last executing test programs: 22.723914245s ago: executing program 0 (id=1248): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000005c0), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f525c24533658551c3091cb88d3b", 0x4f}, {&(0x7f0000000200)="088d85d1f409000a3164ae439862807a158983661a6d2341", 0x18}, {&(0x7f0000000040)="df3b46a1330000000000cb", 0xb}, {&(0x7f0000001480)="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", 0xe9c}], 0x5}, 0x40000) 20.239908621s ago: executing program 0 (id=1252): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006110740000000000180000000000000000180000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000002000000fcffffff000000000000000105000000100000000000000000000004"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=r0], 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002080)={0x0, 0xffffff01, 0xc27fab25371ca062}, 0xc) socket$kcm(0xf, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b40)={0xffffffffffffffff, 0xe0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001880), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000001940)=[{}, {}, {}, {}, {}, {}], 0x30, 0x0, 0x0, &(0x7f00000019c0), 0x8, 0x1b, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xdf5, '\x00', r1, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 20.123414555s ago: executing program 1 (id=1254): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x2, &(0x7f0000000000), 0x8) 20.072356496s ago: executing program 0 (id=1255): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000011c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4602, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="03000000040000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.981708279s ago: executing program 1 (id=1257): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00001700"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000400)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 19.973144779s ago: executing program 3 (id=1258): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x4}, 0xa082, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04"], 0xfe33) recvmsg$kcm(r2, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r2, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x10000009, @mcast1, 0x9, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="f4000900062b2c05fe80000000000000dc8b850f693c66ccfe808100000000000700613a2eb0094401e0728f1dcb09b7", 0x30}], 0x1}, 0x20000884) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x800009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0xa, 0x5, 0x0) close(r6) socket$kcm(0x28, 0x5, 0x28) sendmsg$sock(r6, &(0x7f0000000680)={&(0x7f0000000280)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010100}}, 0x80, 0x0}, 0x80) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001340), 0x888102, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x42579dda60683578) r8 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00'}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000000000)=""/11, 0x0, 0xb, 0x1}, 0x28) r10 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, r10, 0x1, 0xffffffffffffffff, 0x3) sendmsg$unix(r8, &(0x7f0000000a40)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000140)="927d33e11405f54e338f8d1fe6320d753604d85f31a43f193195b7e697ae77de5294e54a3994a2235ad449797598b6b75f809082c8bbdcf590689332ea893072e62103a6ed778e9773531e4dd23c364163b78f", 0x53}, {&(0x7f0000000240)="9c42b662e4b542775b7be32ea1c19f369a6a1be77adee2c3dfda485895ac3609e17b64ff7e6a471e3ddeb6ea7c5c96ab7f87ad6772097c8a28b71c2943b828efc041ee4d041690a53bea91f1e351d0", 0x4f}, {&(0x7f0000000340)="ec99c55b59dc4ffb0726148c1b8135c81ddec5fff8346a255a5737ac93cc02efb2b66f01868ff49d7d97b94b87def0fc6792e6fb3276acca9c8775d0e8df82b692d8e4acbfa10db10f5a42ab8cf23c6d9051f07add1bea895e0d2cf14ef608f0a8955b33a41d4fcce55f1e416fb7e3088aef3f22ddb47059fd9541228b0a17fe1f03ff49e570981ac28aae0500612224bba7447a76ec3e8737634f68a7253c9d", 0xa0}, {&(0x7f00000005c0)="482b844752a6b26f1238700c938b1d1d4aae260f0e8bf360fd1d1fed605713b0d88fbb7523017118319234324cec49d97b9333151d961c41dbeed2923edae9fa4fcc42259b241e254e5f014b31fd833acde15cc9a5c038dd7c9f986acbb3a3e65db9b9accd499b276fd1118fbd979de9ac1eabd9c3955062e8e1f06408c8e551712714204ca922a9e91b4ae1db44c4e369c5faca6ed4b2e14b78eebc80f21bf24528f210ebf906abac8618f7567db5f572f6bd3f635eb82d01c04068533b547ddcf08a60d263fcfd3edc24e8528b505d411c63f6a0a15c2321bb85f7", 0xdc}, {&(0x7f00000006c0)="e7384f29276dc59fba217ad849c25a094fd1220a3f88c91cff194b10d8ac60766ff91d85530f959dca347f6f7d1c0a26401dace313d72f434eb1c99b55c2d50379992ddcc7d0aec18ecb190599cb431bf38a20e850215a0b53939691b39d940a87b832", 0x63}, {&(0x7f0000000740)="b3419bc88855459cba6411b16bf686ddc413df673dac0562c2a3bf245ed3401a761c639f7fcfa53e5d74b298ff2f3d35a0740694f322ab7f0e646f0924fe322a88f4fb36416c63b14f0599fc4bedc088a78ca3f3f858550ed3b044de41aadc8acb41d024112dfe2644853e09b6dd2b44719e", 0x72}, {&(0x7f00000007c0)="e171d3a678bc1c8783d8c19926d50cc6bf389dbe60afd4149c1e2dd552aeb4aedeab784728cdf5fb67ead5919ec3b608b6b76eb53f00", 0x36}, {&(0x7f0000000840)="000eda5068d2e8ace192cb62ea09645edd7d3926e9b1447ec6fbd81008a0db1c42eb089b26d5ae514db727578d2fa6", 0x2f}], 0x8, &(0x7f0000000a00)=[@rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r9, r5]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, 0xee00}}}], 0x40, 0x5}, 0x4) 19.809001174s ago: executing program 1 (id=1259): r0 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x9, 0x4, 0x6, 0x2, 0x0, 0x6, 0x40185, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140)}, 0x8880, 0x36, 0x3, 0x5, 0x9, 0x4000, 0x7ff, 0x0, 0x800, 0x0, 0x2}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001b2c8a89de0778ebc5b4d1d40f3f7d71d2c50000000038f4b5ecdb9f182440b0f0397ab3f4af7dfb577bff27da742afbe8edaa94e2400fa2d3b8551733e182317775179b4463345eaeea6446b6c6e5b27b0e3eb775a5bd72749401eccac1a7c74a8814b9ae9a048e6d"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 19.521675493s ago: executing program 3 (id=1260): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfeff, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140614000000000e000a00100000000a8000001294", 0x2e}], 0x1, 0x0, 0x20}, 0x20008800) 19.489605034s ago: executing program 3 (id=1261): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000011c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4e}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x23) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000000)='/proc/t/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee\x00\x00'}, 0x30) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4602, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.800841766s ago: executing program 0 (id=1262): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001500)=[{}], 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x5, 0x9, 0x8001, 0x7, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xf}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000f800000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.799945716s ago: executing program 1 (id=1263): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x42}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x203f}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x10000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.752271228s ago: executing program 2 (id=1264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x1010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.751233168s ago: executing program 3 (id=1265): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x2, &(0x7f0000000000), 0x8) 16.637658391s ago: executing program 3 (id=1266): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0xa}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000000)="fb1302346b81687dc6c1f216b2fdeb7231c106", 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000806"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) 16.637517101s ago: executing program 2 (id=1267): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='freezer.parent_freezing\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) r2 = socket$kcm(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000040001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2"], 0x98}, 0x0) 16.637315061s ago: executing program 0 (id=1268): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080a2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x400000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001880)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a0038001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180010000300000000000000f707000000950000000000004000"/40], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x6, &(0x7f0000000200)=r2, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x8, [@float={0x4, 0x0, 0x0, 0x10, 0x10}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x5}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x3a, 0x0, 0x7f, 0x7}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x2}, @const={0x6}, @func={0xa, 0x0, 0x0, 0xc, 0x5}, @enum64={0x10, 0x2, 0x0, 0x13, 0x1, 0x2, [{0xe, 0x4, 0xf5a}, {0xe, 0xf91, 0x7}]}, @struct={0x6, 0x0, 0x0, 0x4, 0x1, 0xff}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x5f, 0x0, 0x2e, 0x30, 0x61, 0x5f]}}, &(0x7f0000000340)=""/62, 0xa8, 0x3e, 0x1, 0xb, 0x10000, @value=r5}, 0x28) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r8) r9 = getpid() sendmsg$unix(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="e60d", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r9, 0xee00, 0xee00}}}], 0x20, 0x4008014}, 0x10044001) (async) write$cgroup_pid(r8, &(0x7f0000000400), 0x12) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x3, &(0x7f0000000bc0)=ANY=[@ANYRESHEX=r8], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$sock(r4, &(0x7f0000000c00)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x3, @loopback}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000c40)="f052d60c54b9744ad5f66071f6b8273948e22dd09e9fda433923bfbf8c367e7cd8731bebbfa9c7966a5ad8403e2c8e0071add1fbbe14506cde913440d2ef89ed92b3df9c3b411a6c6fc52c2d4eeefc7f8579106e39280ac758d62672d4e6313c20735d7181c28aaa664028349810d327d873113cb056e58dfc64318d430efdff08d8ad218f929c7afaba943d7c7cb6f965b6428c865c40cd29dc3e9855d79645d750745a95ad2f035a69cff4cb45e409352dde4ab7d536627a07aa7739462c07a6c101b3ac55fd0739f2bbc9cef2778586853e539d40d5816c8431a65352318de935758aa1761ff1e26badd86b25f21bb2b849f60de7ff5b4d7f465dd2a9f6f9e6a23a8684a9d1c89a43ddb2afd9020565c432f2eec72eb181d0dac01029ce2547a4aaadf4915ce46ea29fa37fbe9aec4fbf07a441023d9ef77a1a7a16d2fa8bb449ec1a68c65810fafa5f4ff5fe90dbf4f807f98cae1e32e08eec8a46e617457f45b4880f0a21bb5a861bb356677ff357d81e2f2e4c76fe6f5b9191441db91c6d807db210e38fc311aacbf3f17342e2d463539b5652a3f7136900426e6848010a8a7108b37fcb09a0dc7e0f7ad9f478d103c2677197f6290e37b781746792eab1d17045c45e5d63fd96bb4457805988a124342e45ea65f1ca55e2dc00fc18a8630766dd3d", 0xed}, {&(0x7f0000000540)="7cd63405e8578283833f7a1f02033b1b9a2698ca7b6371c7c3cc11383658e1ced341661806c6a90161b88788fa21", 0x2e}, {&(0x7f0000000740)="076bd469010892061f1d25fce2a07831ba5691afbf6bbd85d2beaa008ad950a84c60d93323415cda74f15cc95d758946d3ad3923", 0x34}, {&(0x7f0000000840)="988ab72a688dbac4ba956182330078b2b47cbdb3ba664be43cdc6b655a5fb8b6fe041f5c75d6b09d0ca313172b14fdaac36615c78345ed0b39356c3395c0fca6c2d266fb6b2c8a8659cd5ab373a98fbd359d4459ff5b002592530482b2df83d17cf40eee639149cb436b9f31cd32a6", 0x6f}, {&(0x7f00000001c0)="1cc1cdbd119afa0b173bc8c7d46acff243c8faafd8bfd19fc4ab83082f073618e24661d9251df9e897addeab06353b5a7e9599", 0x33}, {&(0x7f0000000900)="49847f617a28f2ca844bd4ffe0fa989fd9c390a99f895016007802bee88e9fa428cfa659b77a39b5c0f2a54d9634fc72d26ea9ae3a88cc7b3de3fa22efafe58568df1648fc2847848fc8d6f2adfe79bf28038e0d7907a31439f3a7a820134b65dc1ce002f298997466f9fbaee390c703a7e76600220e43b1d5743b4ae938e2235757c72b0e21f62210d7445e8903d6214bdd9fd22b7b81dc3cf7a7e8b60d337fbe19d2a774af2d6b6beeffb5e967ac0fff693c94db7e71e7945b0f184030972199efc585453c89ea11a528a6ff36d9223e55a74f88b3c0a20ae9c160cfcabc1a73a82ca6ce6541ce246330c045b0a93e75132b4a07c4", 0xf6}, {&(0x7f0000000a00)="75b0381df81efd6d6e432d5a0dae609f0a4f4ada7db3582327cf3736b08a6cd12ec30d450c013f60db773dfe9d918908bc42d0b1601426296722439a8dfca63af199f9a0c7c2e6a747f94b24597aafe6eabc66b550de615c9ce4fe9f7fabcbc409e7d9f6e81914e5c0cd0971ebce67e04a2bde0002e11fa74335e6c89c9afa2cee82f6cf25a9fb0a12bbcf012aa049d0f399382a790713deaee877eb7adf7bf5cf8145e862537f6eabb6d2f66dd85b502d5370452b9679536b52f6f6131fc6f523196843a42b66a561ec6f9453302663520ec97e8b14d4fd04551fe5fef387ee31029e7d", 0xe4}], 0x7, &(0x7f0000000b80)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xf}}], 0x2}, 0x84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000030000000000000000000000a7000000f0ff1500370000000100000095"], &(0x7f0000000380)='GPL\x00', 0x8d, 0x0, 0x0, 0x0, 0x1c, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 16.605500802s ago: executing program 1 (id=1269): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000003000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) 16.533842874s ago: executing program 2 (id=1270): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000011c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4602, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="03000000040000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.929473253s ago: executing program 0 (id=1271): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x17, &(0x7f0000000000)=r3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="ff070000080000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0xa, 0x6, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r4, 0x10d, 0xa, &(0x7f0000000000)=r5, 0x4) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000001980)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x10, 0x0, 0x4d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8001, 0x6}, 0x940, 0x2, 0xfffffffe, 0x1, 0x80002, 0x8000, 0xfffc, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/239, 0xef}], 0x1, &(0x7f0000000640)=""/8, 0x8}, 0x61) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000050000000000000000000000850000001100000018010000696c6c2500000000002020207bd3c3e3fd17dc9882a100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r7) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001900)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000001940)=r7, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001880)={@fallback=r7, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="13000000efabf6bd12ffd02f", @ANYRES32=r8, @ANYBLOB="b6018b9f37b6854816dca8dc6780ac20c41b1b88a169a501ff7d064d454082c1cdd43d75ba76ea30d542553016b093acf7acf13236b266564367000000", @ANYRES64=r11], 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=r12, @ANYRES32, @ANYBLOB="0000080005000000000000f5ffffffffffffff0000000000000000004ad4987a7f697bee74042fe131526e8d63e679afed2d4336652f404257e2c362800b55b6a12e1d6f4782dd2b263cd55b141813c5fc80c8705658a48b8bf71fad9e08f425da442bdcb8aee7593999672c27bd"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x5c0, 0x0, 0x0, 0x40f00, 0x46, '\x00', r12, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) 15.929255903s ago: executing program 3 (id=1272): r0 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x9, 0x4, 0x6, 0x2, 0x0, 0x6, 0x40185, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140)}, 0x8880, 0x36, 0x3, 0x5, 0x9, 0x4000, 0x7ff, 0x0, 0x800, 0x0, 0x2}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001b2c8a89de0778ebc5b4d1d40f3f7d71d2c50000000038f4b5ecdb9f182440b0f0397ab3f4af7dfb577bff27da742afbe8edaa94e2400fa2d3b8551733e182317775179b4463345eaeea6446b6c6e5b27b0e3eb775a5bd72749401eccac1a7c74a8814b9ae9a048e6d"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 15.855361235s ago: executing program 1 (id=1273): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000011c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4e}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x23) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000000)='/proc/t/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee\x00\x00'}, 0x30) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4602, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.808696097s ago: executing program 2 (id=1274): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x2, 0x0, 0x0) 15.661696771s ago: executing program 2 (id=1275): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x600}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.566080464s ago: executing program 2 (id=1276): socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x80100, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400000001ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000041000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) 385.599429ms ago: executing program 32 (id=1271): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x17, &(0x7f0000000000)=r3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="ff070000080000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0xa, 0x6, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r4, 0x10d, 0xa, &(0x7f0000000000)=r5, 0x4) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000001980)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x10, 0x0, 0x4d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8001, 0x6}, 0x940, 0x2, 0xfffffffe, 0x1, 0x80002, 0x8000, 0xfffc, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/239, 0xef}], 0x1, &(0x7f0000000640)=""/8, 0x8}, 0x61) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000050000000000000000000000850000001100000018010000696c6c2500000000002020207bd3c3e3fd17dc9882a100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r7) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001900)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000001940)=r7, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001880)={@fallback=r7, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="13000000efabf6bd12ffd02f", @ANYRES32=r8, @ANYBLOB="b6018b9f37b6854816dca8dc6780ac20c41b1b88a169a501ff7d064d454082c1cdd43d75ba76ea30d542553016b093acf7acf13236b266564367000000", @ANYRES64=r11], 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=r12, @ANYRES32, @ANYBLOB="0000080005000000000000f5ffffffffffffff0000000000000000004ad4987a7f697bee74042fe131526e8d63e679afed2d4336652f404257e2c362800b55b6a12e1d6f4782dd2b263cd55b141813c5fc80c8705658a48b8bf71fad9e08f425da442bdcb8aee7593999672c27bd"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x5c0, 0x0, 0x0, 0x40f00, 0x46, '\x00', r12, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) 229.220974ms ago: executing program 33 (id=1273): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000011c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4e}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x23) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000000)='/proc/t/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee\x00\x00'}, 0x30) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4602, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 135.954176ms ago: executing program 34 (id=1276): socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x80100, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400000001ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000041000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) 0s ago: executing program 35 (id=1272): r0 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x9, 0x4, 0x6, 0x2, 0x0, 0x6, 0x40185, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140)}, 0x8880, 0x36, 0x3, 0x5, 0x9, 0x4000, 0x7ff, 0x0, 0x800, 0x0, 0x2}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001b2c8a89de0778ebc5b4d1d40f3f7d71d2c50000000038f4b5ecdb9f182440b0f0397ab3f4af7dfb577bff27da742afbe8edaa94e2400fa2d3b8551733e182317775179b4463345eaeea6446b6c6e5b27b0e3eb775a5bd72749401eccac1a7c74a8814b9ae9a048e6d"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) kernel console output (not intermixed with test programs): ___sys_sendmsg+0x2a6/0x360 [ 93.309285][ T5880] ? get_pid_task+0x20/0x1e0 [ 93.313908][ T5880] ? __sys_sendmsg+0x2b0/0x2b0 [ 93.318752][ T5880] ? __lock_acquire+0x7d80/0x7d80 [ 93.323818][ T5880] __se_sys_sendmsg+0x1d0/0x2c0 [ 93.328696][ T5880] ? __x64_sys_sendmsg+0x80/0x80 [ 93.333670][ T5880] ? lockdep_hardirqs_on+0x98/0x150 [ 93.338894][ T5880] do_syscall_64+0x55/0xb0 [ 93.343334][ T5880] ? clear_bhb_loop+0x40/0x90 [ 93.348060][ T5880] ? clear_bhb_loop+0x40/0x90 [ 93.352759][ T5880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.358703][ T5880] RIP: 0033:0x7f6b0d99ce59 [ 93.363144][ T5880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.382777][ T5880] RSP: 002b:00007f6b0e850028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.391226][ T5880] RAX: ffffffffffffffda RBX: 00007f6b0dc15fa0 RCX: 00007f6b0d99ce59 [ 93.399228][ T5880] RDX: 0000000000000850 RSI: 0000200000000600 RDI: 0000000000000003 [ 93.407221][ T5880] RBP: 00007f6b0e850090 R08: 0000000000000000 R09: 0000000000000000 [ 93.415214][ T5880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.423203][ T5880] R13: 00007f6b0dc16038 R14: 00007f6b0dc15fa0 R15: 00007ffd549bb848 [ 93.431208][ T5880] [ 93.657125][ T5885] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.20'. [ 94.881614][ T5904] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.324728][ T5907] netlink: 132 bytes leftover after parsing attributes in process `syz.3.26'. [ 95.669663][ T5910] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.29'. [ 95.708893][ T5910] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.29'. [ 95.792856][ T5914] syz.1.29 uses obsolete (PF_INET,SOCK_PACKET) [ 96.577270][ T5910] netlink: 'syz.1.29': attribute type 2 has an invalid length. [ 96.585779][ T5910] netlink: 128 bytes leftover after parsing attributes in process `syz.1.29'. [ 97.660742][ T5921] Illegal XDP return value 4291395584 on prog (id 21) dev N/A, expect packet loss! [ 99.082263][ T5959] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.46'. [ 99.126665][ T5959] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.46'. [ 99.187769][ T5960] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.46'. [ 99.247579][ T5959] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.46'. [ 99.634528][ T5969] netlink: 'syz.3.48': attribute type 29 has an invalid length. [ 99.704326][ T5969] netlink: 'syz.3.48': attribute type 29 has an invalid length. [ 99.757798][ T5966] netlink: 'syz.3.48': attribute type 29 has an invalid length. [ 101.490024][ T5990] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.59'. [ 101.535439][ T5990] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.59'. [ 101.554114][ T5993] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.59'. [ 101.574532][ T5990] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.59'. [ 101.629449][ T5995] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.61'. [ 101.651222][ T5995] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.61'. [ 101.709282][ T5999] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.61'. [ 101.802488][ T5995] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.61'. [ 103.569792][ T6027] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.72'. [ 103.600268][ T6027] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.72'. [ 103.781461][ T6031] warning: `syz.3.74' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.507614][ T6069] __nla_validate_parse: 7 callbacks suppressed [ 106.507653][ T6069] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.91'. [ 106.528268][ T6069] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.91'. [ 106.543084][ T6069] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.91'. [ 106.581419][ T6069] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.91'. [ 107.754814][ T6084] netlink: 'syz.1.97': attribute type 2 has an invalid length. [ 107.822974][ T6084] netlink: 'syz.1.97': attribute type 1 has an invalid length. [ 107.892336][ T6084] netlink: 'syz.1.97': attribute type 2 has an invalid length. [ 107.899987][ T6084] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.97'. [ 114.278485][ T6121] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 117.348867][ T6125] netlink: 'syz.2.110': attribute type 10 has an invalid length. [ 117.364430][ T6125] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 117.395291][ T6129] netlink: 'syz.3.113': attribute type 39 has an invalid length. [ 117.643834][ T6138] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.116'. [ 117.750313][ T6138] netlink: 'syz.2.116': attribute type 10 has an invalid length. [ 119.862931][ T6159] netlink: 'syz.3.124': attribute type 10 has an invalid length. [ 120.167507][ T6159] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 120.759113][ T6165] netlink: 'syz.0.133': attribute type 10 has an invalid length. [ 121.255504][ T6165] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 121.638001][ T6178] netlink: 'syz.2.127': attribute type 39 has an invalid length. [ 122.198648][ T6165] syz.0.133 (6165) used greatest stack depth: 20040 bytes left [ 123.848201][ T6195] netlink: 'syz.0.135': attribute type 10 has an invalid length. [ 123.876891][ T6195] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 124.048576][ T6195] syz.0.135 (6195) used greatest stack depth: 19944 bytes left [ 125.057768][ T6205] netlink: 'syz.0.136': attribute type 10 has an invalid length. [ 125.078435][ T6205] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 125.613089][ T6211] netlink: 'syz.2.139': attribute type 10 has an invalid length. [ 125.672269][ T6211] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 126.450880][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 126.476563][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'. [ 126.511720][ T6219] netlink: 33 bytes leftover after parsing attributes in process `syz.3.145'. [ 126.548121][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'. [ 126.570865][ T6219] netlink: 33 bytes leftover after parsing attributes in process `syz.3.145'. [ 126.635399][ T6223] netlink: 'syz.3.145': attribute type 27 has an invalid length. [ 126.669929][ T6223] netlink: 'syz.3.145': attribute type 4 has an invalid length. [ 126.681066][ T6223] netlink: 132 bytes leftover after parsing attributes in process `syz.3.145'. [ 126.991087][ T6225] netlink: 'syz.0.142': attribute type 39 has an invalid length. [ 127.237169][ T6227] netlink: 'syz.1.146': attribute type 10 has an invalid length. [ 127.583550][ T6227] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 127.716055][ T6227] syz.1.146 (6227) used greatest stack depth: 19464 bytes left [ 127.805193][ T6236] netlink: 'syz.3.149': attribute type 49 has an invalid length. [ 127.827751][ T6236] netlink: 'syz.3.149': attribute type 49 has an invalid length. [ 127.886734][ T6240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.353914][ T6242] netlink: 'syz.1.151': attribute type 10 has an invalid length. [ 128.454521][ T6242] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 129.143465][ T6252] netlink: 'syz.1.154': attribute type 2 has an invalid length. [ 129.153698][ T6252] netlink: 60 bytes leftover after parsing attributes in process `syz.1.154'. [ 129.245589][ T6256] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.156'. [ 129.317350][ T6256] netlink: 'syz.3.156': attribute type 3 has an invalid length. [ 129.361717][ T6256] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.156'. [ 129.573242][ T6264] netlink: 'syz.1.160': attribute type 6 has an invalid length. [ 129.663281][ T6264] netlink: 168 bytes leftover after parsing attributes in process `syz.1.160'. [ 129.906475][ T6268] netlink: 'syz.3.162': attribute type 10 has an invalid length. [ 129.969861][ T6268] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 131.010269][ T6276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.129648][ T6284] netlink: 'syz.3.167': attribute type 10 has an invalid length. [ 131.235035][ T6284] team0: Device veth1_vlan failed to register rx_handler [ 131.587685][ T6292] netlink: 188 bytes leftover after parsing attributes in process `syz.0.171'. [ 132.736747][ T6307] netlink: 'syz.0.177': attribute type 2 has an invalid length. [ 132.776386][ T6301] netlink: 'syz.1.175': attribute type 10 has an invalid length. [ 132.802971][ T6301] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 133.134930][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.141743][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.551551][ T6338] netlink: 'syz.3.189': attribute type 10 has an invalid length. [ 136.562460][ T6338] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 140.724915][ T6371] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.201'. [ 140.755377][ T6371] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.201'. [ 140.774888][ T6372] netlink: 'syz.1.200': attribute type 10 has an invalid length. [ 140.795772][ T6372] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 140.830804][ T6373] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.201'. [ 140.845149][ T6371] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.201'. [ 141.696632][ T6379] netlink: 'syz.0.203': attribute type 33 has an invalid length. [ 141.741209][ T6379] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.203'. [ 144.984990][ T6393] netlink: 'syz.3.209': attribute type 10 has an invalid length. [ 145.381746][ T6393] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 145.844502][ T6400] netlink: 'syz.2.212': attribute type 10 has an invalid length. [ 145.876210][ T6400] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 146.312047][ T6413] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.218'. [ 148.913328][ T6423] netlink: 'syz.0.220': attribute type 9 has an invalid length. [ 148.951861][ T6423] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.220'. [ 150.180733][ T6435] netlink: 'syz.2.225': attribute type 21 has an invalid length. [ 150.202662][ T6435] netlink: 'syz.2.225': attribute type 4 has an invalid length. [ 150.213522][ T6428] netlink: 'syz.0.220': attribute type 9 has an invalid length. [ 150.230759][ T6428] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.220'. [ 150.426709][ T6439] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.227'. [ 150.466344][ T6439] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.227'. [ 150.497386][ T6440] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.227'. [ 150.541442][ T6439] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.227'. [ 150.586763][ T6444] netlink: 'syz.3.228': attribute type 10 has an invalid length. [ 150.623420][ T6444] team0: Device veth1_vlan failed to register rx_handler [ 150.977868][ T6445] netlink: 'syz.1.229': attribute type 10 has an invalid length. [ 151.011307][ T6445] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 151.413690][ T6451] netlink: 168 bytes leftover after parsing attributes in process `syz.3.232'. [ 154.507679][ T6464] netlink: 'syz.2.236': attribute type 10 has an invalid length. [ 154.515659][ T6464] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 156.224321][ T6471] netlink: 'syz.2.241': attribute type 10 has an invalid length. [ 156.325150][ T6471] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 157.155148][ T6482] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.243'. [ 157.166743][ T6482] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.243'. [ 157.177332][ T6482] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.243'. [ 157.397144][ T6496] netlink: 'syz.1.246': attribute type 9 has an invalid length. [ 157.405215][ T6496] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.246'. [ 157.494159][ T6497] netlink: 'syz.0.255': attribute type 10 has an invalid length. [ 158.386349][ T6497] veth0_vlan: left promiscuous mode [ 158.497042][ T6497] veth0_vlan: entered promiscuous mode [ 158.509923][ T6497] team0: Device veth0_vlan failed to register rx_handler [ 158.975262][ T6497] syz.0.255 (6497) used greatest stack depth: 18888 bytes left [ 158.983788][ T6501] netlink: 'syz.1.246': attribute type 9 has an invalid length. [ 159.004690][ T6501] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.246'. [ 159.367673][ T6520] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.256'. [ 159.404160][ T6520] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.256'. [ 159.436280][ T6520] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.256'. [ 159.461477][ T6520] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.256'. [ 160.866855][ T6554] netlink: 'syz.2.271': attribute type 19 has an invalid length. [ 160.882716][ T6554] netlink: 13664 bytes leftover after parsing attributes in process `syz.2.271'. [ 162.744921][ T6569] delete_channel: no stack [ 162.870702][ T6584] FAULT_INJECTION: forcing a failure. [ 162.870702][ T6584] name failslab, interval 1, probability 0, space 0, times 0 [ 162.889111][ T6584] CPU: 1 PID: 6584 Comm: syz.2.284 Not tainted syzkaller #0 [ 162.896460][ T6584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 162.906557][ T6584] Call Trace: [ 162.909877][ T6584] [ 162.912846][ T6584] dump_stack_lvl+0x18c/0x250 [ 162.917596][ T6584] ? sctp_sendmsg+0x1519/0x27b0 [ 162.922503][ T6584] ? ___sys_sendmsg+0x2a6/0x360 [ 162.927411][ T6584] ? show_regs_print_info+0x20/0x20 [ 162.932678][ T6584] ? load_image+0x420/0x420 [ 162.937230][ T6584] should_fail_ex+0x394/0x4c0 [ 162.941991][ T6584] should_failslab+0x9/0x20 [ 162.946549][ T6584] slab_pre_alloc_hook+0x59/0x300 [ 162.951626][ T6584] ? sctp_add_bind_addr+0x8c/0x360 [ 162.956787][ T6584] __kmem_cache_alloc_node+0x53/0x250 [ 162.962214][ T6584] ? sctp_add_bind_addr+0x8c/0x360 [ 162.967386][ T6584] kmalloc_trace+0x2a/0xe0 [ 162.971862][ T6584] sctp_add_bind_addr+0x8c/0x360 [ 162.976860][ T6584] sctp_copy_local_addr_list+0x31b/0x4e0 [ 162.982554][ T6584] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 162.988330][ T6584] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 162.994465][ T6584] ? sctp_v4_is_any+0x35/0x60 [ 162.999194][ T6584] ? sctp_copy_one_addr+0x8c/0x350 [ 163.004372][ T6584] sctp_bind_addr_copy+0xb3/0x3c0 [ 163.009453][ T6584] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 163.015931][ T6584] sctp_connect_new_asoc+0x2f9/0x6a0 [ 163.021273][ T6584] ? __sctp_connect+0xd80/0xd80 [ 163.026175][ T6584] ? __local_bh_enable_ip+0x13a/0x1c0 [ 163.031598][ T6584] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 163.037200][ T6584] ? security_sctp_bind_connect+0x89/0xb0 [ 163.042974][ T6584] sctp_sendmsg+0x1519/0x27b0 [ 163.047719][ T6584] ? sctp_getsockopt+0xb60/0xb60 [ 163.052716][ T6584] ? aa_sk_perm+0x83c/0x970 [ 163.057258][ T6584] ? aa_af_perm+0x330/0x330 [ 163.061774][ T6584] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 163.068226][ T6584] ? sock_rps_record_flow+0x19/0x3f0 [ 163.073544][ T6584] ? inet_sendmsg+0xce/0x2a0 [ 163.078191][ T6584] ? inet_send_prepare+0x250/0x250 [ 163.083370][ T6584] ____sys_sendmsg+0x61b/0x980 [ 163.088186][ T6584] ? __sys_sendmsg_sock+0x30/0x30 [ 163.093256][ T6584] ? __import_iovec+0x5f2/0x850 [ 163.098165][ T6584] ? import_iovec+0x73/0xa0 [ 163.102721][ T6584] ___sys_sendmsg+0x2a6/0x360 [ 163.107443][ T6584] ? get_pid_task+0x20/0x1e0 [ 163.112093][ T6584] ? __sys_sendmsg+0x2b0/0x2b0 [ 163.116930][ T6584] ? __lock_acquire+0x7d80/0x7d80 [ 163.122025][ T6584] __se_sys_sendmsg+0x1d0/0x2c0 [ 163.126921][ T6584] ? __x64_sys_sendmsg+0x80/0x80 [ 163.131935][ T6584] ? lockdep_hardirqs_on+0x98/0x150 [ 163.137220][ T6584] do_syscall_64+0x55/0xb0 [ 163.141673][ T6584] ? clear_bhb_loop+0x40/0x90 [ 163.146386][ T6584] ? clear_bhb_loop+0x40/0x90 [ 163.151109][ T6584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.157063][ T6584] RIP: 0033:0x7f4c9db9ce59 [ 163.161551][ T6584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.181740][ T6584] RSP: 002b:00007f4c9e9c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.190211][ T6584] RAX: ffffffffffffffda RBX: 00007f4c9de15fa0 RCX: 00007f4c9db9ce59 [ 163.198232][ T6584] RDX: 0000000000000850 RSI: 0000200000000600 RDI: 0000000000000003 [ 163.206251][ T6584] RBP: 00007f4c9e9c9090 R08: 0000000000000000 R09: 0000000000000000 [ 163.214268][ T6584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.222291][ T6584] R13: 00007f4c9de16038 R14: 00007f4c9de15fa0 R15: 00007ffe5de89f88 [ 163.230323][ T6584] [ 163.924900][ T6606] netlink: 'syz.2.290': attribute type 2 has an invalid length. [ 163.947024][ T6606] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 163.959687][ T6606] netlink: 'syz.2.290': attribute type 2 has an invalid length. [ 163.968906][ T6606] netlink: 164304 bytes leftover after parsing attributes in process `syz.2.290'. [ 166.734787][ T6610] netlink: 'syz.0.292': attribute type 2 has an invalid length. [ 166.765419][ T6610] netlink: 'syz.0.292': attribute type 1 has an invalid length. [ 166.773484][ T6610] netlink: 'syz.0.292': attribute type 2 has an invalid length. [ 166.793527][ T6610] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.292'. [ 166.806774][ T6614] netlink: 'syz.1.294': attribute type 10 has an invalid length. [ 166.817796][ T6614] netlink: 40 bytes leftover after parsing attributes in process `syz.1.294'. [ 166.833256][ T6614] team0: Device geneve0 is up. Set it down before adding it as a team port [ 166.845120][ T6614] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 166.981877][ T6610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.055741][ T6610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.576034][ T6620] netlink: 'syz.1.296': attribute type 1 has an invalid length. [ 167.594714][ T6610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.608645][ T6620] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.296'. [ 167.628246][ T6610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.530308][ T6647] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.307'. [ 171.571090][ T6647] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.307'. [ 171.605380][ T6650] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.307'. [ 171.656422][ T6647] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.307'. [ 173.506085][ T6674] FAULT_INJECTION: forcing a failure. [ 173.506085][ T6674] name failslab, interval 1, probability 0, space 0, times 0 [ 173.580732][ T6674] CPU: 1 PID: 6674 Comm: syz.3.319 Not tainted syzkaller #0 [ 173.588136][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 173.598242][ T6674] Call Trace: [ 173.601575][ T6674] [ 173.604558][ T6674] dump_stack_lvl+0x18c/0x250 [ 173.609293][ T6674] ? sctp_sendmsg+0x1519/0x27b0 [ 173.614211][ T6674] ? ___sys_sendmsg+0x2a6/0x360 [ 173.619123][ T6674] ? show_regs_print_info+0x20/0x20 [ 173.624378][ T6674] ? load_image+0x420/0x420 [ 173.628948][ T6674] should_fail_ex+0x394/0x4c0 [ 173.633696][ T6674] should_failslab+0x9/0x20 [ 173.638260][ T6674] slab_pre_alloc_hook+0x59/0x300 [ 173.643350][ T6674] ? sctp_add_bind_addr+0x8c/0x360 [ 173.648528][ T6674] __kmem_cache_alloc_node+0x53/0x250 [ 173.653972][ T6674] ? sctp_add_bind_addr+0x8c/0x360 [ 173.659150][ T6674] kmalloc_trace+0x2a/0xe0 [ 173.663647][ T6674] sctp_add_bind_addr+0x8c/0x360 [ 173.668711][ T6674] sctp_copy_local_addr_list+0x31b/0x4e0 [ 173.674420][ T6674] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 173.680199][ T6674] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 173.686336][ T6674] ? sctp_v4_is_any+0x35/0x60 [ 173.691070][ T6674] ? sctp_copy_one_addr+0x8c/0x350 [ 173.696245][ T6674] sctp_bind_addr_copy+0xb3/0x3c0 [ 173.701339][ T6674] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 173.707733][ T6674] sctp_connect_new_asoc+0x2f9/0x6a0 [ 173.713093][ T6674] ? __sctp_connect+0xd80/0xd80 [ 173.718000][ T6674] ? __local_bh_enable_ip+0x13a/0x1c0 [ 173.723432][ T6674] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 173.729044][ T6674] ? security_sctp_bind_connect+0x89/0xb0 [ 173.734831][ T6674] sctp_sendmsg+0x1519/0x27b0 [ 173.739586][ T6674] ? sctp_getsockopt+0xb60/0xb60 [ 173.744594][ T6674] ? aa_sk_perm+0x83c/0x970 [ 173.749165][ T6674] ? aa_af_perm+0x330/0x330 [ 173.753721][ T6674] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 173.760213][ T6674] ? sock_rps_record_flow+0x19/0x3f0 [ 173.765569][ T6674] ? inet_sendmsg+0xce/0x2a0 [ 173.770249][ T6674] ? inet_send_prepare+0x250/0x250 [ 173.775427][ T6674] ____sys_sendmsg+0x61b/0x980 [ 173.780257][ T6674] ? __sys_sendmsg_sock+0x30/0x30 [ 173.785341][ T6674] ? __import_iovec+0x5f2/0x850 [ 173.790252][ T6674] ? import_iovec+0x73/0xa0 [ 173.794812][ T6674] ___sys_sendmsg+0x2a6/0x360 [ 173.799548][ T6674] ? get_pid_task+0x20/0x1e0 [ 173.804198][ T6674] ? __sys_sendmsg+0x2b0/0x2b0 [ 173.809042][ T6674] ? __lock_acquire+0x7d80/0x7d80 [ 173.814160][ T6674] __se_sys_sendmsg+0x1d0/0x2c0 [ 173.819114][ T6674] ? __x64_sys_sendmsg+0x80/0x80 [ 173.824123][ T6674] ? lockdep_hardirqs_on+0x98/0x150 [ 173.829404][ T6674] do_syscall_64+0x55/0xb0 [ 173.833875][ T6674] ? clear_bhb_loop+0x40/0x90 [ 173.838605][ T6674] ? clear_bhb_loop+0x40/0x90 [ 173.843354][ T6674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.849312][ T6674] RIP: 0033:0x7f6b0d99ce59 [ 173.853787][ T6674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.873444][ T6674] RSP: 002b:00007f6b0e850028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.881920][ T6674] RAX: ffffffffffffffda RBX: 00007f6b0dc15fa0 RCX: 00007f6b0d99ce59 [ 173.889951][ T6674] RDX: 0000000000000850 RSI: 0000200000000600 RDI: 0000000000000003 [ 173.897981][ T6674] RBP: 00007f6b0e850090 R08: 0000000000000000 R09: 0000000000000000 [ 173.906009][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.914044][ T6674] R13: 00007f6b0dc16038 R14: 00007f6b0dc15fa0 R15: 00007ffd549bb848 [ 173.922091][ T6674] [ 175.583672][ T6683] netlink: 'syz.2.322': attribute type 10 has an invalid length. [ 175.645405][ T6683] team0: Device veth1_vlan failed to register rx_handler [ 175.909696][ T6691] netlink: 'syz.2.326': attribute type 10 has an invalid length. [ 175.946638][ T6691] netlink: 40 bytes leftover after parsing attributes in process `syz.2.326'. [ 175.956794][ T6691] team0: Device geneve0 is up. Set it down before adding it as a team port [ 175.968618][ T6691] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 176.070269][ T6689] netlink: 'syz.3.325': attribute type 10 has an invalid length. [ 176.086811][ T6689] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 176.250093][ T6694] netlink: 'syz.1.327': attribute type 2 has an invalid length. [ 176.272052][ T6694] netlink: 119 bytes leftover after parsing attributes in process `syz.1.327'. [ 180.464734][ T6723] netlink: 'syz.1.338': attribute type 10 has an invalid length. [ 180.638769][ T6723] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 180.757846][ T6737] netlink: 164 bytes leftover after parsing attributes in process `syz.0.344'. [ 181.110931][ T6739] netlink: 188 bytes leftover after parsing attributes in process `syz.0.344'. [ 181.151798][ T6745] netlink: 144 bytes leftover after parsing attributes in process `syz.0.344'. [ 184.065915][ T6745] team0: Port device team_slave_0 removed [ 184.072565][ T6745] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 184.305863][ T6792] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.349'. [ 184.335168][ T6792] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.349'. [ 184.348341][ T6792] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.349'. [ 184.363656][ T6792] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.349'. [ 184.640102][ T6802] FAULT_INJECTION: forcing a failure. [ 184.640102][ T6802] name failslab, interval 1, probability 0, space 0, times 0 [ 184.656484][ T6802] CPU: 1 PID: 6802 Comm: syz.3.354 Not tainted syzkaller #0 [ 184.663849][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 184.673952][ T6802] Call Trace: [ 184.677284][ T6802] [ 184.680268][ T6802] dump_stack_lvl+0x18c/0x250 [ 184.685003][ T6802] ? sctp_sendmsg+0x1519/0x27b0 [ 184.689927][ T6802] ? ___sys_sendmsg+0x2a6/0x360 [ 184.694836][ T6802] ? show_regs_print_info+0x20/0x20 [ 184.700111][ T6802] ? load_image+0x420/0x420 [ 184.704679][ T6802] should_fail_ex+0x394/0x4c0 [ 184.709417][ T6802] should_failslab+0x9/0x20 [ 184.713981][ T6802] slab_pre_alloc_hook+0x59/0x300 [ 184.719090][ T6802] ? sctp_add_bind_addr+0x8c/0x360 [ 184.724276][ T6802] __kmem_cache_alloc_node+0x53/0x250 [ 184.729712][ T6802] ? sctp_add_bind_addr+0x8c/0x360 [ 184.734881][ T6802] kmalloc_trace+0x2a/0xe0 [ 184.739362][ T6802] sctp_add_bind_addr+0x8c/0x360 [ 184.744364][ T6802] sctp_copy_local_addr_list+0x31b/0x4e0 [ 184.750114][ T6802] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 184.755895][ T6802] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 184.762053][ T6802] ? sctp_v4_is_any+0x35/0x60 [ 184.766784][ T6802] ? sctp_copy_one_addr+0x8c/0x350 [ 184.771989][ T6802] sctp_bind_addr_copy+0xb3/0x3c0 [ 184.777077][ T6802] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 184.783468][ T6802] sctp_connect_new_asoc+0x2f9/0x6a0 [ 184.788821][ T6802] ? __sctp_connect+0xd80/0xd80 [ 184.793732][ T6802] ? __local_bh_enable_ip+0x13a/0x1c0 [ 184.799176][ T6802] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 184.804791][ T6802] ? security_sctp_bind_connect+0x89/0xb0 [ 184.810758][ T6802] sctp_sendmsg+0x1519/0x27b0 [ 184.815509][ T6802] ? sctp_getsockopt+0xb60/0xb60 [ 184.820509][ T6802] ? aa_sk_perm+0x83c/0x970 [ 184.825075][ T6802] ? aa_af_perm+0x330/0x330 [ 184.829629][ T6802] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 184.836139][ T6802] ? sock_rps_record_flow+0x19/0x3f0 [ 184.841495][ T6802] ? inet_sendmsg+0xce/0x2a0 [ 184.846162][ T6802] ? inet_send_prepare+0x250/0x250 [ 184.851341][ T6802] ____sys_sendmsg+0x61b/0x980 [ 184.856178][ T6802] ? __sys_sendmsg_sock+0x30/0x30 [ 184.861251][ T6802] ? __import_iovec+0x5f2/0x850 [ 184.866154][ T6802] ? import_iovec+0x73/0xa0 [ 184.870749][ T6802] ___sys_sendmsg+0x2a6/0x360 [ 184.875475][ T6802] ? get_pid_task+0x20/0x1e0 [ 184.880128][ T6802] ? __sys_sendmsg+0x2b0/0x2b0 [ 184.885060][ T6802] ? __lock_acquire+0x7d80/0x7d80 [ 184.890160][ T6802] __se_sys_sendmsg+0x1d0/0x2c0 [ 184.895076][ T6802] ? __x64_sys_sendmsg+0x80/0x80 [ 184.900083][ T6802] ? lockdep_hardirqs_on+0x98/0x150 [ 184.905369][ T6802] do_syscall_64+0x55/0xb0 [ 184.909842][ T6802] ? clear_bhb_loop+0x40/0x90 [ 184.914563][ T6802] ? clear_bhb_loop+0x40/0x90 [ 184.919282][ T6802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.925269][ T6802] RIP: 0033:0x7f6b0d99ce59 [ 184.929725][ T6802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.941505][ T6805] netlink: 'syz.1.355': attribute type 10 has an invalid length. [ 184.949361][ T6802] RSP: 002b:00007f6b0e850028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.965715][ T6802] RAX: ffffffffffffffda RBX: 00007f6b0dc15fa0 RCX: 00007f6b0d99ce59 [ 184.973715][ T6802] RDX: 0000000000000850 RSI: 0000200000000600 RDI: 0000000000000003 [ 184.981730][ T6802] RBP: 00007f6b0e850090 R08: 0000000000000000 R09: 0000000000000000 [ 184.989724][ T6802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.997716][ T6802] R13: 00007f6b0dc16038 R14: 00007f6b0dc15fa0 R15: 00007ffd549bb848 [ 185.005728][ T6802] [ 185.036918][ T6805] netlink: 40 bytes leftover after parsing attributes in process `syz.1.355'. [ 185.066474][ T6805] team0: Device geneve0 is up. Set it down before adding it as a team port [ 185.102031][ T6805] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 192.052446][ T6858] syzkaller0: entered promiscuous mode [ 192.058130][ T6858] syzkaller0: entered allmulticast mode [ 194.575820][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.585106][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.256759][ T6865] netlink: 14 bytes leftover after parsing attributes in process `syz.1.377'. [ 196.143447][ T6887] netlink: 'syz.0.382': attribute type 10 has an invalid length. [ 196.165487][ T6887] team0: Device veth1_vlan failed to register rx_handler [ 196.352155][ T6889] netlink: 132 bytes leftover after parsing attributes in process `syz.1.383'. [ 197.237495][ T6906] FAULT_INJECTION: forcing a failure. [ 197.237495][ T6906] name failslab, interval 1, probability 0, space 0, times 0 [ 197.342168][ T6906] CPU: 0 PID: 6906 Comm: syz.1.389 Not tainted syzkaller #0 [ 197.349590][ T6906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 197.359739][ T6906] Call Trace: [ 197.363121][ T6906] [ 197.366164][ T6906] dump_stack_lvl+0x18c/0x250 [ 197.370935][ T6906] ? sctp_sendmsg+0x1519/0x27b0 [ 197.375879][ T6906] ? ___sys_sendmsg+0x2a6/0x360 [ 197.380819][ T6906] ? show_regs_print_info+0x20/0x20 [ 197.386110][ T6906] ? load_image+0x420/0x420 [ 197.390748][ T6906] should_fail_ex+0x394/0x4c0 [ 197.395549][ T6906] should_failslab+0x9/0x20 [ 197.400141][ T6906] slab_pre_alloc_hook+0x59/0x300 [ 197.405266][ T6906] ? sctp_add_bind_addr+0x8c/0x360 [ 197.410491][ T6906] __kmem_cache_alloc_node+0x53/0x250 [ 197.415975][ T6906] ? sctp_add_bind_addr+0x8c/0x360 [ 197.421182][ T6906] kmalloc_trace+0x2a/0xe0 [ 197.425703][ T6906] sctp_add_bind_addr+0x8c/0x360 [ 197.430756][ T6906] sctp_copy_local_addr_list+0x31b/0x4e0 [ 197.436503][ T6906] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 197.442324][ T6906] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 197.448507][ T6906] ? sctp_v4_is_any+0x35/0x60 [ 197.453266][ T6906] ? sctp_copy_one_addr+0x8c/0x350 [ 197.458516][ T6906] sctp_bind_addr_copy+0xb3/0x3c0 [ 197.463672][ T6906] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 197.470114][ T6906] sctp_connect_new_asoc+0x2f9/0x6a0 [ 197.475594][ T6906] ? __sctp_connect+0xd80/0xd80 [ 197.480527][ T6906] ? __local_bh_enable_ip+0x13a/0x1c0 [ 197.486094][ T6906] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 197.491721][ T6906] ? security_sctp_bind_connect+0x89/0xb0 [ 197.497571][ T6906] sctp_sendmsg+0x1519/0x27b0 [ 197.502391][ T6906] ? sctp_getsockopt+0xb60/0xb60 [ 197.507564][ T6906] ? aa_sk_perm+0x83c/0x970 [ 197.512191][ T6906] ? aa_af_perm+0x330/0x330 [ 197.516942][ T6906] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 197.523472][ T6906] ? sock_rps_record_flow+0x19/0x3f0 [ 197.528865][ T6906] ? inet_sendmsg+0xce/0x2a0 [ 197.533570][ T6906] ? inet_send_prepare+0x250/0x250 [ 197.538798][ T6906] ____sys_sendmsg+0x61b/0x980 [ 197.543689][ T6906] ? __sys_sendmsg_sock+0x30/0x30 [ 197.548791][ T6906] ? __import_iovec+0x5f2/0x850 [ 197.553752][ T6906] ? import_iovec+0x73/0xa0 [ 197.558345][ T6906] ___sys_sendmsg+0x2a6/0x360 [ 197.563134][ T6906] ? __sys_sendmsg+0x2b0/0x2b0 [ 197.568066][ T6906] ? __lock_acquire+0x7d80/0x7d80 [ 197.573299][ T6906] __se_sys_sendmsg+0x1d0/0x2c0 [ 197.578249][ T6906] ? __x64_sys_sendmsg+0x80/0x80 [ 197.583357][ T6906] ? lockdep_hardirqs_on+0x98/0x150 [ 197.588669][ T6906] do_syscall_64+0x55/0xb0 [ 197.593159][ T6906] ? clear_bhb_loop+0x40/0x90 [ 197.597912][ T6906] ? clear_bhb_loop+0x40/0x90 [ 197.602668][ T6906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.608729][ T6906] RIP: 0033:0x7f99d9b9ce59 [ 197.613223][ T6906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.632944][ T6906] RSP: 002b:00007f99daa50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.641453][ T6906] RAX: ffffffffffffffda RBX: 00007f99d9e15fa0 RCX: 00007f99d9b9ce59 [ 197.649505][ T6906] RDX: 0000000000000850 RSI: 0000200000000600 RDI: 0000000000000003 [ 197.657568][ T6906] RBP: 00007f99daa50090 R08: 0000000000000000 R09: 0000000000000000 [ 197.665615][ T6906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.673669][ T6906] R13: 00007f99d9e16038 R14: 00007f99d9e15fa0 R15: 00007ffeeb14d8d8 [ 197.681789][ T6906] [ 197.856343][ T6908] netlink: 'syz.2.390': attribute type 10 has an invalid length. [ 197.874199][ T6908] netlink: 40 bytes leftover after parsing attributes in process `syz.2.390'. [ 197.885118][ T6908] team0: Device geneve0 is up. Set it down before adding it as a team port [ 197.905481][ T6908] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 198.337916][ T6914] netlink: 14 bytes leftover after parsing attributes in process `syz.0.392'. [ 201.826745][ T6941] netlink: 'syz.2.403': attribute type 10 has an invalid length. [ 201.863679][ T6941] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 202.805986][ T6953] FAULT_INJECTION: forcing a failure. [ 202.805986][ T6953] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 202.925766][ T6953] CPU: 0 PID: 6953 Comm: syz.3.405 Not tainted syzkaller #0 [ 202.933179][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 202.943316][ T6953] Call Trace: [ 202.946666][ T6953] [ 202.949678][ T6953] dump_stack_lvl+0x18c/0x250 [ 202.954479][ T6953] ? show_regs_print_info+0x20/0x20 [ 202.959768][ T6953] ? load_image+0x420/0x420 [ 202.964361][ T6953] ? __might_fault+0xaa/0x120 [ 202.969137][ T6953] ? __lock_acquire+0x7d80/0x7d80 [ 202.974265][ T6953] should_fail_ex+0x394/0x4c0 [ 202.979054][ T6953] _copy_from_user+0x2f/0xe0 [ 202.983730][ T6953] ___sys_sendmsg+0x1c7/0x360 [ 202.988504][ T6953] ? get_pid_task+0x20/0x1e0 [ 202.993214][ T6953] ? __sys_sendmsg+0x2b0/0x2b0 [ 202.998161][ T6953] ? __lock_acquire+0x7d80/0x7d80 [ 203.003364][ T6953] __se_sys_sendmsg+0x1d0/0x2c0 [ 203.008315][ T6953] ? __x64_sys_sendmsg+0x80/0x80 [ 203.013393][ T6953] ? lockdep_hardirqs_on+0x98/0x150 [ 203.018701][ T6953] do_syscall_64+0x55/0xb0 [ 203.023204][ T6953] ? clear_bhb_loop+0x40/0x90 [ 203.027960][ T6953] ? clear_bhb_loop+0x40/0x90 [ 203.032719][ T6953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.038699][ T6953] RIP: 0033:0x7f6b0d99ce59 [ 203.043159][ T6953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.062816][ T6953] RSP: 002b:00007f6b0e82f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.071291][ T6953] RAX: ffffffffffffffda RBX: 00007f6b0dc16090 RCX: 00007f6b0d99ce59 [ 203.079323][ T6953] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000f [ 203.087349][ T6953] RBP: 00007f6b0e82f090 R08: 0000000000000000 R09: 0000000000000000 [ 203.095384][ T6953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.103411][ T6953] R13: 00007f6b0dc16128 R14: 00007f6b0dc16090 R15: 00007ffd549bb848 [ 203.111470][ T6953] [ 203.316234][ T6956] netlink: 'syz.2.407': attribute type 10 has an invalid length. [ 203.344539][ T6956] team0: Device hsr_slave_0 failed to register rx_handler [ 206.883693][ T6967] Bluetooth: hci1: command 0x0406 tx timeout [ 206.886671][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 206.890000][ T6967] Bluetooth: hci2: command 0x0406 tx timeout [ 206.896862][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 207.046244][ T6990] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.426'. [ 207.095288][ T6990] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.426'. [ 207.155071][ T6993] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.426'. [ 207.234800][ T6995] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.426'. [ 208.104005][ T7002] netlink: 'syz.3.420': attribute type 12 has an invalid length. [ 208.116069][ T7002] netlink: 'syz.3.420': attribute type 15 has an invalid length. [ 208.300592][ T7002] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.420'. [ 208.355299][ T7009] FAULT_INJECTION: forcing a failure. [ 208.355299][ T7009] name failslab, interval 1, probability 0, space 0, times 0 [ 208.388865][ T7009] CPU: 0 PID: 7009 Comm: syz.2.423 Not tainted syzkaller #0 [ 208.396264][ T7009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 208.406442][ T7009] Call Trace: [ 208.409797][ T7009] [ 208.412805][ T7009] dump_stack_lvl+0x18c/0x250 [ 208.417570][ T7009] ? sctp_sendmsg+0x1519/0x27b0 [ 208.422504][ T7009] ? ___sys_sendmsg+0x2a6/0x360 [ 208.427442][ T7009] ? show_regs_print_info+0x20/0x20 [ 208.432728][ T7009] ? load_image+0x420/0x420 [ 208.437369][ T7009] should_fail_ex+0x394/0x4c0 [ 208.442157][ T7009] should_failslab+0x9/0x20 [ 208.446743][ T7009] slab_pre_alloc_hook+0x59/0x300 [ 208.451870][ T7009] ? sctp_add_bind_addr+0x8c/0x360 [ 208.457075][ T7009] __kmem_cache_alloc_node+0x53/0x250 [ 208.462545][ T7009] ? sctp_add_bind_addr+0x8c/0x360 [ 208.467745][ T7009] kmalloc_trace+0x2a/0xe0 [ 208.472352][ T7009] sctp_add_bind_addr+0x8c/0x360 [ 208.477412][ T7009] sctp_copy_local_addr_list+0x31b/0x4e0 [ 208.483144][ T7009] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 208.488964][ T7009] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 208.495138][ T7009] ? sctp_v4_is_any+0x35/0x60 [ 208.499896][ T7009] ? sctp_copy_one_addr+0x8c/0x350 [ 208.505119][ T7009] sctp_bind_addr_copy+0xb3/0x3c0 [ 208.510247][ T7009] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 208.516693][ T7009] sctp_connect_new_asoc+0x2f9/0x6a0 [ 208.522102][ T7009] ? __sctp_connect+0xd80/0xd80 [ 208.527043][ T7009] ? __local_bh_enable_ip+0x13a/0x1c0 [ 208.532530][ T7009] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 208.538171][ T7009] ? security_sctp_bind_connect+0x89/0xb0 [ 208.544008][ T7009] sctp_sendmsg+0x1519/0x27b0 [ 208.548821][ T7009] ? sctp_getsockopt+0xb60/0xb60 [ 208.553851][ T7009] ? aa_sk_perm+0x83c/0x970 [ 208.558472][ T7009] ? aa_af_perm+0x330/0x330 [ 208.563054][ T7009] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 208.569567][ T7009] ? sock_rps_record_flow+0x19/0x3f0 [ 208.574958][ T7009] ? inet_sendmsg+0xce/0x2a0 [ 208.579637][ T7009] ? inet_send_prepare+0x250/0x250 [ 208.584928][ T7009] ____sys_sendmsg+0x61b/0x980 [ 208.589812][ T7009] ? __sys_sendmsg_sock+0x30/0x30 [ 208.594931][ T7009] ? __import_iovec+0x5f2/0x850 [ 208.599897][ T7009] ? import_iovec+0x73/0xa0 [ 208.604489][ T7009] ___sys_sendmsg+0x2a6/0x360 [ 208.609268][ T7009] ? __sys_sendmsg+0x2b0/0x2b0 [ 208.614207][ T7009] ? __lock_acquire+0x7d80/0x7d80 [ 208.619508][ T7009] __se_sys_sendmsg+0x1d0/0x2c0 [ 208.624482][ T7009] ? __x64_sys_sendmsg+0x80/0x80 [ 208.629556][ T7009] ? lockdep_hardirqs_on+0x98/0x150 [ 208.634852][ T7009] do_syscall_64+0x55/0xb0 [ 208.639345][ T7009] ? clear_bhb_loop+0x40/0x90 [ 208.644090][ T7009] ? clear_bhb_loop+0x40/0x90 [ 208.648847][ T7009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.654827][ T7009] RIP: 0033:0x7f4c9db9ce59 [ 208.659333][ T7009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.679008][ T7009] RSP: 002b:00007f4c9e9c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.687511][ T7009] RAX: ffffffffffffffda RBX: 00007f4c9de15fa0 RCX: 00007f4c9db9ce59 [ 208.695648][ T7009] RDX: 0000000000000850 RSI: 0000200000000600 RDI: 0000000000000003 [ 208.703691][ T7009] RBP: 00007f4c9e9c9090 R08: 0000000000000000 R09: 0000000000000000 [ 208.711733][ T7009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.719862][ T7009] R13: 00007f4c9de16038 R14: 00007f4c9de15fa0 R15: 00007ffe5de89f88 [ 208.727972][ T7009] [ 209.159407][ T7011] netlink: 'syz.0.433': attribute type 16 has an invalid length. [ 209.220995][ T7011] netlink: 'syz.0.433': attribute type 3 has an invalid length. [ 209.229044][ T7011] netlink: 132 bytes leftover after parsing attributes in process `syz.0.433'. [ 209.957706][ T7028] netlink: 'syz.2.430': attribute type 9 has an invalid length. [ 209.967751][ T7028] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.430'. [ 210.145305][ T7029] netlink: 'syz.2.430': attribute type 9 has an invalid length. [ 210.160004][ T7029] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.430'. [ 212.235350][ T7045] netlink: 'syz.0.437': attribute type 12 has an invalid length. [ 212.260679][ T7045] netlink: 'syz.0.437': attribute type 15 has an invalid length. [ 212.377121][ T7048] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.437'. [ 214.049563][ T7058] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.442'. [ 223.186399][ T7132] netlink: 'syz.1.467': attribute type 10 has an invalid length. [ 223.220686][ T7132] netlink: 40 bytes leftover after parsing attributes in process `syz.1.467'. [ 223.229665][ T7132] team0: Device geneve0 is up. Set it down before adding it as a team port [ 223.281425][ T7132] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 223.624491][ T7144] netlink: 'syz.0.473': attribute type 2 has an invalid length. [ 223.663347][ T7144] netlink: 'syz.0.473': attribute type 1 has an invalid length. [ 223.685149][ T7144] netlink: 'syz.0.473': attribute type 2 has an invalid length. [ 223.727663][ T7144] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.473'. [ 223.759296][ T7147] tun0: tun_chr_ioctl cmd 1074025675 [ 223.814860][ T7147] tun0: persist enabled [ 223.889738][ T7140] tun0: tun_chr_ioctl cmd 1074025675 [ 223.913367][ T7140] tun0: persist disabled [ 225.637314][ T7175] bridge0: port 3(batadv0) entered blocking state [ 225.655579][ T7175] bridge0: port 3(batadv0) entered disabled state [ 225.667813][ T7175] batadv0: entered allmulticast mode [ 225.678895][ T7175] batadv0: entered promiscuous mode [ 225.689152][ T7175] bridge0: port 3(batadv0) entered blocking state [ 225.696850][ T7175] bridge0: port 3(batadv0) entered forwarding state [ 226.041518][ T6774] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 226.051333][ T6774] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 229.227334][ T7187] netlink: 763 bytes leftover after parsing attributes in process `syz.2.491'. [ 229.382960][ T7187] netlink: 'syz.2.491': attribute type 21 has an invalid length. [ 229.408375][ T7187] netlink: 'syz.2.491': attribute type 1 has an invalid length. [ 229.431654][ T7187] netlink: 16090 bytes leftover after parsing attributes in process `syz.2.491'. [ 234.573431][ T7255] netlink: 'syz.2.517': attribute type 10 has an invalid length. [ 234.599159][ T7255] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 235.502269][ T7285] netlink: 'syz.2.531': attribute type 5 has an invalid length. [ 237.349839][ T7337] netlink: 128 bytes leftover after parsing attributes in process `syz.0.552'. [ 237.401912][ T7337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.572116][ T7333] netlink: 'syz.3.551': attribute type 10 has an invalid length. [ 237.601758][ T7333] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 238.699147][ T7361] netlink: 763 bytes leftover after parsing attributes in process `syz.1.561'. [ 238.719308][ T7362] netlink: 'syz.1.561': attribute type 21 has an invalid length. [ 238.728901][ T7362] netlink: 'syz.1.561': attribute type 1 has an invalid length. [ 238.742671][ T7362] netlink: 16090 bytes leftover after parsing attributes in process `syz.1.561'. [ 239.626860][ T7389] netlink: 'syz.1.573': attribute type 2 has an invalid length. [ 239.649301][ T7389] netlink: 'syz.1.573': attribute type 1 has an invalid length. [ 239.658997][ T7389] netlink: 'syz.1.573': attribute type 2 has an invalid length. [ 239.669640][ T7389] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.573'. [ 239.818657][ T7389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.837246][ T7389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.538482][ T7389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.550804][ T7389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.703476][ T7397] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.575'. [ 242.722399][ T7397] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 242.773491][ T7404] netlink: 'syz.0.579': attribute type 1 has an invalid length. [ 242.907920][ T7409] netlink: 763 bytes leftover after parsing attributes in process `syz.3.582'. [ 243.004293][ T7409] netlink: 'syz.3.582': attribute type 21 has an invalid length. [ 243.020876][ T7409] netlink: 'syz.3.582': attribute type 1 has an invalid length. [ 243.039472][ T7409] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.582'. [ 243.213357][ T7418] netlink: 'syz.1.585': attribute type 3 has an invalid length. [ 243.265450][ T7418] netlink: 'syz.1.585': attribute type 1 has an invalid length. [ 243.273501][ T7418] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.585'. [ 244.020910][ T7430] hsr0: entered allmulticast mode [ 244.026034][ T7430] hsr_slave_0: entered allmulticast mode [ 244.032637][ T7430] hsr_slave_1: entered allmulticast mode [ 244.039082][ T7429] netlink: 'syz.3.589': attribute type 2 has an invalid length. [ 244.055186][ T7429] netlink: 14 bytes leftover after parsing attributes in process `syz.3.589'. [ 247.233448][ T7448] FAULT_INJECTION: forcing a failure. [ 247.233448][ T7448] name failslab, interval 1, probability 0, space 0, times 0 [ 247.270197][ T7448] CPU: 1 PID: 7448 Comm: syz.3.595 Not tainted syzkaller #0 [ 247.277578][ T7448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 247.287693][ T7448] Call Trace: [ 247.291022][ T7448] [ 247.294047][ T7448] dump_stack_lvl+0x18c/0x250 [ 247.298800][ T7448] ? sctp_sendmsg+0x1519/0x27b0 [ 247.303730][ T7448] ? ___sys_sendmsg+0x2a6/0x360 [ 247.308641][ T7448] ? show_regs_print_info+0x20/0x20 [ 247.313895][ T7448] ? load_image+0x420/0x420 [ 247.318470][ T7448] should_fail_ex+0x394/0x4c0 [ 247.323214][ T7448] should_failslab+0x9/0x20 [ 247.327779][ T7448] slab_pre_alloc_hook+0x59/0x300 [ 247.332862][ T7448] ? sctp_add_bind_addr+0x8c/0x360 [ 247.338066][ T7448] __kmem_cache_alloc_node+0x53/0x250 [ 247.343501][ T7448] ? sctp_add_bind_addr+0x8c/0x360 [ 247.348669][ T7448] kmalloc_trace+0x2a/0xe0 [ 247.353148][ T7448] sctp_add_bind_addr+0x8c/0x360 [ 247.358149][ T7448] sctp_copy_local_addr_list+0x31b/0x4e0 [ 247.363844][ T7448] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 247.369670][ T7448] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 247.375806][ T7448] ? sctp_v4_is_any+0x35/0x60 [ 247.380542][ T7448] ? sctp_copy_one_addr+0x8c/0x350 [ 247.385726][ T7448] sctp_bind_addr_copy+0xb3/0x3c0 [ 247.390791][ T7448] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 247.397160][ T7448] sctp_connect_new_asoc+0x2f9/0x6a0 [ 247.402486][ T7448] ? __sctp_connect+0xd80/0xd80 [ 247.407380][ T7448] ? __local_bh_enable_ip+0x13a/0x1c0 [ 247.412784][ T7448] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 247.418362][ T7448] ? security_sctp_bind_connect+0x89/0xb0 [ 247.424122][ T7448] sctp_sendmsg+0x1519/0x27b0 [ 247.428847][ T7448] ? sctp_getsockopt+0xb60/0xb60 [ 247.433819][ T7448] ? aa_sk_perm+0x83c/0x970 [ 247.438360][ T7448] ? aa_af_perm+0x330/0x330 [ 247.442894][ T7448] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 247.449340][ T7448] ? sock_rps_record_flow+0x19/0x3f0 [ 247.454664][ T7448] ? inet_sendmsg+0xce/0x2a0 [ 247.459284][ T7448] ? inet_send_prepare+0x250/0x250 [ 247.464430][ T7448] ____sys_sendmsg+0x61b/0x980 [ 247.469231][ T7448] ? __sys_sendmsg_sock+0x30/0x30 [ 247.474286][ T7448] ? __import_iovec+0x5f2/0x850 [ 247.479171][ T7448] ? import_iovec+0x73/0xa0 [ 247.483710][ T7448] ___sys_sendmsg+0x2a6/0x360 [ 247.488444][ T7448] ? get_pid_task+0x20/0x1e0 [ 247.493075][ T7448] ? __sys_sendmsg+0x2b0/0x2b0 [ 247.497884][ T7448] ? __lock_acquire+0x7d80/0x7d80 [ 247.502958][ T7448] __se_sys_sendmsg+0x1d0/0x2c0 [ 247.507839][ T7448] ? __x64_sys_sendmsg+0x80/0x80 [ 247.512937][ T7448] ? lockdep_hardirqs_on+0x98/0x150 [ 247.518173][ T7448] do_syscall_64+0x55/0xb0 [ 247.522660][ T7448] ? clear_bhb_loop+0x40/0x90 [ 247.527397][ T7448] ? clear_bhb_loop+0x40/0x90 [ 247.532122][ T7448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.538051][ T7448] RIP: 0033:0x7f6b0d99ce59 [ 247.542490][ T7448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.562127][ T7448] RSP: 002b:00007f6b0e850028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.570569][ T7448] RAX: ffffffffffffffda RBX: 00007f6b0dc15fa0 RCX: 00007f6b0d99ce59 [ 247.578575][ T7448] RDX: 0000000000000850 RSI: 0000200000000600 RDI: 0000000000000003 [ 247.586596][ T7448] RBP: 00007f6b0e850090 R08: 0000000000000000 R09: 0000000000000000 [ 247.594600][ T7448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.602598][ T7448] R13: 00007f6b0dc16038 R14: 00007f6b0dc15fa0 R15: 00007ffd549bb848 [ 247.610620][ T7448] [ 252.058335][ T7506] netlink: 'syz.1.615': attribute type 1 has an invalid length. [ 252.158476][ T7505] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.614'. [ 256.024299][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.030734][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.693313][ T7542] netlink: 'syz.0.628': attribute type 10 has an invalid length. [ 256.710777][ T7542] netlink: 40 bytes leftover after parsing attributes in process `syz.0.628'. [ 256.719742][ T7542] team0: Device geneve0 is up. Set it down before adding it as a team port [ 256.769000][ T7542] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 256.804621][ T7541] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.629'. [ 257.029948][ T7549] netlink: 'syz.0.631': attribute type 29 has an invalid length. [ 257.043517][ T7547] netlink: 'syz.0.631': attribute type 29 has an invalid length. [ 257.053377][ T7549] netlink: 'syz.0.631': attribute type 29 has an invalid length. [ 257.067239][ T7547] netlink: 'syz.0.631': attribute type 21 has an invalid length. [ 257.076816][ T7547] netlink: 164 bytes leftover after parsing attributes in process `syz.0.631'. [ 259.812112][ T7551] FAULT_INJECTION: forcing a failure. [ 259.812112][ T7551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.833381][ T7551] CPU: 0 PID: 7551 Comm: syz.2.632 Not tainted syzkaller #0 [ 259.840761][ T7551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 259.850886][ T7551] Call Trace: [ 259.854210][ T7551] [ 259.857179][ T7551] dump_stack_lvl+0x18c/0x250 [ 259.861929][ T7551] ? show_regs_print_info+0x20/0x20 [ 259.867283][ T7551] ? load_image+0x420/0x420 [ 259.871883][ T7551] ? __might_fault+0xaa/0x120 [ 259.876627][ T7551] ? __lock_acquire+0x7d80/0x7d80 [ 259.881721][ T7551] should_fail_ex+0x394/0x4c0 [ 259.886464][ T7551] _copy_from_user+0x2f/0xe0 [ 259.891134][ T7551] __sys_bpf+0x23e/0x890 [ 259.895432][ T7551] ? bpf_link_show_fdinfo+0x390/0x390 [ 259.900873][ T7551] ? lock_chain_count+0x20/0x20 [ 259.905797][ T7551] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 259.911874][ T7551] __x64_sys_bpf+0x7c/0x90 [ 259.916353][ T7551] do_syscall_64+0x55/0xb0 [ 259.920827][ T7551] ? clear_bhb_loop+0x40/0x90 [ 259.925569][ T7551] ? clear_bhb_loop+0x40/0x90 [ 259.930299][ T7551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.936243][ T7551] RIP: 0033:0x7f4c9db9ce59 [ 259.940704][ T7551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.960372][ T7551] RSP: 002b:00007f4c9e9c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 259.968847][ T7551] RAX: ffffffffffffffda RBX: 00007f4c9de15fa0 RCX: 00007f4c9db9ce59 [ 259.976903][ T7551] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 259.984928][ T7551] RBP: 00007f4c9e9c9090 R08: 0000000000000000 R09: 0000000000000000 [ 259.992943][ T7551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.000956][ T7551] R13: 00007f4c9de16038 R14: 00007f4c9de15fa0 R15: 00007ffe5de89f88 [ 260.009056][ T7551] [ 261.314182][ T7571] netlink: 'syz.3.639': attribute type 2 has an invalid length. [ 261.334096][ T7571] netlink: 'syz.3.639': attribute type 1 has an invalid length. [ 261.355775][ T7571] netlink: 'syz.3.639': attribute type 2 has an invalid length. [ 261.400656][ T7571] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.639'. [ 261.433271][ T7576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.461394][ T7576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.503871][ T7576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.533770][ T7576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.900514][ T7576] bridge0: port 3(batadv0) entered disabled state [ 264.944514][ T7576] batadv0 (unregistering): left allmulticast mode [ 264.951211][ T7576] batadv0 (unregistering): left promiscuous mode [ 264.959179][ T7576] bridge0: port 3(batadv0) entered disabled state [ 265.094523][ T7587] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.644'. [ 265.773869][ T7607] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 265.781633][ T7607] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 265.825012][ T7607] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.649'. [ 265.836256][ T7607] netlink: zone id is out of range [ 265.844007][ T7607] netlink: zone id is out of range [ 265.851192][ T7607] netlink: zone id is out of range [ 265.856655][ T7607] netlink: zone id is out of range [ 265.863350][ T7607] netlink: zone id is out of range [ 265.871475][ T7607] netlink: zone id is out of range [ 265.877801][ T7607] netlink: zone id is out of range [ 265.885032][ T7607] netlink: zone id is out of range [ 265.890974][ T7607] netlink: zone id is out of range [ 269.775816][ T7638] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.659'. [ 277.945008][ T7696] netlink: 'syz.2.683': attribute type 5 has an invalid length. [ 278.084813][ T7706] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.687'. [ 278.107398][ T7706] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.687'. [ 278.179936][ T7709] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.687'. [ 278.195474][ T7706] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.687'. [ 278.363248][ T7716] netlink: 'syz.2.691': attribute type 10 has an invalid length. [ 278.391600][ T7716] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 278.725997][ T7727] netlink: 'syz.3.694': attribute type 2 has an invalid length. [ 278.746442][ T7727] netlink: 'syz.3.694': attribute type 1 has an invalid length. [ 278.770401][ T7727] netlink: 'syz.3.694': attribute type 2 has an invalid length. [ 278.778422][ T7727] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.694'. [ 281.759548][ T7743] netlink: 'syz.2.702': attribute type 1 has an invalid length. [ 281.815657][ T7743] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.702'. [ 281.821681][ T7739] netlink: 'syz.3.699': attribute type 5 has an invalid length. [ 282.326137][ T7759] netlink: 'syz.0.707': attribute type 1 has an invalid length. [ 282.545885][ T7769] netlink: 'syz.0.712': attribute type 3 has an invalid length. [ 285.486050][ T7775] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.714'. [ 285.505835][ T7775] bridge_slave_1: default FDB implementation only supports local addresses [ 285.627244][ T7775] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.714'. [ 285.636795][ T7775] bridge_slave_1: default FDB implementation only supports local addresses [ 285.822870][ T7788] netlink: 132 bytes leftover after parsing attributes in process `syz.0.718'. [ 285.835640][ T7788] netlink: 132 bytes leftover after parsing attributes in process `syz.0.718'. [ 285.852275][ T7788] netlink: 'syz.0.718': attribute type 4 has an invalid length. [ 285.866578][ T7788] netlink: 132 bytes leftover after parsing attributes in process `syz.0.718'. [ 286.342269][ T7805] netlink: 'syz.3.725': attribute type 10 has an invalid length. [ 286.350073][ T7805] netlink: 40 bytes leftover after parsing attributes in process `syz.3.725'. [ 286.370647][ T7805] team0: Device geneve0 is up. Set it down before adding it as a team port [ 286.380133][ T7805] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 289.379531][ T7814] FAULT_INJECTION: forcing a failure. [ 289.379531][ T7814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.394412][ T7814] CPU: 1 PID: 7814 Comm: syz.2.731 Not tainted syzkaller #0 [ 289.401784][ T7814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 289.411975][ T7814] Call Trace: [ 289.415312][ T7814] [ 289.418288][ T7814] dump_stack_lvl+0x18c/0x250 [ 289.423022][ T7814] ? show_regs_print_info+0x20/0x20 [ 289.428271][ T7814] ? load_image+0x420/0x420 [ 289.432828][ T7814] ? __lock_acquire+0x7d80/0x7d80 [ 289.437902][ T7814] should_fail_ex+0x394/0x4c0 [ 289.442644][ T7814] _copy_from_user+0x2f/0xe0 [ 289.447288][ T7814] bpf_test_init+0xde/0x140 [ 289.451844][ T7814] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 289.457263][ T7814] ? __lock_acquire+0x7d80/0x7d80 [ 289.462347][ T7814] ? dev_put+0x80/0x80 [ 289.466487][ T7814] ? dev_put+0x80/0x80 [ 289.470612][ T7814] bpf_prog_test_run+0x31f/0x390 [ 289.475604][ T7814] __sys_bpf+0x49d/0x890 [ 289.479892][ T7814] ? bpf_link_show_fdinfo+0x390/0x390 [ 289.485313][ T7814] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 289.491529][ T7814] __x64_sys_bpf+0x7c/0x90 [ 289.496003][ T7814] do_syscall_64+0x55/0xb0 [ 289.500463][ T7814] ? clear_bhb_loop+0x40/0x90 [ 289.505172][ T7814] ? clear_bhb_loop+0x40/0x90 [ 289.509930][ T7814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.515877][ T7814] RIP: 0033:0x7f4c9db9ce59 [ 289.520324][ T7814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.539974][ T7814] RSP: 002b:00007f4c9e9c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 289.548445][ T7814] RAX: ffffffffffffffda RBX: 00007f4c9de15fa0 RCX: 00007f4c9db9ce59 [ 289.556464][ T7814] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 289.564481][ T7814] RBP: 00007f4c9e9c9090 R08: 0000000000000000 R09: 0000000000000000 [ 289.572583][ T7814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.580598][ T7814] R13: 00007f4c9de16038 R14: 00007f4c9de15fa0 R15: 00007ffe5de89f88 [ 289.588626][ T7814] [ 292.924439][ T7840] netlink: 'syz.2.745': attribute type 10 has an invalid length. [ 295.880861][ T7855] netlink: 'syz.2.743': attribute type 10 has an invalid length. [ 295.908001][ T7855] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 296.093849][ T7865] FAULT_INJECTION: forcing a failure. [ 296.093849][ T7865] name failslab, interval 1, probability 0, space 0, times 0 [ 296.122123][ T7865] CPU: 0 PID: 7865 Comm: syz.3.748 Not tainted syzkaller #0 [ 296.129494][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 296.139599][ T7865] Call Trace: [ 296.142921][ T7865] [ 296.145901][ T7865] dump_stack_lvl+0x18c/0x250 [ 296.150635][ T7865] ? sctp_sendmsg+0x1519/0x27b0 [ 296.155542][ T7865] ? ___sys_sendmsg+0x2a6/0x360 [ 296.160450][ T7865] ? show_regs_print_info+0x20/0x20 [ 296.165707][ T7865] ? load_image+0x420/0x420 [ 296.170280][ T7865] should_fail_ex+0x394/0x4c0 [ 296.175023][ T7865] should_failslab+0x9/0x20 [ 296.179581][ T7865] slab_pre_alloc_hook+0x59/0x300 [ 296.184671][ T7865] ? sctp_add_bind_addr+0x8c/0x360 [ 296.189858][ T7865] __kmem_cache_alloc_node+0x53/0x250 [ 296.195288][ T7865] ? sctp_add_bind_addr+0x8c/0x360 [ 296.200471][ T7865] kmalloc_trace+0x2a/0xe0 [ 296.204950][ T7865] sctp_add_bind_addr+0x8c/0x360 [ 296.209961][ T7865] sctp_copy_local_addr_list+0x31b/0x4e0 [ 296.215662][ T7865] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 296.221444][ T7865] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 296.227582][ T7865] ? sctp_v4_is_any+0x35/0x60 [ 296.232309][ T7865] ? sctp_copy_one_addr+0x8c/0x350 [ 296.237487][ T7865] sctp_bind_addr_copy+0xb3/0x3c0 [ 296.242581][ T7865] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 296.248974][ T7865] sctp_connect_new_asoc+0x2f9/0x6a0 [ 296.254327][ T7865] ? __sctp_connect+0xd80/0xd80 [ 296.259240][ T7865] ? __local_bh_enable_ip+0x13a/0x1c0 [ 296.264684][ T7865] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 296.270297][ T7865] ? security_sctp_bind_connect+0x89/0xb0 [ 296.276092][ T7865] sctp_sendmsg+0x1519/0x27b0 [ 296.280849][ T7865] ? sctp_getsockopt+0xb60/0xb60 [ 296.285869][ T7865] ? aa_sk_perm+0x83c/0x970 [ 296.290429][ T7865] ? aa_af_perm+0x330/0x330 [ 296.294991][ T7865] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 296.301461][ T7865] ? sock_rps_record_flow+0x19/0x3f0 [ 296.306819][ T7865] ? inet_sendmsg+0xce/0x2a0 [ 296.311472][ T7865] ? inet_send_prepare+0x250/0x250 [ 296.316612][ T7865] ____sys_sendmsg+0x61b/0x980 [ 296.321436][ T7865] ? __sys_sendmsg_sock+0x30/0x30 [ 296.326637][ T7865] ? __import_iovec+0x5f2/0x850 [ 296.331539][ T7865] ? import_iovec+0x73/0xa0 [ 296.336101][ T7865] ___sys_sendmsg+0x2a6/0x360 [ 296.340900][ T7865] ? get_pid_task+0x20/0x1e0 [ 296.345518][ T7865] ? __sys_sendmsg+0x2b0/0x2b0 [ 296.350403][ T7865] ? __lock_acquire+0x7d80/0x7d80 [ 296.355495][ T7865] __se_sys_sendmsg+0x1d0/0x2c0 [ 296.360377][ T7865] ? __x64_sys_sendmsg+0x80/0x80 [ 296.365347][ T7865] ? lockdep_hardirqs_on+0x98/0x150 [ 296.370589][ T7865] do_syscall_64+0x55/0xb0 [ 296.375037][ T7865] ? clear_bhb_loop+0x40/0x90 [ 296.379730][ T7865] ? clear_bhb_loop+0x40/0x90 [ 296.384441][ T7865] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.390564][ T7865] RIP: 0033:0x7f6b0d99ce59 [ 296.395022][ T7865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.414657][ T7865] RSP: 002b:00007f6b0e850028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.423110][ T7865] RAX: ffffffffffffffda RBX: 00007f6b0dc15fa0 RCX: 00007f6b0d99ce59 [ 296.431115][ T7865] RDX: 0000000000000850 RSI: 0000200000000600 RDI: 0000000000000003 [ 296.439191][ T7865] RBP: 00007f6b0e850090 R08: 0000000000000000 R09: 0000000000000000 [ 296.447220][ T7865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 296.455238][ T7865] R13: 00007f6b0dc16038 R14: 00007f6b0dc15fa0 R15: 00007ffd549bb848 [ 296.463240][ T7865] [ 296.528806][ T7867] netlink: 'syz.0.749': attribute type 1 has an invalid length. [ 296.536777][ T7867] netlink: 'syz.0.749': attribute type 4 has an invalid length. [ 296.546007][ T7867] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.749'. [ 296.831070][ T7882] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 296.852743][ T7881] netlink: 'syz.3.755': attribute type 2 has an invalid length. [ 296.860490][ T7881] netlink: 'syz.3.755': attribute type 1 has an invalid length. [ 296.883299][ T7881] netlink: 'syz.3.755': attribute type 2 has an invalid length. [ 296.892391][ T7881] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.755'. [ 299.494454][ T7890] netlink: 'syz.1.765': attribute type 29 has an invalid length. [ 299.521772][ T7890] netlink: 'syz.1.765': attribute type 29 has an invalid length. [ 299.560983][ T7890] netlink: 'syz.1.765': attribute type 29 has an invalid length. [ 299.579662][ T7890] netlink: 'syz.1.765': attribute type 29 has an invalid length. [ 301.710075][ T7963] netlink: 'syz.1.791': attribute type 9 has an invalid length. [ 301.726243][ T7963] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.791'. [ 301.769200][ T7963] netlink: 'syz.1.791': attribute type 10 has an invalid length. [ 301.814506][ T7963] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 301.872498][ T7968] FAULT_INJECTION: forcing a failure. [ 301.872498][ T7968] name failslab, interval 1, probability 0, space 0, times 0 [ 301.893714][ T7968] CPU: 1 PID: 7968 Comm: syz.2.790 Not tainted syzkaller #0 [ 301.901097][ T7968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.911261][ T7968] Call Trace: [ 301.914591][ T7968] [ 301.917554][ T7968] dump_stack_lvl+0x18c/0x250 [ 301.922291][ T7968] ? show_regs_print_info+0x20/0x20 [ 301.927540][ T7968] ? load_image+0x420/0x420 [ 301.932091][ T7968] ? __might_sleep+0xe0/0xe0 [ 301.936733][ T7968] ? __lock_acquire+0x7d80/0x7d80 [ 301.941858][ T7968] should_fail_ex+0x394/0x4c0 [ 301.946602][ T7968] should_failslab+0x9/0x20 [ 301.951157][ T7968] slab_pre_alloc_hook+0x59/0x300 [ 301.956240][ T7968] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 301.962451][ T7968] ? kvmalloc_node+0x70/0x180 [ 301.967178][ T7968] ? kvmalloc_node+0x70/0x180 [ 301.971905][ T7968] __kmem_cache_alloc_node+0x53/0x250 [ 301.977372][ T7968] ? kvmalloc_node+0x70/0x180 [ 301.982145][ T7968] __kmalloc_node+0xa6/0x240 [ 301.986807][ T7968] kvmalloc_node+0x70/0x180 [ 301.991368][ T7968] bpf_test_run_xdp_live+0x1c2/0x1b30 [ 301.996805][ T7968] ? 0xffffffffa0004740 [ 302.001016][ T7968] ? 0xffffffffa0004740 [ 302.005227][ T7968] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 302.011181][ T7968] ? xdp_convert_md_to_buff+0x330/0x330 [ 302.016815][ T7968] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 302.023122][ T7968] ? _copy_from_user+0xa5/0xe0 [ 302.027944][ T7968] ? bpf_test_init+0x119/0x140 [ 302.032766][ T7968] ? xdp_convert_md_to_buff+0x5b/0x330 [ 302.038294][ T7968] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 302.043728][ T7968] ? __lock_acquire+0x7d80/0x7d80 [ 302.048816][ T7968] ? dev_put+0x80/0x80 [ 302.052951][ T7968] ? dev_put+0x80/0x80 [ 302.057076][ T7968] bpf_prog_test_run+0x31f/0x390 [ 302.062071][ T7968] __sys_bpf+0x49d/0x890 [ 302.066361][ T7968] ? read_tsc+0x9/0x20 [ 302.070482][ T7968] ? bpf_link_show_fdinfo+0x390/0x390 [ 302.075930][ T7968] ? lock_chain_count+0x20/0x20 [ 302.080843][ T7968] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 302.086885][ T7968] __x64_sys_bpf+0x7c/0x90 [ 302.091350][ T7968] do_syscall_64+0x55/0xb0 [ 302.095814][ T7968] ? clear_bhb_loop+0x40/0x90 [ 302.100535][ T7968] ? clear_bhb_loop+0x40/0x90 [ 302.105266][ T7968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.111226][ T7968] RIP: 0033:0x7f4c9db9ce59 [ 302.115693][ T7968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.135354][ T7968] RSP: 002b:00007f4c9e9c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 302.143839][ T7968] RAX: ffffffffffffffda RBX: 00007f4c9de15fa0 RCX: 00007f4c9db9ce59 [ 302.151871][ T7968] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 302.159900][ T7968] RBP: 00007f4c9e9c9090 R08: 0000000000000000 R09: 0000000000000000 [ 302.167933][ T7968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.175949][ T7968] R13: 00007f4c9de16038 R14: 00007f4c9de15fa0 R15: 00007ffe5de89f88 [ 302.183988][ T7968] [ 302.605204][ T7987] tun0: tun_chr_ioctl cmd 1074025675 [ 302.631582][ T7987] tun0: persist enabled [ 302.644291][ T7992] netlink: 'syz.2.801': attribute type 2 has an invalid length. [ 302.652179][ T7990] tun0: tun_chr_ioctl cmd 1074025675 [ 302.660934][ T7990] tun0: persist disabled [ 302.671141][ T7992] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.801'. [ 306.245189][ T8027] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.815'. [ 306.265621][ T8027] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.815'. [ 306.279231][ T8027] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.815'. [ 306.291565][ T8027] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.815'. [ 306.430888][ T8031] netlink: 'syz.3.817': attribute type 10 has an invalid length. [ 306.451919][ T8031] hsr0: left allmulticast mode [ 306.456859][ T8031] hsr_slave_0: left allmulticast mode [ 306.518672][ T8031] hsr_slave_1: left allmulticast mode [ 306.591696][ T8031] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 306.792257][ T8043] FAULT_INJECTION: forcing a failure. [ 306.792257][ T8043] name failslab, interval 1, probability 0, space 0, times 0 [ 306.820699][ T8043] CPU: 0 PID: 8043 Comm: syz.1.821 Not tainted syzkaller #0 [ 306.828084][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 306.838187][ T8043] Call Trace: [ 306.841502][ T8043] [ 306.844470][ T8043] dump_stack_lvl+0x18c/0x250 [ 306.849357][ T8043] ? sctp_sendmsg+0x1519/0x27b0 [ 306.854243][ T8043] ? ___sys_sendmsg+0x2a6/0x360 [ 306.859132][ T8043] ? show_regs_print_info+0x20/0x20 [ 306.864365][ T8043] ? load_image+0x420/0x420 [ 306.868928][ T8043] should_fail_ex+0x394/0x4c0 [ 306.873675][ T8043] should_failslab+0x9/0x20 [ 306.878223][ T8043] slab_pre_alloc_hook+0x59/0x300 [ 306.883294][ T8043] ? sctp_add_bind_addr+0x8c/0x360 [ 306.888451][ T8043] __kmem_cache_alloc_node+0x53/0x250 [ 306.893862][ T8043] ? sctp_add_bind_addr+0x8c/0x360 [ 306.899002][ T8043] kmalloc_trace+0x2a/0xe0 [ 306.903455][ T8043] sctp_add_bind_addr+0x8c/0x360 [ 306.908425][ T8043] sctp_copy_local_addr_list+0x31b/0x4e0 [ 306.914106][ T8043] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 306.919861][ T8043] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 306.925968][ T8043] ? sctp_v4_is_any+0x35/0x60 [ 306.930684][ T8043] ? sctp_copy_one_addr+0x8c/0x350 [ 306.935838][ T8043] sctp_bind_addr_copy+0xb3/0x3c0 [ 306.940896][ T8043] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 306.947277][ T8043] sctp_connect_new_asoc+0x2f9/0x6a0 [ 306.952601][ T8043] ? __sctp_connect+0xd80/0xd80 [ 306.957486][ T8043] ? __local_bh_enable_ip+0x13a/0x1c0 [ 306.962888][ T8043] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 306.968470][ T8043] ? security_sctp_bind_connect+0x89/0xb0 [ 306.974224][ T8043] sctp_sendmsg+0x1519/0x27b0 [ 306.978954][ T8043] ? sctp_getsockopt+0xb60/0xb60 [ 306.983939][ T8043] ? aa_sk_perm+0x83c/0x970 [ 306.988481][ T8043] ? aa_af_perm+0x330/0x330 [ 306.993012][ T8043] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 306.999458][ T8043] ? sock_rps_record_flow+0x19/0x3f0 [ 307.004782][ T8043] ? inet_sendmsg+0xce/0x2a0 [ 307.009408][ T8043] ? inet_send_prepare+0x250/0x250 [ 307.014554][ T8043] ____sys_sendmsg+0x61b/0x980 [ 307.019372][ T8043] ? __sys_sendmsg_sock+0x30/0x30 [ 307.024423][ T8043] ? __import_iovec+0x5f2/0x850 [ 307.029325][ T8043] ? import_iovec+0x73/0xa0 [ 307.033856][ T8043] ___sys_sendmsg+0x2a6/0x360 [ 307.038589][ T8043] ? get_pid_task+0x20/0x1e0 [ 307.043219][ T8043] ? __sys_sendmsg+0x2b0/0x2b0 [ 307.048030][ T8043] ? __lock_acquire+0x7d80/0x7d80 [ 307.053103][ T8043] __se_sys_sendmsg+0x1d0/0x2c0 [ 307.057984][ T8043] ? __x64_sys_sendmsg+0x80/0x80 [ 307.062964][ T8043] ? lockdep_hardirqs_on+0x98/0x150 [ 307.068198][ T8043] do_syscall_64+0x55/0xb0 [ 307.072645][ T8043] ? clear_bhb_loop+0x40/0x90 [ 307.077353][ T8043] ? clear_bhb_loop+0x40/0x90 [ 307.082154][ T8043] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.088167][ T8043] RIP: 0033:0x7f99d9b9ce59 [ 307.092621][ T8043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.112424][ T8043] RSP: 002b:00007f99daa50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.120859][ T8043] RAX: ffffffffffffffda RBX: 00007f99d9e15fa0 RCX: 00007f99d9b9ce59 [ 307.128863][ T8043] RDX: 0000000000000850 RSI: 0000200000000600 RDI: 0000000000000003 [ 307.136860][ T8043] RBP: 00007f99daa50090 R08: 0000000000000000 R09: 0000000000000000 [ 307.144967][ T8043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 307.152958][ T8043] R13: 00007f99d9e16038 R14: 00007f99d9e15fa0 R15: 00007ffeeb14d8d8 [ 307.160992][ T8043] [ 307.606795][ T8069] netlink: 'syz.3.831': attribute type 27 has an invalid length. [ 307.620159][ T8069] netlink: 'syz.3.831': attribute type 3 has an invalid length. [ 308.058778][ T8086] netlink: 'syz.3.839': attribute type 39 has an invalid length. [ 308.138401][ T8088] netlink: 'syz.1.840': attribute type 21 has an invalid length. [ 308.146338][ T8088] netlink: 'syz.1.840': attribute type 11 has an invalid length. [ 309.576180][ T8125] netlink: 'syz.0.854': attribute type 10 has an invalid length. [ 309.827368][ T8125] team0 (unregistering): Port device team_slave_1 removed [ 310.026492][ T8128] netlink: 'syz.3.855': attribute type 10 has an invalid length. [ 310.382468][ T8143] FAULT_INJECTION: forcing a failure. [ 310.382468][ T8143] name failslab, interval 1, probability 0, space 0, times 0 [ 310.404518][ T8143] CPU: 0 PID: 8143 Comm: syz.2.862 Not tainted syzkaller #0 [ 310.411988][ T8143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 310.422096][ T8143] Call Trace: [ 310.425415][ T8143] [ 310.428409][ T8143] dump_stack_lvl+0x18c/0x250 [ 310.433146][ T8143] ? show_regs_print_info+0x20/0x20 [ 310.438404][ T8143] ? load_image+0x420/0x420 [ 310.442964][ T8143] ? __might_sleep+0xe0/0xe0 [ 310.447619][ T8143] ? __lock_acquire+0x7d80/0x7d80 [ 310.452699][ T8143] should_fail_ex+0x394/0x4c0 [ 310.457438][ T8143] should_failslab+0x9/0x20 [ 310.462009][ T8143] slab_pre_alloc_hook+0x59/0x300 [ 310.467099][ T8143] ? kvmalloc_node+0x70/0x180 [ 310.471839][ T8143] ? kvmalloc_node+0x70/0x180 [ 310.476649][ T8143] __kmem_cache_alloc_node+0x53/0x250 [ 310.482151][ T8143] ? kvmalloc_node+0x70/0x180 [ 310.486856][ T8143] __kmalloc_node+0xa6/0x240 [ 310.491477][ T8143] kvmalloc_node+0x70/0x180 [ 310.496016][ T8143] bpf_test_run_xdp_live+0x1e9/0x1b30 [ 310.501425][ T8143] ? 0xffffffffa0004740 [ 310.505596][ T8143] ? 0xffffffffa0004740 [ 310.509901][ T8143] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 310.515862][ T8143] ? xdp_convert_md_to_buff+0x330/0x330 [ 310.521478][ T8143] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 310.527938][ T8143] ? _copy_from_user+0xa5/0xe0 [ 310.532742][ T8143] ? bpf_test_init+0x119/0x140 [ 310.537535][ T8143] ? xdp_convert_md_to_buff+0x5b/0x330 [ 310.543086][ T8143] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 310.548492][ T8143] ? __lock_acquire+0x7d80/0x7d80 [ 310.553556][ T8143] ? dev_put+0x80/0x80 [ 310.557665][ T8143] ? dev_put+0x80/0x80 [ 310.561776][ T8143] bpf_prog_test_run+0x31f/0x390 [ 310.566748][ T8143] __sys_bpf+0x49d/0x890 [ 310.571015][ T8143] ? bpf_link_show_fdinfo+0x390/0x390 [ 310.576445][ T8143] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 310.582669][ T8143] __x64_sys_bpf+0x7c/0x90 [ 310.587116][ T8143] do_syscall_64+0x55/0xb0 [ 310.591657][ T8143] ? clear_bhb_loop+0x40/0x90 [ 310.596550][ T8143] ? clear_bhb_loop+0x40/0x90 [ 310.601272][ T8143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.607222][ T8143] RIP: 0033:0x7f4c9db9ce59 [ 310.611673][ T8143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.631315][ T8143] RSP: 002b:00007f4c9e9c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.639777][ T8143] RAX: ffffffffffffffda RBX: 00007f4c9de15fa0 RCX: 00007f4c9db9ce59 [ 310.647793][ T8143] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 310.655784][ T8143] RBP: 00007f4c9e9c9090 R08: 0000000000000000 R09: 0000000000000000 [ 310.663797][ T8143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.671807][ T8143] R13: 00007f4c9de16038 R14: 00007f4c9de15fa0 R15: 00007ffe5de89f88 [ 310.679847][ T8143] [ 314.524811][ T8203] netlink: 'syz.2.882': attribute type 29 has an invalid length. [ 314.533158][ T8203] netlink: 'syz.2.882': attribute type 29 has an invalid length. [ 314.542528][ T8203] netlink: 'syz.2.882': attribute type 29 has an invalid length. [ 314.587061][ T8205] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.883'. [ 314.599913][ T8205] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.883'. [ 314.628335][ T8205] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.883'. [ 314.650395][ T8205] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.883'. [ 314.999645][ T8207] netlink: 'syz.1.884': attribute type 10 has an invalid length. [ 315.017680][ T8207] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 315.158617][ T8217] FAULT_INJECTION: forcing a failure. [ 315.158617][ T8217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.173153][ T8217] CPU: 0 PID: 8217 Comm: syz.0.887 Not tainted syzkaller #0 [ 315.180513][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 315.190630][ T8217] Call Trace: [ 315.193949][ T8217] [ 315.196921][ T8217] dump_stack_lvl+0x18c/0x250 [ 315.201650][ T8217] ? show_regs_print_info+0x20/0x20 [ 315.206905][ T8217] ? load_image+0x420/0x420 [ 315.211467][ T8217] ? __might_fault+0xaa/0x120 [ 315.216190][ T8217] ? __lock_acquire+0x7d80/0x7d80 [ 315.221351][ T8217] should_fail_ex+0x394/0x4c0 [ 315.226085][ T8217] _copy_from_user+0x2f/0xe0 [ 315.230724][ T8217] __sys_bpf+0x23e/0x890 [ 315.235028][ T8217] ? bpf_link_show_fdinfo+0x390/0x390 [ 315.240478][ T8217] ? lock_chain_count+0x20/0x20 [ 315.245392][ T8217] __x64_sys_bpf+0x7c/0x90 [ 315.249856][ T8217] do_syscall_64+0x55/0xb0 [ 315.254330][ T8217] ? clear_bhb_loop+0x40/0x90 [ 315.259044][ T8217] ? clear_bhb_loop+0x40/0x90 [ 315.263774][ T8217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.269722][ T8217] RIP: 0033:0x7f88c559ce59 [ 315.274199][ T8217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.293862][ T8217] RSP: 002b:00007f88c63c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 315.302330][ T8217] RAX: ffffffffffffffda RBX: 00007f88c5815fa0 RCX: 00007f88c559ce59 [ 315.310362][ T8217] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 315.318386][ T8217] RBP: 00007f88c63c5090 R08: 0000000000000000 R09: 0000000000000000 [ 315.326412][ T8217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.334432][ T8217] R13: 00007f88c5816038 R14: 00007f88c5815fa0 R15: 00007ffc4eb791c8 [ 315.342480][ T8217] [ 315.388270][ T8222] FAULT_INJECTION: forcing a failure. [ 315.388270][ T8222] name failslab, interval 1, probability 0, space 0, times 0 [ 315.402218][ T8222] CPU: 1 PID: 8222 Comm: syz.1.890 Not tainted syzkaller #0 [ 315.409572][ T8222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 315.419676][ T8222] Call Trace: [ 315.422999][ T8222] [ 315.425982][ T8222] dump_stack_lvl+0x18c/0x250 [ 315.430726][ T8222] ? sctp_sendmsg+0x1519/0x27b0 [ 315.435625][ T8222] ? ___sys_sendmsg+0x2a6/0x360 [ 315.440526][ T8222] ? show_regs_print_info+0x20/0x20 [ 315.445769][ T8222] ? load_image+0x420/0x420 [ 315.450339][ T8222] should_fail_ex+0x394/0x4c0 [ 315.455082][ T8222] should_failslab+0x9/0x20 [ 315.459643][ T8222] slab_pre_alloc_hook+0x59/0x300 [ 315.464760][ T8222] ? sctp_add_bind_addr+0x8c/0x360 [ 315.469929][ T8222] __kmem_cache_alloc_node+0x53/0x250 [ 315.475369][ T8222] ? sctp_add_bind_addr+0x8c/0x360 [ 315.480537][ T8222] kmalloc_trace+0x2a/0xe0 [ 315.485102][ T8222] sctp_add_bind_addr+0x8c/0x360 [ 315.490102][ T8222] sctp_copy_local_addr_list+0x31b/0x4e0 [ 315.495878][ T8222] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 315.501685][ T8222] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 315.507825][ T8222] ? sctp_v4_is_any+0x35/0x60 [ 315.512557][ T8222] ? sctp_copy_one_addr+0x8c/0x350 [ 315.517732][ T8222] sctp_bind_addr_copy+0xb3/0x3c0 [ 315.522817][ T8222] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 315.529224][ T8222] sctp_connect_new_asoc+0x2f9/0x6a0 [ 315.534609][ T8222] ? __sctp_connect+0xd80/0xd80 [ 315.539532][ T8222] ? __local_bh_enable_ip+0x13a/0x1c0 [ 315.544963][ T8222] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 315.550563][ T8222] ? security_sctp_bind_connect+0x89/0xb0 [ 315.556345][ T8222] sctp_sendmsg+0x1519/0x27b0 [ 315.561110][ T8222] ? sctp_getsockopt+0xb60/0xb60 [ 315.566110][ T8222] ? aa_sk_perm+0x83c/0x970 [ 315.570663][ T8222] ? aa_af_perm+0x330/0x330 [ 315.575205][ T8222] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 315.581693][ T8222] ? sock_rps_record_flow+0x19/0x3f0 [ 315.587040][ T8222] ? inet_sendmsg+0xce/0x2a0 [ 315.591702][ T8222] ? inet_send_prepare+0x250/0x250 [ 315.596967][ T8222] ____sys_sendmsg+0x61b/0x980 [ 315.601797][ T8222] ? __sys_sendmsg_sock+0x30/0x30 [ 315.606875][ T8222] ? __import_iovec+0x5f2/0x850 [ 315.611785][ T8222] ? import_iovec+0x73/0xa0 [ 315.616342][ T8222] ___sys_sendmsg+0x2a6/0x360 [ 315.621087][ T8222] ? __sys_sendmsg+0x2b0/0x2b0 [ 315.625929][ T8222] ? trace_call_bpf+0xc3/0x6c0 [ 315.630787][ T8222] __se_sys_sendmsg+0x1d0/0x2c0 [ 315.635700][ T8222] ? __x64_sys_sendmsg+0x80/0x80 [ 315.640717][ T8222] ? lockdep_hardirqs_on+0x98/0x150 [ 315.645968][ T8222] do_syscall_64+0x55/0xb0 [ 315.650425][ T8222] ? clear_bhb_loop+0x40/0x90 [ 315.655147][ T8222] ? clear_bhb_loop+0x40/0x90 [ 315.659867][ T8222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.665818][ T8222] RIP: 0033:0x7f99d9b9ce59 [ 315.670278][ T8222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.689939][ T8222] RSP: 002b:00007f99daa50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.698417][ T8222] RAX: ffffffffffffffda RBX: 00007f99d9e15fa0 RCX: 00007f99d9b9ce59 [ 315.706511][ T8222] RDX: 0000000000000850 RSI: 0000200000000600 RDI: 0000000000000003 [ 315.714535][ T8222] RBP: 00007f99daa50090 R08: 0000000000000000 R09: 0000000000000000 [ 315.722580][ T8222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 315.730592][ T8222] R13: 00007f99d9e16038 R14: 00007f99d9e15fa0 R15: 00007ffeeb14d8d8 [ 315.738625][ T8222] [ 316.869515][ T8269] netlink: 'syz.3.908': attribute type 2 has an invalid length. [ 316.912105][ T8269] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.908'. [ 316.973195][ T8275] delete_channel: no stack [ 316.979587][ T8275] delete_channel: no stack [ 317.276957][ T8292] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.916'. [ 317.287161][ T8292] netlink: del zone limit has 8 unknown bytes [ 317.458040][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.465777][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.238538][ T8315] netlink: 'syz.3.925': attribute type 10 has an invalid length. [ 318.569077][ T8324] netlink: 'syz.3.927': attribute type 29 has an invalid length. [ 318.594645][ T8322] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.928'. [ 318.611203][ T8324] netlink: 'syz.3.927': attribute type 29 has an invalid length. [ 318.637179][ T8320] netlink: 'syz.3.927': attribute type 29 has an invalid length. [ 318.734953][ T8328] netlink: 'syz.0.931': attribute type 2 has an invalid length. [ 318.744112][ T8328] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.931'. [ 319.273269][ T8346] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.939'. [ 322.943494][ T8382] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.952'. [ 323.219037][ T8396] FAULT_INJECTION: forcing a failure. [ 323.219037][ T8396] name failslab, interval 1, probability 0, space 0, times 0 [ 323.233392][ T8396] CPU: 0 PID: 8396 Comm: syz.0.959 Not tainted syzkaller #0 [ 323.240763][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 323.250908][ T8396] Call Trace: [ 323.254235][ T8396] [ 323.257209][ T8396] dump_stack_lvl+0x18c/0x250 [ 323.261945][ T8396] ? sctp_sendmsg+0x1519/0x27b0 [ 323.266856][ T8396] ? ___sys_sendmsg+0x2a6/0x360 [ 323.271766][ T8396] ? show_regs_print_info+0x20/0x20 [ 323.277073][ T8396] ? load_image+0x420/0x420 [ 323.281648][ T8396] should_fail_ex+0x394/0x4c0 [ 323.286399][ T8396] should_failslab+0x9/0x20 [ 323.290960][ T8396] slab_pre_alloc_hook+0x59/0x300 [ 323.296076][ T8396] ? sctp_add_bind_addr+0x8c/0x360 [ 323.301250][ T8396] __kmem_cache_alloc_node+0x53/0x250 [ 323.306759][ T8396] ? sctp_add_bind_addr+0x8c/0x360 [ 323.311932][ T8396] kmalloc_trace+0x2a/0xe0 [ 323.316424][ T8396] sctp_add_bind_addr+0x8c/0x360 [ 323.321423][ T8396] sctp_copy_local_addr_list+0x31b/0x4e0 [ 323.327117][ T8396] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 323.332900][ T8396] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 323.339023][ T8396] ? sctp_v4_is_any+0x35/0x60 [ 323.343751][ T8396] ? sctp_copy_one_addr+0x8c/0x350 [ 323.348924][ T8396] sctp_bind_addr_copy+0xb3/0x3c0 [ 323.354006][ T8396] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 323.360403][ T8396] sctp_connect_new_asoc+0x2f9/0x6a0 [ 323.365836][ T8396] ? __sctp_connect+0xd80/0xd80 [ 323.370737][ T8396] ? __local_bh_enable_ip+0x13a/0x1c0 [ 323.376175][ T8396] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 323.381778][ T8396] ? security_sctp_bind_connect+0x89/0xb0 [ 323.387567][ T8396] sctp_sendmsg+0x1519/0x27b0 [ 323.392326][ T8396] ? sctp_getsockopt+0xb60/0xb60 [ 323.397349][ T8396] ? aa_sk_perm+0x83c/0x970 [ 323.401914][ T8396] ? aa_af_perm+0x330/0x330 [ 323.406464][ T8396] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 323.412938][ T8396] ? sock_rps_record_flow+0x19/0x3f0 [ 323.418300][ T8396] ? inet_sendmsg+0xce/0x2a0 [ 323.422973][ T8396] ? inet_send_prepare+0x250/0x250 [ 323.428146][ T8396] ____sys_sendmsg+0x61b/0x980 [ 323.432982][ T8396] ? __sys_sendmsg_sock+0x30/0x30 [ 323.438072][ T8396] ? __import_iovec+0x5f2/0x850 [ 323.442992][ T8396] ? import_iovec+0x73/0xa0 [ 323.447559][ T8396] ___sys_sendmsg+0x2a6/0x360 [ 323.452298][ T8396] ? get_pid_task+0x20/0x1e0 [ 323.456974][ T8396] ? __sys_sendmsg+0x2b0/0x2b0 [ 323.461826][ T8396] ? __lock_acquire+0x7d80/0x7d80 [ 323.466935][ T8396] __se_sys_sendmsg+0x1d0/0x2c0 [ 323.471840][ T8396] ? __x64_sys_sendmsg+0x80/0x80 [ 323.476851][ T8396] ? lockdep_hardirqs_on+0x98/0x150 [ 323.482110][ T8396] do_syscall_64+0x55/0xb0 [ 323.486573][ T8396] ? clear_bhb_loop+0x40/0x90 [ 323.491301][ T8396] ? clear_bhb_loop+0x40/0x90 [ 323.496040][ T8396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.502004][ T8396] RIP: 0033:0x7f88c559ce59 [ 323.506504][ T8396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.526179][ T8396] RSP: 002b:00007f88c63c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.534661][ T8396] RAX: ffffffffffffffda RBX: 00007f88c5815fa0 RCX: 00007f88c559ce59 [ 323.542690][ T8396] RDX: 0000000000000850 RSI: 0000200000000600 RDI: 0000000000000003 [ 323.550710][ T8396] RBP: 00007f88c63c5090 R08: 0000000000000000 R09: 0000000000000000 [ 323.558736][ T8396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 323.566772][ T8396] R13: 00007f88c5816038 R14: 00007f88c5815fa0 R15: 00007ffc4eb791c8 [ 323.574817][ T8396] [ 323.956032][ T8411] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.965'. [ 324.613399][ T8435] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.974'. [ 324.782980][ T8437] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.976'. [ 325.008947][ T8450] validate_nla: 2 callbacks suppressed [ 325.008964][ T8450] netlink: 'syz.1.978': attribute type 10 has an invalid length. [ 325.023031][ T8450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.978'. [ 325.032577][ T8450] team0: Device geneve0 is up. Set it down before adding it as a team port [ 325.041923][ T8450] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 325.546687][ T8467] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.986'. [ 326.043169][ T8483] netlink: 'syz.3.994': attribute type 4 has an invalid length. [ 326.070653][ T8483] netlink: 156 bytes leftover after parsing attributes in process `syz.3.994'. [ 326.094506][ T8484] netlink: 'syz.3.994': attribute type 4 has an invalid length. [ 326.106046][ T8484] netlink: 156 bytes leftover after parsing attributes in process `syz.3.994'. [ 326.327224][ T8494] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.998'. [ 327.289429][ T8510] netlink: 'syz.3.1004': attribute type 10 has an invalid length. [ 327.898171][ T8520] netlink: 'syz.1.1007': attribute type 2 has an invalid length. [ 327.929515][ T8520] netlink: 'syz.1.1007': attribute type 1 has an invalid length. [ 327.940372][ T8520] netlink: 'syz.1.1007': attribute type 2 has an invalid length. [ 327.948613][ T8520] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.1007'. [ 329.041486][ T8569] FAULT_INJECTION: forcing a failure. [ 329.041486][ T8569] name failslab, interval 1, probability 0, space 0, times 0 [ 329.070705][ T8569] CPU: 1 PID: 8569 Comm: syz.1.1026 Not tainted syzkaller #0 [ 329.078173][ T8569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 329.088275][ T8569] Call Trace: [ 329.091599][ T8569] [ 329.094582][ T8569] dump_stack_lvl+0x18c/0x250 [ 329.099355][ T8569] ? show_regs_print_info+0x20/0x20 [ 329.104635][ T8569] ? load_image+0x420/0x420 [ 329.109230][ T8569] ? __might_sleep+0xe0/0xe0 [ 329.113866][ T8569] ? __lock_acquire+0x7d80/0x7d80 [ 329.118940][ T8569] should_fail_ex+0x394/0x4c0 [ 329.123708][ T8569] should_failslab+0x9/0x20 [ 329.128256][ T8569] slab_pre_alloc_hook+0x59/0x300 [ 329.133318][ T8569] ? kvmalloc_node+0x70/0x180 [ 329.138029][ T8569] ? kvmalloc_node+0x70/0x180 [ 329.142740][ T8569] __kmem_cache_alloc_node+0x53/0x250 [ 329.148158][ T8569] ? kvmalloc_node+0x70/0x180 [ 329.152868][ T8569] __kmalloc_node+0xa6/0x240 [ 329.157499][ T8569] kvmalloc_node+0x70/0x180 [ 329.162043][ T8569] page_pool_create+0x1eb/0x5c0 [ 329.166934][ T8569] bpf_test_run_xdp_live+0x203/0x1b30 [ 329.172348][ T8569] ? 0xffffffffa0004740 [ 329.176526][ T8569] ? 0xffffffffa0004740 [ 329.180716][ T8569] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 329.186658][ T8569] ? xdp_convert_md_to_buff+0x330/0x330 [ 329.192279][ T8569] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 329.198573][ T8569] ? bpf_prog_test_run_xdp+0x743/0x1140 [ 329.204159][ T8569] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 329.209560][ T8569] ? __lock_acquire+0x7d80/0x7d80 [ 329.214631][ T8569] ? lock_chain_count+0x20/0x20 [ 329.219518][ T8569] ? dev_put+0x80/0x80 [ 329.223627][ T8569] ? dev_put+0x80/0x80 [ 329.227729][ T8569] bpf_prog_test_run+0x31f/0x390 [ 329.232692][ T8569] __sys_bpf+0x49d/0x890 [ 329.236960][ T8569] ? bpf_link_show_fdinfo+0x390/0x390 [ 329.242370][ T8569] ? lock_chain_count+0x20/0x20 [ 329.247277][ T8569] __x64_sys_bpf+0x7c/0x90 [ 329.251808][ T8569] do_syscall_64+0x55/0xb0 [ 329.256273][ T8569] ? clear_bhb_loop+0x40/0x90 [ 329.260998][ T8569] ? clear_bhb_loop+0x40/0x90 [ 329.265727][ T8569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.271673][ T8569] RIP: 0033:0x7f99d9b9ce59 [ 329.276117][ T8569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.295751][ T8569] RSP: 002b:00007f99daa50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 329.304205][ T8569] RAX: ffffffffffffffda RBX: 00007f99d9e15fa0 RCX: 00007f99d9b9ce59 [ 329.312204][ T8569] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 329.320200][ T8569] RBP: 00007f99daa50090 R08: 0000000000000000 R09: 0000000000000000 [ 329.328193][ T8569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.336190][ T8569] R13: 00007f99d9e16038 R14: 00007f99d9e15fa0 R15: 00007ffeeb14d8d8 [ 329.344200][ T8569] [ 329.384869][ T8569] page_pool_create() gave up with errno -12 [ 329.454246][ T8574] netlink: 'syz.0.1028': attribute type 33 has an invalid length. [ 329.479606][ T8574] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1028'. [ 332.781139][ T8596] syzkaller0: entered promiscuous mode [ 332.786728][ T8596] syzkaller0: entered allmulticast mode [ 333.181223][ T8600] bridge_slave_1: left allmulticast mode [ 333.190812][ T8600] bridge_slave_1: left promiscuous mode [ 333.197145][ T8600] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.274951][ T8600] bridge_slave_0: left allmulticast mode [ 333.290510][ T8600] bridge_slave_0: left promiscuous mode [ 333.321419][ T8600] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.675106][ T8608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1038'. [ 334.099854][ T8630] netlink: 'syz.2.1049': attribute type 10 has an invalid length. [ 334.150575][ T8630] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1049'. [ 334.193499][ T8630] team0: Device geneve0 is up. Set it down before adding it as a team port [ 334.216990][ T8630] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 334.634192][ T8650] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1056'. [ 334.651378][ T8650] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1056'. [ 334.663665][ T8651] netlink: 'syz.2.1055': attribute type 1 has an invalid length. [ 334.663716][ T8651] netlink: 'syz.2.1055': attribute type 2 has an invalid length. [ 334.663730][ T8651] netlink: 'syz.2.1055': attribute type 2 has an invalid length. [ 334.663744][ T8651] netlink: 'syz.2.1055': attribute type 3 has an invalid length. [ 334.663758][ T8651] netlink: 'syz.2.1055': attribute type 4 has an invalid length. [ 334.663772][ T8651] netlink: 'syz.2.1055': attribute type 5 has an invalid length. [ 334.663785][ T8651] netlink: 'syz.2.1055': attribute type 6 has an invalid length. [ 334.663799][ T8651] netlink: 'syz.2.1055': attribute type 7 has an invalid length. [ 334.663813][ T8651] netlink: 'syz.2.1055': attribute type 9 has an invalid length. [ 334.663831][ T8651] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.1055'. [ 334.753303][ T8654] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1056'. [ 334.774039][ T8650] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1056'. [ 335.916337][ T8701] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.1077'. [ 340.220324][ T8746] FAULT_INJECTION: forcing a failure. [ 340.220324][ T8746] name failslab, interval 1, probability 0, space 0, times 0 [ 340.251715][ T8746] CPU: 1 PID: 8746 Comm: syz.2.1093 Not tainted syzkaller #0 [ 340.259190][ T8746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 340.269294][ T8746] Call Trace: [ 340.272613][ T8746] [ 340.275583][ T8746] dump_stack_lvl+0x18c/0x250 [ 340.280313][ T8746] ? show_regs_print_info+0x20/0x20 [ 340.285561][ T8746] ? load_image+0x420/0x420 [ 340.290118][ T8746] ? __might_sleep+0xe0/0xe0 [ 340.294778][ T8746] ? __lock_acquire+0x7d80/0x7d80 [ 340.299862][ T8746] should_fail_ex+0x394/0x4c0 [ 340.304606][ T8746] should_failslab+0x9/0x20 [ 340.309174][ T8746] slab_pre_alloc_hook+0x59/0x300 [ 340.314251][ T8746] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 340.319563][ T8746] __kmem_cache_alloc_node+0x53/0x250 [ 340.324969][ T8746] ? __asan_memset+0x22/0x40 [ 340.329601][ T8746] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 340.334909][ T8746] kmalloc_trace+0x2a/0xe0 [ 340.339356][ T8746] __xdp_reg_mem_model+0x1e3/0x5a0 [ 340.344490][ T8746] ? kvmalloc_node+0x70/0x180 [ 340.349193][ T8746] ? kvmalloc_node+0x70/0x180 [ 340.353903][ T8746] ? xdp_reg_mem_model+0x40/0x40 [ 340.358874][ T8746] xdp_reg_mem_model+0x22/0x40 [ 340.363663][ T8746] bpf_test_run_xdp_live+0x262/0x1b30 [ 340.369077][ T8746] ? bpf_dispatcher_xdp+0x800/0x1000 [ 340.374391][ T8746] ? bpf_dispatcher_xdp+0x800/0x1000 [ 340.379786][ T8746] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 340.385715][ T8746] ? xdp_convert_md_to_buff+0x330/0x330 [ 340.391331][ T8746] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 340.397604][ T8746] ? _copy_from_user+0xa5/0xe0 [ 340.402401][ T8746] ? bpf_test_init+0x119/0x140 [ 340.407200][ T8746] ? xdp_convert_md_to_buff+0x5b/0x330 [ 340.412704][ T8746] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 340.418107][ T8746] ? __lock_acquire+0x7d80/0x7d80 [ 340.423179][ T8746] ? dev_put+0x80/0x80 [ 340.427288][ T8746] ? dev_put+0x80/0x80 [ 340.431390][ T8746] bpf_prog_test_run+0x31f/0x390 [ 340.436361][ T8746] __sys_bpf+0x49d/0x890 [ 340.440636][ T8746] ? bpf_link_show_fdinfo+0x390/0x390 [ 340.446045][ T8746] ? lock_chain_count+0x20/0x20 [ 340.450937][ T8746] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 340.457041][ T8746] __x64_sys_bpf+0x7c/0x90 [ 340.461495][ T8746] do_syscall_64+0x55/0xb0 [ 340.465930][ T8746] ? clear_bhb_loop+0x40/0x90 [ 340.470622][ T8746] ? clear_bhb_loop+0x40/0x90 [ 340.475324][ T8746] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.481249][ T8746] RIP: 0033:0x7f4c9db9ce59 [ 340.485707][ T8746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.505360][ T8746] RSP: 002b:00007f4c9e9c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 340.513810][ T8746] RAX: ffffffffffffffda RBX: 00007f4c9de15fa0 RCX: 00007f4c9db9ce59 [ 340.521808][ T8746] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 340.529797][ T8746] RBP: 00007f4c9e9c9090 R08: 0000000000000000 R09: 0000000000000000 [ 340.537879][ T8746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.545964][ T8746] R13: 00007f4c9de16038 R14: 00007f4c9de15fa0 R15: 00007ffe5de89f88 [ 340.553973][ T8746] [ 341.261728][ T8763] validate_nla: 6 callbacks suppressed [ 341.262090][ T8763] netlink: 'syz.3.1100': attribute type 21 has an invalid length. [ 341.393060][ T8763] netlink: 'syz.3.1100': attribute type 2 has an invalid length. [ 341.431839][ T8763] netlink: 'syz.3.1100': attribute type 8 has an invalid length. [ 341.471057][ T8763] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1100'. [ 344.340151][ T8787] netlink: 'syz.0.1110': attribute type 10 has an invalid length. [ 344.348828][ T8787] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1110'. [ 344.359329][ T8787] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 347.443243][ T8797] netlink: 'syz.2.1112': attribute type 21 has an invalid length. [ 347.475327][ T8797] netlink: 'syz.2.1112': attribute type 2 has an invalid length. [ 347.483852][ T8797] netlink: 'syz.2.1112': attribute type 8 has an invalid length. [ 347.495592][ T8797] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1112'. [ 350.718059][ T8812] FAULT_INJECTION: forcing a failure. [ 350.718059][ T8812] name failslab, interval 1, probability 0, space 0, times 0 [ 350.766221][ T8812] CPU: 0 PID: 8812 Comm: syz.0.1117 Not tainted syzkaller #0 [ 350.773700][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 350.783902][ T8812] Call Trace: [ 350.787233][ T8812] [ 350.790204][ T8812] dump_stack_lvl+0x18c/0x250 [ 350.794944][ T8812] ? sctp_sendmsg+0x1519/0x27b0 [ 350.799850][ T8812] ? ___sys_sendmsg+0x2a6/0x360 [ 350.804752][ T8812] ? show_regs_print_info+0x20/0x20 [ 350.810000][ T8812] ? load_image+0x420/0x420 [ 350.814563][ T8812] should_fail_ex+0x394/0x4c0 [ 350.819296][ T8812] should_failslab+0x9/0x20 [ 350.823934][ T8812] slab_pre_alloc_hook+0x59/0x300 [ 350.829007][ T8812] ? sctp_add_bind_addr+0x8c/0x360 [ 350.834163][ T8812] __kmem_cache_alloc_node+0x53/0x250 [ 350.839575][ T8812] ? sctp_add_bind_addr+0x8c/0x360 [ 350.844717][ T8812] kmalloc_trace+0x2a/0xe0 [ 350.849176][ T8812] sctp_add_bind_addr+0x8c/0x360 [ 350.854152][ T8812] sctp_copy_local_addr_list+0x31b/0x4e0 [ 350.859820][ T8812] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 350.865570][ T8812] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 350.871669][ T8812] ? sctp_v4_is_any+0x35/0x60 [ 350.876389][ T8812] ? sctp_copy_one_addr+0x8c/0x350 [ 350.881528][ T8812] sctp_bind_addr_copy+0xb3/0x3c0 [ 350.886584][ T8812] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 350.892973][ T8812] sctp_connect_new_asoc+0x2f9/0x6a0 [ 350.898293][ T8812] ? __sctp_connect+0xd80/0xd80 [ 350.903270][ T8812] ? __local_bh_enable_ip+0x13a/0x1c0 [ 350.908682][ T8812] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 350.914262][ T8812] ? security_sctp_bind_connect+0x89/0xb0 [ 350.920020][ T8812] sctp_sendmsg+0x1519/0x27b0 [ 350.924755][ T8812] ? sctp_getsockopt+0xb60/0xb60 [ 350.929748][ T8812] ? aa_sk_perm+0x83c/0x970 [ 350.934280][ T8812] ? aa_af_perm+0x330/0x330 [ 350.938829][ T8812] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 350.945279][ T8812] ? sock_rps_record_flow+0x19/0x3f0 [ 350.950599][ T8812] ? inet_sendmsg+0xce/0x2a0 [ 350.955240][ T8812] ? inet_send_prepare+0x250/0x250 [ 350.960384][ T8812] ____sys_sendmsg+0x61b/0x980 [ 350.965206][ T8812] ? __sys_sendmsg_sock+0x30/0x30 [ 350.970267][ T8812] ? __import_iovec+0x5f2/0x850 [ 350.975156][ T8812] ? import_iovec+0x73/0xa0 [ 350.979694][ T8812] ___sys_sendmsg+0x2a6/0x360 [ 350.984402][ T8812] ? get_pid_task+0x20/0x1e0 [ 350.989033][ T8812] ? __sys_sendmsg+0x2b0/0x2b0 [ 350.993846][ T8812] ? __lock_acquire+0x7d80/0x7d80 [ 350.998926][ T8812] __se_sys_sendmsg+0x1d0/0x2c0 [ 351.003814][ T8812] ? __x64_sys_sendmsg+0x80/0x80 [ 351.008795][ T8812] ? lockdep_hardirqs_on+0x98/0x150 [ 351.014032][ T8812] do_syscall_64+0x55/0xb0 [ 351.018476][ T8812] ? clear_bhb_loop+0x40/0x90 [ 351.023177][ T8812] ? clear_bhb_loop+0x40/0x90 [ 351.027877][ T8812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.033812][ T8812] RIP: 0033:0x7f88c559ce59 [ 351.038250][ T8812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.057882][ T8812] RSP: 002b:00007f88c63c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.066322][ T8812] RAX: ffffffffffffffda RBX: 00007f88c5815fa0 RCX: 00007f88c559ce59 [ 351.074318][ T8812] RDX: 0000000000000850 RSI: 0000200000000600 RDI: 0000000000000003 [ 351.082318][ T8812] RBP: 00007f88c63c5090 R08: 0000000000000000 R09: 0000000000000000 [ 351.090317][ T8812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.098318][ T8812] R13: 00007f88c5816038 R14: 00007f88c5815fa0 R15: 00007ffc4eb791c8 [ 351.106339][ T8812] [ 351.380310][ T8820] netlink: 'syz.1.1124': attribute type 21 has an invalid length. [ 351.450154][ T8820] netlink: 'syz.1.1124': attribute type 2 has an invalid length. [ 351.479287][ T8820] netlink: 'syz.1.1124': attribute type 8 has an invalid length. [ 351.489670][ T8820] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1124'. [ 351.887586][ T8837] netlink: 'syz.2.1129': attribute type 10 has an invalid length. [ 351.973452][ T8837] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 355.383180][ T8869] netlink: 'syz.3.1137': attribute type 1 has an invalid length. [ 355.410773][ T8869] netlink: 'syz.3.1137': attribute type 2 has an invalid length. [ 355.471772][ T8869] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1137'. [ 355.559799][ T8865] netlink: 'syz.3.1137': attribute type 1 has an invalid length. [ 355.739318][ T8874] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 356.334001][ T8896] netlink: 'syz.3.1151': attribute type 9 has an invalid length. [ 356.342804][ T8896] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1151'. [ 356.421120][ T8897] netlink: 'syz.3.1151': attribute type 9 has an invalid length. [ 356.428964][ T8897] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1151'. [ 356.634100][ T8901] FAULT_INJECTION: forcing a failure. [ 356.634100][ T8901] name failslab, interval 1, probability 0, space 0, times 0 [ 356.700141][ T8901] CPU: 1 PID: 8901 Comm: syz.2.1153 Not tainted syzkaller #0 [ 356.707660][ T8901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 356.717797][ T8901] Call Trace: [ 356.721152][ T8901] [ 356.724159][ T8901] dump_stack_lvl+0x18c/0x250 [ 356.728946][ T8901] ? show_regs_print_info+0x20/0x20 [ 356.734314][ T8901] ? load_image+0x420/0x420 [ 356.738888][ T8901] ? __might_sleep+0xe0/0xe0 [ 356.743531][ T8901] ? __lock_acquire+0x7d80/0x7d80 [ 356.748623][ T8901] should_fail_ex+0x394/0x4c0 [ 356.753370][ T8901] should_failslab+0x9/0x20 [ 356.757938][ T8901] slab_pre_alloc_hook+0x59/0x300 [ 356.763030][ T8901] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 356.768372][ T8901] __kmem_cache_alloc_node+0x53/0x250 [ 356.773804][ T8901] ? __asan_memset+0x22/0x40 [ 356.778453][ T8901] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 356.783789][ T8901] kmalloc_trace+0x2a/0xe0 [ 356.788259][ T8901] __xdp_reg_mem_model+0x1e3/0x5a0 [ 356.793422][ T8901] ? kvmalloc_node+0x70/0x180 [ 356.798145][ T8901] ? kvmalloc_node+0x70/0x180 [ 356.802873][ T8901] ? xdp_reg_mem_model+0x40/0x40 [ 356.807882][ T8901] xdp_reg_mem_model+0x22/0x40 [ 356.812710][ T8901] bpf_test_run_xdp_live+0x262/0x1b30 [ 356.818246][ T8901] ? memset_orig+0x75/0xac [ 356.822712][ T8901] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 356.828676][ T8901] ? xdp_convert_md_to_buff+0x330/0x330 [ 356.834388][ T8901] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 356.840733][ T8901] ? bpf_prog_test_run_xdp+0x743/0x1140 [ 356.846372][ T8901] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 356.851804][ T8901] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 356.859101][ T8901] ? dev_put+0x80/0x80 [ 356.863255][ T8901] ? dev_put+0x80/0x80 [ 356.867379][ T8901] bpf_prog_test_run+0x31f/0x390 [ 356.872377][ T8901] __sys_bpf+0x49d/0x890 [ 356.876684][ T8901] ? bpf_link_show_fdinfo+0x390/0x390 [ 356.882141][ T8901] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 356.888390][ T8901] __x64_sys_bpf+0x7c/0x90 [ 356.892864][ T8901] do_syscall_64+0x55/0xb0 [ 356.897325][ T8901] ? clear_bhb_loop+0x40/0x90 [ 356.902054][ T8901] ? clear_bhb_loop+0x40/0x90 [ 356.906778][ T8901] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.912721][ T8901] RIP: 0033:0x7f4c9db9ce59 [ 356.917192][ T8901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.936845][ T8901] RSP: 002b:00007f4c9e9c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.945317][ T8901] RAX: ffffffffffffffda RBX: 00007f4c9de15fa0 RCX: 00007f4c9db9ce59 [ 356.953350][ T8901] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 356.961384][ T8901] RBP: 00007f4c9e9c9090 R08: 0000000000000000 R09: 0000000000000000 [ 356.969414][ T8901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.977428][ T8901] R13: 00007f4c9de16038 R14: 00007f4c9de15fa0 R15: 00007ffe5de89f88 [ 356.985489][ T8901] [ 357.777947][ T8919] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1159'. [ 358.013973][ T8926] netlink: 'syz.0.1162': attribute type 13 has an invalid length. [ 358.022188][ T8926] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1162'. [ 358.073867][ T8926] erspan0: refused to change device tx_queue_len [ 358.111707][ T8926] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 358.204236][ T8926] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1162'. [ 358.410116][ T8937] netlink: 'syz.2.1166': attribute type 11 has an invalid length. [ 358.418720][ T8937] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1166'. [ 358.466309][ T8937] netlink: 'syz.2.1166': attribute type 6 has an invalid length. [ 358.476315][ T8937] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1166'. [ 361.273384][ T8943] netlink: 'syz.2.1169': attribute type 10 has an invalid length. [ 361.284693][ T8943] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1169'. [ 361.294457][ T8943] team0: Device geneve0 is up. Set it down before adding it as a team port [ 361.304419][ T8943] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 362.296479][ T8960] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1174'. [ 362.309178][ T8960] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1174'. [ 362.322189][ T8960] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1174'. [ 362.361471][ T8960] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1174'. [ 363.107985][ T8969] netlink: 'syz.2.1178': attribute type 10 has an invalid length. [ 363.129917][ T8969] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 365.054326][ T9018] netlink: 'syz.1.1195': attribute type 29 has an invalid length. [ 365.101491][ T9018] netlink: 'syz.1.1195': attribute type 29 has an invalid length. [ 365.122395][ T9021] FAULT_INJECTION: forcing a failure. [ 365.122395][ T9021] name failslab, interval 1, probability 0, space 0, times 0 [ 365.147074][ T9023] netlink: 'syz.1.1195': attribute type 29 has an invalid length. [ 365.155563][ T9021] CPU: 0 PID: 9021 Comm: syz.3.1198 Not tainted syzkaller #0 [ 365.163006][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 365.173120][ T9021] Call Trace: [ 365.176447][ T9021] [ 365.179433][ T9021] dump_stack_lvl+0x18c/0x250 [ 365.184175][ T9021] ? sctp_sendmsg+0x1519/0x27b0 [ 365.189119][ T9021] ? ___sys_sendmsg+0x2a6/0x360 [ 365.194080][ T9021] ? show_regs_print_info+0x20/0x20 [ 365.199346][ T9021] ? load_image+0x420/0x420 [ 365.203915][ T9021] should_fail_ex+0x394/0x4c0 [ 365.208688][ T9021] should_failslab+0x9/0x20 [ 365.213269][ T9021] slab_pre_alloc_hook+0x59/0x300 [ 365.218354][ T9021] ? sctp_add_bind_addr+0x8c/0x360 [ 365.223529][ T9021] __kmem_cache_alloc_node+0x53/0x250 [ 365.228969][ T9021] ? sctp_add_bind_addr+0x8c/0x360 [ 365.234152][ T9021] kmalloc_trace+0x2a/0xe0 [ 365.238639][ T9021] sctp_add_bind_addr+0x8c/0x360 [ 365.243644][ T9021] sctp_copy_local_addr_list+0x31b/0x4e0 [ 365.249335][ T9021] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 365.255124][ T9021] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 365.261250][ T9021] ? sctp_v4_is_any+0x35/0x60 [ 365.265982][ T9021] ? sctp_copy_one_addr+0x8c/0x350 [ 365.271156][ T9021] sctp_bind_addr_copy+0xb3/0x3c0 [ 365.276235][ T9021] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 365.282633][ T9021] sctp_connect_new_asoc+0x2f9/0x6a0 [ 365.287978][ T9021] ? __sctp_connect+0xd80/0xd80 [ 365.292974][ T9021] ? __local_bh_enable_ip+0x13a/0x1c0 [ 365.298512][ T9021] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 365.304122][ T9021] ? security_sctp_bind_connect+0x89/0xb0 [ 365.309925][ T9021] sctp_sendmsg+0x1519/0x27b0 [ 365.314683][ T9021] ? sctp_getsockopt+0xb60/0xb60 [ 365.319704][ T9021] ? aa_sk_perm+0x83c/0x970 [ 365.324278][ T9021] ? aa_af_perm+0x330/0x330 [ 365.328838][ T9021] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 365.335315][ T9021] ? sock_rps_record_flow+0x19/0x3f0 [ 365.340672][ T9021] ? inet_sendmsg+0xce/0x2a0 [ 365.345325][ T9021] ? inet_send_prepare+0x250/0x250 [ 365.350499][ T9021] ____sys_sendmsg+0x61b/0x980 [ 365.355347][ T9021] ? __sys_sendmsg_sock+0x30/0x30 [ 365.360425][ T9021] ? __import_iovec+0x5f2/0x850 [ 365.365336][ T9021] ? import_iovec+0x73/0xa0 [ 365.369892][ T9021] ___sys_sendmsg+0x2a6/0x360 [ 365.374622][ T9021] ? get_pid_task+0x20/0x1e0 [ 365.379278][ T9021] ? __sys_sendmsg+0x2b0/0x2b0 [ 365.384111][ T9021] ? __lock_acquire+0x7d80/0x7d80 [ 365.389205][ T9021] __se_sys_sendmsg+0x1d0/0x2c0 [ 365.394116][ T9021] ? __x64_sys_sendmsg+0x80/0x80 [ 365.399117][ T9021] ? lockdep_hardirqs_on+0x98/0x150 [ 365.404378][ T9021] do_syscall_64+0x55/0xb0 [ 365.408846][ T9021] ? clear_bhb_loop+0x40/0x90 [ 365.413572][ T9021] ? clear_bhb_loop+0x40/0x90 [ 365.418298][ T9021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.424250][ T9021] RIP: 0033:0x7f6b0d99ce59 [ 365.428715][ T9021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.448377][ T9021] RSP: 002b:00007f6b0e850028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.456849][ T9021] RAX: ffffffffffffffda RBX: 00007f6b0dc15fa0 RCX: 00007f6b0d99ce59 [ 365.464867][ T9021] RDX: 0000000000000850 RSI: 0000200000000600 RDI: 0000000000000003 [ 365.472903][ T9021] RBP: 00007f6b0e850090 R08: 0000000000000000 R09: 0000000000000000 [ 365.480936][ T9021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 365.488948][ T9021] R13: 00007f6b0dc16038 R14: 00007f6b0dc15fa0 R15: 00007ffd549bb848 [ 365.496986][ T9021] [ 365.502894][ T9018] netlink: 'syz.1.1195': attribute type 29 has an invalid length. [ 365.532201][ T9018] netlink: 'syz.1.1195': attribute type 29 has an invalid length. [ 365.611786][ T9018] netlink: 'syz.1.1195': attribute type 29 has an invalid length. [ 367.624189][ T9063] netlink: 'syz.3.1217': attribute type 3 has an invalid length. [ 367.651648][ T9063] netlink: 'syz.3.1217': attribute type 1 has an invalid length. [ 367.666038][ T9063] netlink: 198800 bytes leftover after parsing attributes in process `syz.3.1217'. [ 370.323339][ T9077] netlink: 'syz.2.1230': attribute type 1 has an invalid length. [ 370.331570][ T9077] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.1230'. [ 371.138525][ T9091] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1227'. [ 374.230847][ T9116] netlink: 'syz.2.1239': attribute type 22 has an invalid length. [ 374.260622][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1239'. [ 374.921058][ T9135] netlink: 'syz.0.1247': attribute type 10 has an invalid length. [ 374.928952][ T9135] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1247'. [ 374.939356][ T9135] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 377.945735][ T9165] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1258'. [ 377.962450][ T9165] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1258'. [ 378.018284][ T9166] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1258'. [ 378.029457][ T9165] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1258'. [ 378.883978][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.890866][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.787709][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 398.796900][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 398.805186][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 398.813943][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 398.821951][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 398.829471][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 398.933617][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 398.943171][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 398.951151][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 398.959263][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 398.967148][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 398.978960][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 399.295181][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 399.304379][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 399.318124][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 399.335251][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 399.344134][ T51] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 399.351992][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 399.608712][ T9221] chnl_net:caif_netlink_parms(): no params data found [ 399.718370][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 399.729129][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 399.738454][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 399.748139][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 399.756126][ T51] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 399.771519][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 399.913974][ T9223] chnl_net:caif_netlink_parms(): no params data found [ 400.146999][ T9221] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.157087][ T9221] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.165247][ T9221] bridge_slave_0: entered allmulticast mode [ 400.175489][ T9221] bridge_slave_0: entered promiscuous mode [ 400.185104][ T9221] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.195028][ T9221] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.206035][ T9221] bridge_slave_1: entered allmulticast mode [ 400.217048][ T9221] bridge_slave_1: entered promiscuous mode [ 400.238761][ T9226] chnl_net:caif_netlink_parms(): no params data found [ 400.378402][ T9221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.419619][ T9223] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.429504][ T9223] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.444758][ T9223] bridge_slave_0: entered allmulticast mode [ 400.455925][ T9223] bridge_slave_0: entered promiscuous mode [ 400.467635][ T9221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.504429][ T9223] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.515439][ T9223] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.523305][ T9223] bridge_slave_1: entered allmulticast mode [ 400.534808][ T9223] bridge_slave_1: entered promiscuous mode [ 400.890988][ T51] Bluetooth: hci4: command tx timeout [ 401.044150][ T51] Bluetooth: hci5: command tx timeout [ 401.458511][ T51] Bluetooth: hci6: command tx timeout [ 401.840785][ T51] Bluetooth: hci7: command tx timeout [ 402.960726][ T51] Bluetooth: hci4: command tx timeout [ 403.120774][ T51] Bluetooth: hci5: command tx timeout [ 403.528620][ T51] Bluetooth: hci6: command tx timeout [ 403.920612][ T51] Bluetooth: hci7: command tx timeout [ 405.040853][ T51] Bluetooth: hci4: command tx timeout [ 405.200635][ T51] Bluetooth: hci5: command tx timeout [ 405.600724][ T51] Bluetooth: hci6: command tx timeout [ 406.004283][ T51] Bluetooth: hci7: command tx timeout [ 407.120838][ T51] Bluetooth: hci4: command tx timeout [ 407.284220][ T51] Bluetooth: hci5: command tx timeout [ 407.688581][ T51] Bluetooth: hci6: command tx timeout [ 408.090789][ T51] Bluetooth: hci7: command tx timeout [ 440.325143][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.339378][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 459.362156][ T5777] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 459.380722][ T5777] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 459.389193][ T5777] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 459.397620][ T5777] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 459.409113][ T5777] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 459.420133][ T5777] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 459.561337][ T5777] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 459.570771][ T5777] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 459.582896][ T5777] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 459.593686][ T5777] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 459.608857][ T5777] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 459.617920][ T5777] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 459.702453][ T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 459.720791][ T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 459.728947][ T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 459.742209][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 459.751063][ T51] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 459.758709][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 459.827383][ T5777] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 459.844045][ T5777] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 459.853153][ T5777] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 459.861880][ T5777] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 459.870778][ T5777] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 459.881896][ T5777] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 461.520892][ T5777] Bluetooth: hci8: command tx timeout [ 461.680756][ T5777] Bluetooth: hci9: command tx timeout [ 461.840640][ T5777] Bluetooth: hci10: command tx timeout [ 461.920884][ T5777] Bluetooth: hci11: command tx timeout [ 463.600726][ T5777] Bluetooth: hci8: command tx timeout [ 463.760647][ T5777] Bluetooth: hci9: command tx timeout [ 463.920795][ T5777] Bluetooth: hci10: command tx timeout [ 464.000906][ T5777] Bluetooth: hci11: command tx timeout [ 465.690930][ T5777] Bluetooth: hci8: command tx timeout [ 465.856932][ T5777] Bluetooth: hci9: command tx timeout [ 466.014204][ T5777] Bluetooth: hci10: command tx timeout [ 466.090813][ T5777] Bluetooth: hci11: command tx timeout [ 467.764762][ T5777] Bluetooth: hci8: command tx timeout [ 467.920804][ T5777] Bluetooth: hci9: command tx timeout [ 468.080800][ T5777] Bluetooth: hci10: command tx timeout [ 468.170959][ T5777] Bluetooth: hci11: command tx timeout [ 486.890512][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 486.897214][ C0] rcu: 0-....: (8518 ticks this GP) idle=771c/1/0x4000000000000000 softirq=22391/22393 fqs=4452 [ 486.908775][ C0] rcu: hardirqs softirqs csw/system [ 486.915202][ C0] rcu: number: 1383803 26 0 [ 486.921620][ C0] rcu: cputime: 16503 35986 64 ==> 52490(ms) [ 486.929461][ C0] rcu: (t=10500 jiffies g=24257 q=2450 ncpus=2) [ 486.935814][ C0] CPU: 0 PID: 9205 Comm: syz.0.1271 Not tainted syzkaller #0 [ 486.943226][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 486.953351][ C0] RIP: 0010:get_stack_info+0x5/0x170 [ 486.958690][ C0] Code: e8 10 b8 57 00 48 c7 c0 dc 63 94 8c eb 07 e8 02 b8 57 00 31 c0 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 66 0f 1f 00 55 <41> 57 41 56 41 55 41 54 53 49 89 ce 48 89 d3 49 89 f7 49 89 fc e8 [ 486.978404][ C0] RSP: 0018:ffffc90000007438 EFLAGS: 00000246 [ 486.984497][ C0] RAX: 1ffff92000000e9c RBX: ffffc900000074a8 RCX: ffffc900000074c8 [ 486.992473][ C0] RDX: ffffc900000074a8 RSI: ffff88802aac8000 RDI: ffffc90000007448 [ 487.000468][ C0] RBP: ffffc900000074d0 R08: ffffc90000007507 R09: 0000000000000000 [ 487.008439][ C0] R10: ffffc900000074a8 R11: fffff52000000ea1 R12: ffffc90000007448 [ 487.016437][ C0] R13: ffffc900000074c8 R14: 1ffff92000000e9a R15: dffffc0000000000 [ 487.024420][ C0] FS: 00007f88c63c56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 487.033362][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.039959][ C0] CR2: 0000200000001980 CR3: 000000005bf86000 CR4: 00000000003506f0 [ 487.047942][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 487.055918][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 487.063890][ C0] Call Trace: [ 487.067173][ C0] [ 487.070024][ C0] __unwind_start+0x406/0x730 [ 487.074710][ C0] ? stack_trace_save+0x100/0x100 [ 487.079743][ C0] arch_stack_walk+0xf8/0x190 [ 487.084436][ C0] ? __unwind_start+0x275/0x730 [ 487.089293][ C0] stack_trace_save+0xaa/0x100 [ 487.094064][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 487.099189][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 487.104398][ C0] ? sched_clock_cpu+0x75/0x430 [ 487.109252][ C0] ? ktime_get+0x24b/0x280 [ 487.113684][ C0] kasan_set_track+0x4e/0x70 [ 487.118320][ C0] __kasan_slab_alloc+0x6c/0x80 [ 487.123177][ C0] slab_post_alloc_hook+0x6a/0x4d0 [ 487.128302][ C0] kmem_cache_alloc_node+0x1af/0x310 [ 487.133602][ C0] ? __alloc_skb+0x103/0x2c0 [ 487.138202][ C0] __alloc_skb+0x103/0x2c0 [ 487.142647][ C0] __netdev_alloc_skb+0x10c/0x500 [ 487.147687][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 487.153853][ C0] ? kmalloc_reserve+0x240/0x240 [ 487.158798][ C0] __ieee80211_beacon_get+0xd5d/0x1520 [ 487.164265][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 487.169831][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 487.175043][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 487.180527][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 487.187308][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 487.192884][ C0] __iterate_interfaces+0x225/0x4c0 [ 487.198091][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 487.204344][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 487.211547][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 487.217816][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 487.224847][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 487.230079][ C0] ? hw_scan_work+0xf10/0xf10 [ 487.234762][ C0] __hrtimer_run_queues+0x525/0xc10 [ 487.239976][ C0] ? hrtimer_interrupt+0x980/0x980 [ 487.245093][ C0] ? read_tsc+0x9/0x20 [ 487.249175][ C0] hrtimer_run_softirq+0x177/0x290 [ 487.254297][ C0] handle_softirqs+0x27d/0x820 [ 487.259061][ C0] ? read_tsc+0x9/0x20 [ 487.263131][ C0] ? ktime_get+0x24b/0x280 [ 487.267553][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 487.272322][ C0] ? do_softirq+0x1a0/0x1a0 [ 487.276827][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 487.282040][ C0] __irq_exit_rcu+0xd3/0x190 [ 487.286631][ C0] ? irq_exit_rcu+0x20/0x20 [ 487.291179][ C0] irq_exit_rcu+0x9/0x20 [ 487.295472][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 487.301132][ C0] [ 487.304094][ C0] [ 487.307032][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 487.313043][ C0] RIP: 0010:generic_exec_single+0x477/0x4e0 [ 487.318947][ C0] Code: 75 11 e8 2c 00 0b 00 48 85 db 75 16 e8 22 00 0b 00 eb 15 e8 1b 00 0b 00 e8 06 f3 07 09 48 85 db 74 ea e8 0c 00 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 487.338571][ C0] RSP: 0018:ffffc9000fd47a00 EFLAGS: 00000246 [ 487.344641][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 487.352654][ C0] RDX: ffffc9000cd5a000 RSI: 0000000000002bcc RDI: 0000000000002bcd [ 487.360646][ C0] RBP: ffffc9000fd47ad0 R08: ffffffff911bc5ff R09: 1ffffffff22378bf [ 487.368633][ C0] R10: dffffc0000000000 R11: fffffbfff22378c0 R12: 1ffff92001fa8f44 [ 487.376621][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92001fa8f65 [ 487.384616][ C0] ? event_function+0x300/0x300 [ 487.389476][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 487.395201][ C0] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 487.400933][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 487.406140][ C0] ? smp_call_function_single+0xb0/0x5a0 [ 487.411801][ C0] smp_call_function_single+0x36d/0x5a0 [ 487.417360][ C0] ? event_function+0x300/0x300 [ 487.422222][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 487.428388][ C0] ? event_function+0x300/0x300 [ 487.433264][ C0] perf_install_in_context+0x5bb/0x920 [ 487.438737][ C0] ? alloc_file_pseudo+0x1ae/0x210 [ 487.443906][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 487.449896][ C0] ? add_event_to_ctx+0x1170/0x1170 [ 487.455114][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 487.460321][ C0] ? perf_event__header_size+0x165/0x220 [ 487.465967][ C0] __se_sys_perf_event_open+0x1841/0x1c60 [ 487.471704][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 487.477370][ C0] ? lock_chain_count+0x20/0x20 [ 487.482336][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 487.487558][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 487.493253][ C0] do_syscall_64+0x55/0xb0 [ 487.497681][ C0] ? clear_bhb_loop+0x40/0x90 [ 487.502365][ C0] ? clear_bhb_loop+0x40/0x90 [ 487.507044][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.512948][ C0] RIP: 0033:0x7f88c559ce59 [ 487.517371][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.536986][ C0] RSP: 002b:00007f88c63c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 487.545425][ C0] RAX: ffffffffffffffda RBX: 00007f88c5815fa0 RCX: 00007f88c559ce59 [ 487.553397][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 487.561374][ C0] RBP: 00007f88c5632e6f R08: 0000000000000002 R09: 0000000000000000 [ 487.569349][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 487.577358][ C0] R13: 00007f88c5816038 R14: 00007f88c5815fa0 R15: 00007ffc4eb791c8 [ 487.585351][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)