461786][ T28] RAX: ffffffffffffffda RBX: 00007f1490625fa0 RCX: 00007f149039e159 [ 2763.471656][ T28] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000003 [ 2763.479929][ T28] RBP: 00007f149043506b R08: 0000000000000000 R09: 0000000000000000 [ 2763.488864][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2763.496957][ T28] R13: 00007f1490626038 R14: 00007f1490625fa0 R15: 00007ffeab9854c8 [ 2763.504982][ T28] [ 2763.508150][ T28] [ 2763.508150][ T28] Showing all locks held in the system: [ 2763.516709][ T28] 1 lock held by khungtaskd/28: [ 2763.521602][ T28] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 2763.531709][ T28] 2 locks held by dhcpcd/5436: [ 2763.536558][ T28] #0: ffff88801ee5e690 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: netlink_dump+0xf8/0xec0 [ 2763.546300][ T28] #1: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0x77c/0xec0 [ 2763.555889][ T28] 2 locks held by getty/5532: [ 2763.560619][ T28] #0: ffff88814cb1e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2763.570523][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 2763.580744][ T28] 3 locks held by kworker/0:6/2427: [ 2763.586022][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 2763.597176][ T28] #1: ffffc90003137d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 2763.608448][ T28] #2: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 2763.619101][ T28] 4 locks held by kworker/u4:1/6616: [ 2763.624554][ T28] #0: ffff88801a25d138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 2763.635724][ T28] #1: ffffc90005357d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 2763.646388][ T28] #2: ffffffff8e3c3950 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x140/0xb00 [ 2763.656195][ T28] #3: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xf2/0xa00 [ 2763.666429][ T28] 3 locks held by kworker/u4:7/6637: [ 2763.671756][ T28] #0: ffff88802c983138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 2763.683491][ T28] #1: ffffc9000b927d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 2763.697369][ T28] #2: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 2763.707027][ T28] 3 locks held by kworker/u4:41/6673: [ 2763.712424][ T28] #0: ffff888017c71938 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 2763.724217][ T28] #1: ffffc9000bf17d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 2763.735344][ T28] #2: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 2763.746233][ T28] 3 locks held by kworker/1:1/7172: [ 2763.751467][ T28] #0: ffff888017c72538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 2763.765077][ T28] #1: ffffc9000494fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 2763.776336][ T28] #2: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90 [ 2763.786789][ T28] 7 locks held by syz-executor/12685: [ 2763.792196][ T28] #0: ffff88802cfec418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 2763.801182][ T28] #1: ffff888025476c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 2763.811038][ T28] #2: ffff888024746008 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 [ 2763.821232][ T28] #3: ffffffff8dcb7068 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 [ 2763.832851][ T28] #4: ffff88805f864130 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 2763.843561][ T28] #5: ffff88805f863250 (&devlink->lock_key#21){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x170 [ 2763.853957][ T28] #6: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x3f/0x180 [ 2763.863476][ T28] 2 locks held by syz.3.12968/12830: [ 2763.868897][ T28] #0: ffff88805093b690 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x7a0 [ 2763.879488][ T28] #1: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0x77c/0xec0 [ 2763.888603][ T28] 2 locks held by syz.1.12969/12835: [ 2763.894048][ T28] #0: ffffffff8e3b56e8 (br_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x4b4/0x7e0 [ 2763.903388][ T28] #1: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: br_ioctl_stub+0x1a9/0xd50 [ 2763.912695][ T28] 1 lock held by syz.0.12972/12844: [ 2763.918102][ T28] #0: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 2763.927704][ T28] 1 lock held by syz-executor/12846: [ 2763.933188][ T28] #0: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 2763.942725][ T28] 1 lock held by syz-executor/12851: [ 2763.948260][ T28] #0: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 2763.958270][ T28] 1 lock held by syz-executor/12854: [ 2763.963606][ T28] #0: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 2763.973271][ T28] 1 lock held by syz-executor/12858: [ 2763.978644][ T28] #0: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 2763.988208][ T28] 1 lock held by syz-executor/12864: [ 2763.993532][ T28] #0: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 2764.003412][ T28] 1 lock held by syz-executor/12869: [ 2764.009115][ T28] #0: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 2764.018808][ T28] 1 lock held by syz-executor/12872: [ 2764.024141][ T28] #0: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 2764.033925][ T28] 1 lock held by syz-executor/12875: [ 2764.039299][ T28] #0: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 2764.048849][ T28] 1 lock held by syz-executor/12880: [ 2764.054178][ T28] #0: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 2764.064042][ T28] 1 lock held by syz-executor/12884: [ 2764.069740][ T28] #0: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 2764.079847][ T28] 1 lock held by syz-executor/12887: [ 2764.085264][ T28] #0: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 2764.095144][ T28] [ 2764.097925][ T28] ============================================= [ 2764.097925][ T28] [ 2764.106581][ T28] NMI backtrace for cpu 0 [ 2764.110963][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 2764.118218][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2764.128321][ T28] Call Trace: [ 2764.131654][ T28] [ 2764.134604][ T28] dump_stack_lvl+0x18c/0x250 [ 2764.139325][ T28] ? __wake_up_klogd+0xd9/0x100 [ 2764.144276][ T28] ? show_regs_print_info+0x20/0x20 [ 2764.149528][ T28] ? load_image+0x420/0x420 [ 2764.154094][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 2764.159083][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 2764.165298][ T28] ? load_image+0x420/0x420 [ 2764.169843][ T28] ? wq_watchdog_touch+0xef/0x170 [ 2764.174910][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2764.181059][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 2764.187096][ T28] watchdog+0xf59/0xfa0 [ 2764.191295][ T28] ? watchdog+0x1e1/0xfa0 [ 2764.195688][ T28] kthread+0x2fa/0x390 [ 2764.199798][ T28] ? hungtask_pm_notify+0x50/0x50 [ 2764.204859][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2764.209493][ T28] ret_from_fork+0x48/0x80 [ 2764.213946][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2764.218575][ T28] ret_from_fork_asm+0x11/0x20 [ 2764.223382][ T28] [ 2764.226863][ T28] Sending NMI from CPU 0 to CPUs 1: [ 2764.232139][ C1] NMI backtrace for cpu 1 [ 2764.232151][ C1] CPU: 1 PID: 6616 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 2764.232169][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2764.232180][ C1] Workqueue: netns cleanup_net [ 2764.232204][ C1] RIP: 0010:lock_acquire+0x149/0x420 [ 2764.232228][ C1] Code: 0f 85 09 02 00 00 41 83 3e 00 0f 85 17 01 00 00 43 c6 44 3c 08 00 48 c7 84 24 a0 00 00 00 00 00 00 00 9c 8f 84 24 a0 00 00 00 <4c> 8b b4 24 a0 00 00 00 43 c6 44 3c 08 f8 fa 48 c7 c7 c0 d9 ca 8a [ 2764.232243][ C1] RSP: 0018:ffffc90005357040 EFLAGS: 00000046 [ 2764.232257][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 3390b0c57e2e9600 [ 2764.232269][ C1] RDX: 0000000000000000 RSI: ffffffff8b1d3b80 RDI: ffffffff8b1d3b40 [ 2764.232281][ C1] RBP: ffffc90005357148 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 2764.232295][ C1] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: 1ffff92000a6ae14 [ 2764.232308][ C1] R13: ffffffff974cfa58 R14: ffff88802bd90ae4 R15: dffffc0000000000 [ 2764.232321][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2764.232336][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2764.232348][ C1] CR2: 0000559c4d07b000 CR3: 000000002f7d8000 CR4: 00000000003506e0 [ 2764.232364][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 2764.232375][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2764.232387][ C1] Call Trace: [ 2764.232393][ C1] [ 2764.232403][ C1] ? debug_objects_fill_pool+0xcc/0x790 [ 2764.232430][ C1] ? read_lock_is_recursive+0x20/0x20 [ 2764.232453][ C1] ? debug_object_activate+0x500/0x500 [ 2764.232480][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 2764.232503][ C1] ? debug_object_activate+0x6c/0x500 [ 2764.232526][ C1] ? _raw_spin_lock+0x40/0x40 [ 2764.232550][ C1] debug_object_activate+0x6c/0x500 [ 2764.232578][ C1] enqueue_hrtimer+0x34/0x380 [ 2764.232604][ C1] ? hrtimer_start_range_ns+0x8d2/0x1080 [ 2764.232625][ C1] hrtimer_start_range_ns+0xa6c/0x1080 [ 2764.232648][ C1] ? __asan_memset+0x22/0x40 [ 2764.232687][ C1] schedule_hrtimeout_range_clock+0x1b6/0x3d0 [ 2764.232710][ C1] ? hrtimer_nanosleep_restart+0x1d0/0x1d0 [ 2764.232729][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2764.232749][ C1] ? __remove_hrtimer+0x470/0x470 [ 2764.232771][ C1] ? read_tsc+0x9/0x20 [ 2764.232790][ C1] ? ktime_get+0x24b/0x280 [ 2764.232809][ C1] ? usleep_range_state+0xc5/0x1b0 [ 2764.232828][ C1] usleep_range_state+0x127/0x1b0 [ 2764.232847][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2764.232872][ C1] ? schedule_timeout_idle+0x90/0x90 [ 2764.232896][ C1] napi_disable+0x105/0x1f0 [ 2764.232916][ C1] ? napi_watchdog+0x130/0x130 [ 2764.232931][ C1] ? queue_delayed_work_on+0x1a1/0x200 [ 2764.232951][ C1] ? delayed_work_timer_fn+0x80/0x80 [ 2764.232971][ C1] veth_napi_del_range+0xb7/0x210 [ 2764.232991][ C1] ? veth_open+0x230/0x230 [ 2764.233016][ C1] veth_close+0x17a/0x1a0 [ 2764.233041][ C1] __dev_close_many+0x1d5/0x2b0 [ 2764.233066][ C1] ? dev_close_many+0x410/0x410 [ 2764.233095][ C1] dev_close_many+0x220/0x410 [ 2764.233119][ C1] ? __dev_open+0x430/0x430 [ 2764.233140][ C1] ? batadv_hardif_disable_interface+0x57b/0xfb0 [ 2764.233277][ C1] unregister_netdevice_many_notify+0x4bf/0x1910 [ 2764.233324][ C1] ? unregister_netdevice_many+0x20/0x20 [ 2764.233349][ C1] ? unregister_netdevice_queue+0x180/0x330 [ 2764.233372][ C1] ? list_netdevice+0x730/0x730 [ 2764.233398][ C1] ? vxcan_newlink+0x600/0x600 [ 2764.233426][ C1] default_device_exit_batch+0x962/0xa00 [ 2764.233457][ C1] ? __might_sleep+0xe0/0xe0 [ 2764.233483][ C1] ? netdev_exit+0xc0/0xc0 [ 2764.233506][ C1] ? rdma_dev_init_net+0x280/0x280 [ 2764.233532][ C1] ? netdev_exit+0xc0/0xc0 [ 2764.233561][ C1] cleanup_net+0x785/0xb00 [ 2764.233589][ C1] ? ops_free_list+0x3b0/0x3b0 [ 2764.233612][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2764.233632][ C1] ? process_scheduled_works+0x975/0x1600 [ 2764.233654][ C1] ? process_scheduled_works+0x975/0x1600 [ 2764.233677][ C1] process_scheduled_works+0xa60/0x1600 [ 2764.233714][ C1] ? worker_attach_to_pool+0x370/0x370 [ 2764.233740][ C1] ? assign_work+0x3cc/0x5d0 [ 2764.233764][ C1] worker_thread+0xa5e/0xfe0 [ 2764.233800][ C1] kthread+0x2fa/0x390 [ 2764.233817][ C1] ? pr_cont_work+0x550/0x550 [ 2764.233838][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2764.233855][ C1] ret_from_fork+0x48/0x80 [ 2764.233876][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2764.233893][ C1] ret_from_fork_asm+0x11/0x20 [ 2764.233924][ C1] [ 2764.676018][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 2764.682921][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 2764.690214][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2764.700306][ T28] Call Trace: [ 2764.703643][ T28] [ 2764.706630][ T28] dump_stack_lvl+0x18c/0x250 [ 2764.711360][ T28] ? show_regs_print_info+0x20/0x20 [ 2764.716614][ T28] ? load_image+0x420/0x420 [ 2764.721175][ T28] panic+0x2ca/0x720 [ 2764.725113][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 2764.729667][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 2764.735270][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 2764.740696][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 2764.746915][ T28] watchdog+0xf98/0xfa0 [ 2764.751141][ T28] ? watchdog+0x1e1/0xfa0 [ 2764.755531][ T28] kthread+0x2fa/0x390 [ 2764.759642][ T28] ? hungtask_pm_notify+0x50/0x50 [ 2764.764706][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2764.769325][ T28] ret_from_fork+0x48/0x80 [ 2764.773810][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2764.778437][ T28] ret_from_fork_asm+0x11/0x20 [ 2764.783263][ T28] [ 2764.786899][ T28] Kernel Offset: disabled [ 2764.791271][ T28] Rebooting in 86400 seconds..