last executing test programs: 21.382932212s ago: executing program 2 (id=4167): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYRES64=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000580)=r2}, 0x20) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1d, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@u}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ldst={0x0, 0x3, 0x6, 0x9, 0xb, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0xfffffffa, 0x1b, &(0x7f0000000240)=""/27, 0x41000, 0x2, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xf, 0x5b, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000540)=[r3], &(0x7f0000000680)=[{0x5, 0x1, 0x8, 0x3}, {0x0, 0x2, 0x8, 0x1}], 0x10, 0x47f}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r7, 0x0, '\x00', 0x0, r6, 0x0, 0x5}, 0x50) 20.930173704s ago: executing program 2 (id=4170): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839fe8b", 0x7}], 0x1}, 0x20000000) perf_event_open(&(0x7f0000000380)={0x0, 0xffffffffffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffff7fe, 0x0, 0xffffffffffffffff}, 0x0, 0xb, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x22, 0x2, 0x21) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x61}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfdef) 20.780706704s ago: executing program 0 (id=4171): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000100)=""/79, 0x4f}, {&(0x7f0000001380)=""/4042, 0xfca}, {&(0x7f0000000f80)=""/214, 0xd6}, {&(0x7f00000003c0)=""/143, 0x8f}, {&(0x7f0000000b00)=""/185, 0xb9}, {&(0x7f0000000bc0)=""/165, 0xa5}, {&(0x7f0000000c80)=""/240, 0xf0}, {&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000d80)=""/120, 0x78}], 0x9}, 0x2000) recvmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 20.552802171s ago: executing program 0 (id=4172): sendmsg$sock(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x44801) (async) r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0xebff, @dev}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000540)="83ac6f4b9a2ffa25922fee4db5d86075d7965b13", 0xffeb}], 0x2}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040) (async) r2 = socket$kcm(0x10, 0x2, 0x4) (async) r3 = socket$kcm(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x6}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r4, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@map=r8, r7, 0x2f}, 0x20) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x8, &(0x7f00000001c0)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x27, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000340)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x5, 0x80000001, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, r8, r9], 0x0, 0x10, 0x7ff}, 0x94) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010006080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x8084) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f00000002c0)=""/38, 0x26}], 0x2}, 0x1f00) recvmsg(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000008c0)=""/238, 0xee}, {0x0}], 0x2, &(0x7f0000000bc0)=""/23, 0x17}, 0x2000) (async) close(r10) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001d00)={@map, 0xffffffffffffffff, 0xa}, 0x20) (async) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$TUNSETFILTEREBPF(r12, 0x800454e1, &(0x7f0000000140)) close(r3) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000180)=r12, 0x4) 20.145529013s ago: executing program 1 (id=4175): perf_event_open(&(0x7f0000000380)={0x0, 0xffffffffffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffff7fe, 0x0, 0xffffffffffffffff}, 0x0, 0xb, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) 20.067824839s ago: executing program 1 (id=4176): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x4, r0, 0xd55160605ad1493f) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x18, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) sendmsg(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1, &(0x7f00000007c0)=[{0x98, 0x10c, 0x6, "ea65fa6165e292f527ce92e2a9f3557f85547c9f9f196819f13feabebd317eb120bb62093ae0d9a1e0b4977343c3de21bdbd73149f53d046b264beb9dc601d564cceb4bca631a87f0bf2fbc40e0a6652da5fafda8555a73401c4e2f62b1b67ef794538da5e7851811a46254ab3169523ed2855b12e6a060ec2b170be56451d98071adc103a"}, {0xc0, 0x0, 0x2, "7f772189a11a1c0a4e71c6d2308800fcea608b8b664d30066eceb01355c497793c26b2ee9754de39731e7c7f9cdd621aee695325dcccdcccb1436809955ab037ed438b0a4fb40d420e4c67228cf3af13cd7cdf8fbde3d9a29416e922846b3a80a775294ffc4040d734fa9cf230e8007781dfcecdd7bb9fe73eb9d27162cbfa2b5b63e4d71d52c9ba5c51599283bb137e2919fdbd047982bc4f4aea7f2f8d606d946f5322cda62254f5ae"}, {0xf8, 0xff, 0x8, "05ca0ef2bd93102d758dd6be7c6bcdda4b330e9778bd8cb8e083a152ff150a809d41963508aff84a3cf16517ccc94d962c60566905f13b6137f836250cfbaf444ffa371b480f5f3981f60eba15f1fbd3a0b3269f73ea920b1b0e53608bc53efb72717a2a3da690a3913c78831e0254df0639a19993856fd65c768211c1cfc1ac53b1565ec9bfa48cf5cdb6ff2017d03343af340284a6c7d43d9e6778c6a64e5654959a840101d68665cc039f0ffa2c02c1975ddfff51e019253e685aa0fafbf072bfe6fb1aa13725a29c8744c59230c8486e6a4e9b4042f757f364a86378fa262a3911c5f72bfb58"}, {0xd8, 0x10e, 0x9, "86cf02dc4cff7b231b3ae9059af6a01fb3b1b85155c4441dc19518da8838245ffec30119c6f1416c130c3d35ff41f1197e2471dc2c54f2392eaa6bf7536e51ada3ee76e0f7c9adc9cf5c1ff56c4ac55fcbf6f7b3b9f0f8a92cb5854fabcb60479a7bde93aeebae7e50e4e67bbe2de6e16c72fd37547056590e801cd77552e19654d6f94c5eeb4da91a93c384cb333f2cd5d06e052115b40fdc3d9310aac7390c4930c04b6c83e1ec88597ebc15880167c16b61a2076056328ad782502d8e2b75485d082f"}, {0x30, 0xff, 0x5, "49374eda29e6dd637ab67f9a409006db69a15e0d94fab1d35830"}], 0x358}, 0x4000050) socket$kcm(0x29, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r3, &(0x7f0000000400), 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000000000000", @ANYBLOB="ac141410e0000001000000002c0000000000000000000004"], 0x50}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x74000000, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) 19.933179176s ago: executing program 2 (id=4177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/13], 0x48) socket$kcm(0x10, 0x2, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x86, &(0x7f0000002600)}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000048c0)=@bloom_filter={0x1e, 0x0, 0x7, 0x5, 0x0, 0x1}, 0x50) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={r6, r3, 0x0, 0x0, 0x0}, 0x30) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@bloom_filter={0x1e, 0x6, 0xa, 0x4, 0x40800, r5, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0xc}, 0x50) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r8, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000800)=[0x0, 0x0], 0x0, 0x51, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x63, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0x20, &(0x7f0000000d40)={&(0x7f0000000b80)=""/169, 0xa9, 0x0, &(0x7f0000000c40)=""/209, 0xd1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa8}, [@exit, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000900)='GPL\x00', 0x101, 0x8d, &(0x7f0000000680)=""/141, 0x40f00, 0x26, '\x00', r9, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000b40)={0x5, 0x20b, 0x3, 0xff}, 0x10, r10, 0xffffffffffffffff, 0x5, &(0x7f0000000e80), &(0x7f0000000e80)=[{0x3, 0x2, 0xf, 0x9}, {0x4, 0x5, 0x7, 0x2}, {0x5, 0x5, 0x9, 0x3}, {0x5, 0x2, 0x7, 0x5}, {0x5, 0x4, 0xd, 0x4}], 0x10, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x35, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xd0a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x8b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x5, 0xf9, &(0x7f0000000340)=""/249, 0x41100, 0x1, '\x00', 0x0, @fallback=0x38, r2, 0x8, &(0x7f00000005c0)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, r10, r1, 0x5, &(0x7f0000000600)=[r0], &(0x7f0000000640)=[{0x3, 0x1, 0x6, 0x5}, {0x3, 0x1, 0xd, 0x7}, {0x1, 0x2, 0xd, 0x1}, {0x3, 0x1, 0xc, 0x6}, {0x2, 0x3, 0x2, 0x4}], 0x10, 0x4}, 0x94) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@map, 0xffffffffffffffff, 0x14, 0x2019}, 0x20) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x2, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r11, &(0x7f0000000280), 0x0}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x31}, 0x94) (async) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000f01000000648c2594f91c24fc60", 0x14}], 0x1, 0x0, 0x0, 0x1400}, 0x0) 19.932824596s ago: executing program 3 (id=4178): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000feb70300000000cab38500000005000000bf0900000000000055090100000000009500000000000000bf020000000000007baa00fe00000000b5090800fffffff07baaf0ff00000000bf8700000000000036070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004602010076000000bf98000000000c00be080000000000008500000007000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.905521522s ago: executing program 3 (id=4179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x240201, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000010c0)=ANY=[@ANYBLOB="1c0000001900599c6d0e00009bd028ef8020ab0700140005"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xc, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRESHEX=r0, @ANYRES64=r2], &(0x7f00000010c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x90ac33d9d53e1b16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000740)={'veth1_macvtap\x00', @random='C\x00'}) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3}, 0x10c002, 0x8, 0x8, 0x2, 0x6, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000001700000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00ef00850000009b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800003, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r3, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000181ade440c0000181100000008000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r10}, 0x94) r11 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r11, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24004001) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x25, &(0x7f00000002c0)=r12, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f0000000600)=""/10, 0xa, 0x0, &(0x7f0000000640)=""/1, 0x1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x13, 0x17, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002060000f8000000cb0c00001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000380000085000000060000002d7a0c00ffffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186400000d0000000000000000020000035703000101000018150000", @ANYRES32=r4, @ANYBLOB="000000000000000085100000fcffffff9500000000000000"], &(0x7f0000000300)='GPL\x00', 0x6, 0x7f, &(0x7f0000000340)=""/127, 0x40f00, 0x36, '\x00', r10, @fallback=0xc, r12, 0x8, &(0x7f0000000580)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0xa, 0xb, 0x1}, 0x10, r13, r7, 0x2, &(0x7f0000000800)=[r4, r4], &(0x7f0000000840)=[{0x3, 0x3, 0xe, 0x2}, {0x4, 0x1, 0xa, 0xb}], 0x10, 0x3}, 0x94) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) 19.803438512s ago: executing program 1 (id=4180): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000100)=""/79, 0x4f}, {&(0x7f0000001380)=""/4042, 0xfca}, {&(0x7f0000000f80)=""/214, 0xd6}, {0x0}, {&(0x7f00000003c0)=""/143, 0x8f}, {&(0x7f0000000b00)=""/185, 0xb9}, {&(0x7f0000000bc0)=""/165, 0xa5}, {&(0x7f0000000c80)=""/240, 0xf0}, {&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000d80)=""/120, 0x78}], 0xa}, 0x2000) recvmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 19.711625161s ago: executing program 2 (id=4181): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x13, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000540)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x7, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000005c0)=[{0x5, 0x5, 0x5, 0x4}, {0x2, 0x1, 0x7, 0x8}, {0x1, 0x4, 0xb, 0xc}], 0x10, 0x5}, 0x94) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300060023000000000000000000000000ac1414aa2c"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x300, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000000000008400fe804100"/32], 0x20}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x280) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.613306641s ago: executing program 0 (id=4182): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000300)=""/240) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x9}, 0x8210, 0x4, 0x403, 0xaaf04684de878bda, 0x4e3, 0x6, 0x74, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001c000000850000001500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 19.531440007s ago: executing program 1 (id=4183): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b0d, &(0x7f0000001200)={'veth1_to_bridge\x00', @random="77280220e708"}) close(0x3) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7d}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="9b0cb39bf267ce9b5ddf3432ca97", 0x0, 0x14, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000040), 0x1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711208000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$inet(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) r7 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x113, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x890c, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r8, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r8, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 19.293438335s ago: executing program 0 (id=4184): perf_event_open(&(0x7f0000000380)={0x0, 0xffffffffffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffff7fe, 0x0, 0xffffffffffffffff}, 0x0, 0xb, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) 19.261649602s ago: executing program 0 (id=4185): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839fe8b", 0x7}], 0x1}, 0x20000000) perf_event_open(&(0x7f0000000380)={0x0, 0xffffffffffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffff7fe, 0x0, 0xffffffffffffffff}, 0x0, 0xb, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x22, 0x2, 0x21) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x61}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfdef) 17.111820227s ago: executing program 3 (id=4186): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x4060, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff3f8001800000000000000000000000010000095ffb00000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) 17.111023297s ago: executing program 3 (id=4187): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000280), 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.empty_time\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7f, 0x2}, 0x4044, 0x1, 0x0, 0x6, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x500e2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1fc0000, 0x5}, 0x0, 0x400000, 0x0, 0x0, 0x2, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x15, 0x0, 0x0, 0x1f000801}, 0x200000000000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) recvmsg$unix(r0, &(0x7f0000003000)={&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000000a00)=""/30, 0x1e}, {&(0x7f0000000a40)=""/38, 0x26}, {&(0x7f0000000a80)=""/221, 0xdd}, {&(0x7f0000000b80)=""/104, 0x68}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/226, 0xe2}, {&(0x7f0000001d00)=""/90, 0x5a}, {&(0x7f0000001d80)=""/28, 0x1c}, {&(0x7f0000001dc0)=""/15, 0xf}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0xa, &(0x7f0000002ec0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}, 0x122) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000001c0)=0x3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socket$kcm(0x11, 0x7, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940), 0x84) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r8, 0x0, 0xb7, 0x59, &(0x7f0000000200)="9ca99da622eea89731b9b52f4b13628a652ba41e6fafa6cb177bceafde834b410f6b2b342eeacf15398f784621b82d828fc96feb969a33c38e89efd583c100a5bcbc30a9438f94dca4d97b3f88223a67e748ba79c6be24fdf74d71c6fad7097cfada0c4fbb4fcf9996128b1175d80ef1eadd6f0f39e459fade1c820fb9e508c6f6fc6799503ba01b51c7f65ea9797370b675b31b1d4a622a63f8e39a2e3754bdf02c743707c6b0dba505dd76ab33cfe511d05b93a6f987", &(0x7f0000000700)=""/89, 0xf, 0x0, 0x67, 0x8f, &(0x7f0000000340)="3db92c6c59b200b9d1ae5f485aca863b40b96c14244c3b87173462b5bd1fd1606c7faef39b6bf25cecbc98deb0021b2b0537eae58d384675ca44d605a27e6d62f9dfb6cac3b3d388500957bf8cd33966512be73d918171d607314836707d3ae3251662250066ad", &(0x7f00000003c0)="48bb8d12447cc6728db1a1b8d27fc14ddedfa9eb4d3fed889120164a2cfb850219031a706f8ec8eef0046c574c1d1932d37cf7c9c7c5f79e9790227775992133dced267c109b23b366561deeed8b048f42b62a0d6d623559cbeedfa875ab1b70b8a921e31a064fd2f352471964f0915194a4f7a4270e29a78c413b3c36863dad1e69a2e2a740d627c5f2a9551ae389", 0x3, 0x0, 0x3}, 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@generic={&(0x7f0000000040)='./file0\x00', r2}, 0x18) 16.981814063s ago: executing program 1 (id=4188): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x4, r0, 0xd55160605ad1493f) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x18, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) sendmsg(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1, &(0x7f00000007c0)=[{0x98, 0x10c, 0x6, "ea65fa6165e292f527ce92e2a9f3557f85547c9f9f196819f13feabebd317eb120bb62093ae0d9a1e0b4977343c3de21bdbd73149f53d046b264beb9dc601d564cceb4bca631a87f0bf2fbc40e0a6652da5fafda8555a73401c4e2f62b1b67ef794538da5e7851811a46254ab3169523ed2855b12e6a060ec2b170be56451d98071adc103a"}, {0xc0, 0x0, 0x2, "7f772189a11a1c0a4e71c6d2308800fcea608b8b664d30066eceb01355c497793c26b2ee9754de39731e7c7f9cdd621aee695325dcccdcccb1436809955ab037ed438b0a4fb40d420e4c67228cf3af13cd7cdf8fbde3d9a29416e922846b3a80a775294ffc4040d734fa9cf230e8007781dfcecdd7bb9fe73eb9d27162cbfa2b5b63e4d71d52c9ba5c51599283bb137e2919fdbd047982bc4f4aea7f2f8d606d946f5322cda62254f5ae"}, {0xf8, 0xff, 0x8, "05ca0ef2bd93102d758dd6be7c6bcdda4b330e9778bd8cb8e083a152ff150a809d41963508aff84a3cf16517ccc94d962c60566905f13b6137f836250cfbaf444ffa371b480f5f3981f60eba15f1fbd3a0b3269f73ea920b1b0e53608bc53efb72717a2a3da690a3913c78831e0254df0639a19993856fd65c768211c1cfc1ac53b1565ec9bfa48cf5cdb6ff2017d03343af340284a6c7d43d9e6778c6a64e5654959a840101d68665cc039f0ffa2c02c1975ddfff51e019253e685aa0fafbf072bfe6fb1aa13725a29c8744c59230c8486e6a4e9b4042f757f364a86378fa262a3911c5f72bfb58"}, {0xd8, 0x10e, 0x9, "86cf02dc4cff7b231b3ae9059af6a01fb3b1b85155c4441dc19518da8838245ffec30119c6f1416c130c3d35ff41f1197e2471dc2c54f2392eaa6bf7536e51ada3ee76e0f7c9adc9cf5c1ff56c4ac55fcbf6f7b3b9f0f8a92cb5854fabcb60479a7bde93aeebae7e50e4e67bbe2de6e16c72fd37547056590e801cd77552e19654d6f94c5eeb4da91a93c384cb333f2cd5d06e052115b40fdc3d9310aac7390c4930c04b6c83e1ec88597ebc15880167c16b61a2076056328ad782502d8e2b75485d082f"}, {0x30, 0xff, 0x5, "49374eda29e6dd637ab67f9a409006db69a15e0d94fab1d35830"}], 0x358}, 0x4000050) socket$kcm(0x29, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r3, &(0x7f0000000400), 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000000000000", @ANYBLOB="ac141410e0000001000000002c0000000000000000000004"], 0x50}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x74000000, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) 16.618784237s ago: executing program 2 (id=4189): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000feb70300000000cab38500000005000000bf0900000000000055090100000000009500000000000000bf020000000000007baa00fe00000000b5090800fffffff07baaf0ff00000000bf8700000000000036070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004602010076000000bf98000000002000be080000000000008500000007000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.608396129s ago: executing program 0 (id=4190): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x6, 0x1000000000000000, 0x7, 0x4, 0x0, 0xffffff01, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x4b525, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x0, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={0x0, 0xffffffffffffffff, 0x2000000}, 0x18) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x8, 0x4, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000080), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x69, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffe7d9f527}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) 16.566984387s ago: executing program 1 (id=4191): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000100)=""/79, 0x4f}, {&(0x7f0000001380)=""/4042, 0xfca}, {&(0x7f0000000f80)=""/214, 0xd6}, {0x0}, {&(0x7f00000003c0)=""/143, 0x8f}, {&(0x7f0000000b00)=""/185, 0xb9}, {&(0x7f0000000bc0)=""/165, 0xa5}, {&(0x7f0000000c80)=""/240, 0xf0}, {&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000d80)=""/120, 0x78}], 0xa}, 0x2000) recvmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 16.45731608s ago: executing program 2 (id=4192): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x2, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32=0x0], 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f90000e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f16439106000000000000005eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8466000000000000006cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f00"/3098], &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000000c0)=r3, 0x4) (async, rerun: 32) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d879c750cfae230631823241b82a156437", 0x1a}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}], 0x20}, 0x4840) (async, rerun: 32) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) (async) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xd) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 15.941694354s ago: executing program 3 (id=4193): perf_event_open(&(0x7f0000000380)={0x0, 0xffffffffffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffff7fe, 0x0, 0xffffffffffffffff}, 0x0, 0xb, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) 15.941104774s ago: executing program 3 (id=4194): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x202400, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) (async) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0xffffffff, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x89e0, &(0x7f00000007c0)={'netdevsim0\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r4, 0x89e0, &(0x7f00000007c0)={'netdevsim0\x00', @broadcast}) ioctl$PERF_EVENT_IOC_ID(r1, 0x4008240b, &(0x7f00000013c0)) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r5, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3, @remote, 0x4}, 0x80, 0x0}, 0x4c810) 522.095414ms ago: executing program 32 (id=4190): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x6, 0x1000000000000000, 0x7, 0x4, 0x0, 0xffffff01, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x4b525, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x0, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={0x0, 0xffffffffffffffff, 0x2000000}, 0x18) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x8, 0x4, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000080), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x69, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffe7d9f527}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) 206.88µs ago: executing program 33 (id=4191): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000100)=""/79, 0x4f}, {&(0x7f0000001380)=""/4042, 0xfca}, {&(0x7f0000000f80)=""/214, 0xd6}, {0x0}, {&(0x7f00000003c0)=""/143, 0x8f}, {&(0x7f0000000b00)=""/185, 0xb9}, {&(0x7f0000000bc0)=""/165, 0xa5}, {&(0x7f0000000c80)=""/240, 0xf0}, {&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000d80)=""/120, 0x78}], 0xa}, 0x2000) recvmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 0s ago: executing program 34 (id=4192): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x2, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32=0x0], 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"/3098], &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000000c0)=r3, 0x4) (async, rerun: 32) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d879c750cfae230631823241b82a156437", 0x1a}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}], 0x20}, 0x4840) (async, rerun: 32) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) (async) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xd) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) kernel console output (not intermixed with test programs): SP: 002b:00007ff8e78db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.434842][T15725] RAX: ffffffffffffffda RBX: 00007ff8e6c25fa0 RCX: 00007ff8e699e159 [ 649.442830][T15725] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 649.450796][T15725] RBP: 00007ff8e78db090 R08: 0000000000000000 R09: 0000000000000000 [ 649.458764][T15725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 649.466734][T15725] R13: 00007ff8e6c26038 R14: 00007ff8e6c25fa0 R15: 00007ffd850c3468 [ 649.474716][T15725] [ 649.548018][T15729] sock: sock_timestamping_bind_phc: sock not bind to device [ 649.795750][T15732] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3053'. [ 650.624890][T15730] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3051'. [ 650.634385][T15732] netlink: 'syz.3.3053': attribute type 1 has an invalid length. [ 650.644719][T15732] netlink: 16520 bytes leftover after parsing attributes in process `syz.3.3053'. [ 650.756319][T15735] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.3054'. [ 650.787095][T15735] openvswitch: netlink: IP tunnel dst address not specified [ 650.800785][T15741] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3057'. [ 651.248142][T15757] openvswitch: netlink: Key type 8545 is out of range max 32 [ 651.449878][T15761] sock: sock_timestamping_bind_phc: sock not bind to device [ 651.854088][T15763] syzkaller0: entered promiscuous mode [ 651.859704][T15763] syzkaller0: entered allmulticast mode [ 653.024425][T15787] __nla_validate_parse: 35 callbacks suppressed [ 653.024443][T15787] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.3073'. [ 653.435960][T15790] FAULT_INJECTION: forcing a failure. [ 653.435960][T15790] name failslab, interval 1, probability 0, space 0, times 0 [ 653.450108][T15790] CPU: 1 PID: 15790 Comm: syz.0.3074 Not tainted syzkaller #0 [ 653.457610][T15790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 653.467683][T15790] Call Trace: [ 653.470967][T15790] [ 653.473889][T15790] dump_stack_lvl+0x18c/0x250 [ 653.478560][T15790] ? show_regs_print_info+0x20/0x20 [ 653.483748][T15790] ? load_image+0x420/0x420 [ 653.488247][T15790] should_fail_ex+0x394/0x4c0 [ 653.492918][T15790] should_failslab+0x9/0x20 [ 653.497429][T15790] slab_pre_alloc_hook+0x59/0x300 [ 653.502466][T15790] kmem_cache_alloc_node+0x5e/0x310 [ 653.507689][T15790] ? __alloc_skb+0x103/0x2c0 [ 653.512273][T15790] __alloc_skb+0x103/0x2c0 [ 653.516681][T15790] sctp_packet_transmit+0x2ef/0x2950 [ 653.521967][T15790] ? sctp_packet_append_chunk+0xafa/0x1040 [ 653.527765][T15790] sctp_packet_singleton+0x230/0x330 [ 653.533042][T15790] ? sctp_outq_select_transport+0x590/0x590 [ 653.538927][T15790] ? sctp_outq_select_transport+0x480/0x590 [ 653.544810][T15790] ? sctp_transport_burst_limited+0x197/0x280 [ 653.550871][T15790] sctp_outq_flush+0x4fc/0x32e0 [ 653.555721][T15790] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 653.561711][T15790] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 653.567596][T15790] ? _raw_spin_unlock+0x40/0x40 [ 653.572451][T15790] ? rcu_is_watching+0x15/0xb0 [ 653.577229][T15790] ? sctp_outq_tail+0x8a0/0x8a0 [ 653.582090][T15790] ? sctp_outq_uncork+0x4d/0xa0 [ 653.586941][T15790] sctp_do_sm+0x5455/0x5b80 [ 653.591454][T15790] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 653.597343][T15790] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 653.602392][T15790] ? __sk_mem_raise_allocated+0x97b/0x11e0 [ 653.608199][T15790] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 653.613576][T15790] sctp_sendmsg_to_asoc+0x1009/0x17f0 [ 653.618967][T15790] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 653.624768][T15790] ? __sctp_connect+0xd80/0xd80 [ 653.629607][T15790] ? __local_bh_enable_ip+0x13a/0x1c0 [ 653.634969][T15790] ? _local_bh_enable+0xa0/0xa0 [ 653.639811][T15790] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 653.645610][T15790] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 653.651414][T15790] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 653.656956][T15790] ? security_sctp_bind_connect+0x89/0xb0 [ 653.662668][T15790] sctp_sendmsg+0x1afa/0x27b0 [ 653.667353][T15790] ? sctp_getsockopt+0xb60/0xb60 [ 653.672294][T15790] ? aa_af_perm+0x330/0x330 [ 653.676794][T15790] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 653.683201][T15790] ? sock_rps_record_flow+0x19/0x3f0 [ 653.688478][T15790] ? inet_sendmsg+0x7e/0x2a0 [ 653.693057][T15790] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 653.698333][T15790] ? inet_send_prepare+0x250/0x250 [ 653.703436][T15790] ____sys_sendmsg+0x61b/0x980 [ 653.708202][T15790] ? __asan_memset+0x22/0x40 [ 653.712785][T15790] ? __sys_sendmsg_sock+0x30/0x30 [ 653.717804][T15790] ? __import_iovec+0x5f2/0x850 [ 653.722659][T15790] ? import_iovec+0x73/0xa0 [ 653.727158][T15790] ___sys_sendmsg+0x2a6/0x360 [ 653.731828][T15790] ? get_pid_task+0x20/0x1e0 [ 653.736415][T15790] ? __sys_sendmsg+0x2b0/0x2b0 [ 653.741188][T15790] ? __lock_acquire+0x7d80/0x7d80 [ 653.746223][T15790] __se_sys_sendmsg+0x1d0/0x2c0 [ 653.751069][T15790] ? __x64_sys_sendmsg+0x80/0x80 [ 653.756010][T15790] ? lockdep_hardirqs_on+0x98/0x150 [ 653.761204][T15790] do_syscall_64+0x55/0xb0 [ 653.765611][T15790] ? clear_bhb_loop+0x40/0x90 [ 653.770282][T15790] ? clear_bhb_loop+0x40/0x90 [ 653.774956][T15790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 653.780859][T15790] RIP: 0033:0x7fedea79e159 [ 653.785273][T15790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.804872][T15790] RSP: 002b:00007fedeb6e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.813282][T15790] RAX: ffffffffffffffda RBX: 00007fedeaa25fa0 RCX: 00007fedea79e159 [ 653.821279][T15790] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 653.829253][T15790] RBP: 00007fedeb6e1090 R08: 0000000000000000 R09: 0000000000000000 [ 653.837222][T15790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 653.845180][T15790] R13: 00007fedeaa26038 R14: 00007fedeaa25fa0 R15: 00007ffcd35d77d8 [ 653.853157][T15790] [ 653.907235][T15790] sock: sock_timestamping_bind_phc: sock not bind to device [ 654.601176][T15790] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3074'. [ 654.732852][T15798] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 654.740297][T15798] IPv6: NLM_F_CREATE should be set when creating new route [ 654.747811][T15798] IPv6: NLM_F_CREATE should be set when creating new route [ 654.755254][T15798] IPv6: NLM_F_CREATE should be set when creating new route [ 654.769957][T15800] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3075'. [ 654.790773][T15800] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3075'. [ 654.803801][T15793] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3075'. [ 654.823778][T15800] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3075'. [ 654.841529][T15798] netlink: 'syz.3.3077': attribute type 9 has an invalid length. [ 654.852588][T15798] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3077'. [ 654.873508][T15793] netlink: 'syz.2.3075': attribute type 10 has an invalid length. [ 654.896026][T15793] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3075'. [ 654.909935][T15793] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 654.917225][T15793] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.956004][T15793] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 654.970869][T15800] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.3075'. [ 654.981575][T15800] openvswitch: netlink: IP tunnel dst address not specified [ 654.981899][T15796] netlink: 'syz.0.3076': attribute type 10 has an invalid length. [ 654.999422][T15796] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3076'. [ 655.017930][T15796] hsr0: left allmulticast mode [ 655.027331][T15796] hsr_slave_0: left allmulticast mode [ 655.034565][T15796] hsr_slave_1: left allmulticast mode [ 655.045630][T15796] nr0: port 1(hsr0) entered disabled state [ 655.144452][T15796] bridge0: port 3(hsr0) entered blocking state [ 655.161160][T15796] bridge0: port 3(hsr0) entered disabled state [ 655.173231][T15796] hsr0: entered allmulticast mode [ 655.179515][T15796] hsr_slave_0: entered allmulticast mode [ 655.186689][T15796] hsr_slave_1: entered allmulticast mode [ 655.228165][T15796] bridge0: port 3(hsr0) entered blocking state [ 655.236399][T15796] bridge0: port 3(hsr0) entered forwarding state [ 655.432163][T15801] netlink: 'syz.3.3077': attribute type 9 has an invalid length. [ 655.860643][T15818] FAULT_INJECTION: forcing a failure. [ 655.860643][T15818] name failslab, interval 1, probability 0, space 0, times 0 [ 655.915674][T15818] CPU: 0 PID: 15818 Comm: syz.1.3084 Not tainted syzkaller #0 [ 655.923188][T15818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 655.933256][T15818] Call Trace: [ 655.936549][T15818] [ 655.939493][T15818] dump_stack_lvl+0x18c/0x250 [ 655.944202][T15818] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 655.950385][T15818] ? show_regs_print_info+0x20/0x20 [ 655.955611][T15818] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 655.961803][T15818] ? dump_stack+0x9/0x20 [ 655.966071][T15818] should_fail_ex+0x394/0x4c0 [ 655.970779][T15818] should_failslab+0x9/0x20 [ 655.975300][T15818] slab_pre_alloc_hook+0x59/0x300 [ 655.980348][T15818] kmem_cache_alloc_node+0x5e/0x310 [ 655.985561][T15818] ? __alloc_skb+0x103/0x2c0 [ 655.990172][T15818] __alloc_skb+0x103/0x2c0 [ 655.994607][T15818] sctp_packet_transmit+0x2ef/0x2950 [ 655.999928][T15818] ? sctp_packet_append_chunk+0xafa/0x1040 [ 656.005755][T15818] sctp_packet_singleton+0x230/0x330 [ 656.011062][T15818] ? sctp_outq_select_transport+0x590/0x590 [ 656.016986][T15818] ? sctp_outq_select_transport+0x480/0x590 [ 656.022902][T15818] ? sctp_transport_burst_limited+0x197/0x280 [ 656.028989][T15818] sctp_outq_flush+0x4fc/0x32e0 [ 656.033870][T15818] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 656.039772][T15818] ? _raw_spin_unlock+0x40/0x40 [ 656.044613][T15818] ? rcu_is_watching+0x15/0xb0 [ 656.049376][T15818] ? sctp_outq_tail+0x8a0/0x8a0 [ 656.054234][T15818] ? sctp_outq_uncork+0x4d/0xa0 [ 656.059095][T15818] sctp_do_sm+0x5455/0x5b80 [ 656.063643][T15818] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 656.069653][T15818] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 656.074732][T15818] ? __sk_mem_raise_allocated+0x97b/0x11e0 [ 656.080564][T15818] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 656.085956][T15818] sctp_sendmsg_to_asoc+0x1009/0x17f0 [ 656.091368][T15818] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 656.097189][T15818] ? __sctp_connect+0xd80/0xd80 [ 656.102051][T15818] ? __local_bh_enable_ip+0x13a/0x1c0 [ 656.107436][T15818] ? _local_bh_enable+0xa0/0xa0 [ 656.112296][T15818] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 656.118123][T15818] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 656.123953][T15818] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 656.129515][T15818] ? security_sctp_bind_connect+0x89/0xb0 [ 656.135259][T15818] sctp_sendmsg+0x1afa/0x27b0 [ 656.139972][T15818] ? sctp_getsockopt+0xb60/0xb60 [ 656.144936][T15818] ? aa_af_perm+0x330/0x330 [ 656.149459][T15818] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 656.155889][T15818] ? sock_rps_record_flow+0x19/0x3f0 [ 656.161188][T15818] ? inet_sendmsg+0x7e/0x2a0 [ 656.165785][T15818] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 656.171083][T15818] ? inet_send_prepare+0x250/0x250 [ 656.176208][T15818] ____sys_sendmsg+0x61b/0x980 [ 656.180992][T15818] ? __asan_memset+0x22/0x40 [ 656.185599][T15818] ? __sys_sendmsg_sock+0x30/0x30 [ 656.190647][T15818] ? __import_iovec+0x5f2/0x850 [ 656.195524][T15818] ? import_iovec+0x73/0xa0 [ 656.200047][T15818] ___sys_sendmsg+0x2a6/0x360 [ 656.204736][T15818] ? get_pid_task+0x20/0x1e0 [ 656.209345][T15818] ? __sys_sendmsg+0x2b0/0x2b0 [ 656.214139][T15818] ? __lock_acquire+0x7d80/0x7d80 [ 656.219202][T15818] __se_sys_sendmsg+0x1d0/0x2c0 [ 656.224073][T15818] ? __x64_sys_sendmsg+0x80/0x80 [ 656.229039][T15818] ? lockdep_hardirqs_on+0x98/0x150 [ 656.234250][T15818] do_syscall_64+0x55/0xb0 [ 656.238685][T15818] ? clear_bhb_loop+0x40/0x90 [ 656.243382][T15818] ? clear_bhb_loop+0x40/0x90 [ 656.248077][T15818] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 656.253988][T15818] RIP: 0033:0x7f2ba279e159 [ 656.258421][T15818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.278041][T15818] RSP: 002b:00007f2ba358e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.286454][T15818] RAX: ffffffffffffffda RBX: 00007f2ba2a25fa0 RCX: 00007f2ba279e159 [ 656.294418][T15818] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 656.302383][T15818] RBP: 00007f2ba358e090 R08: 0000000000000000 R09: 0000000000000000 [ 656.310346][T15818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 656.318307][T15818] R13: 00007f2ba2a26038 R14: 00007f2ba2a25fa0 R15: 00007ffe0efc6238 [ 656.326286][T15818] [ 656.363250][T15821] sock: sock_timestamping_bind_phc: sock not bind to device [ 656.669363][T15823] syzkaller0: entered promiscuous mode [ 656.678483][T15823] syzkaller0: entered allmulticast mode [ 658.820778][T15852] syzkaller0: entered promiscuous mode [ 658.838097][T15852] syzkaller0: entered allmulticast mode [ 660.848137][T15867] netlink: 'syz.1.3096': attribute type 10 has an invalid length. [ 660.876384][T15867] team0: Device hsr_slave_0 failed to register rx_handler [ 660.894849][T15869] netlink: 'syz.1.3096': attribute type 10 has an invalid length. [ 660.917394][T15869] team0: Device hsr_slave_0 failed to register rx_handler [ 660.971907][T15875] __nla_validate_parse: 3 callbacks suppressed [ 660.971928][T15875] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3098'. [ 661.002476][T15879] netlink: 'syz.3.3099': attribute type 2 has an invalid length. [ 661.025819][T15879] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3099'. [ 661.164384][T15881] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3101'. [ 661.225694][T15885] netlink: 'syz.2.3103': attribute type 9 has an invalid length. [ 661.265559][T15885] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3103'. [ 661.435386][T15894] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.3105'. [ 661.471247][T15894] openvswitch: netlink: IP tunnel dst address not specified [ 661.855430][T15900] netlink: 124492 bytes leftover after parsing attributes in process `syz.0.3107'. [ 661.871388][T15900] openvswitch: netlink: Key type 8545 is out of range max 32 [ 662.328317][T15906] syzkaller0: entered promiscuous mode [ 662.342709][T15906] syzkaller0: entered allmulticast mode [ 662.566518][T15916] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.3111'. [ 662.576183][T15916] openvswitch: netlink: IP tunnel dst address not specified [ 663.247542][T15923] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3113'. [ 663.330610][T15925] FAULT_INJECTION: forcing a failure. [ 663.330610][T15925] name failslab, interval 1, probability 0, space 0, times 0 [ 663.358749][T15926] sock: sock_timestamping_bind_phc: sock not bind to device [ 663.366226][T15925] CPU: 0 PID: 15925 Comm: syz.1.3114 Not tainted syzkaller #0 [ 663.373687][T15925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 663.383736][T15925] Call Trace: [ 663.387008][T15925] [ 663.389931][T15925] dump_stack_lvl+0x18c/0x250 [ 663.394604][T15925] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 663.400787][T15925] ? show_regs_print_info+0x20/0x20 [ 663.405979][T15925] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 663.412160][T15925] should_fail_ex+0x394/0x4c0 [ 663.416859][T15925] should_failslab+0x9/0x20 [ 663.421364][T15925] slab_pre_alloc_hook+0x59/0x300 [ 663.426417][T15925] kmem_cache_alloc+0x5a/0x2c0 [ 663.431189][T15925] ? __nf_conntrack_alloc+0x93/0x370 [ 663.436566][T15925] __nf_conntrack_alloc+0x93/0x370 [ 663.441692][T15925] init_conntrack+0x166/0xe20 [ 663.446398][T15925] ? early_drop+0x7f0/0x7f0 [ 663.450901][T15925] ? nf_conntrack_find_get+0x670/0x670 [ 663.456371][T15925] ? __siphash_unaligned+0x25c/0x3d0 [ 663.461673][T15925] nf_conntrack_in+0xc29/0x15b0 [ 663.466564][T15925] ? nf_ct_pernet+0x270/0x270 [ 663.471258][T15925] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 663.477428][T15925] ? lockdep_hardirqs_on+0x98/0x150 [ 663.482641][T15925] ? ipv4_conntrack_local+0x123/0x200 [ 663.488095][T15925] ? ipv4_conntrack_in+0x20/0x20 [ 663.493055][T15925] nf_hook_slow+0xbd/0x200 [ 663.497469][T15925] ? nf_hook+0x390/0x390 [ 663.501774][T15925] nf_hook+0x228/0x390 [ 663.505848][T15925] ? nf_hook+0xa2/0x390 [ 663.509998][T15925] ? __ip_local_out+0x5f0/0x5f0 [ 663.514845][T15925] ? nf_hook+0x390/0x390 [ 663.519080][T15925] ? __lock_acquire+0x7d80/0x7d80 [ 663.524101][T15925] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 663.530075][T15925] ? read_lock_is_recursive+0x20/0x20 [ 663.535442][T15925] ? ip_fast_csum+0x1ee/0x2b0 [ 663.540113][T15925] __ip_local_out+0x4db/0x5f0 [ 663.544786][T15925] ? nf_hook+0x390/0x390 [ 663.549034][T15925] ? __ip_queue_xmit+0x5d/0x1960 [ 663.553969][T15925] __ip_queue_xmit+0xf89/0x1960 [ 663.558825][T15925] ? __ip_queue_xmit+0x5d/0x1960 [ 663.563761][T15925] sctp_packet_transmit+0x23e4/0x2950 [ 663.569159][T15925] sctp_packet_singleton+0x230/0x330 [ 663.574445][T15925] ? sctp_outq_select_transport+0x590/0x590 [ 663.580347][T15925] ? sctp_outq_select_transport+0x480/0x590 [ 663.586237][T15925] ? sctp_transport_burst_limited+0x197/0x280 [ 663.592301][T15925] sctp_outq_flush+0x4fc/0x32e0 [ 663.597154][T15925] ? lock_chain_count+0x20/0x20 [ 663.602007][T15925] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 663.608167][T15925] ? sctp_outq_tail+0x8a0/0x8a0 [ 663.613026][T15925] ? sctp_outq_tail+0x5f8/0x8a0 [ 663.617897][T15925] ? sctp_outq_uncork+0x4d/0xa0 [ 663.622765][T15925] sctp_do_sm+0x5455/0x5b80 [ 663.627291][T15925] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 663.633193][T15925] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 663.638255][T15925] ? __sk_mem_raise_allocated+0x97b/0x11e0 [ 663.644057][T15925] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 663.650225][T15925] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 663.655662][T15925] sctp_sendmsg_to_asoc+0x1009/0x17f0 [ 663.661088][T15925] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 663.666913][T15925] ? __sctp_connect+0xd80/0xd80 [ 663.671765][T15925] ? __local_bh_enable_ip+0x13a/0x1c0 [ 663.677136][T15925] ? _local_bh_enable+0xa0/0xa0 [ 663.681987][T15925] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 663.687798][T15925] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 663.693615][T15925] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 663.699159][T15925] ? security_sctp_bind_connect+0x89/0xb0 [ 663.704879][T15925] sctp_sendmsg+0x1afa/0x27b0 [ 663.709568][T15925] ? sctp_getsockopt+0xb60/0xb60 [ 663.714507][T15925] ? aa_af_perm+0x330/0x330 [ 663.719011][T15925] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 663.725426][T15925] ? sock_rps_record_flow+0x19/0x3f0 [ 663.730881][T15925] ? inet_sendmsg+0x7e/0x2a0 [ 663.735460][T15925] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 663.740740][T15925] ? inet_send_prepare+0x250/0x250 [ 663.745851][T15925] ____sys_sendmsg+0x61b/0x980 [ 663.750619][T15925] ? __asan_memset+0x22/0x40 [ 663.755206][T15925] ? __sys_sendmsg_sock+0x30/0x30 [ 663.760228][T15925] ? __import_iovec+0x5f2/0x850 [ 663.765087][T15925] ? import_iovec+0x73/0xa0 [ 663.769589][T15925] ___sys_sendmsg+0x2a6/0x360 [ 663.774269][T15925] ? __sys_sendmsg+0x2b0/0x2b0 [ 663.779051][T15925] ? ktime_get+0x7f/0x280 [ 663.783404][T15925] __se_sys_sendmsg+0x1d0/0x2c0 [ 663.788256][T15925] ? __x64_sys_sendmsg+0x80/0x80 [ 663.793202][T15925] ? lockdep_hardirqs_on+0x98/0x150 [ 663.798399][T15925] do_syscall_64+0x55/0xb0 [ 663.802811][T15925] ? clear_bhb_loop+0x40/0x90 [ 663.807489][T15925] ? clear_bhb_loop+0x40/0x90 [ 663.812165][T15925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 663.818057][T15925] RIP: 0033:0x7f2ba279e159 [ 663.822468][T15925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.842066][T15925] RSP: 002b:00007f2ba358e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 663.850475][T15925] RAX: ffffffffffffffda RBX: 00007f2ba2a25fa0 RCX: 00007f2ba279e159 [ 663.858440][T15925] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 663.866408][T15925] RBP: 00007f2ba358e090 R08: 0000000000000000 R09: 0000000000000000 [ 663.874375][T15925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 663.882342][T15925] R13: 00007f2ba2a26038 R14: 00007f2ba2a25fa0 R15: 00007ffe0efc6238 [ 663.890324][T15925] [ 664.723494][T15926] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3114'. [ 664.842972][T15928] netlink: 'syz.1.3115': attribute type 10 has an invalid length. [ 664.864442][T15928] syz_tun: entered promiscuous mode [ 664.916739][T15928] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 664.945288][T15929] netlink: 'syz.1.3115': attribute type 10 has an invalid length. [ 665.003404][T15938] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3123'. [ 666.614869][T15958] wg2: entered promiscuous mode [ 666.626228][T15958] wg2: entered allmulticast mode [ 666.762925][T15964] FAULT_INJECTION: forcing a failure. [ 666.762925][T15964] name failslab, interval 1, probability 0, space 0, times 0 [ 666.783759][T15964] CPU: 0 PID: 15964 Comm: syz.1.3125 Not tainted syzkaller #0 [ 666.791261][T15964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 666.801331][T15964] Call Trace: [ 666.804622][T15964] [ 666.807567][T15964] dump_stack_lvl+0x18c/0x250 [ 666.812276][T15964] ? show_regs_print_info+0x20/0x20 [ 666.817499][T15964] ? load_image+0x420/0x420 [ 666.822025][T15964] ? __might_sleep+0xe0/0xe0 [ 666.826641][T15964] ? __lock_acquire+0x7d80/0x7d80 [ 666.831692][T15964] should_fail_ex+0x394/0x4c0 [ 666.836396][T15964] should_failslab+0x9/0x20 [ 666.840923][T15964] slab_pre_alloc_hook+0x59/0x300 [ 666.845980][T15964] kmem_cache_alloc_node+0x5e/0x310 [ 666.851202][T15964] ? __alloc_skb+0x103/0x2c0 [ 666.855814][T15964] __alloc_skb+0x103/0x2c0 [ 666.860248][T15964] _sctp_make_chunk+0x5b/0x430 [ 666.865031][T15964] sctp_make_datafrag_empty+0x12b/0x240 [ 666.870597][T15964] ? sctp_make_ecne+0x350/0x350 [ 666.875462][T15964] ? sctp_auth_send_cid+0x69/0x250 [ 666.880577][T15964] sctp_datamsg_from_user+0x72e/0xee0 [ 666.885963][T15964] sctp_sendmsg_to_asoc+0xfdd/0x17f0 [ 666.891257][T15964] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 666.897413][T15964] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 666.903211][T15964] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 666.909367][T15964] ? sctp_sendmsg+0xc74/0x27b0 [ 666.914133][T15964] sctp_sendmsg+0x1afa/0x27b0 [ 666.918901][T15964] ? sctp_getsockopt+0xb60/0xb60 [ 666.923840][T15964] ? aa_af_perm+0x330/0x330 [ 666.928344][T15964] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 666.934754][T15964] ? sock_rps_record_flow+0x19/0x3f0 [ 666.940034][T15964] ? inet_sendmsg+0x7e/0x2a0 [ 666.944613][T15964] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 666.949890][T15964] ? inet_send_prepare+0x250/0x250 [ 666.954992][T15964] ____sys_sendmsg+0x61b/0x980 [ 666.959753][T15964] ? __asan_memset+0x22/0x40 [ 666.964339][T15964] ? __sys_sendmsg_sock+0x30/0x30 [ 666.969354][T15964] ? __import_iovec+0x5f2/0x850 [ 666.974210][T15964] ? import_iovec+0x73/0xa0 [ 666.978800][T15964] ___sys_sendmsg+0x2a6/0x360 [ 666.983475][T15964] ? lockdep_hardirqs_on+0x98/0x150 [ 666.988669][T15964] ? __sys_sendmsg+0x2b0/0x2b0 [ 666.993445][T15964] ? __lock_acquire+0x7d80/0x7d80 [ 666.998484][T15964] __se_sys_sendmsg+0x1d0/0x2c0 [ 667.003332][T15964] ? __x64_sys_sendmsg+0x80/0x80 [ 667.008274][T15964] ? lockdep_hardirqs_on+0x98/0x150 [ 667.013468][T15964] do_syscall_64+0x55/0xb0 [ 667.017880][T15964] ? clear_bhb_loop+0x40/0x90 [ 667.022554][T15964] ? clear_bhb_loop+0x40/0x90 [ 667.027227][T15964] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 667.033117][T15964] RIP: 0033:0x7f2ba279e159 [ 667.037524][T15964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.057121][T15964] RSP: 002b:00007f2ba358e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.065527][T15964] RAX: ffffffffffffffda RBX: 00007f2ba2a25fa0 RCX: 00007f2ba279e159 [ 667.073489][T15964] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 667.081450][T15964] RBP: 00007f2ba358e090 R08: 0000000000000000 R09: 0000000000000000 [ 667.089413][T15964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 667.097372][T15964] R13: 00007f2ba2a26038 R14: 00007f2ba2a25fa0 R15: 00007ffe0efc6238 [ 667.105349][T15964] [ 667.179974][T15961] syzkaller0: entered promiscuous mode [ 667.186283][T15961] syzkaller0: entered allmulticast mode [ 667.239212][T15964] sock: sock_timestamping_bind_phc: sock not bind to device [ 667.370591][T15974] __nla_validate_parse: 3 callbacks suppressed [ 667.370641][T15974] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3126'. [ 667.424299][T13294] Bluetooth: hci2: command 0x0406 tx timeout [ 668.885227][T15964] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3125'. [ 668.990914][T15980] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3129'. [ 669.085694][T15982] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3130'. [ 669.173151][T15985] delete_channel: no stack [ 669.410628][T16006] FAULT_INJECTION: forcing a failure. [ 669.410628][T16006] name failslab, interval 1, probability 0, space 0, times 0 [ 669.426680][T16006] CPU: 1 PID: 16006 Comm: syz.3.3138 Not tainted syzkaller #0 [ 669.434179][T16006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 669.444259][T16006] Call Trace: [ 669.447553][T16006] [ 669.450498][T16006] dump_stack_lvl+0x18c/0x250 [ 669.455205][T16006] ? show_regs_print_info+0x20/0x20 [ 669.460430][T16006] ? load_image+0x420/0x420 [ 669.464975][T16006] should_fail_ex+0x394/0x4c0 [ 669.469688][T16006] should_failslab+0x9/0x20 [ 669.474220][T16006] slab_pre_alloc_hook+0x59/0x300 [ 669.479277][T16006] kmem_cache_alloc+0x5a/0x2c0 [ 669.484068][T16006] ? __nf_conntrack_alloc+0x93/0x370 [ 669.489384][T16006] __nf_conntrack_alloc+0x93/0x370 [ 669.494528][T16006] init_conntrack+0x166/0xe20 [ 669.499238][T16006] ? early_drop+0x7f0/0x7f0 [ 669.503770][T16006] ? nf_conntrack_find_get+0x670/0x670 [ 669.509268][T16006] nf_conntrack_in+0xc29/0x15b0 [ 669.514164][T16006] ? nf_ct_pernet+0x270/0x270 [ 669.518873][T16006] ? ipt_do_table+0x2c5/0x15c0 [ 669.523745][T16006] ? kmem_cache_free+0xf8/0x290 [ 669.528619][T16006] ? sctp_packet_transmit+0x143d/0x2950 [ 669.534197][T16006] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 669.539685][T16006] ? ipv4_conntrack_local+0x123/0x200 [ 669.545089][T16006] ? ipv4_conntrack_in+0x20/0x20 [ 669.550050][T16006] nf_hook_slow+0xbd/0x200 [ 669.554491][T16006] ? nf_hook+0x390/0x390 [ 669.558758][T16006] nf_hook+0x228/0x390 [ 669.562851][T16006] ? nf_hook+0xa2/0x390 [ 669.567026][T16006] ? __ip_local_out+0x5f0/0x5f0 [ 669.571889][T16006] ? nf_hook+0x390/0x390 [ 669.576130][T16006] ? __lock_acquire+0x7d80/0x7d80 [ 669.581160][T16006] ? ip_select_ttl+0x1a7/0x330 [ 669.585930][T16006] ? ip_fast_csum+0x1ee/0x2b0 [ 669.590609][T16006] __ip_local_out+0x4db/0x5f0 [ 669.595290][T16006] ? nf_hook+0x390/0x390 [ 669.599535][T16006] ? __ip_queue_xmit+0x5d/0x1960 [ 669.604474][T16006] __ip_queue_xmit+0xf89/0x1960 [ 669.609330][T16006] ? __ip_queue_xmit+0x5d/0x1960 [ 669.614267][T16006] sctp_packet_transmit+0x23e4/0x2950 [ 669.619655][T16006] sctp_packet_singleton+0x230/0x330 [ 669.624950][T16006] ? sctp_outq_select_transport+0x590/0x590 [ 669.630845][T16006] ? sctp_outq_select_transport+0x480/0x590 [ 669.636738][T16006] ? sctp_transport_burst_limited+0x197/0x280 [ 669.642805][T16006] sctp_outq_flush+0x4fc/0x32e0 [ 669.647687][T16006] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 669.653577][T16006] ? _raw_spin_unlock+0x40/0x40 [ 669.658422][T16006] ? rcu_is_watching+0x15/0xb0 [ 669.663189][T16006] ? sctp_outq_tail+0x8a0/0x8a0 [ 669.668047][T16006] ? sctp_outq_uncork+0x4d/0xa0 [ 669.672894][T16006] sctp_do_sm+0x5455/0x5b80 [ 669.677403][T16006] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 669.683292][T16006] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 669.688341][T16006] ? __sk_mem_raise_allocated+0x97b/0x11e0 [ 669.694156][T16006] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 669.699529][T16006] sctp_sendmsg_to_asoc+0x1009/0x17f0 [ 669.704913][T16006] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 669.710712][T16006] ? __sctp_connect+0xd80/0xd80 [ 669.715552][T16006] ? __local_bh_enable_ip+0x13a/0x1c0 [ 669.720918][T16006] ? _local_bh_enable+0xa0/0xa0 [ 669.725759][T16006] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 669.731567][T16006] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 669.737374][T16006] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 669.742912][T16006] ? security_sctp_bind_connect+0x89/0xb0 [ 669.748628][T16006] sctp_sendmsg+0x1afa/0x27b0 [ 669.753312][T16006] ? sctp_getsockopt+0xb60/0xb60 [ 669.758249][T16006] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 669.764405][T16006] ? aa_af_perm+0x330/0x330 [ 669.768907][T16006] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 669.775317][T16006] ? sock_rps_record_flow+0x19/0x3f0 [ 669.780620][T16006] ? inet_sendmsg+0x7e/0x2a0 [ 669.785218][T16006] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 669.790510][T16006] ? inet_send_prepare+0x250/0x250 [ 669.795621][T16006] ____sys_sendmsg+0x61b/0x980 [ 669.800394][T16006] ? __asan_memset+0x22/0x40 [ 669.804985][T16006] ? __sys_sendmsg_sock+0x30/0x30 [ 669.810007][T16006] ? __import_iovec+0x5f2/0x850 [ 669.814862][T16006] ? import_iovec+0x73/0xa0 [ 669.819364][T16006] ___sys_sendmsg+0x2a6/0x360 [ 669.824037][T16006] ? get_pid_task+0x20/0x1e0 [ 669.828627][T16006] ? __sys_sendmsg+0x2b0/0x2b0 [ 669.833424][T16006] __se_sys_sendmsg+0x1d0/0x2c0 [ 669.838291][T16006] ? __x64_sys_sendmsg+0x80/0x80 [ 669.843236][T16006] ? lockdep_hardirqs_on+0x98/0x150 [ 669.848440][T16006] do_syscall_64+0x55/0xb0 [ 669.852857][T16006] ? clear_bhb_loop+0x40/0x90 [ 669.857532][T16006] ? clear_bhb_loop+0x40/0x90 [ 669.862208][T16006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 669.868094][T16006] RIP: 0033:0x7f3ad759e159 [ 669.872506][T16006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.892104][T16006] RSP: 002b:00007f3ad849e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.900515][T16006] RAX: ffffffffffffffda RBX: 00007f3ad7825fa0 RCX: 00007f3ad759e159 [ 669.908479][T16006] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 669.916441][T16006] RBP: 00007f3ad849e090 R08: 0000000000000000 R09: 0000000000000000 [ 669.924404][T16006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 669.932365][T16006] R13: 00007f3ad7826038 R14: 00007f3ad7825fa0 R15: 00007ffe50cc4748 [ 669.940342][T16006] [ 669.987218][T16009] sock: sock_timestamping_bind_phc: sock not bind to device [ 670.007777][T16006] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3138'. [ 670.189063][T16015] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3140'. [ 670.305315][T16011] syzkaller0: entered promiscuous mode [ 670.314108][T16011] syzkaller0: entered allmulticast mode [ 670.720056][T16030] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3144'. [ 672.682436][T16057] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3152'. [ 673.059043][T16041] syzkaller0: entered promiscuous mode [ 673.070716][T16041] syzkaller0: entered allmulticast mode [ 674.649411][T16061] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3154'. [ 674.662017][T16061] hsr_slave_0: left promiscuous mode [ 674.668327][T16061] hsr_slave_1: left promiscuous mode [ 674.696504][T16061] hsr0 (unregistering): left allmulticast mode [ 674.703297][T16061] nr0: port 1(hsr0) entered disabled state [ 675.563235][T16084] syzkaller0: entered promiscuous mode [ 675.583070][T16084] syzkaller0: entered allmulticast mode [ 676.078796][T16102] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3166'. [ 677.964049][T16111] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3168'. [ 678.011547][T16111] hsr_slave_0: left promiscuous mode [ 678.052522][T16111] hsr_slave_1: left promiscuous mode [ 678.653238][T16125] netlink: 'syz.0.3169': attribute type 1 has an invalid length. [ 678.661182][T16125] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3169'. [ 678.710456][T16125] netlink: 153060 bytes leftover after parsing attributes in process `syz.0.3169'. [ 678.937444][T16134] netlink: 'syz.0.3176': attribute type 13 has an invalid length. [ 678.945535][T16134] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3176'. [ 678.961775][T16134] erspan0: refused to change device tx_queue_len [ 679.447778][T16138] syzkaller0: entered promiscuous mode [ 679.453536][T16138] syzkaller0: entered allmulticast mode [ 679.542733][T16145] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3179'. [ 681.233316][T16162] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3183'. [ 681.260151][T16162] hsr_slave_0: left promiscuous mode [ 681.317076][T16162] hsr_slave_1: left promiscuous mode [ 681.413231][T16162] bridge0: port 3(hsr0) entered disabled state [ 681.539861][T16162] hsr0 (unregistering): left allmulticast mode [ 681.551864][T16162] bridge0: port 3(hsr0) entered disabled state [ 681.775079][T16175] syzkaller0: entered promiscuous mode [ 681.780624][T16175] syzkaller0: entered allmulticast mode [ 682.206705][T16185] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3192'. [ 682.228479][T16185] bridge_slave_1: default FDB implementation only supports local addresses [ 682.430671][T16189] syzkaller0: entered promiscuous mode [ 682.436411][T16189] syzkaller0: entered allmulticast mode [ 682.770784][T16196] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3195'. [ 683.462594][T16205] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3198'. [ 684.228222][T16199] netlink: 755 bytes leftover after parsing attributes in process `syz.2.3196'. [ 684.979388][T16228] syzkaller0: entered promiscuous mode [ 685.024170][T16228] syzkaller0: entered allmulticast mode [ 685.293697][T16236] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3213'. [ 685.314043][T16236] bridge_slave_1: default FDB implementation only supports local addresses [ 685.826168][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.832618][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.826926][T16247] syzkaller0: entered promiscuous mode [ 687.832497][T16247] syzkaller0: entered allmulticast mode [ 687.839226][T16266] netlink: 'syz.2.3209': attribute type 5 has an invalid length. [ 687.848412][T16266] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3209'. [ 689.416311][T16279] Ÿë: port 1(hsr_slave_0) entered blocking state [ 689.423110][T16279] Ÿë: port 1(hsr_slave_0) entered disabled state [ 689.429628][T16279] hsr_slave_0: entered allmulticast mode [ 689.449491][T16279] hsr_slave_0: left allmulticast mode [ 689.458604][T16290] netlink: 'syz.2.3216': attribute type 10 has an invalid length. [ 689.474843][T16290] team0: Port device virt_wifi0 added [ 689.759126][T16299] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3218'. [ 689.862477][T16301] delete_channel: no stack [ 690.312363][T16313] syzkaller0: entered promiscuous mode [ 690.328140][T16313] syzkaller0: entered allmulticast mode [ 693.830114][T16361] syzkaller0: entered promiscuous mode [ 693.835701][T16361] syzkaller0: entered allmulticast mode [ 694.086086][T16375] netlink: 'syz.3.3241': attribute type 1 has an invalid length. [ 694.119529][T16375] netlink: 'syz.3.3241': attribute type 3 has an invalid length. [ 694.131884][T16375] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3241'. [ 695.107041][T16385] netlink: 'syz.1.3243': attribute type 10 has an invalid length. [ 695.126589][T16385] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3243'. [ 697.169284][T16395] syzkaller0: entered promiscuous mode [ 697.175256][T16395] syzkaller0: entered allmulticast mode [ 697.737792][T16420] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3253'. [ 699.122275][T16412] netlink: 'syz.1.3251': attribute type 21 has an invalid length. [ 699.123496][T16400] delete_channel: no stack [ 699.130278][T16412] IPv6: NLM_F_CREATE should be specified when creating new route [ 699.142663][T16412] IPv6: Can't replace route, no match found [ 699.149201][T16421] netlink: 'syz.2.3253': attribute type 39 has an invalid length. [ 700.178472][T16451] syzkaller0: entered promiscuous mode [ 700.198363][T16451] syzkaller0: entered allmulticast mode [ 702.863401][T16470] delete_channel: no stack [ 703.056671][T16505] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3278'. [ 703.102797][T16507] netlink: 'syz.3.3279': attribute type 10 has an invalid length. [ 703.413151][T16518] netlink: 'syz.0.3281': attribute type 1 has an invalid length. [ 703.473126][T16518] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3281'. [ 704.005301][T16524] syzkaller0: entered promiscuous mode [ 704.010939][T16524] syzkaller0: entered allmulticast mode [ 704.471795][T16542] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3289'. [ 706.519791][T16557] netlink: 'syz.3.3296': attribute type 10 has an invalid length. [ 706.660041][T16557] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 707.096414][T16572] syzkaller0: entered promiscuous mode [ 707.120173][T16572] syzkaller0: entered allmulticast mode [ 707.242963][T16578] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3303'. [ 707.379723][T16583] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3304'. [ 707.414072][T16583] openvswitch: netlink: Duplicate key (type 0). [ 711.131256][T16604] netlink: 'syz.0.3310': attribute type 10 has an invalid length. [ 711.639005][T16612] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 712.319645][T16617] delete_channel: no stack [ 712.951078][T16624] syzkaller0: entered promiscuous mode [ 712.987398][T16624] syzkaller0: entered allmulticast mode [ 714.944271][T16639] delete_channel: no stack [ 715.296218][T16664] netlink: 'syz.0.3333': attribute type 3 has an invalid length. [ 715.304517][T16664] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3333'. [ 715.654413][T16672] netlink: 'syz.2.3336': attribute type 21 has an invalid length. [ 716.041295][T16673] syzkaller0: entered promiscuous mode [ 716.052918][T16673] syzkaller0: entered allmulticast mode [ 716.555780][T16687] delete_channel: no stack [ 716.730529][T16686] syzkaller0: entered promiscuous mode [ 716.761213][T16686] syzkaller0: entered allmulticast mode [ 717.835733][T16713] FAULT_INJECTION: forcing a failure. [ 717.835733][T16713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.849467][T16713] CPU: 1 PID: 16713 Comm: syz.0.3347 Not tainted syzkaller #0 [ 717.856977][T16713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 717.867083][T16713] Call Trace: [ 717.870363][T16713] [ 717.873345][T16713] dump_stack_lvl+0x18c/0x250 [ 717.878026][T16713] ? show_regs_print_info+0x20/0x20 [ 717.883219][T16713] ? load_image+0x420/0x420 [ 717.887732][T16713] ? __lock_acquire+0x7d80/0x7d80 [ 717.892787][T16713] should_fail_ex+0x394/0x4c0 [ 717.897472][T16713] _copy_from_user+0x2f/0xe0 [ 717.902074][T16713] __copy_msghdr+0x388/0x560 [ 717.906681][T16713] ___sys_sendmsg+0x214/0x360 [ 717.911360][T16713] ? get_pid_task+0x20/0x1e0 [ 717.915970][T16713] ? __sys_sendmsg+0x2b0/0x2b0 [ 717.920754][T16713] ? __lock_acquire+0x7d80/0x7d80 [ 717.925809][T16713] __se_sys_sendmsg+0x1d0/0x2c0 [ 717.930658][T16713] ? __x64_sys_sendmsg+0x80/0x80 [ 717.935646][T16713] ? lockdep_hardirqs_on+0x98/0x150 [ 717.940859][T16713] do_syscall_64+0x55/0xb0 [ 717.945300][T16713] ? clear_bhb_loop+0x40/0x90 [ 717.949977][T16713] ? clear_bhb_loop+0x40/0x90 [ 717.954650][T16713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 717.960640][T16713] RIP: 0033:0x7fedea79e159 [ 717.965068][T16713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.984709][T16713] RSP: 002b:00007fedeb6e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.993119][T16713] RAX: ffffffffffffffda RBX: 00007fedeaa25fa0 RCX: 00007fedea79e159 [ 718.001094][T16713] RDX: 0000000020040000 RSI: 0000200000001640 RDI: 0000000000000003 [ 718.009111][T16713] RBP: 00007fedeb6e1090 R08: 0000000000000000 R09: 0000000000000000 [ 718.017126][T16713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.025095][T16713] R13: 00007fedeaa26038 R14: 00007fedeaa25fa0 R15: 00007ffcd35d77d8 [ 718.033070][T16713] [ 718.777014][T16725] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3349'. [ 719.711908][T16733] netlink: 125872 bytes leftover after parsing attributes in process `syz.3.3351'. [ 719.780586][T16733] netlink: 'syz.3.3351': attribute type 8 has an invalid length. [ 719.790925][T16733] netlink: 199840 bytes leftover after parsing attributes in process `syz.3.3351'. [ 721.642194][T16736] delete_channel: no stack [ 721.854078][T16750] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3358'. [ 721.891368][T16750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3358'. [ 722.146750][T16754] syzkaller0: entered promiscuous mode [ 722.156840][T16754] syzkaller0: entered allmulticast mode [ 722.478103][T16771] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3363'. [ 722.872075][T16776] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3364'. [ 724.157450][T16775] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3364'. [ 724.428543][T16783] delete_channel: no stack [ 725.480147][T16805] netlink: 'syz.3.3371': attribute type 21 has an invalid length. [ 725.508333][T16805] netlink: 12202 bytes leftover after parsing attributes in process `syz.3.3371'. [ 725.538280][T16802] netlink: 'syz.3.3371': attribute type 21 has an invalid length. [ 725.575083][T16802] netlink: 12202 bytes leftover after parsing attributes in process `syz.3.3371'. [ 725.861761][T16807] syzkaller0: entered promiscuous mode [ 725.880902][T16807] syzkaller0: entered allmulticast mode [ 728.277420][T16831] delete_channel: no stack [ 728.451297][T16850] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3382'. [ 728.550922][T16850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 728.609688][T16859] netlink: 'syz.1.3384': attribute type 11 has an invalid length. [ 728.633213][T16859] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3384'. [ 728.689593][T16861] netlink: 'syz.3.3385': attribute type 10 has an invalid length. [ 728.791880][T16868] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3386'. [ 728.798519][T16861] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 729.371687][T16877] syzkaller0: entered promiscuous mode [ 729.378436][T16877] syzkaller0: entered allmulticast mode [ 729.636569][T16887] delete_channel: no stack [ 729.960815][T16891] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3394'. [ 731.745440][T16908] netlink: 'syz.0.3397': attribute type 1 has an invalid length. [ 731.769170][T16908] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.3397'. [ 731.822097][T16914] netlink: 'syz.0.3397': attribute type 10 has an invalid length. [ 732.026744][T16914] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 732.225037][T16922] delete_channel: no stack [ 732.365615][T16929] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3406'. [ 732.553930][T16941] netlink: 'syz.0.3409': attribute type 1 has an invalid length. [ 732.562420][T16941] netlink: 'syz.0.3409': attribute type 2 has an invalid length. [ 732.579183][T16931] syzkaller0: entered promiscuous mode [ 732.585770][T16941] netlink: 'syz.0.3409': attribute type 2 has an invalid length. [ 732.593752][T16931] syzkaller0: entered allmulticast mode [ 732.601265][T16941] netlink: 'syz.0.3409': attribute type 3 has an invalid length. [ 732.619206][T16941] netlink: 'syz.0.3409': attribute type 4 has an invalid length. [ 732.637966][T16941] netlink: 'syz.0.3409': attribute type 5 has an invalid length. [ 732.647179][T16941] netlink: 'syz.0.3409': attribute type 6 has an invalid length. [ 732.657287][T16941] netlink: 'syz.0.3409': attribute type 7 has an invalid length. [ 732.668607][T16941] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.3409'. [ 734.517918][T16959] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3415'. [ 734.541846][T16961] bridge0: port 1(ip6gretap0) entered blocking state [ 734.582054][T16961] bridge0: port 1(ip6gretap0) entered disabled state [ 734.591041][T16961] ip6gretap0: entered allmulticast mode [ 734.608946][T16961] ip6gretap0: entered promiscuous mode [ 734.620916][T16961] bridge0: port 1(ip6gretap0) entered blocking state [ 734.627765][T16961] bridge0: port 1(ip6gretap0) entered forwarding state [ 734.803370][T16964] delete_channel: no stack [ 734.963892][T16969] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3418'. [ 735.485263][T16981] syzkaller0: entered promiscuous mode [ 735.501042][T16981] syzkaller0: entered allmulticast mode [ 735.657115][T16991] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3426'. [ 737.125866][T16989] validate_nla: 4 callbacks suppressed [ 737.125883][T16989] netlink: 'syz.0.3425': attribute type 10 has an invalid length. [ 737.139346][T16989] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3425'. [ 737.149339][T16996] delete_channel: no stack [ 737.393110][T17006] netlink: 'syz.3.3432': attribute type 2 has an invalid length. [ 737.471631][T17005] delete_channel: no stack [ 737.601661][T17012] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3432'. [ 737.634184][T17012] netlink: set zone limit has 4 unknown bytes [ 738.090879][T17023] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3437'. [ 738.253581][T17027] syzkaller0: entered promiscuous mode [ 738.259187][T17027] syzkaller0: entered allmulticast mode [ 738.762040][T17037] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3441'. [ 740.145011][T17032] netlink: 'syz.3.3439': attribute type 10 has an invalid length. [ 740.153016][T17032] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3439'. [ 740.161985][T17032] hsr0: entered promiscuous mode [ 740.167150][T17032] bridge0: port 3(hsr0) entered blocking state [ 740.173653][T17032] bridge0: port 3(hsr0) entered disabled state [ 740.180011][T17032] hsr0: entered allmulticast mode [ 740.185233][T17032] hsr_slave_0: entered allmulticast mode [ 740.190885][T17032] hsr_slave_1: entered allmulticast mode [ 740.198636][T17032] bridge0: port 3(hsr0) entered blocking state [ 740.204954][T17032] bridge0: port 3(hsr0) entered forwarding state [ 740.240525][T17043] delete_channel: no stack [ 740.484732][T17050] delete_channel: no stack [ 742.016715][T17076] netlink: 'syz.1.3453': attribute type 10 has an invalid length. [ 742.034675][T17076] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3453'. [ 742.116123][T17077] syzkaller0: entered promiscuous mode [ 742.131313][T17077] syzkaller0: entered allmulticast mode [ 742.180734][T17084] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3455'. [ 743.777299][T17089] delete_channel: no stack [ 747.062416][T17093] delete_channel: no stack [ 747.194966][T17120] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3466'. [ 747.264521][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.276680][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.383324][T17122] syzkaller0: entered promiscuous mode [ 747.388995][T17122] syzkaller0: entered allmulticast mode [ 747.406790][T17125] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3468'. [ 747.487941][T17128] delete_channel: no stack [ 749.504770][T17154] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3477'. [ 749.723678][T17164] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3479'. [ 749.931744][T17167] syzkaller0: entered promiscuous mode [ 749.937249][T17167] syzkaller0: entered allmulticast mode [ 750.174292][T17180] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3483'. [ 751.626329][T17181] delete_channel: no stack [ 751.817193][T17188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 751.929681][T17190] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3487'. [ 752.663519][T17213] delete_channel: no stack [ 752.728691][T17219] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3496'. [ 752.759360][T17211] syzkaller0: entered promiscuous mode [ 752.772756][T17211] syzkaller0: entered allmulticast mode [ 752.799583][T17222] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.3497'. [ 753.253798][T17230] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3499'. [ 753.681393][T17234] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3500'. [ 755.460028][T17230] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3499'. [ 755.744886][T17239] netlink: 'syz.3.3502': attribute type 21 has an invalid length. [ 755.767030][T17239] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3502'. [ 756.003182][T17243] sit0: entered allmulticast mode [ 756.053471][T17244] delete_channel: no stack [ 756.084975][T17247] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3506'. [ 756.358692][T17257] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3507'. [ 756.381354][T17257] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3507'. [ 756.407263][T17250] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3507'. [ 756.587042][T17265] netlink: 'syz.0.3510': attribute type 29 has an invalid length. [ 756.596247][T17265] netlink: 'syz.0.3510': attribute type 29 has an invalid length. [ 757.039161][T17270] syzkaller0: entered promiscuous mode [ 757.048160][T17270] syzkaller0: entered allmulticast mode [ 759.221964][T17296] netlink: 'syz.3.3520': attribute type 12 has an invalid length. [ 759.230048][T17296] __nla_validate_parse: 2 callbacks suppressed [ 759.230090][T17296] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.3520'. [ 759.565679][T17308] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 759.574706][T17308] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 759.773339][T17315] netlink: 'syz.2.3527': attribute type 12 has an invalid length. [ 759.791410][T17315] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3527'. [ 759.908643][T17315] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3527'. [ 760.230363][T17319] syzkaller0: entered promiscuous mode [ 760.242661][T17319] syzkaller0: entered allmulticast mode [ 760.258546][T17324] netlink: 'syz.2.3529': attribute type 10 has an invalid length. [ 762.834427][T17324] team0 (unregistering): Port device team_slave_0 removed [ 762.859859][T17324] team0 (unregistering): Port device team_slave_1 removed [ 762.891807][T17324] team0 (unregistering): Port device virt_wifi0 removed [ 763.966791][T17354] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3537'. [ 764.994114][T17347] delete_channel: no stack [ 764.999158][T17342] delete_channel: no stack [ 765.961119][T17378] netlink: 'syz.2.3547': attribute type 10 has an invalid length. [ 765.981429][T17378] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3547'. [ 766.099076][T17383] syzkaller0: entered promiscuous mode [ 766.116418][T17381] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3547'. [ 766.136101][T17383] syzkaller0: entered allmulticast mode [ 766.158011][T17381] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3547'. [ 766.273545][T17378] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3547'. [ 766.295130][T17387] delete_channel: no stack [ 766.299624][T17390] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3550'. [ 766.301675][T17380] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3547'. [ 766.719440][T17407] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3552'. [ 768.066817][T17405] netlink: 'syz.3.3553': attribute type 21 has an invalid length. [ 768.527787][T17426] delete_channel: no stack [ 768.891897][T17439] netlink: 'syz.3.3561': attribute type 10 has an invalid length. [ 768.909022][T17439] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3561'. [ 769.059357][T17448] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3561'. [ 769.068945][T17448] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3561'. [ 769.293213][T17447] syzkaller0: entered promiscuous mode [ 769.298899][T17447] syzkaller0: entered allmulticast mode [ 770.604528][T17465] delete_channel: no stack [ 771.329898][T17457] syzkaller0: entered promiscuous mode [ 771.345912][T17457] syzkaller0: entered allmulticast mode [ 773.374648][T17482] syzkaller0: entered promiscuous mode [ 773.383672][T17482] syzkaller0: entered allmulticast mode [ 773.607959][T17489] delete_channel: no stack [ 774.639155][T17508] __nla_validate_parse: 2 callbacks suppressed [ 774.639169][T17508] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3582'. [ 775.228167][T17511] netlink: 'syz.2.3584': attribute type 3 has an invalid length. [ 775.239387][T17511] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3584'. [ 775.666363][T17492] syzkaller0: entered promiscuous mode [ 775.673187][T17492] syzkaller0: entered allmulticast mode [ 777.211021][T17502] netlink: 'syz.1.3582': attribute type 10 has an invalid length. [ 777.219112][T17502] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3582'. [ 777.228686][T17508] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3582'. [ 777.597000][T17529] netlink: 'syz.1.3591': attribute type 30 has an invalid length. [ 777.723883][T17533] netlink: 'syz.2.3592': attribute type 2 has an invalid length. [ 777.755864][T17526] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3589'. [ 777.781784][T17526] netlink: 'syz.0.3589': attribute type 2 has an invalid length. [ 777.781941][T17533] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3592'. [ 778.035892][T17538] syzkaller0: entered promiscuous mode [ 778.049527][T17538] syzkaller0: entered allmulticast mode [ 778.566090][T17554] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3597'. [ 779.848727][T17554] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3597'. [ 780.058252][T17564] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3607'. [ 780.078089][T17564] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3607'. [ 780.112135][T17557] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3607'. [ 780.139754][T17561] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3607'. [ 780.442065][T17572] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3604'. [ 781.445150][T17593] syzkaller0: entered promiscuous mode [ 781.474991][T17593] syzkaller0: entered allmulticast mode [ 784.195476][T17632] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3618'. [ 786.612405][T17639] netlink: 'syz.0.3620': attribute type 2 has an invalid length. [ 786.620825][T17642] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3620'. [ 786.854396][T17649] netlink: 'syz.3.3624': attribute type 3 has an invalid length. [ 786.899110][T17649] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3624'. [ 786.945592][T17650] netlink: zone id is out of range [ 786.951144][T17650] netlink: set zone limit has 8 unknown bytes [ 787.081557][T17652] syzkaller0: entered promiscuous mode [ 787.090138][T17652] syzkaller0: entered allmulticast mode [ 787.378731][T17661] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3629'. [ 787.389195][T17661] netlink: zone id is out of range [ 787.395419][T17661] netlink: zone id is out of range [ 787.401032][T17661] netlink: zone id is out of range [ 787.410470][T17661] netlink: zone id is out of range [ 787.416564][T17661] netlink: zone id is out of range [ 787.423473][T17661] netlink: zone id is out of range [ 787.429171][T17661] netlink: zone id is out of range [ 787.434997][T17661] netlink: zone id is out of range [ 789.700405][T17681] netlink: 'syz.1.3632': attribute type 2 has an invalid length. [ 789.709442][T17684] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3632'. [ 790.000477][T17702] netlink: 'syz.1.3638': attribute type 10 has an invalid length. [ 790.069638][T17702] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 790.090540][T17703] delete_channel: no stack [ 790.223828][T17706] delete_channel: no stack [ 791.046810][T17716] syzkaller0: entered promiscuous mode [ 791.068517][T17716] syzkaller0: entered allmulticast mode [ 791.094912][T17717] netlink: 'syz.3.3642': attribute type 10 has an invalid length. [ 792.891026][T17717] geneve0: entered promiscuous mode [ 792.912912][T17717] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 793.071429][T17720] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.3643'. [ 793.097630][T17720] net_ratelimit: 333 callbacks suppressed [ 793.097697][T17720] netlink: zone id is out of range [ 793.129583][T17720] netlink: zone id is out of range [ 793.136872][T17721] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3644'. [ 793.153384][T17720] netlink: zone id is out of range [ 793.170034][T17723] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3644'. [ 793.170064][T17720] netlink: zone id is out of range [ 793.203758][T17720] netlink: zone id is out of range [ 793.220245][T17720] netlink: zone id is out of range [ 793.237300][T17720] netlink: zone id is out of range [ 793.264300][T17720] netlink: zone id is out of range [ 793.312052][T17720] netlink: zone id is out of range [ 793.335574][T17720] netlink: zone id is out of range [ 793.542487][ T51] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 793.550120][ T51] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 794.581182][T17741] delete_channel: no stack [ 794.837806][T17746] delete_channel: no stack [ 794.879086][T17748] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3651'. [ 796.029592][T17723] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3644'. [ 796.447057][T17771] FAULT_INJECTION: forcing a failure. [ 796.447057][T17771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.519049][T17771] CPU: 0 PID: 17771 Comm: syz.0.3658 Not tainted syzkaller #0 [ 796.526569][T17771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 796.536643][T17771] Call Trace: [ 796.539934][T17771] [ 796.542879][T17771] dump_stack_lvl+0x18c/0x250 [ 796.547575][T17771] ? show_regs_print_info+0x20/0x20 [ 796.552778][T17771] ? load_image+0x420/0x420 [ 796.557302][T17771] ? __might_fault+0xaa/0x120 [ 796.561973][T17771] ? __lock_acquire+0x7d80/0x7d80 [ 796.566995][T17771] should_fail_ex+0x394/0x4c0 [ 796.571708][T17771] _copy_from_user+0x2f/0xe0 [ 796.576304][T17771] sk_setsockopt+0x2b9/0x2b20 [ 796.580979][T17771] ? sockopt_capable+0x60/0x60 [ 796.585747][T17771] ? aa_sk_perm+0x83c/0x970 [ 796.590251][T17771] ? __fget_files+0x28/0x460 [ 796.594849][T17771] ? aa_af_perm+0x330/0x330 [ 796.599384][T17771] ? __fget_files+0x28/0x460 [ 796.603993][T17771] ? aa_sock_opt_perm+0x74/0x100 [ 796.608938][T17771] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 796.614503][T17771] ? security_socket_setsockopt+0x7e/0xa0 [ 796.620226][T17771] do_sock_setsockopt+0x11b/0x1a0 [ 796.625255][T17771] __x64_sys_setsockopt+0x182/0x200 [ 796.630454][T17771] do_syscall_64+0x55/0xb0 [ 796.634869][T17771] ? clear_bhb_loop+0x40/0x90 [ 796.639541][T17771] ? clear_bhb_loop+0x40/0x90 [ 796.644220][T17771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 796.650108][T17771] RIP: 0033:0x7fedea79e159 [ 796.654517][T17771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.674129][T17771] RSP: 002b:00007fedeb6c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 796.682539][T17771] RAX: ffffffffffffffda RBX: 00007fedeaa26090 RCX: 00007fedea79e159 [ 796.690507][T17771] RDX: 0000000000000042 RSI: 0000000000000001 RDI: 0000000000000009 [ 796.698469][T17771] RBP: 00007fedeb6c0090 R08: 000000000000003b R09: 0000000000000000 [ 796.706434][T17771] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 796.714401][T17771] R13: 00007fedeaa26128 R14: 00007fedeaa26090 R15: 00007ffcd35d77d8 [ 796.722378][T17771] [ 796.816591][T17774] sit0: entered promiscuous mode [ 796.902996][T17778] delete_channel: no stack [ 797.138461][T17784] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3663'. [ 798.880497][T17812] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3668'. [ 799.049771][T17818] FAULT_INJECTION: forcing a failure. [ 799.049771][T17818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.080680][T17818] CPU: 0 PID: 17818 Comm: syz.3.3670 Not tainted syzkaller #0 [ 799.088213][T17818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 799.098333][T17818] Call Trace: [ 799.101643][T17818] [ 799.104604][T17818] dump_stack_lvl+0x18c/0x250 [ 799.109331][T17818] ? show_regs_print_info+0x20/0x20 [ 799.114571][T17818] ? load_image+0x420/0x420 [ 799.119115][T17818] ? __might_fault+0xaa/0x120 [ 799.123830][T17818] ? __lock_acquire+0x7d80/0x7d80 [ 799.128895][T17818] ? perf_trace_lock+0x303/0x3b0 [ 799.133874][T17818] should_fail_ex+0x394/0x4c0 [ 799.138600][T17818] _copy_from_user+0x2f/0xe0 [ 799.143233][T17818] sock_copy_user_timeval+0x20f/0x3e0 [ 799.148656][T17818] ? sock_get_timeout+0x1d0/0x1d0 [ 799.153732][T17818] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 799.159287][T17807] syzkaller0: entered promiscuous mode [ 799.159730][T17818] ? lock_chain_count+0x20/0x20 [ 799.159798][T17818] sock_set_timeout+0xb0/0x2e0 [ 799.159836][T17818] ? sk_setsockopt+0x2b20/0x2b20 [ 799.165758][T17807] syzkaller0: entered allmulticast mode [ 799.170146][T17818] sk_setsockopt+0x13d9/0x2b20 [ 799.170191][T17818] ? sockopt_capable+0x60/0x60 [ 799.170227][T17818] ? aa_sk_perm+0x83c/0x970 [ 799.199442][T17818] ? __fget_files+0x28/0x460 [ 799.204045][T17818] ? aa_af_perm+0x330/0x330 [ 799.208556][T17818] ? __fget_files+0x28/0x460 [ 799.213172][T17818] ? aa_sock_opt_perm+0x74/0x100 [ 799.218110][T17818] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 799.223655][T17818] ? security_socket_setsockopt+0x7e/0xa0 [ 799.229384][T17818] do_sock_setsockopt+0x11b/0x1a0 [ 799.234414][T17818] __x64_sys_setsockopt+0x182/0x200 [ 799.239616][T17818] do_syscall_64+0x55/0xb0 [ 799.244031][T17818] ? clear_bhb_loop+0x40/0x90 [ 799.248715][T17818] ? clear_bhb_loop+0x40/0x90 [ 799.253410][T17818] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 799.259316][T17818] RIP: 0033:0x7f3ad759e159 [ 799.263727][T17818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.283340][T17818] RSP: 002b:00007f3ad849e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 799.291767][T17818] RAX: ffffffffffffffda RBX: 00007f3ad7825fa0 RCX: 00007f3ad759e159 [ 799.299732][T17818] RDX: 0000000000000042 RSI: 0000000000000001 RDI: 0000000000000008 [ 799.307698][T17818] RBP: 00007f3ad849e090 R08: 000000000000003b R09: 0000000000000000 [ 799.315665][T17818] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 799.323628][T17818] R13: 00007f3ad7826038 R14: 00007f3ad7825fa0 R15: 00007ffe50cc4748 [ 799.331615][T17818] [ 799.335895][T17812] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3668'. [ 799.345509][T17809] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3668'. [ 799.399095][T17815] netlink: 'syz.0.3667': attribute type 10 has an invalid length. [ 799.435682][T17815] geneve0: entered promiscuous mode [ 799.483423][T17815] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 799.564539][T17822] delete_channel: no stack [ 801.106248][T17848] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3680'. [ 803.368419][T17860] FAULT_INJECTION: forcing a failure. [ 803.368419][T17860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.382599][T17860] CPU: 1 PID: 17860 Comm: syz.3.3683 Not tainted syzkaller #0 [ 803.390099][T17860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 803.400186][T17860] Call Trace: [ 803.403487][T17860] [ 803.406437][T17860] dump_stack_lvl+0x18c/0x250 [ 803.411146][T17860] ? show_regs_print_info+0x20/0x20 [ 803.416376][T17860] ? load_image+0x420/0x420 [ 803.420905][T17860] ? __lock_acquire+0x7d80/0x7d80 [ 803.425955][T17860] ? snprintf+0xe9/0x140 [ 803.430227][T17860] should_fail_ex+0x394/0x4c0 [ 803.434945][T17860] _copy_to_user+0x2f/0xa0 [ 803.439384][T17860] simple_read_from_buffer+0xe7/0x150 [ 803.444787][T17860] proc_fail_nth_read+0x1e8/0x260 [ 803.449852][T17860] ? proc_fault_inject_write+0x360/0x360 [ 803.455514][T17860] ? fsnotify_perm+0x271/0x5e0 [ 803.460298][T17860] ? proc_fault_inject_write+0x360/0x360 [ 803.465957][T17860] vfs_read+0x298/0x990 [ 803.470145][T17860] ? kernel_read+0x1e0/0x1e0 [ 803.474760][T17860] ? __fget_files+0x28/0x460 [ 803.479372][T17860] ? __fget_files+0x3fc/0x460 [ 803.484088][T17860] ? __fdget_pos+0x2a3/0x330 [ 803.488719][T17860] ? ksys_read+0x74/0x260 [ 803.493074][T17860] ksys_read+0x151/0x260 [ 803.497347][T17860] ? vfs_write+0x9a0/0x9a0 [ 803.501792][T17860] ? lockdep_hardirqs_on+0x98/0x150 [ 803.507038][T17860] do_syscall_64+0x55/0xb0 [ 803.511473][T17860] ? clear_bhb_loop+0x40/0x90 [ 803.516166][T17860] ? clear_bhb_loop+0x40/0x90 [ 803.520882][T17860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 803.526808][T17860] RIP: 0033:0x7f3ad755e98e [ 803.531248][T17860] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 803.550872][T17860] RSP: 002b:00007f3ad849dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 803.559314][T17860] RAX: ffffffffffffffda RBX: 00007f3ad849e6c0 RCX: 00007f3ad755e98e [ 803.567301][T17860] RDX: 000000000000000f RSI: 00007f3ad849e0a0 RDI: 0000000000000008 [ 803.575289][T17860] RBP: 00007f3ad849e090 R08: 0000000000000000 R09: 0000000000000000 [ 803.583270][T17860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.591259][T17860] R13: 00007f3ad7826038 R14: 00007f3ad7825fa0 R15: 00007ffe50cc4748 [ 803.599283][T17860] [ 803.635973][T17861] delete_channel: no stack [ 803.723736][T17870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3686'. [ 805.919975][T17887] delete_channel: no stack [ 806.442166][T17903] delete_channel: no stack [ 807.670188][T17940] netlink: 'syz.2.3705': attribute type 21 has an invalid length. [ 807.708687][T17946] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3705'. [ 808.593965][T17947] delete_channel: no stack [ 808.751861][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.758205][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.837371][T17960] syzkaller0: entered promiscuous mode [ 810.846999][T17960] syzkaller0: entered allmulticast mode [ 810.895874][T17967] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3715'. [ 810.919897][T17971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3716'. [ 811.055416][T17973] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3726'. [ 811.452046][T17976] syzkaller0: entered promiscuous mode [ 811.458203][T17976] syzkaller0: entered allmulticast mode [ 811.505297][T17978] netlink: 'syz.1.3717': attribute type 10 has an invalid length. [ 813.606231][T17978] geneve0: entered promiscuous mode [ 813.646755][T17978] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 813.683565][T17982] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3719'. [ 814.703484][T18005] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3728'. [ 814.954969][T18007] delete_channel: no stack [ 815.636478][T18018] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3723'. [ 816.778740][T17994] netlink: 'syz.3.3723': attribute type 12 has an invalid length. [ 816.786906][T17994] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3723'. [ 816.804255][T18018] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3723'. [ 817.837516][T18029] delete_channel: no stack [ 818.974798][T18054] delete_channel: no stack [ 819.155878][T18058] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3740'. [ 819.205933][T18060] netlink: 'syz.0.3741': attribute type 4 has an invalid length. [ 819.240672][T18060] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3741'. [ 819.964708][T18072] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 820.262604][T18077] delete_channel: no stack [ 820.663557][T18088] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3749'. [ 820.780118][T18088] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.3749'. [ 820.809588][T18092] delete_channel: no stack [ 821.420444][T18124] netlink: 'syz.0.3760': attribute type 1 has an invalid length. [ 821.429459][T18124] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3760'. [ 821.844624][T18129] delete_channel: no stack [ 821.938400][T18131] delete_channel: no stack [ 822.018822][T18134] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3764'. [ 822.036939][T18134] net_ratelimit: 331 callbacks suppressed [ 822.036977][T18134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 822.558226][T18152] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 822.567691][T18152] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 822.767640][T18157] delete_channel: no stack [ 823.208070][T18159] delete_channel: no stack [ 823.469375][T18166] delete_channel: no stack [ 823.543914][T18171] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3777'. [ 823.726077][T18168] delete_channel: no stack [ 824.405467][T18180] netlink: 'syz.1.3779': attribute type 10 has an invalid length. [ 824.432218][T18180] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3779'. [ 824.613437][T18186] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3783'. [ 824.657012][T18195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3782'. [ 824.666311][T18195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3782'. [ 824.676687][T18188] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3782'. [ 824.687157][T18191] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3782'. [ 824.700779][T18193] delete_channel: no stack [ 824.942770][T18202] delete_channel: no stack [ 824.987980][T18201] netlink: 'syz.0.3788': attribute type 9 has an invalid length. [ 825.000751][T18201] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3788'. [ 825.177003][T18207] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3791'. [ 825.208278][T18205] mac80211_hwsim hwsim17 wlan0: left promiscuous mode [ 825.224958][T18205] mac80211_hwsim hwsim17 wlan0: left allmulticast mode [ 825.355603][T18209] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 825.364783][T18209] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 825.805937][T18220] netlink: 56843 bytes leftover after parsing attributes in process `syz.2.3795'. [ 825.859362][T18230] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3797'. [ 826.382541][T18244] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 826.390296][T18244] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode [ 826.631605][T18248] netlink: 'syz.1.3806': attribute type 9 has an invalid length. [ 827.646569][T18284] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 827.661101][T18284] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode [ 827.739291][T18288] netlink: 'syz.0.3822': attribute type 10 has an invalid length. [ 828.085879][T18291] netlink: 'syz.2.3823': attribute type 9 has an invalid length. [ 829.065857][T18331] netlink: 'syz.0.3833': attribute type 6 has an invalid length. [ 829.088221][T18331] netlink: 'syz.0.3833': attribute type 3 has an invalid length. [ 830.296250][T18357] __nla_validate_parse: 23 callbacks suppressed [ 830.296289][T18357] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3842'. [ 830.702851][T18366] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3845'. [ 830.722075][T18366] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3845'. [ 830.745206][T18364] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3845'. [ 830.771499][T18365] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3845'. [ 830.951405][T18373] delete_channel: no stack [ 831.000523][T18378] netlink: 'syz.2.3851': attribute type 28 has an invalid length. [ 831.022111][T18378] netlink: 'syz.2.3851': attribute type 29 has an invalid length. [ 831.030178][T18378] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3851'. [ 831.203711][T18381] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3852'. [ 831.637357][T18408] netlink: 'syz.2.3856': attribute type 10 has an invalid length. [ 831.667434][T18409] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3858'. [ 831.703374][T18408] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3856'. [ 831.779782][T18408] batman_adv: batadv0: Adding interface: veth0_vlan [ 831.827185][T18408] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.018929][T18408] batman_adv: batadv0: Interface activated: veth0_vlan [ 832.133645][T18409] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3858'. [ 832.291713][T18420] delete_channel: no stack [ 844.921454][T18457] delete_channel: no stack [ 844.934902][T18462] __nla_validate_parse: 4 callbacks suppressed [ 844.934917][T18462] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3871'. [ 844.967125][T18462] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3871'. [ 844.983468][T18456] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3871'. [ 844.997766][T18458] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3871'. [ 845.070663][T18465] delete_channel: no stack [ 845.449765][T18480] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3880'. [ 846.283313][T18484] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3881'. [ 846.347212][T18496] delete_channel: no stack [ 846.391305][T18501] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3884'. [ 846.420072][T18501] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3884'. [ 846.435849][T18495] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3884'. [ 846.465226][T18498] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3884'. [ 846.535792][T18502] delete_channel: no stack [ 847.056959][T18530] netlink: 'syz.3.3896': attribute type 2 has an invalid length. [ 847.206111][T18534] delete_channel: no stack [ 847.840529][T18565] delete_channel: no stack [ 847.946709][T18574] FAULT_INJECTION: forcing a failure. [ 847.946709][T18574] name failslab, interval 1, probability 0, space 0, times 0 [ 848.307887][T18574] CPU: 0 PID: 18574 Comm: syz.1.3910 Not tainted syzkaller #0 [ 848.315430][T18574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 848.325529][T18574] Call Trace: [ 848.328857][T18574] [ 848.331841][T18574] dump_stack_lvl+0x18c/0x250 [ 848.336591][T18574] ? show_regs_print_info+0x20/0x20 [ 848.341854][T18574] ? load_image+0x420/0x420 [ 848.346422][T18574] ? __might_sleep+0xe0/0xe0 [ 848.351066][T18574] ? __lock_acquire+0x7d80/0x7d80 [ 848.356140][T18574] should_fail_ex+0x394/0x4c0 [ 848.360849][T18574] should_failslab+0x9/0x20 [ 848.365404][T18574] slab_pre_alloc_hook+0x59/0x300 [ 848.370457][T18574] kmem_cache_alloc+0x5a/0x2c0 [ 848.375231][T18574] ? getname_flags+0xbb/0x500 [ 848.379927][T18574] getname_flags+0xbb/0x500 [ 848.384436][T18574] ? syscall_enter_from_user_mode+0x25/0x80 [ 848.390351][T18574] __x64_sys_unlink+0x3c/0x50 [ 848.395036][T18574] do_syscall_64+0x55/0xb0 [ 848.399464][T18574] ? clear_bhb_loop+0x40/0x90 [ 848.404156][T18574] ? clear_bhb_loop+0x40/0x90 [ 848.408854][T18574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 848.414762][T18574] RIP: 0033:0x7f2ba279e159 [ 848.419192][T18574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.438812][T18574] RSP: 002b:00007f2ba358e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 848.447243][T18574] RAX: ffffffffffffffda RBX: 00007f2ba2a25fa0 RCX: 00007f2ba279e159 [ 848.455224][T18574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 848.463207][T18574] RBP: 00007f2ba358e090 R08: 0000000000000000 R09: 0000000000000000 [ 848.471186][T18574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.479161][T18574] R13: 00007f2ba2a26038 R14: 00007f2ba2a25fa0 R15: 00007ffe0efc6238 [ 848.487174][T18574] [ 852.263162][T18607] __nla_validate_parse: 12 callbacks suppressed [ 852.263178][T18607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3920'. [ 852.299019][T18606] netlink: 'syz.0.3922': attribute type 39 has an invalid length. [ 852.411843][T18607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3920'. [ 852.425189][T18601] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3920'. [ 852.437208][T18604] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3920'. [ 852.867200][T18625] delete_channel: no stack [ 853.432597][T18648] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3933'. [ 853.456728][T18648] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3933'. [ 853.478417][T18642] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3933'. [ 853.502370][T18645] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3933'. [ 853.548233][T18651] delete_channel: no stack [ 853.969308][T18664] netlink: 'syz.3.3943': attribute type 6 has an invalid length. [ 853.997533][T18664] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3943'. [ 854.305756][T18677] netlink: 'syz.3.3944': attribute type 39 has an invalid length. [ 854.353671][T18688] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3946'. [ 854.427078][T18689] delete_channel: no stack [ 855.241925][T18709] delete_channel: no stack [ 856.722297][T18747] delete_channel: no stack [ 856.834243][T18753] delete_channel: no stack [ 857.449512][T18775] __nla_validate_parse: 15 callbacks suppressed [ 857.449565][T18775] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3979'. [ 857.656381][T18781] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3980'. [ 857.669197][T18781] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3980'. [ 857.683701][T18778] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3980'. [ 857.710487][T18779] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3980'. [ 857.864435][T18784] delete_channel: no stack [ 857.884495][T18788] delete_channel: no stack [ 858.109116][T18796] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3986'. [ 858.295681][T18806] netlink: 'syz.2.3989': attribute type 21 has an invalid length. [ 858.311125][T18806] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3989'. [ 858.623759][T18817] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3992'. [ 858.668022][T18817] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3992'. [ 858.724512][T18813] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3992'. [ 858.748952][T18819] delete_channel: no stack [ 858.786642][T18821] delete_channel: no stack [ 858.929360][T18828] netlink: 'syz.0.3996': attribute type 3 has an invalid length. [ 858.937441][T18828] netlink: 'syz.0.3996': attribute type 1 has an invalid length. [ 859.035394][T18831] netlink: 'syz.3.3999': attribute type 39 has an invalid length. [ 859.710730][T18851] delete_channel: no stack [ 859.898388][T18853] delete_channel: no stack [ 860.234338][T18863] FAULT_INJECTION: forcing a failure. [ 860.234338][T18863] name failslab, interval 1, probability 0, space 0, times 0 [ 860.273040][T18863] CPU: 1 PID: 18863 Comm: syz.0.4010 Not tainted syzkaller #0 [ 860.280574][T18863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 860.290650][T18863] Call Trace: [ 860.293950][T18863] [ 860.296895][T18863] dump_stack_lvl+0x18c/0x250 [ 860.301603][T18863] ? show_regs_print_info+0x20/0x20 [ 860.306828][T18863] ? load_image+0x420/0x420 [ 860.311353][T18863] ? __lock_acquire+0x7d80/0x7d80 [ 860.316395][T18863] ? rcu_is_watching+0x15/0xb0 [ 860.321182][T18863] ? __alloc_pages+0x276/0x460 [ 860.325970][T18863] should_fail_ex+0x394/0x4c0 [ 860.330678][T18863] should_failslab+0x9/0x20 [ 860.335213][T18863] slab_pre_alloc_hook+0x59/0x300 [ 860.340369][T18863] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 860.346290][T18863] __kmem_cache_alloc_node+0x53/0x250 [ 860.351687][T18863] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 860.357608][T18863] kmalloc_trace+0x2a/0xe0 [ 860.362053][T18863] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 860.367804][T18863] ? sctp_stream_interleave_init+0x55/0x90 [ 860.373638][T18863] sctp_association_new+0x15be/0x25b0 [ 860.379050][T18863] sctp_connect_new_asoc+0x2de/0x6a0 [ 860.384383][T18863] ? __sctp_connect+0xd80/0xd80 [ 860.389257][T18863] ? __local_bh_enable_ip+0x13a/0x1c0 [ 860.394835][T18863] ? _local_bh_enable+0xa0/0xa0 [ 860.399702][T18863] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 860.405542][T18863] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 860.411387][T18863] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 860.416952][T18863] ? security_sctp_bind_connect+0x89/0xb0 [ 860.422692][T18863] sctp_sendmsg+0x1519/0x27b0 [ 860.427403][T18863] ? sctp_getsockopt+0xb60/0xb60 [ 860.432370][T18863] ? aa_af_perm+0x330/0x330 [ 860.436894][T18863] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 860.443327][T18863] ? sock_rps_record_flow+0x19/0x3f0 [ 860.448635][T18863] ? inet_sendmsg+0x7e/0x2a0 [ 860.453241][T18863] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 860.458550][T18863] ? inet_send_prepare+0x250/0x250 [ 860.463689][T18863] ____sys_sendmsg+0x61b/0x980 [ 860.468484][T18863] ? __asan_memset+0x22/0x40 [ 860.473098][T18863] ? __sys_sendmsg_sock+0x30/0x30 [ 860.478144][T18863] ? __import_iovec+0x5f2/0x850 [ 860.483029][T18863] ? import_iovec+0x73/0xa0 [ 860.487562][T18863] ___sys_sendmsg+0x2a6/0x360 [ 860.492261][T18863] ? get_pid_task+0x20/0x1e0 [ 860.496877][T18863] ? __sys_sendmsg+0x2b0/0x2b0 [ 860.501681][T18863] ? __lock_acquire+0x7d80/0x7d80 [ 860.506759][T18863] __se_sys_sendmsg+0x1d0/0x2c0 [ 860.511637][T18863] ? __x64_sys_sendmsg+0x80/0x80 [ 860.516615][T18863] ? lockdep_hardirqs_on+0x98/0x150 [ 860.521832][T18863] do_syscall_64+0x55/0xb0 [ 860.526278][T18863] ? clear_bhb_loop+0x40/0x90 [ 860.530990][T18863] ? clear_bhb_loop+0x40/0x90 [ 860.535707][T18863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 860.541637][T18863] RIP: 0033:0x7fedea79e159 [ 860.546076][T18863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.565708][T18863] RSP: 002b:00007fedeb6e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 860.574156][T18863] RAX: ffffffffffffffda RBX: 00007fedeaa25fa0 RCX: 00007fedea79e159 [ 860.582591][T18863] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 860.590594][T18863] RBP: 00007fedeb6e1090 R08: 0000000000000000 R09: 0000000000000000 [ 860.598600][T18863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.606632][T18863] R13: 00007fedeaa26038 R14: 00007fedeaa25fa0 R15: 00007ffcd35d77d8 [ 860.614641][T18863] [ 860.838692][T18881] delete_channel: no stack [ 860.970076][T18887] delete_channel: no stack [ 861.497097][T18902] netlink: 'syz.0.4024': attribute type 10 has an invalid length. [ 861.519765][T18902] mac80211_hwsim hwsim22 wlan1: left allmulticast mode [ 861.537610][T18902] bond0: (slave wlan1): Releasing backup interface [ 861.559629][T18902] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode [ 861.572817][T18902] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 861.596842][T18902] team0: Port device wlan1 added [ 861.610613][T18901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 861.805040][T18908] delete_channel: no stack [ 861.817416][T18910] delete_channel: no stack [ 862.143936][T18929] netlink: 'syz.1.4032': attribute type 21 has an invalid length. [ 862.170898][T18931] FAULT_INJECTION: forcing a failure. [ 862.170898][T18931] name failslab, interval 1, probability 0, space 0, times 0 [ 862.186523][T18931] CPU: 0 PID: 18931 Comm: syz.3.4034 Not tainted syzkaller #0 [ 862.194029][T18931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 862.204107][T18931] Call Trace: [ 862.207406][T18931] [ 862.210350][T18931] dump_stack_lvl+0x18c/0x250 [ 862.215052][T18931] ? verify_lock_unused+0x140/0x140 [ 862.220321][T18931] ? show_regs_print_info+0x20/0x20 [ 862.225538][T18931] ? load_image+0x420/0x420 [ 862.230045][T18931] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 862.236030][T18931] ? lock_chain_count+0x20/0x20 [ 862.240879][T18931] should_fail_ex+0x394/0x4c0 [ 862.245559][T18931] should_failslab+0x9/0x20 [ 862.250064][T18931] slab_pre_alloc_hook+0x59/0x300 [ 862.255089][T18931] ? urandom_read_iter+0x140/0x140 [ 862.260326][T18931] ? sctp_add_bind_addr+0x8c/0x360 [ 862.265438][T18931] __kmem_cache_alloc_node+0x53/0x250 [ 862.270811][T18931] ? sctp_add_bind_addr+0x8c/0x360 [ 862.275921][T18931] kmalloc_trace+0x2a/0xe0 [ 862.280346][T18931] sctp_add_bind_addr+0x8c/0x360 [ 862.285283][T18931] sctp_copy_local_addr_list+0x31b/0x4e0 [ 862.290913][T18931] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 862.296636][T18931] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 862.302701][T18931] ? sctp_v4_is_any+0x35/0x60 [ 862.307371][T18931] ? sctp_copy_one_addr+0x8c/0x350 [ 862.312485][T18931] sctp_bind_addr_copy+0xb3/0x3c0 [ 862.317505][T18931] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 862.323828][T18931] sctp_connect_new_asoc+0x2f9/0x6a0 [ 862.329124][T18931] ? __sctp_connect+0xd80/0xd80 [ 862.333965][T18931] ? __local_bh_enable_ip+0x13a/0x1c0 [ 862.339327][T18931] ? _local_bh_enable+0xa0/0xa0 [ 862.344180][T18931] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 862.349984][T18931] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 862.355786][T18931] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 862.361326][T18931] ? security_sctp_bind_connect+0x89/0xb0 [ 862.367041][T18931] sctp_sendmsg+0x1519/0x27b0 [ 862.371731][T18931] ? sctp_getsockopt+0xb60/0xb60 [ 862.376663][T18931] ? lock_chain_count+0x20/0x20 [ 862.381527][T18931] ? lockdep_hardirqs_on+0x98/0x150 [ 862.386722][T18931] ? sock_rps_record_flow+0x19/0x3f0 [ 862.392003][T18931] ? inet_sendmsg+0x7e/0x2a0 [ 862.396583][T18931] ? inet_send_prepare+0x250/0x250 [ 862.401685][T18931] ____sys_sendmsg+0x61b/0x980 [ 862.406457][T18931] ? __asan_memset+0x22/0x40 [ 862.411048][T18931] ? __sys_sendmsg_sock+0x30/0x30 [ 862.416077][T18931] ? __import_iovec+0x5f2/0x850 [ 862.420934][T18931] ? import_iovec+0x73/0xa0 [ 862.425436][T18931] ___sys_sendmsg+0x2a6/0x360 [ 862.430108][T18931] ? get_pid_task+0x20/0x1e0 [ 862.434696][T18931] ? __sys_sendmsg+0x2b0/0x2b0 [ 862.439469][T18931] ? __lock_acquire+0x7d80/0x7d80 [ 862.444509][T18931] __se_sys_sendmsg+0x1d0/0x2c0 [ 862.449360][T18931] ? __x64_sys_sendmsg+0x80/0x80 [ 862.454314][T18931] do_syscall_64+0x55/0xb0 [ 862.458725][T18931] ? clear_bhb_loop+0x40/0x90 [ 862.463408][T18931] ? clear_bhb_loop+0x40/0x90 [ 862.468085][T18931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 862.473971][T18931] RIP: 0033:0x7f3ad759e159 [ 862.478402][T18931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.497999][T18931] RSP: 002b:00007f3ad849e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 862.506410][T18931] RAX: ffffffffffffffda RBX: 00007f3ad7825fa0 RCX: 00007f3ad759e159 [ 862.514373][T18931] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 862.522360][T18931] RBP: 00007f3ad849e090 R08: 0000000000000000 R09: 0000000000000000 [ 862.530328][T18931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.538291][T18931] R13: 00007f3ad7826038 R14: 00007f3ad7825fa0 R15: 00007ffe50cc4748 [ 862.546268][T18931] [ 862.819838][T18941] delete_channel: no stack [ 862.841415][T18943] __nla_validate_parse: 14 callbacks suppressed [ 862.841432][T18943] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4037'. [ 862.857108][T18943] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4037'. [ 862.866595][T18939] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4037'. [ 862.877219][T18940] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4037'. [ 862.952725][T18944] delete_channel: no stack [ 863.365128][T18961] delete_channel: no stack [ 863.528547][T18970] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4048'. [ 863.537988][T18970] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4048'. [ 863.553116][T18966] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4048'. [ 863.573577][T18967] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4048'. [ 863.815025][T18974] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4051'. [ 863.869091][T18974] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 864.018691][T18979] FAULT_INJECTION: forcing a failure. [ 864.018691][T18979] name failslab, interval 1, probability 0, space 0, times 0 [ 864.051273][T18979] CPU: 0 PID: 18979 Comm: syz.1.4053 Not tainted syzkaller #0 [ 864.058792][T18979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 864.068872][T18979] Call Trace: [ 864.072173][T18979] [ 864.075115][T18979] dump_stack_lvl+0x18c/0x250 [ 864.079815][T18979] ? sctp_sendmsg+0x1519/0x27b0 [ 864.084693][T18979] ? ___sys_sendmsg+0x2a6/0x360 [ 864.089575][T18979] ? show_regs_print_info+0x20/0x20 [ 864.094799][T18979] ? load_image+0x420/0x420 [ 864.099339][T18979] should_fail_ex+0x394/0x4c0 [ 864.104045][T18979] should_failslab+0x9/0x20 [ 864.108567][T18979] slab_pre_alloc_hook+0x59/0x300 [ 864.113617][T18979] ? sctp_add_bind_addr+0x8c/0x360 [ 864.118758][T18979] __kmem_cache_alloc_node+0x53/0x250 [ 864.124160][T18979] ? sctp_add_bind_addr+0x8c/0x360 [ 864.129299][T18979] kmalloc_trace+0x2a/0xe0 [ 864.133734][T18979] sctp_add_bind_addr+0x8c/0x360 [ 864.138677][T18979] sctp_copy_local_addr_list+0x31b/0x4e0 [ 864.144313][T18979] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 864.150030][T18979] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 864.156094][T18979] ? sctp_v4_is_any+0x35/0x60 [ 864.160765][T18979] ? sctp_copy_one_addr+0x8c/0x350 [ 864.165874][T18979] sctp_bind_addr_copy+0xb3/0x3c0 [ 864.170895][T18979] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 864.177214][T18979] sctp_connect_new_asoc+0x2f9/0x6a0 [ 864.182493][T18979] ? __sctp_connect+0xd80/0xd80 [ 864.187330][T18979] ? __local_bh_enable_ip+0x13a/0x1c0 [ 864.192691][T18979] ? _local_bh_enable+0xa0/0xa0 [ 864.197537][T18979] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 864.203364][T18979] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 864.209167][T18979] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 864.214717][T18979] ? security_sctp_bind_connect+0x89/0xb0 [ 864.220436][T18979] sctp_sendmsg+0x1519/0x27b0 [ 864.225122][T18979] ? sctp_getsockopt+0xb60/0xb60 [ 864.230060][T18979] ? aa_af_perm+0x330/0x330 [ 864.234561][T18979] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 864.240973][T18979] ? sock_rps_record_flow+0x19/0x3f0 [ 864.246251][T18979] ? inet_sendmsg+0x7e/0x2a0 [ 864.250829][T18979] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 864.256114][T18979] ? inet_send_prepare+0x250/0x250 [ 864.261220][T18979] ____sys_sendmsg+0x61b/0x980 [ 864.265988][T18979] ? __asan_memset+0x22/0x40 [ 864.270573][T18979] ? __sys_sendmsg_sock+0x30/0x30 [ 864.275589][T18979] ? __import_iovec+0x5f2/0x850 [ 864.280442][T18979] ? import_iovec+0x73/0xa0 [ 864.284944][T18979] ___sys_sendmsg+0x2a6/0x360 [ 864.289614][T18979] ? get_pid_task+0x20/0x1e0 [ 864.294206][T18979] ? __sys_sendmsg+0x2b0/0x2b0 [ 864.298981][T18979] ? __lock_acquire+0x7d80/0x7d80 [ 864.304016][T18979] __se_sys_sendmsg+0x1d0/0x2c0 [ 864.308866][T18979] ? __x64_sys_sendmsg+0x80/0x80 [ 864.313808][T18979] ? lockdep_hardirqs_on+0x98/0x150 [ 864.319001][T18979] do_syscall_64+0x55/0xb0 [ 864.323415][T18979] ? clear_bhb_loop+0x40/0x90 [ 864.328085][T18979] ? clear_bhb_loop+0x40/0x90 [ 864.332756][T18979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 864.338642][T18979] RIP: 0033:0x7f2ba279e159 [ 864.343054][T18979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.362651][T18979] RSP: 002b:00007f2ba358e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.371065][T18979] RAX: ffffffffffffffda RBX: 00007f2ba2a25fa0 RCX: 00007f2ba279e159 [ 864.379029][T18979] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 864.386992][T18979] RBP: 00007f2ba358e090 R08: 0000000000000000 R09: 0000000000000000 [ 864.394962][T18979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.402924][T18979] R13: 00007f2ba2a26038 R14: 00007f2ba2a25fa0 R15: 00007ffe0efc6238 [ 864.410901][T18979] [ 864.563468][T18988] delete_channel: no stack [ 864.688257][T18997] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4058'. [ 865.014344][T19012] delete_channel: no stack [ 865.376987][T19032] FAULT_INJECTION: forcing a failure. [ 865.376987][T19032] name failslab, interval 1, probability 0, space 0, times 0 [ 865.417817][T19032] CPU: 0 PID: 19032 Comm: syz.2.4073 Not tainted syzkaller #0 [ 865.425329][T19032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 865.435397][T19032] Call Trace: [ 865.438670][T19032] [ 865.441606][T19032] dump_stack_lvl+0x18c/0x250 [ 865.446286][T19032] ? sctp_sendmsg+0x1519/0x27b0 [ 865.451147][T19032] ? ___sys_sendmsg+0x2a6/0x360 [ 865.456019][T19032] ? show_regs_print_info+0x20/0x20 [ 865.461216][T19032] ? load_image+0x420/0x420 [ 865.465724][T19032] should_fail_ex+0x394/0x4c0 [ 865.470403][T19032] should_failslab+0x9/0x20 [ 865.474905][T19032] slab_pre_alloc_hook+0x59/0x300 [ 865.479931][T19032] ? sctp_add_bind_addr+0x8c/0x360 [ 865.485040][T19032] __kmem_cache_alloc_node+0x53/0x250 [ 865.490413][T19032] ? sctp_add_bind_addr+0x8c/0x360 [ 865.495519][T19032] kmalloc_trace+0x2a/0xe0 [ 865.499935][T19032] sctp_add_bind_addr+0x8c/0x360 [ 865.504875][T19032] sctp_copy_local_addr_list+0x31b/0x4e0 [ 865.510504][T19032] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 865.516223][T19032] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 865.522292][T19032] ? sctp_v4_is_any+0x35/0x60 [ 865.526962][T19032] ? sctp_copy_one_addr+0x8c/0x350 [ 865.532068][T19032] sctp_bind_addr_copy+0xb3/0x3c0 [ 865.537087][T19032] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 865.543423][T19032] sctp_connect_new_asoc+0x2f9/0x6a0 [ 865.548700][T19032] ? __sctp_connect+0xd80/0xd80 [ 865.553538][T19032] ? __local_bh_enable_ip+0x13a/0x1c0 [ 865.558901][T19032] ? _local_bh_enable+0xa0/0xa0 [ 865.563742][T19032] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 865.569546][T19032] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 865.575346][T19032] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 865.580905][T19032] ? security_sctp_bind_connect+0x89/0xb0 [ 865.586643][T19032] sctp_sendmsg+0x1519/0x27b0 [ 865.591339][T19032] ? sctp_getsockopt+0xb60/0xb60 [ 865.596287][T19032] ? aa_af_perm+0x330/0x330 [ 865.600793][T19032] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 865.607205][T19032] ? sock_rps_record_flow+0x19/0x3f0 [ 865.612490][T19032] ? inet_sendmsg+0x7e/0x2a0 [ 865.617073][T19032] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 865.622354][T19032] ? inet_send_prepare+0x250/0x250 [ 865.627457][T19032] ____sys_sendmsg+0x61b/0x980 [ 865.632222][T19032] ? __asan_memset+0x22/0x40 [ 865.636809][T19032] ? __sys_sendmsg_sock+0x30/0x30 [ 865.641837][T19032] ? __import_iovec+0x5f2/0x850 [ 865.646780][T19032] ? import_iovec+0x73/0xa0 [ 865.651280][T19032] ___sys_sendmsg+0x2a6/0x360 [ 865.655963][T19032] ? __sys_sendmsg+0x2b0/0x2b0 [ 865.660737][T19032] ? lock_chain_count+0x20/0x20 [ 865.665602][T19032] __se_sys_sendmsg+0x1d0/0x2c0 [ 865.670448][T19032] ? __x64_sys_sendmsg+0x80/0x80 [ 865.675395][T19032] ? lockdep_hardirqs_on+0x98/0x150 [ 865.680591][T19032] do_syscall_64+0x55/0xb0 [ 865.685001][T19032] ? clear_bhb_loop+0x40/0x90 [ 865.689677][T19032] ? clear_bhb_loop+0x40/0x90 [ 865.694350][T19032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 865.700237][T19032] RIP: 0033:0x7ff8e699e159 [ 865.704648][T19032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.724245][T19032] RSP: 002b:00007ff8e78db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 865.732651][T19032] RAX: ffffffffffffffda RBX: 00007ff8e6c25fa0 RCX: 00007ff8e699e159 [ 865.740612][T19032] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 865.748576][T19032] RBP: 00007ff8e78db090 R08: 0000000000000000 R09: 0000000000000000 [ 865.756539][T19032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.764504][T19032] R13: 00007ff8e6c26038 R14: 00007ff8e6c25fa0 R15: 00007ffd850c3468 [ 865.772482][T19032] [ 866.049404][T19044] delete_channel: no stack [ 866.674570][T19067] netlink: 'syz.3.4085': attribute type 3 has an invalid length. [ 866.700668][T19069] netlink: 'syz.3.4085': attribute type 3 has an invalid length. [ 867.567937][T19082] FAULT_INJECTION: forcing a failure. [ 867.567937][T19082] name failslab, interval 1, probability 0, space 0, times 0 [ 867.639207][T19082] CPU: 1 PID: 19082 Comm: syz.3.4090 Not tainted syzkaller #0 [ 867.646721][T19082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 867.656804][T19082] Call Trace: [ 867.660094][T19082] [ 867.663034][T19082] dump_stack_lvl+0x18c/0x250 [ 867.667731][T19082] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 867.673912][T19082] ? show_regs_print_info+0x20/0x20 [ 867.679144][T19082] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 867.685333][T19082] should_fail_ex+0x394/0x4c0 [ 867.690039][T19082] should_failslab+0x9/0x20 [ 867.694562][T19082] slab_pre_alloc_hook+0x59/0x300 [ 867.699611][T19082] ? sctp_add_bind_addr+0x8c/0x360 [ 867.704743][T19082] __kmem_cache_alloc_node+0x53/0x250 [ 867.710137][T19082] ? sctp_add_bind_addr+0x8c/0x360 [ 867.715267][T19082] kmalloc_trace+0x2a/0xe0 [ 867.719715][T19082] sctp_add_bind_addr+0x8c/0x360 [ 867.724675][T19082] sctp_copy_local_addr_list+0x31b/0x4e0 [ 867.730338][T19082] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 867.736091][T19082] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 867.742195][T19082] ? sctp_v4_is_any+0x35/0x60 [ 867.746896][T19082] ? sctp_copy_one_addr+0x8c/0x350 [ 867.752038][T19082] sctp_bind_addr_copy+0xb3/0x3c0 [ 867.757084][T19082] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 867.763432][T19082] sctp_connect_new_asoc+0x2f9/0x6a0 [ 867.768758][T19082] ? __sctp_connect+0xd80/0xd80 [ 867.773618][T19082] ? __local_bh_enable_ip+0x13a/0x1c0 [ 867.779007][T19082] ? _local_bh_enable+0xa0/0xa0 [ 867.783873][T19082] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 867.789700][T19082] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 867.795524][T19082] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 867.801085][T19082] ? security_sctp_bind_connect+0x89/0xb0 [ 867.806821][T19082] sctp_sendmsg+0x1519/0x27b0 [ 867.811532][T19082] ? sctp_getsockopt+0xb60/0xb60 [ 867.816486][T19082] ? lockdep_hardirqs_on+0x98/0x150 [ 867.821702][T19082] ? aa_af_perm+0x330/0x330 [ 867.826227][T19082] ? aa_sock_msg_perm+0x94/0x150 [ 867.831182][T19082] ? sock_rps_record_flow+0x19/0x3f0 [ 867.836482][T19082] ? inet_sendmsg+0x7e/0x2a0 [ 867.841082][T19082] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 867.846380][T19082] ? inet_send_prepare+0x250/0x250 [ 867.851504][T19082] ____sys_sendmsg+0x61b/0x980 [ 867.856290][T19082] ? __asan_memset+0x22/0x40 [ 867.860900][T19082] ? __sys_sendmsg_sock+0x30/0x30 [ 867.865935][T19082] ? __import_iovec+0x5f2/0x850 [ 867.870815][T19082] ? import_iovec+0x73/0xa0 [ 867.875345][T19082] ___sys_sendmsg+0x2a6/0x360 [ 867.880042][T19082] ? __sys_sendmsg+0x2b0/0x2b0 [ 867.884843][T19082] ? __lock_acquire+0x7d80/0x7d80 [ 867.889911][T19082] __se_sys_sendmsg+0x1d0/0x2c0 [ 867.894777][T19082] ? __x64_sys_sendmsg+0x80/0x80 [ 867.899747][T19082] ? lockdep_hardirqs_on+0x98/0x150 [ 867.904960][T19082] do_syscall_64+0x55/0xb0 [ 867.909388][T19082] ? clear_bhb_loop+0x40/0x90 [ 867.914078][T19082] ? clear_bhb_loop+0x40/0x90 [ 867.918771][T19082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 867.924679][T19082] RIP: 0033:0x7f3ad759e159 [ 867.929105][T19082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.948723][T19082] RSP: 002b:00007f3ad849e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 867.957152][T19082] RAX: ffffffffffffffda RBX: 00007f3ad7825fa0 RCX: 00007f3ad759e159 [ 867.965135][T19082] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 867.973114][T19082] RBP: 00007f3ad849e090 R08: 0000000000000000 R09: 0000000000000000 [ 867.981097][T19082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.989075][T19082] R13: 00007f3ad7826038 R14: 00007f3ad7825fa0 R15: 00007ffe50cc4748 [ 867.997075][T19082] [ 868.647503][T19087] __nla_validate_parse: 17 callbacks suppressed [ 868.647543][T19087] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4091'. [ 868.906305][T19095] FAULT_INJECTION: forcing a failure. [ 868.906305][T19095] name failslab, interval 1, probability 0, space 0, times 0 [ 868.919859][T19095] CPU: 1 PID: 19095 Comm: syz.0.4101 Not tainted syzkaller #0 [ 868.927357][T19095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 868.937418][T19095] Call Trace: [ 868.940693][T19095] [ 868.943620][T19095] dump_stack_lvl+0x18c/0x250 [ 868.948308][T19095] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 868.954464][T19095] ? show_regs_print_info+0x20/0x20 [ 868.959660][T19095] ? load_image+0x420/0x420 [ 868.964171][T19095] should_fail_ex+0x394/0x4c0 [ 868.968851][T19095] should_failslab+0x9/0x20 [ 868.973357][T19095] slab_pre_alloc_hook+0x59/0x300 [ 868.978388][T19095] ? sctp_add_bind_addr+0x8c/0x360 [ 868.983501][T19095] __kmem_cache_alloc_node+0x53/0x250 [ 868.988910][T19095] ? sctp_add_bind_addr+0x8c/0x360 [ 868.994016][T19095] kmalloc_trace+0x2a/0xe0 [ 868.998432][T19095] sctp_add_bind_addr+0x8c/0x360 [ 869.003372][T19095] sctp_copy_local_addr_list+0x31b/0x4e0 [ 869.009003][T19095] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 869.014717][T19095] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 869.020797][T19095] ? sctp_v4_is_any+0x35/0x60 [ 869.025478][T19095] ? sctp_copy_one_addr+0x8c/0x350 [ 869.030588][T19095] sctp_bind_addr_copy+0xb3/0x3c0 [ 869.035615][T19095] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 869.041935][T19095] sctp_connect_new_asoc+0x2f9/0x6a0 [ 869.047215][T19095] ? __sctp_connect+0xd80/0xd80 [ 869.052058][T19095] ? __local_bh_enable_ip+0x13a/0x1c0 [ 869.057421][T19095] ? _local_bh_enable+0xa0/0xa0 [ 869.062263][T19095] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 869.068070][T19095] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 869.073874][T19095] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 869.079415][T19095] ? security_sctp_bind_connect+0x89/0xb0 [ 869.085130][T19095] sctp_sendmsg+0x1519/0x27b0 [ 869.089814][T19095] ? sctp_getsockopt+0xb60/0xb60 [ 869.094755][T19095] ? aa_af_perm+0x330/0x330 [ 869.099257][T19095] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 869.105672][T19095] ? sock_rps_record_flow+0x19/0x3f0 [ 869.110955][T19095] ? inet_sendmsg+0x7e/0x2a0 [ 869.115535][T19095] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 869.120820][T19095] ? inet_send_prepare+0x250/0x250 [ 869.125924][T19095] ____sys_sendmsg+0x61b/0x980 [ 869.130687][T19095] ? __asan_memset+0x22/0x40 [ 869.135275][T19095] ? __sys_sendmsg_sock+0x30/0x30 [ 869.140292][T19095] ? __import_iovec+0x5f2/0x850 [ 869.145146][T19095] ? import_iovec+0x73/0xa0 [ 869.149646][T19095] ___sys_sendmsg+0x2a6/0x360 [ 869.154317][T19095] ? get_pid_task+0x20/0x1e0 [ 869.158904][T19095] ? __sys_sendmsg+0x2b0/0x2b0 [ 869.163681][T19095] ? __lock_acquire+0x7d80/0x7d80 [ 869.168719][T19095] __se_sys_sendmsg+0x1d0/0x2c0 [ 869.173572][T19095] ? __x64_sys_sendmsg+0x80/0x80 [ 869.178515][T19095] ? lockdep_hardirqs_on+0x98/0x150 [ 869.183712][T19095] do_syscall_64+0x55/0xb0 [ 869.188130][T19095] ? clear_bhb_loop+0x40/0x90 [ 869.192805][T19095] ? clear_bhb_loop+0x40/0x90 [ 869.197480][T19095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 869.203366][T19095] RIP: 0033:0x7fedea79e159 [ 869.207773][T19095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.227374][T19095] RSP: 002b:00007fedeb6e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 869.235784][T19095] RAX: ffffffffffffffda RBX: 00007fedeaa25fa0 RCX: 00007fedea79e159 [ 869.243747][T19095] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 869.251711][T19095] RBP: 00007fedeb6e1090 R08: 0000000000000000 R09: 0000000000000000 [ 869.259675][T19095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 869.267637][T19095] R13: 00007fedeaa26038 R14: 00007fedeaa25fa0 R15: 00007ffcd35d77d8 [ 869.275617][T19095] [ 869.544369][T19101] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4097'. [ 870.148901][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.155297][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.165898][T19113] delete_channel: no stack [ 870.342441][T19118] delete_channel: no stack [ 870.587754][T19127] FAULT_INJECTION: forcing a failure. [ 870.587754][T19127] name failslab, interval 1, probability 0, space 0, times 0 [ 870.607415][T19127] CPU: 1 PID: 19127 Comm: syz.3.4109 Not tainted syzkaller #0 [ 870.614930][T19127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 870.625006][T19127] Call Trace: [ 870.628301][T19127] [ 870.631246][T19127] dump_stack_lvl+0x18c/0x250 [ 870.635955][T19127] ? ___sys_sendmsg+0x2a6/0x360 [ 870.640831][T19127] ? show_regs_print_info+0x20/0x20 [ 870.646066][T19127] ? load_image+0x420/0x420 [ 870.650598][T19127] ? mark_lock+0x94/0x320 [ 870.654951][T19127] should_fail_ex+0x394/0x4c0 [ 870.659656][T19127] should_failslab+0x9/0x20 [ 870.664177][T19127] slab_pre_alloc_hook+0x59/0x300 [ 870.669232][T19127] ? sctp_add_bind_addr+0x8c/0x360 [ 870.674381][T19127] __kmem_cache_alloc_node+0x53/0x250 [ 870.679789][T19127] ? sctp_add_bind_addr+0x8c/0x360 [ 870.684932][T19127] kmalloc_trace+0x2a/0xe0 [ 870.689372][T19127] sctp_add_bind_addr+0x8c/0x360 [ 870.694332][T19127] sctp_copy_local_addr_list+0x31b/0x4e0 [ 870.699989][T19127] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 870.705736][T19127] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 870.711832][T19127] ? sctp_v4_is_any+0x35/0x60 [ 870.716538][T19127] ? sctp_copy_one_addr+0x8c/0x350 [ 870.721686][T19127] sctp_bind_addr_copy+0xb3/0x3c0 [ 870.726736][T19127] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 870.733095][T19127] sctp_connect_new_asoc+0x2f9/0x6a0 [ 870.738404][T19127] ? __sctp_connect+0xd80/0xd80 [ 870.743271][T19127] ? __local_bh_enable_ip+0x13a/0x1c0 [ 870.748666][T19127] ? _local_bh_enable+0xa0/0xa0 [ 870.753541][T19127] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 870.759369][T19127] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 870.765200][T19127] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 870.770760][T19127] ? security_sctp_bind_connect+0x89/0xb0 [ 870.776493][T19127] sctp_sendmsg+0x1519/0x27b0 [ 870.781191][T19127] ? trace_call_bpf+0xc3/0x6c0 [ 870.785976][T19127] ? sctp_getsockopt+0xb60/0xb60 [ 870.790938][T19127] ? aa_af_perm+0x330/0x330 [ 870.795454][T19127] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 870.801884][T19127] ? sock_rps_record_flow+0x19/0x3f0 [ 870.807183][T19127] ? inet_sendmsg+0x7e/0x2a0 [ 870.811778][T19127] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 870.817074][T19127] ? inet_send_prepare+0x250/0x250 [ 870.822192][T19127] ____sys_sendmsg+0x61b/0x980 [ 870.826974][T19127] ? __sys_sendmsg_sock+0x30/0x30 [ 870.832023][T19127] ___sys_sendmsg+0x2a6/0x360 [ 870.836718][T19127] ? __sys_sendmsg+0x2b0/0x2b0 [ 870.841520][T19127] ? trace_call_bpf+0xc3/0x6c0 [ 870.846289][T19127] ? trace_call_bpf+0xc3/0x6c0 [ 870.851059][T19127] ? trace_call_bpf+0xc3/0x6c0 [ 870.855853][T19127] __se_sys_sendmsg+0x1d0/0x2c0 [ 870.860719][T19127] ? __x64_sys_sendmsg+0x80/0x80 [ 870.865682][T19127] ? syscall_enter_from_user_mode+0x2e/0x80 [ 870.871584][T19127] do_syscall_64+0x55/0xb0 [ 870.876006][T19127] ? clear_bhb_loop+0x40/0x90 [ 870.880696][T19127] ? clear_bhb_loop+0x40/0x90 [ 870.885382][T19127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 870.891282][T19127] RIP: 0033:0x7f3ad759e159 [ 870.895702][T19127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.915321][T19127] RSP: 002b:00007f3ad849e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 870.923749][T19127] RAX: ffffffffffffffda RBX: 00007f3ad7825fa0 RCX: 00007f3ad759e159 [ 870.931728][T19127] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 870.939705][T19127] RBP: 00007f3ad849e090 R08: 0000000000000000 R09: 0000000000000000 [ 870.947679][T19127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 870.955652][T19127] R13: 00007f3ad7826038 R14: 00007f3ad7825fa0 R15: 00007ffe50cc4748 [ 870.963647][T19127] [ 871.094851][T19136] delete_channel: no stack [ 873.182392][T19153] netlink: 13822 bytes leftover after parsing attributes in process `syz.1.4117'. [ 873.315229][T19162] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.4119'. [ 873.351676][T19162] netlink: 'syz.2.4119': attribute type 10 has an invalid length. [ 873.371177][T19162] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4119'. [ 873.522974][T19165] delete_channel: no stack [ 873.629482][T19174] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4129'. [ 873.651797][T19174] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4129'. [ 873.664352][T19171] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4129'. [ 873.692734][T19177] žÿ: renamed from team_slave_1 [ 873.732087][T19172] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4129'. [ 873.902225][T19188] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4138'. [ 873.932284][T19192] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4138'. [ 873.959297][T19188] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4138'. [ 873.973855][T19188] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4138'. [ 873.993081][T19188] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4138'. [ 874.006927][T19188] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4138'. [ 874.018653][T19188] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4138'. [ 875.830273][T19199] delete_channel: no stack [ 876.698812][T19234] netlink: 'syz.0.4145': attribute type 10 has an invalid length. [ 876.730625][T19234] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.777014][T19234] bridge_slave_1: left allmulticast mode [ 876.787534][T19234] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.854799][T19234] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 876.871489][T19237] delete_channel: no stack [ 876.878277][T19236] netlink: 'syz.2.4144': attribute type 33 has an invalid length. [ 878.818473][T19273] delete_channel: no stack [ 880.946347][T19288] __nla_validate_parse: 70 callbacks suppressed [ 880.946365][T19288] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4159'. [ 881.100200][T19288] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4159'. [ 881.120991][T19286] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4159'. [ 881.153968][T19287] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4159'. [ 881.219172][T19290] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4160'. [ 881.689842][T19306] sctp: [Deprecated]: syz.2.4167 (pid 19306) Use of struct sctp_assoc_value in delayed_ack socket option. [ 881.689842][T19306] Use struct sctp_sack_info instead [ 882.217233][T19322] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4171'. [ 882.231224][T19322] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4171'. [ 882.249641][T19319] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4171'. [ 882.259917][T19321] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4171'. [ 882.475985][T19328] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4173'. [ 882.804608][T19314] delete_channel: no stack [ 882.980874][T19339] veth1_macvtap: mtu less than device minimum [ 884.461444][T19362] delete_channel: no stack [ 886.456633][T19389] __nla_validate_parse: 5 callbacks suppressed [ 886.456649][T19389] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4191'. [ 886.502069][T19389] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4191'. [ 886.526347][T19382] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4191'. [ 886.567388][T19387] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4191'. [ 904.573230][T13294] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 904.583120][T13294] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 904.591300][T13294] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 904.600349][T13294] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 904.608429][T13294] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 904.615946][T13294] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 904.802377][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 904.812560][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 904.821135][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 904.837292][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 904.845432][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 904.853142][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 905.037507][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 905.051343][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 905.059295][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 905.071272][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 905.083058][ T51] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 905.097613][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 905.282754][T13294] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 905.292428][T13294] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 905.300485][T13294] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 905.311275][T13294] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 905.319107][T13294] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 905.327792][T13294] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 906.127907][T19403] chnl_net:caif_netlink_parms(): no params data found [ 906.257389][T19407] chnl_net:caif_netlink_parms(): no params data found [ 906.483353][T19411] chnl_net:caif_netlink_parms(): no params data found [ 906.701456][T13294] Bluetooth: hci3: command tx timeout [ 906.749835][T19415] chnl_net:caif_netlink_parms(): no params data found [ 906.800050][T19403] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.821494][T19403] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.828783][T19403] bridge_slave_0: entered allmulticast mode [ 906.851300][T19403] bridge_slave_0: entered promiscuous mode [ 906.873136][T19403] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.880313][T19403] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.901354][T19403] bridge_slave_1: entered allmulticast mode [ 906.921264][T19403] bridge_slave_1: entered promiscuous mode [ 906.941220][T13294] Bluetooth: hci5: command tx timeout [ 907.181580][T13294] Bluetooth: hci6: command tx timeout [ 907.206491][T19403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.235465][T19403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.261792][T19407] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.268959][T19407] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.291550][T19407] bridge_slave_0: entered allmulticast mode [ 907.311746][T19407] bridge_slave_0: entered promiscuous mode [ 907.333326][T19407] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.340479][T19407] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.361449][T19407] bridge_slave_1: entered allmulticast mode [ 907.381277][T19407] bridge_slave_1: entered promiscuous mode [ 907.420339][T19411] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.428408][T13294] Bluetooth: hci7: command tx timeout [ 907.442058][T19411] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.449347][T19411] bridge_slave_0: entered allmulticast mode [ 907.473140][T19411] bridge_slave_0: entered promiscuous mode [ 907.493218][T19411] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.500377][T19411] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.529798][T19411] bridge_slave_1: entered allmulticast mode [ 907.538296][T19411] bridge_slave_1: entered promiscuous mode [ 907.798312][T19407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.825468][T19407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.854976][T19411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.885502][T19411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.909130][T19403] team0: Port device team_slave_0 added [ 907.924199][T19415] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.932301][T19415] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.939575][T19415] bridge_slave_0: entered allmulticast mode [ 907.973437][T19415] bridge_slave_0: entered promiscuous mode [ 907.993391][T19415] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.000902][T19415] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.021639][T19415] bridge_slave_1: entered allmulticast mode [ 908.041476][T19415] bridge_slave_1: entered promiscuous mode [ 908.781572][T13294] Bluetooth: hci3: command tx timeout [ 909.021448][T13294] Bluetooth: hci5: command tx timeout [ 909.261685][T13294] Bluetooth: hci6: command tx timeout [ 909.501690][T13294] Bluetooth: hci7: command tx timeout [ 910.871324][T13294] Bluetooth: hci3: command tx timeout [ 911.101586][T13294] Bluetooth: hci5: command tx timeout [ 911.341537][T13294] Bluetooth: hci6: command tx timeout [ 911.581633][T13294] Bluetooth: hci7: command tx timeout [ 912.943039][T13294] Bluetooth: hci3: command tx timeout [ 913.181426][T13294] Bluetooth: hci5: command tx timeout [ 913.421610][T13294] Bluetooth: hci6: command tx timeout [ 913.670351][T13294] Bluetooth: hci7: command tx timeout [ 964.333186][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 964.342907][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 964.350695][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 964.359925][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 964.368897][ T51] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 964.377106][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 964.661764][T13294] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 964.681139][T13294] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 964.689033][T13294] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 964.700694][T13294] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 964.708811][T13294] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 964.718690][T13294] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 965.864315][T13294] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 965.874624][T13294] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 965.883909][T13294] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 965.892383][T13294] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 965.900353][T13294] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 965.911690][T13294] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 965.993082][ T51] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 966.003259][ T51] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 966.015367][ T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 966.024311][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 966.034782][ T51] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 966.042791][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 966.461640][T13294] Bluetooth: hci8: command tx timeout [ 966.781798][T13294] Bluetooth: hci9: command tx timeout [ 967.981399][T13294] Bluetooth: hci10: command tx timeout [ 968.141331][T13294] Bluetooth: hci11: command tx timeout [ 968.541295][T13294] Bluetooth: hci8: command tx timeout [ 968.871456][T13294] Bluetooth: hci9: command tx timeout [ 970.061501][T13294] Bluetooth: hci10: command tx timeout [ 970.223565][T13294] Bluetooth: hci11: command tx timeout [ 970.621440][T13294] Bluetooth: hci8: command tx timeout [ 970.941362][T13294] Bluetooth: hci9: command tx timeout [ 972.141301][T13294] Bluetooth: hci10: command tx timeout [ 972.301351][T13294] Bluetooth: hci11: command tx timeout [ 972.701277][T13294] Bluetooth: hci8: command tx timeout [ 973.021338][T13294] Bluetooth: hci9: command tx timeout [ 974.221386][T13294] Bluetooth: hci10: command tx timeout [ 974.381268][T13294] Bluetooth: hci11: command tx timeout [ 991.640999][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 991.648082][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19382/1:b..l [ 991.656548][ C1] rcu: (detected by 1, t=10502 jiffies, g=127553, q=2544 ncpus=2) [ 991.664475][ C1] task:syz.1.4191 state:R running task stack:25768 pid:19382 ppid:12634 flags:0x00004000 [ 991.676258][ C1] Call Trace: [ 991.679562][ C1] [ 991.682521][ C1] __schedule+0x15ae/0x4660 [ 991.687070][ C1] ? verify_lock_unused+0x140/0x140 [ 991.692298][ C1] ? percpu_counter_add_batch+0x1d4/0x2a0 [ 991.698059][ C1] ? perf_trace_lock+0xfc/0x3b0 [ 991.702926][ C1] ? asan.module_dtor+0x20/0x20 [ 991.707813][ C1] ? trace_event_raw_event_lock+0x240/0x240 [ 991.713730][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 991.719747][ C1] ? preempt_schedule+0xc0/0xd0 [ 991.724632][ C1] preempt_schedule_common+0x82/0xc0 [ 991.729947][ C1] preempt_schedule+0xc0/0xd0 [ 991.734650][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 991.740309][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 991.745367][ C1] preempt_schedule_thunk+0x1a/0x30 [ 991.750608][ C1] _raw_spin_unlock+0x3a/0x40 [ 991.755309][ C1] unmap_page_range+0x2577/0x32f0 [ 991.760414][ C1] ? copy_page_range+0x3700/0x3700 [ 991.765575][ C1] unmap_vmas+0x286/0x3f0 [ 991.769948][ C1] ? unmap_page_range+0x32f0/0x32f0 [ 991.775188][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 991.780275][ C1] exit_mmap+0x238/0xb90 [ 991.784550][ C1] ? trace_event_raw_event_lock+0x240/0x240 [ 991.790475][ C1] ? vm_brk+0x30/0x30 [ 991.794477][ C1] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 991.800176][ C1] ? uprobe_clear_state+0x278/0x290 [ 991.805408][ C1] __mmput+0x118/0x3a0 [ 991.809505][ C1] exit_mm+0x23f/0x340 [ 991.813600][ C1] ? sysctl_delayacct+0x220/0x220 [ 991.818644][ C1] ? do_exit+0x2530/0x2530 [ 991.823095][ C1] ? tty_audit_exit+0x14d/0x1f0 [ 991.827978][ C1] do_exit+0x909/0x2530 [ 991.832181][ C1] ? put_task_struct+0xc0/0xc0 [ 991.836980][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 991.842981][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 991.850205][ C1] ? lock_chain_count+0x20/0x20 [ 991.855091][ C1] do_group_exit+0x22d/0x2f0 [ 991.859697][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 991.864928][ C1] get_signal+0x12a6/0x1390 [ 991.869496][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 991.875077][ C1] ? get_sigframe_size+0x20/0x20 [ 991.880034][ C1] ? perf_trace_preemptirq_template+0xac/0x330 [ 991.886244][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 991.891737][ C1] exit_to_user_mode_loop+0x70/0x110 [ 991.897046][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 991.902616][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 991.908093][ C1] do_syscall_64+0x61/0xb0 [ 991.912532][ C1] ? clear_bhb_loop+0x40/0x90 [ 991.917232][ C1] ? clear_bhb_loop+0x40/0x90 [ 991.921939][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 991.927857][ C1] RIP: 0033:0x7f2ba279e159 [ 991.932297][ C1] RSP: 002b:00007f2ba358e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 991.940733][ C1] RAX: fffffffffffffe00 RBX: 00007f2ba2a25fa8 RCX: 00007f2ba279e159 [ 991.948722][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2ba2a25fa8 [ 991.956713][ C1] RBP: 00007f2ba2a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 991.964700][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 991.972686][ C1] R13: 00007f2ba2a26038 R14: 00007ffe0efc6150 R15: 00007ffe0efc6238 [ 991.980706][ C1] [ 991.983741][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 1301 jiffies! g127553 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 991.996080][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=77707 [ 992.003980][ C1] rcu: rcu_preempt kthread starved for 1307 jiffies! g127553 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 992.015362][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 992.025348][ C1] rcu: RCU grace-period kthread stack dump: [ 992.031245][ C1] task:rcu_preempt state:I stack:26952 pid:17 ppid:2 flags:0x00004000 [ 992.040475][ C1] Call Trace: [ 992.043772][ C1] [ 992.046727][ C1] __schedule+0x15ae/0x4660 [ 992.051277][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 992.056325][ C1] ? lock_chain_count+0x20/0x20 [ 992.061210][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 992.066429][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 992.072345][ C1] ? asan.module_dtor+0x20/0x20 [ 992.077224][ C1] ? rcu_is_watching+0x15/0xb0 [ 992.082050][ C1] schedule+0xbd/0x170 [ 992.086142][ C1] schedule_timeout+0x188/0x2d0 [ 992.091014][ C1] ? console_conditional_schedule+0x40/0x40 [ 992.096939][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 992.102879][ C1] ? update_process_times+0x1b0/0x1b0 [ 992.108294][ C1] ? prepare_to_swait_event+0x344/0x360 [ 992.113884][ C1] rcu_gp_fqs_loop+0x30d/0x1590 [ 992.118789][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 992.124974][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 992.130985][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 992.136037][ C1] ? rcu_gp_init+0x1530/0x1530 [ 992.140815][ C1] ? rcu_gp_cleanup+0xade/0xc30 [ 992.145695][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 992.150917][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 992.156145][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 992.160765][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 992.165901][ C1] ? __kthread_parkme+0x71/0x1c0 [ 992.170862][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 992.175918][ C1] kthread+0x2fa/0x390 [ 992.180009][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 992.185143][ C1] ? kthread_blkcg+0xd0/0xd0 [ 992.189753][ C1] ret_from_fork+0x48/0x80 [ 992.194189][ C1] ? kthread_blkcg+0xd0/0xd0 [ 992.198799][ C1] ret_from_fork_asm+0x11/0x20 [ 992.203617][ C1] [ 992.206657][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 992.212989][ C1] CPU: 1 PID: 16255 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 992.220636][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 992.230710][ C1] Workqueue: bat_events batadv_nc_worker [ 992.236474][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 992.242125][ C1] Code: 89 18 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 03 f6 36 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 992.261747][ C1] RSP: 0018:ffffc900001f08b8 EFLAGS: 00000246 [ 992.267838][ C1] RAX: ffffffff813b2538 RBX: 0000000000000003 RCX: ffff888021428000 [ 992.275826][ C1] RDX: 0000000000000100 RSI: ffffffff8acacce0 RDI: ffffffff8b1d3ba0 [ 992.283813][ C1] RBP: ffffc900001f0990 R08: ffffffff911eb5c7 R09: 1ffffffff223d6b8 [ 992.291799][ C1] R10: dffffc0000000000 R11: fffffbfff223d6b9 R12: dffffc0000000000 [ 992.299787][ C1] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff9200003e11c [ 992.307774][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 992.316719][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 992.323318][ C1] CR2: 000055fd492a1698 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 992.331326][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 992.339329][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 992.347327][ C1] Call Trace: [ 992.350626][ C1] [ 992.353487][ C1] kvm_wait+0x23d/0x2a0 [ 992.357678][ C1] ? kvm_arch_para_hints+0x50/0x50 [ 992.362836][ C1] ? pv_hash+0x78/0x140 [ 992.367020][ C1] __pv_queued_spin_lock_slowpath+0x613/0x9c0 [ 992.373128][ C1] ? __pv_queued_spin_unlock_slowpath+0x2a0/0x2a0 [ 992.379599][ C1] do_raw_spin_lock+0x23e/0x2b0 [ 992.384493][ C1] ? __rwlock_init+0x150/0x150 [ 992.389288][ C1] ? read_lock_is_recursive+0x20/0x20 [ 992.394822][ C1] tcp_write_timer+0x2d/0x280 [ 992.399571][ C1] call_timer_fn+0x189/0x540 [ 992.404183][ C1] ? tcp_init_xmit_timers+0xb0/0xb0 [ 992.409401][ C1] ? call_timer_fn+0xd2/0x540 [ 992.414102][ C1] ? __run_timers+0x810/0x810 [ 992.418822][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 992.424050][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 992.429269][ C1] ? tcp_init_xmit_timers+0xb0/0xb0 [ 992.434509][ C1] __run_timers+0x570/0x810 [ 992.439065][ C1] ? detach_timer+0x2b0/0x2b0 [ 992.443777][ C1] ? lock_chain_count+0x20/0x20 [ 992.448665][ C1] run_timer_softirq+0x67/0xf0 [ 992.453455][ C1] handle_softirqs+0x27d/0x820 [ 992.458239][ C1] ? read_tsc+0x9/0x20 [ 992.462325][ C1] ? ktime_get+0x24b/0x280 [ 992.466768][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 992.471558][ C1] ? do_softirq+0x1a0/0x1a0 [ 992.476107][ C1] __irq_exit_rcu+0xd3/0x190 [ 992.480723][ C1] ? irq_exit_rcu+0x20/0x20 [ 992.485283][ C1] irq_exit_rcu+0x9/0x20 [ 992.489545][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 992.495202][ C1] [ 992.498146][ C1] [ 992.501095][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 992.507097][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x0/0x30 [ 992.513269][ C1] Code: 15 fb 03 00 75 e8 48 c7 c7 80 cb ca 8a 48 c7 c6 a0 ef ca 8a e8 81 fe bf f6 0f 0b eb d1 cc cc cc cc cc cc cc cc cc cc cc cc cc 0f 1e fa 31 c0 83 3d bf e1 fa 03 00 74 1d 83 3d 36 15 fb 03 00 [ 992.532896][ C1] RSP: 0018:ffffc9000c5f7b58 EFLAGS: 00000296 [ 992.538990][ C1] RAX: 59211c844d1d7100 RBX: ffff88802dbd75c0 RCX: 59211c844d1d7100 [ 992.546994][ C1] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d3ba0 [ 992.555002][ C1] RBP: ffff88802f491098 R08: dffffc0000000000 R09: 1ffffffff223d6a0 [ 992.562999][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: dffffc0000000000 [ 992.570990][ C1] R13: ffffffff8a586692 R14: ffff8880246acd00 R15: 0000000000000213 [ 992.578983][ C1] ? batadv_nc_worker+0xd2/0x600 [ 992.583980][ C1] ? batadv_nc_worker+0xef/0x600 [ 992.588941][ C1] batadv_nc_worker+0xf8/0x600 [ 992.593734][ C1] ? process_scheduled_works+0x975/0x1600 [ 992.599486][ C1] process_scheduled_works+0xa60/0x1600 [ 992.605111][ C1] ? worker_attach_to_pool+0x370/0x370 [ 992.610609][ C1] ? assign_work+0x3cc/0x5d0 [ 992.615234][ C1] worker_thread+0xa5e/0xfe0 [ 992.619903][ C1] kthread+0x2fa/0x390 [ 992.623995][ C1] ? pr_cont_work+0x550/0x550 [ 992.628712][ C1] ? kthread_blkcg+0xd0/0xd0 [ 992.633335][ C1] ret_from_fork+0x48/0x80 [ 992.637776][ C1] ? kthread_blkcg+0xd0/0xd0 [ 992.642404][ C1] ret_from_fork_asm+0x11/0x20 [ 992.647223][ C1]