last executing test programs: 22.419186737s ago: executing program 3 (id=1050): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000b80)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) 22.106671123s ago: executing program 3 (id=1054): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdfd, 0x10, 0x0, 0x17}, 0x48) 21.871548176s ago: executing program 3 (id=1055): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x1, 0x0, 0x80000002009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000001040)="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", 0x42d}, {&(0x7f0000001b80)="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", 0x614}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}}}], 0x20}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000008100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b63d2", 0x9}, {&(0x7f00000000c0)="06081833d0062d04944103", 0xb}], 0x2}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_bp={0x0, 0x8}, 0x482, 0x81, 0x7ff, 0x8, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @lsm=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.370288612s ago: executing program 0 (id=1057): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea4", 0x2}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0xc}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0x26}], 0x3}, 0x200ce0c0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xff97, &(0x7f0000000dc0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x20040080) 21.140092034s ago: executing program 0 (id=1060): bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x182, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000000010000000100000600000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001880)=ANY=[@ANYBLOB="2f000000ddffffffffffffffffe0bc34df7f14a6f0f6af388a8a2dee962a123a654752ff07a1a5f9999b04a35ffc64926a69a5cd49200593bb1631aa1589230c96e04cef7ed28fd79b1396", @ANYRES32, @ANYBLOB], 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x4, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xf, 0x4, 0x2, 0xdc, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xd, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001200)=@ethernet={0x6, @local}, 0x80, &(0x7f00000015c0), 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="b800000000000000880000000300000082bced2ef1914e60643bf106faca0001ac102a710bccc90b1279321ca4c2b8fb60a6d4ba1929c7d1f4171cf44d3f7d779fd71b939d707daba3e960c5f648b662ef9e92bf02680cad3626bd4e182030cc2cc75f12ca21e4129f2da1200de516e94ee948bbf910180ea851b13a7644097701a02562fcfd0b6ccaad551b6a4668"], 0xb8}, 0x20040010) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000240)="27050200340f3c000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc083", 0x4d}, {&(0x7f00000002c0)="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", 0xf2d}, {&(0x7f0000002840)="d0e9f04c4439acf77fc95f5dc3b5984211aff166ee1820", 0x17}], 0x3}, 0x9cdc2384016f48f8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000016c0)={r5, &(0x7f0000000040)="231b14d9e86575bfb46c0bef6bccb02dc229884777fb41089b8a6075fb3c50485ae2b5f10088ef7efd6bfd3bba6f159fac4429ccef1ea585293871da77b763096f6f72b2b9e76003ff", &(0x7f00000006c0)=""/4096, 0x4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getpid() 20.683964518s ago: executing program 0 (id=1062): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000b80)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) 20.671615879s ago: executing program 2 (id=1064): bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x7400}, 0x20004800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2002000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) 19.183294557s ago: executing program 2 (id=1065): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e2200030000000025000a000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 19.159120319s ago: executing program 0 (id=1066): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x823, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e1ef2fa1467e4acbc06f0bff9bff36b5122aac9416fcddb5fa5a9826bb08b47ba97a0c7b2b788e208d729dfe32e5815f23ba6fe6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000c900850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r9 = socket$kcm(0x15, 0x5, 0x0) recvmsg$kcm(r9, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x140) 19.090473412s ago: executing program 2 (id=1067): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x49b}, [@call={0x85, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x663d6846a870b317, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.665105065s ago: executing program 3 (id=1069): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415"}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0x3}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0xffc9}], 0x3}, 0x200ce0c0) sendmsg$kcm(r0, 0x0, 0x20040080) 18.587143659s ago: executing program 2 (id=1070): socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x2, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$kcm(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x80) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)}, 0x10140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 18.280126995s ago: executing program 1 (id=1071): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) sendmsg$kcm(r0, &(0x7f0000000b80)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4, 0x3, {0xa, 0x4e21, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xea}}}, 0x80, &(0x7f0000000740)=[{&(0x7f00000005c0)}, {&(0x7f0000000780)="4f23fbd456c0b70dabae0e4bc326e01855c1aa449a60da514a426ea8311d654522ff7853dd245849e3126ed0287270ae8abc0e", 0x33}, {&(0x7f00000006c0)="4396d9ab3050a648fb1054d4223bcebe21b205e7c16d20e2849174c68d5633f7b8250f189f9041dbe40620956652761bb22a16b8ed3b65e5fdb1ef7b95b42ff0276a8aa324edbad0892216", 0x4b}], 0x3, 0x0, 0x4e0}, 0x4008000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa1, 0xe, 0x0, 0x0, 0x0, 0xee79, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x10}, 0x226, 0xb, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000340)=""/94, 0x5e}, 0x100) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)=@o_path={&(0x7f00000001c0)='./file0\x00', r1, 0x4000, r6}, 0x18) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r7, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) close(r7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac0043f020234a10c000300010004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000010200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 18.272039696s ago: executing program 3 (id=1072): bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x182, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000000010000000100000600000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001880)=ANY=[@ANYBLOB="2f000000ddffffffffffffffffe0bc34df7f14a6f0f6af388a8a2dee962a123a654752ff07a1a5f9999b04a35ffc64926a69a5cd49200593bb1631aa1589230c96e04cef7ed28fd79b1396", @ANYRES32, @ANYBLOB], 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x4, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xf, 0x4, 0x2, 0xdc, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xd, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001200)=@ethernet={0x6, @local}, 0x80, &(0x7f00000015c0), 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="b800000000000000880000000300000082bced2ef1914e60643bf106faca0001ac102a710bccc90b1279321ca4c2b8fb60a6d4ba1929c7d1f4171cf44d3f7d779fd71b939d707daba3e960c5f648b662ef9e92bf02680cad3626bd4e182030cc2cc75f12ca21e4129f2da1200de516e94ee948bbf910180ea851b13a7644097701a02562fcfd0b6ccaad551b6a4668"], 0xb8}, 0x20040010) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000240)="27050200340f3c000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc083", 0x4d}, {&(0x7f00000002c0)="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", 0xf2d}, {&(0x7f0000002840)="d0e9f04c4439acf77fc95f5dc3b5984211aff166ee1820", 0x17}], 0x3}, 0x9cdc2384016f48f8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000016c0)={r5, &(0x7f0000000040)="231b14d9e86575bfb46c0bef6bccb02dc229884777fb41089b8a6075fb3c50485ae2b5f10088ef7efd6bfd3bba6f159fac4429ccef1ea585293871da77b763096f6f72b2b9e76003ff", &(0x7f00000006c0)=""/4096, 0x4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getpid() 18.100525265s ago: executing program 0 (id=1073): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x80, 0x43, 0x0, 0x0, 0x0, 0x5d34, 0x3000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x4100, 0x0, 0x100002, 0x8, 0x3, 0x7, 0x6}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x18}, 0xc001) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair(0x28, 0x4, 0x22, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ff, 0x80022, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x8000, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x4, 0x6d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000}, 0x0, 0x0, 0x0, 0x0, 0x3ffff}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xf6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0x2001000a, 0x4, 0x0, 0x1}, 0x0, 0x100000001, 0xffffffffffffffff, 0xd) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @mcast1, 0x6}, 0x80, 0x0}, 0x48084) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x0, 0x88) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x80, 0x0}, 0x4000080) socket$kcm(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000dfffffffffffffff003500000081a3989fb79e72982ebe7406c2c6194f10f7b8affd2bb18e759d18332f6757702d9bdd0c55e1cc49909fcfebd59a942243e5778911d3e94f945e4e1ca8f4c75ac9f51532b2599823922fa0ca2e1e96970143c671c2a7ea215d43d84951"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) r5 = perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x80, 0x6, 0x2, 0x9, 0x80, 0x0, 0x1, 0x2420, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_bp={&(0x7f0000000140), 0x5}, 0x110000, 0x4, 0x173243f6, 0x2, 0x0, 0x4, 0x3, 0x0, 0x9, 0x0, 0x3}, r0, 0x10, r2, 0x0) ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00001fe538000000000000000000483c0d2ab84c838d3380000000000000", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f000000040000000600000007000000801300", @ANYRES32, @ANYBLOB="000000000000000000800000000000", @ANYBLOB], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200", 0x20}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 17.80571939s ago: executing program 2 (id=1074): socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, 0x1}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 17.471798318s ago: executing program 3 (id=1075): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x98) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000b80)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) 17.355226774s ago: executing program 0 (id=1076): r0 = socket$kcm(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x6, &(0x7f0000000000)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003f00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4000000005}, 0xc003, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa521, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x200, 0x2}, 0x8000, 0x5, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003800)=@base={0x6, 0x4, 0x4, 0x9, 0x8, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r8}, 0xc) socket$kcm(0x1e, 0x4, 0x0) 17.089842188s ago: executing program 1 (id=1077): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="2400000000000000000000000700000044140823e000000200000002e00000010000100000000000dc00000000000000840000000700000094040000863900000001000cb2ffb69602013567ffcb060f19367d2b99bdc0f59e428bc33a050a3660f2bb77c7045b050a31efe0215e235d56060495ae0144243471ac14142700000006ac1414bb00000001ac1414bb0000ffff0a01010200000009009404010000866000000000000c253d78b48f9458beb62d0102000d3bf9f2dbdddfea00b260f00503db010436b20603c70109e35e3ab5244a640709675e60e1799f870512e123b12c8654130f6a1f80f526064d12061127d9c9821b1bfe4b42fcb33e2e2d2594040000000000001400000000000000000000000200000022a20000000000001400000000000000000000000200000005000000000000001c"], 0x158}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000004bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 17.089132678s ago: executing program 2 (id=1078): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x620401, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xc2, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8000000000000020, 0x3bd5}, 0x2003, 0x32, 0x1843, 0x3, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0xab}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES32=r2], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) 16.763468026s ago: executing program 1 (id=1079): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async, rerun: 64) r1 = socket$kcm(0x1e, 0x4, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r2) socket$kcm(0x2, 0x200000000000001, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8905, &(0x7f0000002280)={'bridge_slave_0\x00', @random="2b0100004ec6"}) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfdef) (async, rerun: 64) close(r1) (async, rerun: 64) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000002a80)=""/4091, 0xffb}], 0x1}, 0x400120a1) 15.507258431s ago: executing program 1 (id=1080): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415"}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0x3}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0xffc9}], 0x3}, 0x200ce0c0) sendmsg$kcm(r0, 0x0, 0x20040080) 15.455309324s ago: executing program 1 (id=1081): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, 0x0, 0x60) 15.35013128s ago: executing program 1 (id=1082): socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x2, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$kcm(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x80) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x10140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.290035839s ago: executing program 32 (id=1076): r0 = socket$kcm(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x6, &(0x7f0000000000)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003f00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4000000005}, 0xc003, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa521, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x200, 0x2}, 0x8000, 0x5, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003800)=@base={0x6, 0x4, 0x4, 0x9, 0x8, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r8}, 0xc) socket$kcm(0x1e, 0x4, 0x0) 2.173742845s ago: executing program 33 (id=1075): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x98) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000b80)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) 1.990605045s ago: executing program 34 (id=1078): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x620401, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xc2, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8000000000000020, 0x3bd5}, 0x2003, 0x32, 0x1843, 0x3, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0xab}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES32=r2], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) 0s ago: executing program 35 (id=1082): socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x2, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$kcm(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x80) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x10140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) kernel console output (not intermixed with test programs): R09: 0000000000000000 [ 137.928442][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.936526][ T6518] R13: 00007fe6f2216038 R14: 00007fe6f2215fa0 R15: 00007ffff19be3a8 [ 137.944862][ T6518] [ 139.320390][ T6542] netlink: 'syz.1.176': attribute type 10 has an invalid length. [ 139.766658][ T6555] FAULT_INJECTION: forcing a failure. [ 139.766658][ T6555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.780651][ T6555] CPU: 0 PID: 6555 Comm: syz.1.181 Not tainted syzkaller #0 [ 139.788264][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 139.798619][ T6555] Call Trace: [ 139.801943][ T6555] [ 139.805225][ T6555] dump_stack_lvl+0x18c/0x250 [ 139.810401][ T6555] ? show_regs_print_info+0x20/0x20 [ 139.815924][ T6555] ? load_image+0x420/0x420 [ 139.820831][ T6555] ? __might_fault+0xaa/0x120 [ 139.825597][ T6555] should_fail_ex+0x39d/0x4d0 [ 139.830789][ T6555] copyin+0x1a/0x90 [ 139.834660][ T6555] _copy_from_iter+0x404/0x12e0 [ 139.839555][ T6555] ? slab_post_alloc_hook+0x8a/0x4b0 [ 139.845047][ T6555] ? __virt_addr_valid+0x18c/0x540 [ 139.850357][ T6555] ? __lock_acquire+0x7d40/0x7d40 [ 139.855599][ T6555] ? copyout_mc+0x70/0x70 [ 139.860088][ T6555] ? __virt_addr_valid+0x18c/0x540 [ 139.865297][ T6555] ? __virt_addr_valid+0x18c/0x540 [ 139.870429][ T6555] ? __virt_addr_valid+0x469/0x540 [ 139.875819][ T6555] ? __check_object_size+0x506/0xa20 [ 139.881129][ T6555] netlink_sendmsg+0x76b/0xbf0 [ 139.886011][ T6555] ? netlink_getsockopt+0x590/0x590 [ 139.891322][ T6555] ? aa_sock_msg_perm+0x94/0x150 [ 139.896298][ T6555] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 139.901864][ T6555] ? security_socket_sendmsg+0x80/0xa0 [ 139.907339][ T6555] ? netlink_getsockopt+0x590/0x590 [ 139.912667][ T6555] ____sys_sendmsg+0x5ba/0x960 [ 139.917463][ T6555] ? __asan_memset+0x22/0x40 [ 139.922259][ T6555] ? __sys_sendmsg_sock+0x30/0x30 [ 139.927300][ T6555] ? __import_iovec+0x3fa/0x850 [ 139.932172][ T6555] ? import_iovec+0x73/0xa0 [ 139.936783][ T6555] ___sys_sendmsg+0x2a6/0x360 [ 139.942272][ T6555] ? __sys_sendmsg+0x2a0/0x2a0 [ 139.947421][ T6555] ? trace_call_bpf+0xc3/0x6c0 [ 139.952489][ T6555] __se_sys_sendmsg+0x1c2/0x2b0 [ 139.957717][ T6555] ? __x64_sys_sendmsg+0x80/0x80 [ 139.962804][ T6555] ? lockdep_hardirqs_on+0x98/0x150 [ 139.968240][ T6555] do_syscall_64+0x55/0xa0 [ 139.972804][ T6555] ? clear_bhb_loop+0x40/0x90 [ 139.977880][ T6555] ? clear_bhb_loop+0x40/0x90 [ 139.982613][ T6555] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.988637][ T6555] RIP: 0033:0x7fbbe179c819 [ 139.993172][ T6555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.013843][ T6555] RSP: 002b:00007fbbe2742028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.022488][ T6555] RAX: ffffffffffffffda RBX: 00007fbbe1a15fa0 RCX: 00007fbbe179c819 [ 140.031124][ T6555] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000004 [ 140.039216][ T6555] RBP: 00007fbbe2742090 R08: 0000000000000000 R09: 0000000000000000 [ 140.047235][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.055416][ T6555] R13: 00007fbbe1a16038 R14: 00007fbbe1a15fa0 R15: 00007fffdfe55408 [ 140.063526][ T6555] [ 140.401283][ T6564] FAULT_INJECTION: forcing a failure. [ 140.401283][ T6564] name failslab, interval 1, probability 0, space 0, times 1 [ 140.508376][ T6564] CPU: 1 PID: 6564 Comm: syz.2.184 Not tainted syzkaller #0 [ 140.516047][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 140.526454][ T6564] Call Trace: [ 140.529905][ T6564] [ 140.533061][ T6564] dump_stack_lvl+0x18c/0x250 [ 140.537848][ T6564] ? show_regs_print_info+0x20/0x20 [ 140.543130][ T6564] ? load_image+0x420/0x420 [ 140.547702][ T6564] ? __might_sleep+0xe0/0xe0 [ 140.552555][ T6564] ? __lock_acquire+0x7d40/0x7d40 [ 140.557621][ T6564] ? prepend_path+0x4b/0x960 [ 140.562287][ T6564] should_fail_ex+0x39d/0x4d0 [ 140.567035][ T6564] should_failslab+0x9/0x20 [ 140.571810][ T6564] slab_pre_alloc_hook+0x59/0x310 [ 140.577318][ T6564] ? __asan_memcpy+0x40/0x70 [ 140.581987][ T6564] ? tomoyo_encode+0x28b/0x540 [ 140.586836][ T6564] ? tomoyo_encode+0x28b/0x540 [ 140.591991][ T6564] __kmem_cache_alloc_node+0x53/0x250 [ 140.597767][ T6564] ? prepend_path+0x4b/0x960 [ 140.602459][ T6564] ? tomoyo_encode+0x28b/0x540 [ 140.607494][ T6564] __kmalloc+0xa4/0x230 [ 140.611947][ T6564] tomoyo_encode+0x28b/0x540 [ 140.616927][ T6564] tomoyo_realpath_from_path+0x592/0x5d0 [ 140.622937][ T6564] tomoyo_path_number_perm+0x248/0x620 [ 140.628571][ T6564] ? tomoyo_path_number_perm+0x217/0x620 [ 140.634523][ T6564] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 140.640473][ T6564] ? ksys_write+0x1c4/0x260 [ 140.645476][ T6564] ? __fget_files+0x28/0x4b0 [ 140.650216][ T6564] ? __fget_files+0x28/0x4b0 [ 140.654979][ T6564] security_file_ioctl+0x70/0xa0 [ 140.660057][ T6564] __se_sys_ioctl+0x48/0x170 [ 140.664696][ T6564] do_syscall_64+0x55/0xa0 [ 140.669445][ T6564] ? clear_bhb_loop+0x40/0x90 [ 140.674190][ T6564] ? clear_bhb_loop+0x40/0x90 [ 140.679095][ T6564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.685058][ T6564] RIP: 0033:0x7f160e39c819 [ 140.689872][ T6564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.712658][ T6564] RSP: 002b:00007f160f278028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.721519][ T6564] RAX: ffffffffffffffda RBX: 00007f160e615fa0 RCX: 00007f160e39c819 [ 140.730339][ T6564] RDX: 0000200000000480 RSI: 00000000c0189436 RDI: 0000000000000004 [ 140.738853][ T6564] RBP: 00007f160f278090 R08: 0000000000000000 R09: 0000000000000000 [ 140.746984][ T6564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.755276][ T6564] R13: 00007f160e616038 R14: 00007f160e615fa0 R15: 00007fff4c46e8c8 [ 140.763712][ T6564] [ 140.853232][ T6564] ERROR: Out of memory at tomoyo_realpath_from_path. [ 140.950893][ T6573] Illegal XDP return value 3449775639 on prog (id 151) dev N/A, expect packet loss! [ 141.779131][ T6592] FAULT_INJECTION: forcing a failure. [ 141.779131][ T6592] name failslab, interval 1, probability 0, space 0, times 0 [ 141.923405][ T6592] CPU: 1 PID: 6592 Comm: syz.3.194 Not tainted syzkaller #0 [ 141.930881][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 141.941522][ T6592] Call Trace: [ 141.945568][ T6592] [ 141.948642][ T6592] dump_stack_lvl+0x18c/0x250 [ 141.954343][ T6592] ? show_regs_print_info+0x20/0x20 [ 141.960215][ T6592] ? load_image+0x420/0x420 [ 141.965040][ T6592] ? __might_sleep+0xe0/0xe0 [ 141.969922][ T6592] ? __lock_acquire+0x7d40/0x7d40 [ 141.975148][ T6592] ? trace_call_bpf+0xc3/0x6c0 [ 141.980135][ T6592] should_fail_ex+0x39d/0x4d0 [ 141.985194][ T6592] should_failslab+0x9/0x20 [ 141.989813][ T6592] slab_pre_alloc_hook+0x59/0x310 [ 141.994944][ T6592] ? trace_call_bpf+0xc3/0x6c0 [ 141.999842][ T6592] ? trace_call_bpf+0xc3/0x6c0 [ 142.004636][ T6592] kmem_cache_alloc_node+0x60/0x320 [ 142.009853][ T6592] ? __alloc_skb+0x103/0x2c0 [ 142.014550][ T6592] __alloc_skb+0x103/0x2c0 [ 142.019270][ T6592] alloc_skb_with_frags+0xca/0x7b0 [ 142.025581][ T6592] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 142.032129][ T6592] sock_alloc_send_pskb+0x883/0x9a0 [ 142.037483][ T6592] ? sock_kzfree_s+0x50/0x50 [ 142.042399][ T6592] ? __local_bh_enable_ip+0x13a/0x1c0 [ 142.047990][ T6592] ? _local_bh_enable+0xa0/0xa0 [ 142.052880][ T6592] ? qrtr_endpoint_unregister+0x4f0/0x4f0 [ 142.058822][ T6592] qrtr_sendmsg+0x4fa/0x890 [ 142.063530][ T6592] ? qrtr_ioctl+0x460/0x460 [ 142.068231][ T6592] ? aa_sock_msg_perm+0x94/0x150 [ 142.073746][ T6592] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 142.079496][ T6592] ? security_socket_sendmsg+0x80/0xa0 [ 142.085150][ T6592] ? qrtr_ioctl+0x460/0x460 [ 142.090066][ T6592] ____sys_sendmsg+0x5ba/0x960 [ 142.094972][ T6592] ? __lock_acquire+0x7d40/0x7d40 [ 142.100216][ T6592] ? __asan_memset+0x22/0x40 [ 142.104950][ T6592] ? __sys_sendmsg_sock+0x30/0x30 [ 142.110084][ T6592] ? __import_iovec+0x3fa/0x850 [ 142.115057][ T6592] ? import_iovec+0x73/0xa0 [ 142.119580][ T6592] ___sys_sendmsg+0x2a6/0x360 [ 142.124551][ T6592] ? __sys_sendmsg+0x2a0/0x2a0 [ 142.129450][ T6592] ? trace_call_bpf+0xc3/0x6c0 [ 142.134388][ T6592] __se_sys_sendmsg+0x1c2/0x2b0 [ 142.139468][ T6592] ? __x64_sys_sendmsg+0x80/0x80 [ 142.144460][ T6592] ? lockdep_hardirqs_on+0x98/0x150 [ 142.149959][ T6592] do_syscall_64+0x55/0xa0 [ 142.154489][ T6592] ? clear_bhb_loop+0x40/0x90 [ 142.159273][ T6592] ? clear_bhb_loop+0x40/0x90 [ 142.164218][ T6592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.170443][ T6592] RIP: 0033:0x7fe6f1f9c819 [ 142.174982][ T6592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.195840][ T6592] RSP: 002b:00007fe6f2e90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.205085][ T6592] RAX: ffffffffffffffda RBX: 00007fe6f2216090 RCX: 00007fe6f1f9c819 [ 142.214046][ T6592] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000006 [ 142.222950][ T6592] RBP: 00007fe6f2e90090 R08: 0000000000000000 R09: 0000000000000000 [ 142.231336][ T6592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.239975][ T6592] R13: 00007fe6f2216128 R14: 00007fe6f2216090 R15: 00007ffff19be3a8 [ 142.248788][ T6592] [ 143.205540][ T6589] netlink: 'syz.1.193': attribute type 21 has an invalid length. [ 143.243554][ T6589] netlink: 128 bytes leftover after parsing attributes in process `syz.1.193'. [ 143.289089][ T6589] netlink: 3 bytes leftover after parsing attributes in process `syz.1.193'. [ 143.408361][ T6605] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 143.424573][ T6605] pim6reg1: linktype set to 773 [ 144.659370][ T6626] FAULT_INJECTION: forcing a failure. [ 144.659370][ T6626] name failslab, interval 1, probability 0, space 0, times 0 [ 144.688515][ T6626] CPU: 0 PID: 6626 Comm: syz.0.203 Not tainted syzkaller #0 [ 144.696428][ T6626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 144.706629][ T6626] Call Trace: [ 144.709953][ T6626] [ 144.712930][ T6626] dump_stack_lvl+0x18c/0x250 [ 144.717951][ T6626] ? show_regs_print_info+0x20/0x20 [ 144.723299][ T6626] ? load_image+0x420/0x420 [ 144.728212][ T6626] ? __might_sleep+0xe0/0xe0 [ 144.732930][ T6626] ? __lock_acquire+0x7d40/0x7d40 [ 144.738098][ T6626] should_fail_ex+0x39d/0x4d0 [ 144.743078][ T6626] should_failslab+0x9/0x20 [ 144.747996][ T6626] slab_pre_alloc_hook+0x59/0x310 [ 144.753524][ T6626] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 144.759926][ T6626] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 144.766066][ T6626] __kmem_cache_alloc_node+0x53/0x250 [ 144.771602][ T6626] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 144.777416][ T6626] __kmalloc+0xa4/0x230 [ 144.781735][ T6626] tomoyo_realpath_from_path+0xe3/0x5d0 [ 144.787449][ T6626] tomoyo_path_number_perm+0x248/0x620 [ 144.792981][ T6626] ? tomoyo_path_number_perm+0x217/0x620 [ 144.798944][ T6626] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 144.804635][ T6626] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 144.811309][ T6626] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 144.817973][ T6626] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 144.824366][ T6626] security_file_ioctl+0x70/0xa0 [ 144.829986][ T6626] __se_sys_ioctl+0x48/0x170 [ 144.834904][ T6626] do_syscall_64+0x55/0xa0 [ 144.839450][ T6626] ? clear_bhb_loop+0x40/0x90 [ 144.844330][ T6626] ? clear_bhb_loop+0x40/0x90 [ 144.849205][ T6626] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.855124][ T6626] RIP: 0033:0x7ff415d9c819 [ 144.859846][ T6626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.880199][ T6626] RSP: 002b:00007ff416c19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.889018][ T6626] RAX: ffffffffffffffda RBX: 00007ff416015fa0 RCX: 00007ff415d9c819 [ 144.897046][ T6626] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000006 [ 144.905129][ T6626] RBP: 00007ff416c19090 R08: 0000000000000000 R09: 0000000000000000 [ 144.913444][ T6626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.921881][ T6626] R13: 00007ff416016038 R14: 00007ff416015fa0 R15: 00007ffe9b9f7ce8 [ 144.930688][ T6626] [ 144.950830][ T6626] ERROR: Out of memory at tomoyo_realpath_from_path. [ 145.014145][ T6634] netlink: 'syz.1.205': attribute type 10 has an invalid length. [ 145.168244][ T6637] netlink: 'syz.1.205': attribute type 9 has an invalid length. [ 145.219051][ T6637] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.205'. [ 145.673759][ T6650] netlink: 'syz.0.216': attribute type 10 has an invalid length. [ 145.732444][ T6642] netlink: 'syz.1.205': attribute type 9 has an invalid length. [ 145.761715][ T6642] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.205'. [ 146.172731][ T6655] netlink: 'syz.0.209': attribute type 21 has an invalid length. [ 146.229468][ T6655] netlink: 128 bytes leftover after parsing attributes in process `syz.0.209'. [ 146.384693][ T6655] netlink: 3 bytes leftover after parsing attributes in process `syz.0.209'. [ 146.984845][ T6673] netlink: 192188 bytes leftover after parsing attributes in process `syz.1.217'. [ 147.017237][ T6673] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 147.399531][ T6681] netlink: 'syz.1.220': attribute type 10 has an invalid length. [ 147.459454][ T6683] netlink: 'syz.2.219': attribute type 10 has an invalid length. [ 147.619611][ T6687] netlink: 'syz.0.230': attribute type 10 has an invalid length. [ 148.440629][ T6713] FAULT_INJECTION: forcing a failure. [ 148.440629][ T6713] name failslab, interval 1, probability 0, space 0, times 0 [ 148.459437][ T6713] CPU: 0 PID: 6713 Comm: syz.0.232 Not tainted syzkaller #0 [ 148.467016][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 148.477493][ T6713] Call Trace: [ 148.481161][ T6713] [ 148.484140][ T6713] dump_stack_lvl+0x18c/0x250 [ 148.489396][ T6713] ? sctp_sendmsg+0x1575/0x28c0 [ 148.495555][ T6713] ? ___sys_sendmsg+0x2a6/0x360 [ 148.500897][ T6713] ? show_regs_print_info+0x20/0x20 [ 148.507290][ T6713] ? load_image+0x420/0x420 [ 148.512045][ T6713] should_fail_ex+0x39d/0x4d0 [ 148.516898][ T6713] should_failslab+0x9/0x20 [ 148.521659][ T6713] slab_pre_alloc_hook+0x59/0x310 [ 148.527014][ T6713] ? sctp_add_bind_addr+0x8c/0x360 [ 148.532640][ T6713] __kmem_cache_alloc_node+0x53/0x250 [ 148.538781][ T6713] ? sctp_add_bind_addr+0x8c/0x360 [ 148.544457][ T6713] kmalloc_trace+0x2a/0xe0 [ 148.549026][ T6713] sctp_add_bind_addr+0x8c/0x360 [ 148.554370][ T6713] sctp_copy_local_addr_list+0x315/0x4f0 [ 148.560237][ T6713] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 148.566006][ T6713] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 148.572550][ T6713] ? sctp_v4_is_any+0x35/0x60 [ 148.577618][ T6713] ? sctp_copy_one_addr+0x8c/0x350 [ 148.583505][ T6713] sctp_bind_addr_copy+0xb3/0x3c0 [ 148.589026][ T6713] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 148.595866][ T6713] sctp_connect_new_asoc+0x2f9/0x6a0 [ 148.601658][ T6713] ? __sctp_connect+0xd80/0xd80 [ 148.606921][ T6713] ? __local_bh_enable_ip+0x13a/0x1c0 [ 148.613074][ T6713] ? _local_bh_enable+0xa0/0xa0 [ 148.619230][ T6713] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 148.625454][ T6713] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 148.631932][ T6713] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 148.638237][ T6713] ? security_sctp_bind_connect+0x89/0xb0 [ 148.644910][ T6713] sctp_sendmsg+0x1575/0x28c0 [ 148.650029][ T6713] ? sctp_getsockopt+0xb60/0xb60 [ 148.655460][ T6713] ? aa_sk_perm+0x83c/0x970 [ 148.660935][ T6713] ? aa_af_perm+0x330/0x330 [ 148.666062][ T6713] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 148.673280][ T6713] ? sock_rps_record_flow+0x19/0x3f0 [ 148.678904][ T6713] ? inet_sendmsg+0x7c/0x2f0 [ 148.684124][ T6713] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 148.690352][ T6713] ? security_socket_sendmsg+0x80/0xa0 [ 148.696356][ T6713] ? inet_send_prepare+0x260/0x260 [ 148.702202][ T6713] ____sys_sendmsg+0x5ba/0x960 [ 148.707112][ T6713] ? __lock_acquire+0x7d40/0x7d40 [ 148.712926][ T6713] ? __asan_memset+0x22/0x40 [ 148.718115][ T6713] ? __sys_sendmsg_sock+0x30/0x30 [ 148.724020][ T6713] ? __import_iovec+0x5f2/0x850 [ 148.729552][ T6713] ? import_iovec+0x73/0xa0 [ 148.735081][ T6713] ___sys_sendmsg+0x2a6/0x360 [ 148.741659][ T6713] ? get_pid_task+0x20/0x1e0 [ 148.746507][ T6713] ? __sys_sendmsg+0x2a0/0x2a0 [ 148.753077][ T6713] ? __lock_acquire+0x7d40/0x7d40 [ 148.759010][ T6713] __se_sys_sendmsg+0x1c2/0x2b0 [ 148.764019][ T6713] ? __x64_sys_sendmsg+0x80/0x80 [ 148.769143][ T6713] ? lockdep_hardirqs_on+0x98/0x150 [ 148.774917][ T6713] do_syscall_64+0x55/0xa0 [ 148.779803][ T6713] ? clear_bhb_loop+0x40/0x90 [ 148.785480][ T6713] ? clear_bhb_loop+0x40/0x90 [ 148.790236][ T6713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.796554][ T6713] RIP: 0033:0x7ff415d9c819 [ 148.801134][ T6713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.824455][ T6713] RSP: 002b:00007ff416c19028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.834113][ T6713] RAX: ffffffffffffffda RBX: 00007ff416015fa0 RCX: 00007ff415d9c819 [ 148.843029][ T6713] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 0000000000000003 [ 148.853421][ T6713] RBP: 00007ff416c19090 R08: 0000000000000000 R09: 0000000000000000 [ 148.864167][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.874735][ T6713] R13: 00007ff416016038 R14: 00007ff416015fa0 R15: 00007ffe9b9f7ce8 [ 148.877400][ T6721] netlink: 'syz.1.233': attribute type 10 has an invalid length. [ 148.884101][ T6713] [ 148.985974][ T6723] netlink: 'syz.0.234': attribute type 10 has an invalid length. [ 149.462455][ T6728] netlink: 'syz.0.236': attribute type 12 has an invalid length. [ 149.471398][ T6728] netlink: 132 bytes leftover after parsing attributes in process `syz.0.236'. [ 150.288655][ T6739] FAULT_INJECTION: forcing a failure. [ 150.288655][ T6739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.323607][ T6739] CPU: 1 PID: 6739 Comm: syz.3.239 Not tainted syzkaller #0 [ 150.331526][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 150.342884][ T6739] Call Trace: [ 150.347008][ T6739] [ 150.350091][ T6739] dump_stack_lvl+0x18c/0x250 [ 150.355278][ T6739] ? show_regs_print_info+0x20/0x20 [ 150.360633][ T6739] ? load_image+0x420/0x420 [ 150.365301][ T6739] ? __might_fault+0xaa/0x120 [ 150.370192][ T6739] ? __lock_acquire+0x7d40/0x7d40 [ 150.375370][ T6739] should_fail_ex+0x39d/0x4d0 [ 150.380473][ T6739] _copy_from_user+0x2f/0xe0 [ 150.385389][ T6739] __sys_bpf+0x23e/0x890 [ 150.390194][ T6739] ? bpf_link_show_fdinfo+0x390/0x390 [ 150.395603][ T6739] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 150.402231][ T6739] __x64_sys_bpf+0x7c/0x90 [ 150.406847][ T6739] do_syscall_64+0x55/0xa0 [ 150.411472][ T6739] ? clear_bhb_loop+0x40/0x90 [ 150.416534][ T6739] ? clear_bhb_loop+0x40/0x90 [ 150.421874][ T6739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.428068][ T6739] RIP: 0033:0x7fe6f1f9c819 [ 150.432552][ T6739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.453427][ T6739] RSP: 002b:00007fe6f2eb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 150.462292][ T6739] RAX: ffffffffffffffda RBX: 00007fe6f2215fa0 RCX: 00007fe6f1f9c819 [ 150.470397][ T6739] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 000000000000000f [ 150.478484][ T6739] RBP: 00007fe6f2eb1090 R08: 0000000000000000 R09: 0000000000000000 [ 150.486470][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.494491][ T6739] R13: 00007fe6f2216038 R14: 00007fe6f2215fa0 R15: 00007ffff19be3a8 [ 150.502867][ T6739] [ 151.038846][ T6757] netlink: 'syz.2.244': attribute type 10 has an invalid length. [ 152.378121][ T6776] netlink: 'syz.2.252': attribute type 10 has an invalid length. [ 152.397689][ T6776] netlink: 55 bytes leftover after parsing attributes in process `syz.2.252'. [ 152.729561][ T6784] netlink: 'syz.2.255': attribute type 10 has an invalid length. [ 152.742029][ T6782] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.254'. [ 153.242034][ T6790] netlink: 'syz.3.257': attribute type 2 has an invalid length. [ 153.270866][ T6790] netlink: 'syz.3.257': attribute type 8 has an invalid length. [ 153.283959][ T6790] netlink: 132 bytes leftover after parsing attributes in process `syz.3.257'. [ 154.407172][ T6807] netlink: 64743 bytes leftover after parsing attributes in process `syz.1.261'. [ 154.641854][ T6811] netlink: 'syz.3.263': attribute type 10 has an invalid length. [ 154.659031][ T6811] netlink: 55 bytes leftover after parsing attributes in process `syz.3.263'. [ 155.681902][ T6821] netlink: 'syz.2.266': attribute type 10 has an invalid length. [ 156.288125][ T6836] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 157.002411][ T6830] netlink: 'syz.3.267': attribute type 12 has an invalid length. [ 157.015432][ T6830] netlink: 132 bytes leftover after parsing attributes in process `syz.3.267'. [ 157.053755][ T6851] netlink: 'syz.0.276': attribute type 10 has an invalid length. [ 157.341326][ T6854] netlink: 'syz.1.275': attribute type 10 has an invalid length. [ 157.375405][ T6854] netlink: 55 bytes leftover after parsing attributes in process `syz.1.275'. [ 157.885228][ T6870] FAULT_INJECTION: forcing a failure. [ 157.885228][ T6870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.900747][ T6870] CPU: 0 PID: 6870 Comm: syz.3.281 Not tainted syzkaller #0 [ 157.908214][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 157.919544][ T6870] Call Trace: [ 157.923034][ T6870] [ 157.926005][ T6870] dump_stack_lvl+0x18c/0x250 [ 157.930792][ T6870] ? show_regs_print_info+0x20/0x20 [ 157.936537][ T6870] ? load_image+0x420/0x420 [ 157.941251][ T6870] ? __lock_acquire+0x7d40/0x7d40 [ 157.946931][ T6870] ? snprintf+0xe9/0x140 [ 157.951409][ T6870] should_fail_ex+0x39d/0x4d0 [ 157.956587][ T6870] _copy_to_user+0x2f/0xa0 [ 157.961404][ T6870] simple_read_from_buffer+0xe7/0x150 [ 157.967016][ T6870] proc_fail_nth_read+0x1e8/0x260 [ 157.972624][ T6870] ? proc_fault_inject_write+0x360/0x360 [ 157.979031][ T6870] ? fsnotify_perm+0x271/0x5e0 [ 157.984189][ T6870] ? proc_fault_inject_write+0x360/0x360 [ 157.990091][ T6870] vfs_read+0x28b/0x970 [ 157.994536][ T6870] ? kernel_read+0x1e0/0x1e0 [ 157.999986][ T6870] ? __fget_files+0x28/0x4b0 [ 158.005011][ T6870] ? __fget_files+0x28/0x4b0 [ 158.009815][ T6870] ? __fget_files+0x43d/0x4b0 [ 158.015069][ T6870] ? __fdget_pos+0x2a3/0x330 [ 158.020257][ T6870] ? ksys_read+0x75/0x260 [ 158.024969][ T6870] ksys_read+0x150/0x260 [ 158.029358][ T6870] ? vfs_write+0x990/0x990 [ 158.033911][ T6870] ? lockdep_hardirqs_on+0x98/0x150 [ 158.039573][ T6870] do_syscall_64+0x55/0xa0 [ 158.044739][ T6870] ? clear_bhb_loop+0x40/0x90 [ 158.049995][ T6870] ? clear_bhb_loop+0x40/0x90 [ 158.055199][ T6870] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.061925][ T6870] RIP: 0033:0x7fe6f1f5d04e [ 158.066830][ T6870] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 158.088145][ T6870] RSP: 002b:00007fe6f2eb0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.097130][ T6870] RAX: ffffffffffffffda RBX: 00007fe6f2eb16c0 RCX: 00007fe6f1f5d04e [ 158.105394][ T6870] RDX: 000000000000000f RSI: 00007fe6f2eb10a0 RDI: 0000000000000006 [ 158.113862][ T6870] RBP: 00007fe6f2eb1090 R08: 0000000000000000 R09: 0000000000000000 [ 158.122054][ T6870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.130072][ T6870] R13: 00007fe6f2216038 R14: 00007fe6f2215fa0 R15: 00007ffff19be3a8 [ 158.138087][ T6870] [ 158.372012][ T6880] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.285'. [ 158.412079][ T6883] netlink: 'syz.0.286': attribute type 10 has an invalid length. [ 158.447354][ T6884] IPv6: Can't replace route, no match found [ 158.617383][ T6887] netlink: 'syz.2.287': attribute type 21 has an invalid length. [ 158.630053][ T6887] netlink: 'syz.2.287': attribute type 12 has an invalid length. [ 158.639063][ T6887] netlink: 'syz.2.287': attribute type 13 has an invalid length. [ 158.648449][ T6887] netlink: 'syz.2.287': attribute type 14 has an invalid length. [ 158.657053][ T6887] netlink: 12918 bytes leftover after parsing attributes in process `syz.2.287'. [ 158.676429][ T6890] netlink: 55 bytes leftover after parsing attributes in process `syz.3.288'. [ 160.016071][ T6922] validate_nla: 4 callbacks suppressed [ 160.016095][ T6922] netlink: 'syz.2.300': attribute type 10 has an invalid length. [ 160.053333][ T6922] netlink: 55 bytes leftover after parsing attributes in process `syz.2.300'. [ 160.229678][ T6927] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.299'. [ 160.304671][ T6930] netlink: 'syz.3.303': attribute type 21 has an invalid length. [ 160.334773][ T6930] netlink: 128 bytes leftover after parsing attributes in process `syz.3.303'. [ 160.345073][ T6930] netlink: 'syz.3.303': attribute type 4 has an invalid length. [ 162.087099][ T6955] netlink: 'syz.1.309': attribute type 10 has an invalid length. [ 162.610528][ T6961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.998637][ T6968] FAULT_INJECTION: forcing a failure. [ 162.998637][ T6968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.023575][ T6968] CPU: 1 PID: 6968 Comm: syz.0.315 Not tainted syzkaller #0 [ 163.031139][ T6968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 163.041977][ T6968] Call Trace: [ 163.045489][ T6968] [ 163.048796][ T6968] dump_stack_lvl+0x18c/0x250 [ 163.054161][ T6968] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 163.061773][ T6968] ? show_regs_print_info+0x20/0x20 [ 163.067884][ T6968] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 163.075517][ T6968] should_fail_ex+0x39d/0x4d0 [ 163.079534][ T6969] netlink: 'syz.2.314': attribute type 21 has an invalid length. [ 163.081123][ T6968] _copy_to_user+0x2f/0xa0 [ 163.081192][ T6968] simple_read_from_buffer+0xe7/0x150 [ 163.081229][ T6968] proc_fail_nth_read+0x1e8/0x260 [ 163.081259][ T6968] ? proc_fault_inject_write+0x360/0x360 [ 163.081292][ T6968] ? fsnotify_perm+0x271/0x5e0 [ 163.081320][ T6968] ? proc_fault_inject_write+0x360/0x360 [ 163.081348][ T6968] vfs_read+0x28b/0x970 [ 163.081379][ T6968] ? kernel_read+0x1e0/0x1e0 [ 163.081406][ T6968] ? __fget_files+0x28/0x4b0 [ 163.081430][ T6968] ? __fget_files+0x28/0x4b0 [ 163.081455][ T6968] ? __fget_files+0x43d/0x4b0 [ 163.081490][ T6968] ? __fdget_pos+0x2a3/0x330 [ 163.081513][ T6968] ? ksys_read+0x75/0x260 [ 163.081540][ T6968] ksys_read+0x150/0x260 [ 163.081568][ T6968] ? vfs_write+0x990/0x990 [ 163.081597][ T6968] ? lockdep_hardirqs_on+0x98/0x150 [ 163.081719][ T6968] do_syscall_64+0x55/0xa0 [ 163.081739][ T6968] ? clear_bhb_loop+0x40/0x90 [ 163.081763][ T6968] ? clear_bhb_loop+0x40/0x90 [ 163.081789][ T6968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.081814][ T6968] RIP: 0033:0x7ff415d5d04e [ 163.081833][ T6968] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 163.081850][ T6968] RSP: 002b:00007ff416c18fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.081873][ T6968] RAX: ffffffffffffffda RBX: 00007ff416c196c0 RCX: 00007ff415d5d04e [ 163.081888][ T6968] RDX: 000000000000000f RSI: 00007ff416c190a0 RDI: 0000000000000008 [ 163.081901][ T6968] RBP: 00007ff416c19090 R08: 0000000000000000 R09: 0000000000000000 [ 163.096716][ T6969] netlink: 128 bytes leftover after parsing attributes in process `syz.2.314'. [ 163.097661][ T6968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.097680][ T6968] R13: 00007ff416016038 R14: 00007ff416015fa0 R15: 00007ffe9b9f7ce8 [ 163.097714][ T6968] [ 163.742037][ T6969] netlink: 3 bytes leftover after parsing attributes in process `syz.2.314'. [ 163.878039][ T6980] netlink: 'syz.0.318': attribute type 10 has an invalid length. [ 163.893275][ T6980] netlink: 55 bytes leftover after parsing attributes in process `syz.0.318'. [ 164.385500][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.319'. [ 164.909023][ T6987] netlink: 'syz.3.320': attribute type 10 has an invalid length. [ 164.968493][ T6980] syz.0.318 (6980) used greatest stack depth: 18664 bytes left [ 165.747888][ T7012] netlink: 'syz.2.330': attribute type 10 has an invalid length. [ 165.869865][ T7019] netlink: 'syz.1.329': attribute type 21 has an invalid length. [ 165.878600][ T7019] netlink: 128 bytes leftover after parsing attributes in process `syz.1.329'. [ 165.889663][ T7019] netlink: 3 bytes leftover after parsing attributes in process `syz.1.329'. [ 166.210062][ T5778] Bluetooth: hci2: unexpected event 0x03 length: 151 > 11 [ 167.331701][ T7043] netlink: 'syz.3.341': attribute type 10 has an invalid length. [ 168.125226][ T7057] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.344'. [ 168.800390][ T7078] netlink: 'syz.2.352': attribute type 10 has an invalid length. [ 169.171146][ T5778] Bluetooth: hci3: unexpected event 0x03 length: 151 > 11 [ 169.592225][ T7091] netlink: 'syz.3.357': attribute type 21 has an invalid length. [ 169.612405][ T7091] netlink: 128 bytes leftover after parsing attributes in process `syz.3.357'. [ 169.623952][ T7091] netlink: 3 bytes leftover after parsing attributes in process `syz.3.357'. [ 170.106138][ T7106] netlink: 'syz.1.364': attribute type 10 has an invalid length. [ 170.360456][ T7111] netlink: 'syz.0.363': attribute type 21 has an invalid length. [ 170.587727][ T7111] netlink: 128 bytes leftover after parsing attributes in process `syz.0.363'. [ 170.666151][ T7111] netlink: 3 bytes leftover after parsing attributes in process `syz.0.363'. [ 171.198450][ T7123] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.368'. [ 172.331480][ T7146] netlink: 'syz.2.375': attribute type 10 has an invalid length. [ 172.660461][ T7154] netlink: 'syz.3.377': attribute type 10 has an invalid length. [ 172.892122][ T7158] netlink: 'syz.0.379': attribute type 10 has an invalid length. [ 173.039968][ T7163] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.381'. [ 173.629493][ T7172] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.385'. [ 173.830873][ T7177] netlink: 'syz.2.387': attribute type 10 has an invalid length. [ 174.080337][ T7179] netlink: 'syz.1.389': attribute type 10 has an invalid length. [ 175.684356][ T7215] netlink: 'syz.0.400': attribute type 10 has an invalid length. [ 175.816434][ T7217] netlink: 'syz.2.401': attribute type 3 has an invalid length. [ 175.858667][ T7217] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.401'. [ 176.083711][ T7219] netlink: 'syz.3.402': attribute type 3 has an invalid length. [ 176.095577][ T7219] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.402'. [ 176.816504][ T7236] netlink: 6 bytes leftover after parsing attributes in process `syz.2.408'. [ 176.916261][ T7239] netlink: 'syz.1.406': attribute type 2 has an invalid length. [ 176.947891][ T7236] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 177.668707][ T7244] netlink: 132 bytes leftover after parsing attributes in process `syz.0.410'. [ 178.078063][ T7244] netlink: 40 bytes leftover after parsing attributes in process `syz.0.410'. [ 178.132162][ T7254] netlink: 'syz.3.412': attribute type 10 has an invalid length. [ 178.639555][ T7269] netlink: 'syz.1.417': attribute type 21 has an invalid length. [ 178.682245][ T7269] wlan1: mtu greater than device maximum [ 178.715317][ T7269] team0: Device wlan1 failed to change mtu [ 179.583105][ T7290] netlink: 'syz.2.423': attribute type 10 has an invalid length. [ 180.086666][ T7295] netlink: 'syz.1.425': attribute type 10 has an invalid length. [ 180.144569][ T7295] netlink: 55 bytes leftover after parsing attributes in process `syz.1.425'. [ 181.857977][ T7323] netlink: 'syz.1.434': attribute type 10 has an invalid length. [ 182.565791][ T7335] netlink: 'syz.1.437': attribute type 10 has an invalid length. [ 182.574837][ T7335] netlink: 55 bytes leftover after parsing attributes in process `syz.1.437'. [ 183.057435][ T7344] FAULT_INJECTION: forcing a failure. [ 183.057435][ T7344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.119817][ T7344] CPU: 1 PID: 7344 Comm: syz.2.442 Not tainted syzkaller #0 [ 183.127471][ T7344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 183.137912][ T7344] Call Trace: [ 183.141598][ T7344] [ 183.144639][ T7344] dump_stack_lvl+0x18c/0x250 [ 183.149549][ T7344] ? show_regs_print_info+0x20/0x20 [ 183.154987][ T7344] ? load_image+0x420/0x420 [ 183.159556][ T7344] ? __might_fault+0xaa/0x120 [ 183.164323][ T7344] ? __lock_acquire+0x7d40/0x7d40 [ 183.169786][ T7344] should_fail_ex+0x39d/0x4d0 [ 183.174882][ T7344] _copy_to_user+0x2f/0xa0 [ 183.179590][ T7344] ethtool_get_features+0x1a6/0x280 [ 183.185306][ T7344] ? ethtool_set_rxfh+0xa10/0xa10 [ 183.190578][ T7344] ? full_name_hash+0x92/0xe0 [ 183.195723][ T7344] dev_ethtool+0x106b/0x18d0 [ 183.200552][ T7344] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 183.207127][ T7344] ? __lock_acquire+0x7d40/0x7d40 [ 183.212496][ T7344] ? __might_fault+0xaa/0x120 [ 183.217402][ T7344] ? full_name_hash+0x92/0xe0 [ 183.222241][ T7344] ? dev_load+0x21/0x1f0 [ 183.226639][ T7344] dev_ioctl+0x392/0x1140 [ 183.231126][ T7344] sock_do_ioctl+0x239/0x310 [ 183.236209][ T7344] ? sock_show_fdinfo+0xb0/0xb0 [ 183.241581][ T7344] sock_ioctl+0x5ba/0x7e0 [ 183.246242][ T7344] ? sock_poll+0x3e0/0x3e0 [ 183.251172][ T7344] ? bpf_lsm_file_ioctl+0x9/0x10 [ 183.256960][ T7344] ? security_file_ioctl+0x80/0xa0 [ 183.263106][ T7344] ? sock_poll+0x3e0/0x3e0 [ 183.267720][ T7344] __se_sys_ioctl+0xfd/0x170 [ 183.272561][ T7344] do_syscall_64+0x55/0xa0 [ 183.277207][ T7344] ? clear_bhb_loop+0x40/0x90 [ 183.282228][ T7344] ? clear_bhb_loop+0x40/0x90 [ 183.286997][ T7344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.293233][ T7344] RIP: 0033:0x7f160e39c819 [ 183.298089][ T7344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.319357][ T7344] RSP: 002b:00007f160f278028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.328109][ T7344] RAX: ffffffffffffffda RBX: 00007f160e615fa0 RCX: 00007f160e39c819 [ 183.337735][ T7344] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 183.346730][ T7344] RBP: 00007f160f278090 R08: 0000000000000000 R09: 0000000000000000 [ 183.355801][ T7344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.364271][ T7344] R13: 00007f160e616038 R14: 00007f160e615fa0 R15: 00007fff4c46e8c8 [ 183.372594][ T7344] [ 183.726787][ T7355] netlink: 'syz.2.446': attribute type 10 has an invalid length. [ 184.080226][ T7364] netlink: 'syz.2.449': attribute type 10 has an invalid length. [ 184.120377][ T7364] netlink: 55 bytes leftover after parsing attributes in process `syz.2.449'. [ 184.558971][ T7371] netlink: 'syz.0.453': attribute type 19 has an invalid length. [ 185.192760][ T7382] netlink: 'syz.2.457': attribute type 10 has an invalid length. [ 185.514196][ T7392] netlink: 'syz.1.462': attribute type 10 has an invalid length. [ 185.543696][ T7392] netlink: 55 bytes leftover after parsing attributes in process `syz.1.462'. [ 186.030056][ T7404] netlink: 10 bytes leftover after parsing attributes in process `syz.1.466'. [ 186.501562][ T7413] batman_adv: The newly added mac address (38:39:35:33:34:37) already exists on: batadv_slave_0 [ 186.533763][ T7413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.587243][ T7415] netlink: 'syz.0.472': attribute type 10 has an invalid length. [ 186.876965][ T7423] netlink: 'syz.2.474': attribute type 10 has an invalid length. [ 186.925609][ T7423] netlink: 55 bytes leftover after parsing attributes in process `syz.2.474'. [ 188.383244][ T7452] netlink: 'syz.0.483': attribute type 21 has an invalid length. [ 188.391820][ T7452] netlink: 128 bytes leftover after parsing attributes in process `syz.0.483'. [ 188.507166][ T7452] netlink: 3 bytes leftover after parsing attributes in process `syz.0.483'. [ 188.741676][ T7458] netlink: 'syz.1.486': attribute type 10 has an invalid length. [ 188.763409][ T7458] netlink: 55 bytes leftover after parsing attributes in process `syz.1.486'. [ 188.926749][ T7463] FAULT_INJECTION: forcing a failure. [ 188.926749][ T7463] name failslab, interval 1, probability 0, space 0, times 0 [ 188.963111][ T7463] CPU: 0 PID: 7463 Comm: syz.3.488 Not tainted syzkaller #0 [ 188.971459][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 188.983063][ T7463] Call Trace: [ 188.986942][ T7463] [ 188.990119][ T7463] dump_stack_lvl+0x18c/0x250 [ 188.995233][ T7463] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 189.001466][ T7463] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.008158][ T7463] ? show_regs_print_info+0x20/0x20 [ 189.014076][ T7463] ? load_image+0x420/0x420 [ 189.019888][ T7463] should_fail_ex+0x39d/0x4d0 [ 189.025239][ T7463] should_failslab+0x9/0x20 [ 189.030714][ T7463] slab_pre_alloc_hook+0x59/0x310 [ 189.036363][ T7463] ? nf_ct_ext_add+0x1ab/0x440 [ 189.041575][ T7463] ? nf_ct_ext_add+0x1ab/0x440 [ 189.046952][ T7463] __kmem_cache_alloc_node+0x53/0x250 [ 189.053398][ T7463] ? nf_ct_ext_add+0x1ab/0x440 [ 189.059670][ T7463] __kmalloc_node_track_caller+0xa2/0x230 [ 189.064851][ T7467] batman_adv: The newly added mac address (38:39:35:33:34:37) already exists on: batadv_slave_0 [ 189.066423][ T7463] krealloc+0x86/0x120 [ 189.084120][ T7463] nf_ct_ext_add+0x1ab/0x440 [ 189.089583][ T7463] init_conntrack+0x69c/0xf10 [ 189.094651][ T7463] ? early_drop+0x7f0/0x7f0 [ 189.099680][ T7463] ? nf_conntrack_find_get+0x650/0x650 [ 189.106720][ T7463] ? __local_bh_enable_ip+0x13a/0x1c0 [ 189.112855][ T7463] ? __siphash_unaligned+0x22e/0x3a0 [ 189.118938][ T7463] nf_conntrack_in+0xc06/0x15c0 [ 189.124359][ T7463] ? nf_ct_pernet+0x270/0x270 [ 189.129561][ T7463] ? ipt_do_table+0x2c1/0x15e0 [ 189.134655][ T7463] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 189.140544][ T7463] ? ipv4_conntrack_local+0x123/0x200 [ 189.146961][ T7463] ? ipv4_conntrack_in+0x20/0x20 [ 189.153111][ T7463] nf_hook_slow+0xbd/0x200 [ 189.157772][ T7463] ? nf_hook+0x390/0x390 [ 189.162309][ T7463] nf_hook+0x228/0x390 [ 189.167059][ T7463] ? nf_hook+0xa2/0x390 [ 189.171553][ T7463] ? __ip_local_out+0x5f0/0x5f0 [ 189.177705][ T7463] ? nf_hook+0x390/0x390 [ 189.182794][ T7463] ? __lock_acquire+0x7d40/0x7d40 [ 189.188335][ T7463] __ip_local_out+0x4db/0x5f0 [ 189.193131][ T7463] ? nf_hook+0x390/0x390 [ 189.197836][ T7463] ? __ip_queue_xmit+0x5d/0x1950 [ 189.202930][ T7463] __ip_queue_xmit+0xf7c/0x1950 [ 189.207823][ T7463] ? __ip_queue_xmit+0x5d/0x1950 [ 189.213260][ T7463] __tcp_transmit_skb+0x1d6b/0x33f0 [ 189.218606][ T7463] ? __tcp_get_metrics+0x7ec/0x870 [ 189.223999][ T7463] ? __tcp_send_ack+0x5a0/0x5a0 [ 189.229413][ T7463] ? tcp_fastopen_cookie_check+0x26d/0x3c0 [ 189.236088][ T7463] tcp_connect+0x327a/0x5190 [ 189.241162][ T7463] ? tcp_options_write+0xc70/0xc70 [ 189.247221][ T7463] ? get_random_u16+0x16e/0x970 [ 189.252427][ T7463] ? get_random_u16+0x513/0x970 [ 189.258129][ T7463] ? __asan_memset+0x22/0x40 [ 189.263032][ T7463] ? tcp_fastopen_active_should_disable+0x240/0x240 [ 189.269846][ T7463] ? sk_setup_caps+0x7dc/0xa10 [ 189.275385][ T7463] ? dst_release+0x72/0x1a0 [ 189.280207][ T7463] tcp_v4_connect+0xfee/0x18e0 [ 189.285384][ T7463] ? __stack_depot_save+0x1f/0x630 [ 189.291477][ T7463] ? tcp_twsk_unique+0x990/0x990 [ 189.296501][ T7463] __inet_stream_connect+0x254/0xdc0 [ 189.302999][ T7463] ? inet_dgram_connect+0x360/0x360 [ 189.308455][ T7463] tcp_sendmsg_fastopen+0x3a7/0x5d0 [ 189.314021][ T7463] tcp_sendmsg_locked+0x4621/0x4bd0 [ 189.319938][ T7463] ? verify_lock_unused+0x140/0x140 [ 189.325740][ T7463] ? perf_trace_lock_acquire+0x34f/0x410 [ 189.331793][ T7463] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 189.339225][ T7463] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 189.346344][ T7463] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 189.352580][ T7463] ? __might_sleep+0xe0/0xe0 [ 189.357513][ T7463] ? mark_lock+0x94/0x320 [ 189.362358][ T7463] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 189.368746][ T7463] ? lock_chain_count+0x20/0x20 [ 189.373902][ T7463] ? tcp_set_state+0x680/0x680 [ 189.379207][ T7463] tcp_sendmsg+0x2f/0x50 [ 189.384041][ T7463] ? inet_send_prepare+0x260/0x260 [ 189.389905][ T7463] ____sys_sendmsg+0x5ba/0x960 [ 189.395172][ T7463] ? __lock_acquire+0x7d40/0x7d40 [ 189.400468][ T7463] ? __asan_memset+0x22/0x40 [ 189.405376][ T7463] ? __sys_sendmsg_sock+0x30/0x30 [ 189.410783][ T7463] ? __import_iovec+0x3fa/0x850 [ 189.416287][ T7463] ? import_iovec+0x73/0xa0 [ 189.421100][ T7463] ___sys_sendmsg+0x2a6/0x360 [ 189.425894][ T7463] ? get_pid_task+0x20/0x1e0 [ 189.431132][ T7463] ? __sys_sendmsg+0x2a0/0x2a0 [ 189.436051][ T7463] ? __lock_acquire+0x7d40/0x7d40 [ 189.441410][ T7463] __se_sys_sendmsg+0x1c2/0x2b0 [ 189.446395][ T7463] ? __x64_sys_sendmsg+0x80/0x80 [ 189.451593][ T7463] ? lockdep_hardirqs_on+0x98/0x150 [ 189.457263][ T7463] do_syscall_64+0x55/0xa0 [ 189.461900][ T7463] ? clear_bhb_loop+0x40/0x90 [ 189.466810][ T7463] ? clear_bhb_loop+0x40/0x90 [ 189.472255][ T7463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.478827][ T7463] RIP: 0033:0x7fe6f1f9c819 [ 189.483457][ T7463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.504253][ T7463] RSP: 002b:00007fe6f2eb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.512980][ T7463] RAX: ffffffffffffffda RBX: 00007fe6f2215fa0 RCX: 00007fe6f1f9c819 [ 189.521805][ T7463] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000007 [ 189.530633][ T7463] RBP: 00007fe6f2eb1090 R08: 0000000000000000 R09: 0000000000000000 [ 189.539073][ T7463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.547567][ T7463] R13: 00007fe6f2216038 R14: 00007fe6f2215fa0 R15: 00007ffff19be3a8 [ 189.555830][ T7463] [ 189.593131][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.641876][ T7467] batman_adv: The newly added mac address (38:39:35:33:34:37) already exists on: batadv_slave_0 [ 189.690357][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.233397][ T7484] netlink: 'syz.1.493': attribute type 19 has an invalid length. [ 191.719415][ T7499] netlink: 'syz.2.495': attribute type 21 has an invalid length. [ 191.774446][ T7499] netlink: 128 bytes leftover after parsing attributes in process `syz.2.495'. [ 191.853392][ T7499] netlink: 3 bytes leftover after parsing attributes in process `syz.2.495'. [ 191.931970][ T7504] netlink: 'syz.0.497': attribute type 10 has an invalid length. [ 191.965772][ T7504] netlink: 55 bytes leftover after parsing attributes in process `syz.0.497'. [ 191.984531][ T7510] syz.3.498[7510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.984754][ T7510] syz.3.498[7510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.289699][ T7533] netlink: 'syz.1.506': attribute type 10 has an invalid length. [ 193.419244][ T7535] netlink: 'syz.3.507': attribute type 19 has an invalid length. [ 194.277101][ T7537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.286085][ T7537] IPv6: NLM_F_CREATE should be set when creating new route [ 194.294078][ T7537] IPv6: NLM_F_CREATE should be set when creating new route [ 194.303480][ T7537] IPv6: NLM_F_CREATE should be set when creating new route [ 194.344549][ T7541] netlink: 'syz.1.509': attribute type 21 has an invalid length. [ 195.060865][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.060974][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.110754][ T7541] netlink: 128 bytes leftover after parsing attributes in process `syz.1.509'. [ 195.165867][ T7541] netlink: 3 bytes leftover after parsing attributes in process `syz.1.509'. [ 195.361819][ T7556] netlink: 'syz.1.513': attribute type 10 has an invalid length. [ 195.382533][ T7556] netlink: 55 bytes leftover after parsing attributes in process `syz.1.513'. [ 195.738894][ T7568] netlink: 'syz.1.517': attribute type 10 has an invalid length. [ 195.909020][ T7572] netlink: 'syz.0.527': attribute type 10 has an invalid length. [ 196.140358][ T7578] netlink: 'syz.0.521': attribute type 10 has an invalid length. [ 196.691922][ T7584] netlink: 'syz.2.522': attribute type 21 has an invalid length. [ 196.762956][ T7584] netlink: 128 bytes leftover after parsing attributes in process `syz.2.522'. [ 196.918425][ T7584] netlink: 3 bytes leftover after parsing attributes in process `syz.2.522'. [ 197.063845][ T7590] netlink: 21 bytes leftover after parsing attributes in process `syz.3.525'. [ 197.074904][ T7590] ksmbd: Unknown IPC event: 0, ignore. [ 197.578093][ T7595] netlink: 'syz.3.526': attribute type 10 has an invalid length. [ 197.626555][ T7595] netlink: 55 bytes leftover after parsing attributes in process `syz.3.526'. [ 198.233303][ T7605] netlink: 'syz.1.531': attribute type 10 has an invalid length. [ 198.345089][ T7610] netlink: 'syz.2.533': attribute type 10 has an invalid length. [ 198.457802][ T5778] Bluetooth: hci3: unexpected event 0x03 length: 151 > 11 [ 198.657874][ T7619] FAULT_INJECTION: forcing a failure. [ 198.657874][ T7619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.735852][ T7619] CPU: 1 PID: 7619 Comm: syz.2.536 Not tainted syzkaller #0 [ 198.744115][ T7619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 198.755195][ T7619] Call Trace: [ 198.759055][ T7619] [ 198.762255][ T7619] dump_stack_lvl+0x18c/0x250 [ 198.767170][ T7619] ? show_regs_print_info+0x20/0x20 [ 198.772797][ T7619] ? load_image+0x420/0x420 [ 198.778165][ T7619] ? __might_fault+0xaa/0x120 [ 198.783649][ T7619] ? __lock_acquire+0x7d40/0x7d40 [ 198.790060][ T7619] should_fail_ex+0x39d/0x4d0 [ 198.795260][ T7619] _copy_from_user+0x2f/0xe0 [ 198.800487][ T7619] __sys_bpf+0x23e/0x890 [ 198.805065][ T7619] ? bpf_link_show_fdinfo+0x390/0x390 [ 198.811552][ T7619] ? lock_chain_count+0x20/0x20 [ 198.817426][ T7619] __x64_sys_bpf+0x7c/0x90 [ 198.823190][ T7619] do_syscall_64+0x55/0xa0 [ 198.827826][ T7619] ? clear_bhb_loop+0x40/0x90 [ 198.833257][ T7619] ? clear_bhb_loop+0x40/0x90 [ 198.838449][ T7619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.845659][ T7619] RIP: 0033:0x7f160e39c819 [ 198.850589][ T7619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.873362][ T7619] RSP: 002b:00007f160f236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.884837][ T7619] RAX: ffffffffffffffda RBX: 00007f160e616180 RCX: 00007f160e39c819 [ 198.894023][ T7619] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 198.905969][ T7619] RBP: 00007f160f236090 R08: 0000000000000000 R09: 0000000000000000 [ 198.915867][ T7619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.925412][ T7619] R13: 00007f160e616218 R14: 00007f160e616180 R15: 00007fff4c46e8c8 [ 198.935961][ T7619] [ 199.327749][ T7625] netlink: 'syz.1.537': attribute type 21 has an invalid length. [ 199.374114][ T7625] netlink: 128 bytes leftover after parsing attributes in process `syz.1.537'. [ 199.434813][ T7625] netlink: 3 bytes leftover after parsing attributes in process `syz.1.537'. [ 199.646230][ T7634] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 199.678513][ T7634] dvmrp1: persist disabled [ 199.878987][ T7641] netlink: 'syz.3.543': attribute type 10 has an invalid length. [ 199.910375][ T7639] netlink: 'syz.0.542': attribute type 10 has an invalid length. [ 199.920815][ T7639] netlink: 55 bytes leftover after parsing attributes in process `syz.0.542'. [ 200.520005][ T7646] netlink: 'syz.2.544': attribute type 10 has an invalid length. [ 200.850332][ T5778] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11 [ 201.414585][ T7666] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.547'. [ 201.750872][ T7659] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.547'. [ 201.856935][ T7659] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 201.883093][ T7659] CPU: 0 PID: 7659 Comm: syz.3.547 Not tainted syzkaller #0 [ 201.890631][ T7659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 201.901431][ T7659] Call Trace: [ 201.904871][ T7659] [ 201.908538][ T7659] dump_stack_lvl+0x18c/0x250 [ 201.913455][ T7659] ? show_regs_print_info+0x20/0x20 [ 201.918904][ T7659] ? load_image+0x420/0x420 [ 201.923632][ T7659] sysfs_warn_dup+0x8e/0xa0 [ 201.928428][ T7659] sysfs_do_create_link_sd+0xc0/0x110 [ 201.934270][ T7659] device_add_class_symlinks+0x1cf/0x240 [ 201.940640][ T7659] device_add+0x507/0xc20 [ 201.945617][ T7659] wiphy_register+0x1dad/0x2ae0 [ 201.951172][ T7659] ? cfg80211_event_work+0x40/0x40 [ 201.957741][ T7659] ? minstrel_ht_alloc+0x88a/0x990 [ 201.963662][ T7659] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 201.970581][ T7659] ieee80211_register_hw+0x3464/0x4250 [ 201.976414][ T7659] ? ieee80211_tasklet_handler+0x20/0x20 [ 201.982085][ T7659] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 201.988355][ T7659] ? __debug_object_init+0xec/0x450 [ 201.994035][ T7659] ? __asan_memset+0x22/0x40 [ 201.998828][ T7659] ? __hrtimer_init+0x186/0x270 [ 202.004246][ T7659] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 202.010323][ T7659] ? mac80211_hwsim_free+0x220/0x220 [ 202.015636][ T7659] ? rcu_is_watching+0x15/0xb0 [ 202.020549][ T7659] ? kstrndup+0xbd/0x140 [ 202.025106][ T7659] hwsim_new_radio_nl+0xdc9/0x1a90 [ 202.030278][ T7659] ? __nla_validate+0x50/0x50 [ 202.035098][ T7659] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 202.041725][ T7659] ? __nla_parse+0x40/0x50 [ 202.046184][ T7659] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 202.052841][ T7659] genl_family_rcv_msg_doit+0x211/0x310 [ 202.058722][ T7659] ? end_current_label_crit_section+0x170/0x170 [ 202.065642][ T7659] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 202.073445][ T7659] ? bpf_lsm_capable+0x9/0x10 [ 202.078509][ T7659] ? security_capable+0x89/0xb0 [ 202.084588][ T7659] genl_rcv_msg+0x619/0x7a0 [ 202.090090][ T7659] ? genl_bind+0x360/0x360 [ 202.095796][ T7659] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 202.103493][ T7659] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 202.111637][ T7659] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 202.119805][ T7659] netlink_rcv_skb+0x241/0x4d0 [ 202.126448][ T7659] ? genl_bind+0x360/0x360 [ 202.132015][ T7659] ? netlink_ack+0x1180/0x1180 [ 202.137920][ T7659] ? __lock_acquire+0x7d40/0x7d40 [ 202.143718][ T7659] ? net_generic+0x1e/0x240 [ 202.148624][ T7659] ? down_read+0x1ac/0x2e0 [ 202.153320][ T7659] genl_rcv+0x28/0x40 [ 202.157914][ T7659] netlink_unicast+0x751/0x8d0 [ 202.163369][ T7659] netlink_sendmsg+0x8d0/0xbf0 [ 202.168824][ T7659] ? netlink_getsockopt+0x590/0x590 [ 202.175399][ T7659] ? aa_sock_msg_perm+0x94/0x150 [ 202.180870][ T7659] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 202.187714][ T7659] ? security_socket_sendmsg+0x80/0xa0 [ 202.193667][ T7659] ? netlink_getsockopt+0x590/0x590 [ 202.200713][ T7659] ____sys_sendmsg+0x5ba/0x960 [ 202.205916][ T7659] ? __asan_memset+0x22/0x40 [ 202.211890][ T7659] ? __sys_sendmsg_sock+0x30/0x30 [ 202.217156][ T7659] ? __import_iovec+0x5f2/0x850 [ 202.222584][ T7659] ? import_iovec+0x73/0xa0 [ 202.227704][ T7659] ___sys_sendmsg+0x2a6/0x360 [ 202.232899][ T7659] ? __sys_sendmsg+0x2a0/0x2a0 [ 202.238528][ T7659] ? trace_call_bpf+0xc3/0x6c0 [ 202.244239][ T7659] __se_sys_sendmsg+0x1c2/0x2b0 [ 202.249338][ T7659] ? __x64_sys_sendmsg+0x80/0x80 [ 202.254505][ T7659] ? lockdep_hardirqs_on+0x98/0x150 [ 202.261412][ T7659] do_syscall_64+0x55/0xa0 [ 202.265941][ T7659] ? clear_bhb_loop+0x40/0x90 [ 202.270750][ T7659] ? clear_bhb_loop+0x40/0x90 [ 202.276007][ T7659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.282598][ T7659] RIP: 0033:0x7fe6f1f9c819 [ 202.287831][ T7659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.308932][ T7659] RSP: 002b:00007fe6f2e90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.318677][ T7659] RAX: ffffffffffffffda RBX: 00007fe6f2216090 RCX: 00007fe6f1f9c819 [ 202.327479][ T7659] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 202.336370][ T7659] RBP: 00007fe6f2032c91 R08: 0000000000000000 R09: 0000000000000000 [ 202.345087][ T7659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.353651][ T7659] R13: 00007fe6f2216128 R14: 00007fe6f2216090 R15: 00007ffff19be3a8 [ 202.362162][ T7659] [ 202.435531][ T7677] netlink: 'syz.2.555': attribute type 10 has an invalid length. [ 202.445313][ T7680] netlink: 'syz.0.554': attribute type 21 has an invalid length. [ 202.488420][ T7680] netlink: 128 bytes leftover after parsing attributes in process `syz.0.554'. [ 202.519513][ T7680] netlink: 3 bytes leftover after parsing attributes in process `syz.0.554'. [ 202.863712][ T7684] netlink: 'syz.3.557': attribute type 10 has an invalid length. [ 202.903320][ T7684] netlink: 55 bytes leftover after parsing attributes in process `syz.3.557'. [ 202.999032][ T7688] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.558'. [ 203.048804][ T7688] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 203.107488][ T7688] netlink: 172 bytes leftover after parsing attributes in process `syz.1.558'. [ 204.293889][ T7717] netlink: 'syz.3.567': attribute type 10 has an invalid length. [ 204.605034][ T7723] netlink: 'syz.0.568': attribute type 21 has an invalid length. [ 204.659896][ T7723] netlink: 128 bytes leftover after parsing attributes in process `syz.0.568'. [ 204.763467][ T7723] netlink: 3 bytes leftover after parsing attributes in process `syz.0.568'. [ 204.807312][ T7729] netlink: 'syz.3.572': attribute type 10 has an invalid length. [ 204.833689][ T7729] netlink: 55 bytes leftover after parsing attributes in process `syz.3.572'. [ 205.049554][ T7733] netlink: 'syz.1.573': attribute type 10 has an invalid length. [ 206.164281][ T7756] netlink: 'syz.2.580': attribute type 10 has an invalid length. [ 206.505165][ T7761] FAULT_INJECTION: forcing a failure. [ 206.505165][ T7761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.548657][ T7764] netlink: 'syz.1.583': attribute type 10 has an invalid length. [ 206.552968][ T7761] CPU: 1 PID: 7761 Comm: syz.2.582 Not tainted syzkaller #0 [ 206.566993][ T7761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 206.578923][ T7761] Call Trace: [ 206.582781][ T7761] [ 206.586409][ T7761] dump_stack_lvl+0x18c/0x250 [ 206.591804][ T7761] ? show_regs_print_info+0x20/0x20 [ 206.598998][ T7761] ? load_image+0x420/0x420 [ 206.604982][ T7761] ? __might_fault+0xaa/0x120 [ 206.611510][ T7761] ? __lock_acquire+0x7d40/0x7d40 [ 206.618341][ T7761] should_fail_ex+0x39d/0x4d0 [ 206.625983][ T7761] _copy_from_user+0x2f/0xe0 [ 206.633068][ T7761] get_user_ifreq+0x6b/0x180 [ 206.639304][ T7761] sock_ioctl+0x6f1/0x7e0 [ 206.645005][ T7761] ? sock_poll+0x3e0/0x3e0 [ 206.650845][ T7761] ? bpf_lsm_file_ioctl+0x9/0x10 [ 206.657422][ T7761] ? security_file_ioctl+0x80/0xa0 [ 206.664515][ T7761] ? sock_poll+0x3e0/0x3e0 [ 206.671128][ T7761] __se_sys_ioctl+0xfd/0x170 [ 206.678122][ T7761] do_syscall_64+0x55/0xa0 [ 206.682868][ T7761] ? clear_bhb_loop+0x40/0x90 [ 206.688878][ T7761] ? clear_bhb_loop+0x40/0x90 [ 206.694154][ T7761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.701165][ T7761] RIP: 0033:0x7f160e39c819 [ 206.708100][ T7761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.733491][ T7761] RSP: 002b:00007f160f278028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.745357][ T7761] RAX: ffffffffffffffda RBX: 00007f160e615fa0 RCX: 00007f160e39c819 [ 206.755837][ T7761] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 000000000000000a [ 206.766073][ T7761] RBP: 00007f160f278090 R08: 0000000000000000 R09: 0000000000000000 [ 206.775003][ T7761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.785825][ T7761] R13: 00007f160e616038 R14: 00007f160e615fa0 R15: 00007fff4c46e8c8 [ 206.795938][ T7761] [ 206.923038][ T5083] Bluetooth: hci0: command 0x0406 tx timeout [ 206.935164][ T5083] Bluetooth: hci2: command 0x0406 tx timeout [ 206.939632][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 206.942004][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 207.303868][ T7776] netlink: 'syz.1.587': attribute type 10 has an invalid length. [ 207.323599][ T7776] __nla_validate_parse: 1 callbacks suppressed [ 207.323624][ T7776] netlink: 55 bytes leftover after parsing attributes in process `syz.1.587'. [ 207.809487][ T7788] netlink: 'syz.1.591': attribute type 10 has an invalid length. [ 207.852388][ T5780] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11 [ 208.143692][ T7790] netlink: 'syz.0.593': attribute type 6 has an invalid length. [ 208.181688][ T7790] netlink: 164 bytes leftover after parsing attributes in process `syz.0.593'. [ 208.265100][ T7794] netlink: 'syz.3.594': attribute type 10 has an invalid length. [ 208.599526][ T7794] team0: Device hsr_slave_0 failed to register rx_handler [ 208.808115][ T7796] netlink: 'syz.2.595': attribute type 10 has an invalid length. [ 208.868347][ T7803] netlink: 'syz.1.597': attribute type 21 has an invalid length. [ 208.903639][ T7803] netlink: 128 bytes leftover after parsing attributes in process `syz.1.597'. [ 208.979360][ T7794] syz.3.594 (7794) used greatest stack depth: 18600 bytes left [ 209.005428][ T7803] netlink: 3 bytes leftover after parsing attributes in process `syz.1.597'. [ 209.278245][ T7811] netlink: 'syz.3.598': attribute type 10 has an invalid length. [ 209.314100][ T7811] netlink: 55 bytes leftover after parsing attributes in process `syz.3.598'. [ 209.605069][ T5780] Bluetooth: hci0: unexpected event 0x03 length: 151 > 11 [ 210.183322][ T7827] validate_nla: 1 callbacks suppressed [ 210.183340][ T7827] netlink: 'syz.1.607': attribute type 10 has an invalid length. [ 210.519907][ T7843] netlink: 'syz.0.610': attribute type 21 has an invalid length. [ 210.550446][ T7843] netlink: 128 bytes leftover after parsing attributes in process `syz.0.610'. [ 210.591416][ T5780] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11 [ 210.648127][ T7843] netlink: 3 bytes leftover after parsing attributes in process `syz.0.610'. [ 210.962750][ T7853] netlink: 'syz.2.615': attribute type 10 has an invalid length. [ 210.973559][ T7852] netlink: 'syz.1.614': attribute type 10 has an invalid length. [ 210.981852][ T7852] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.614'. [ 211.182041][ T7857] netlink: 'syz.1.616': attribute type 2 has an invalid length. [ 211.213854][ T7857] netlink: 14 bytes leftover after parsing attributes in process `syz.1.616'. [ 211.293785][ T7859] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 211.313889][ T7859] netlink: 55 bytes leftover after parsing attributes in process `syz.0.617'. [ 212.070679][ T7871] netlink: 'syz.2.620': attribute type 10 has an invalid length. [ 212.301459][ T5780] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11 [ 214.502066][ T7883] netlink: 'syz.2.625': attribute type 21 has an invalid length. [ 214.517526][ T7883] netlink: 128 bytes leftover after parsing attributes in process `syz.2.625'. [ 214.527942][ T7883] netlink: 3 bytes leftover after parsing attributes in process `syz.2.625'. [ 214.672727][ T7893] netlink: 'syz.2.626': attribute type 10 has an invalid length. [ 214.933629][ T7901] netlink: 'syz.2.630': attribute type 10 has an invalid length. [ 214.963473][ T7901] netlink: 55 bytes leftover after parsing attributes in process `syz.2.630'. [ 215.141851][ T5780] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11 [ 215.417912][ T7910] validate_nla: 1 callbacks suppressed [ 215.418109][ T7910] netlink: 'syz.1.634': attribute type 21 has an invalid length. [ 215.452695][ T7910] netlink: 128 bytes leftover after parsing attributes in process `syz.1.634'. [ 215.482491][ T7910] netlink: 3 bytes leftover after parsing attributes in process `syz.1.634'. [ 215.863791][ T7923] netlink: 'syz.1.638': attribute type 10 has an invalid length. [ 215.919187][ T7919] netlink: 'syz.2.637': attribute type 6 has an invalid length. [ 215.936833][ T7919] netlink: 164 bytes leftover after parsing attributes in process `syz.2.637'. [ 216.210424][ T7928] FAULT_INJECTION: forcing a failure. [ 216.210424][ T7928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.344804][ T7928] CPU: 1 PID: 7928 Comm: syz.3.640 Not tainted syzkaller #0 [ 216.352565][ T7928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 216.365031][ T7928] Call Trace: [ 216.368904][ T7928] [ 216.372581][ T7928] dump_stack_lvl+0x18c/0x250 [ 216.378112][ T7928] ? show_regs_print_info+0x20/0x20 [ 216.383911][ T7928] ? load_image+0x420/0x420 [ 216.389094][ T7928] ? __might_fault+0xaa/0x120 [ 216.394664][ T7928] ? __lock_acquire+0x7d40/0x7d40 [ 216.400728][ T7928] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 216.407854][ T7928] should_fail_ex+0x39d/0x4d0 [ 216.413657][ T7928] _copy_from_user+0x2f/0xe0 [ 216.419367][ T7928] __sys_bpf+0x23e/0x890 [ 216.424121][ T7928] ? bpf_link_show_fdinfo+0x390/0x390 [ 216.429740][ T7928] __x64_sys_bpf+0x7c/0x90 [ 216.434206][ T7928] do_syscall_64+0x55/0xa0 [ 216.438938][ T7928] ? clear_bhb_loop+0x40/0x90 [ 216.443774][ T7928] ? clear_bhb_loop+0x40/0x90 [ 216.448760][ T7928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.454889][ T7928] RIP: 0033:0x7fe6f1f9c819 [ 216.459446][ T7928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.481643][ T7928] RSP: 002b:00007fe6f2eb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 216.490807][ T7928] RAX: ffffffffffffffda RBX: 00007fe6f2215fa0 RCX: 00007fe6f1f9c819 [ 216.499169][ T7928] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 216.507966][ T7928] RBP: 00007fe6f2eb1090 R08: 0000000000000000 R09: 0000000000000000 [ 216.516586][ T7928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.525836][ T7928] R13: 00007fe6f2216038 R14: 00007fe6f2215fa0 R15: 00007ffff19be3a8 [ 216.535903][ T7928] [ 216.986082][ T7934] netlink: 'syz.0.642': attribute type 10 has an invalid length. [ 217.989133][ T7946] netlink: 'syz.1.647': attribute type 21 has an invalid length. [ 218.002562][ T7946] netlink: 128 bytes leftover after parsing attributes in process `syz.1.647'. [ 218.020217][ T7946] netlink: 3 bytes leftover after parsing attributes in process `syz.1.647'. [ 218.561546][ T7956] netlink: 'syz.1.649': attribute type 10 has an invalid length. [ 219.399673][ T7968] netlink: 'syz.0.653': attribute type 10 has an invalid length. [ 220.027145][ T7986] netlink: 'syz.0.657': attribute type 21 has an invalid length. [ 220.077604][ T7986] netlink: 128 bytes leftover after parsing attributes in process `syz.0.657'. [ 220.269655][ T7986] netlink: 3 bytes leftover after parsing attributes in process `syz.0.657'. [ 221.342522][ T8006] netlink: 'syz.2.665': attribute type 10 has an invalid length. [ 221.588571][ T8014] netlink: 'syz.2.668': attribute type 21 has an invalid length. [ 222.621738][ T8031] netlink: 'syz.3.672': attribute type 10 has an invalid length. [ 222.669604][ T8031] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.696470][ T8031] bond0: (slave team0): Enslaving as an active interface with an up link [ 223.050254][ T8035] netlink: 'syz.0.673': attribute type 21 has an invalid length. [ 223.077437][ T8035] netlink: 128 bytes leftover after parsing attributes in process `syz.0.673'. [ 223.159157][ T8035] netlink: 3 bytes leftover after parsing attributes in process `syz.0.673'. [ 223.217954][ T8040] netlink: 'syz.2.676': attribute type 10 has an invalid length. [ 223.291579][ T8044] netlink: 'syz.3.677': attribute type 21 has an invalid length. [ 223.308634][ T8046] netlink: 'syz.3.677': attribute type 10 has an invalid length. [ 223.604767][ T8052] netlink: 'syz.2.679': attribute type 10 has an invalid length. [ 223.734616][ T8056] netlink: 'syz.3.681': attribute type 58 has an invalid length. [ 223.778123][ T8056] netlink: 152 bytes leftover after parsing attributes in process `syz.3.681'. [ 223.863089][ T8060] syz.0.682 uses obsolete (PF_INET,SOCK_PACKET) [ 224.950905][ T8074] netlink: 'syz.3.686': attribute type 39 has an invalid length. [ 225.861673][ T8078] netlink: 128 bytes leftover after parsing attributes in process `syz.0.687'. [ 225.872016][ T8078] netlink: 3 bytes leftover after parsing attributes in process `syz.0.687'. [ 226.275158][ T5780] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 229.852735][ T8124] validate_nla: 3 callbacks suppressed [ 229.852754][ T8124] netlink: 'syz.1.699': attribute type 10 has an invalid length. [ 229.916520][ T8125] netlink: 'syz.0.701': attribute type 9 has an invalid length. [ 229.938060][ T8125] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.701'. [ 229.958734][ T8127] netlink: 'syz.3.698': attribute type 21 has an invalid length. [ 229.969309][ T8127] netlink: 128 bytes leftover after parsing attributes in process `syz.3.698'. [ 229.985840][ T8127] netlink: 3 bytes leftover after parsing attributes in process `syz.3.698'. [ 230.013570][ T8126] netlink: 'syz.2.700': attribute type 10 has an invalid length. [ 231.674865][ T8141] netlink: 'syz.2.706': attribute type 21 has an invalid length. [ 231.729993][ T8141] netlink: 'syz.2.706': attribute type 1 has an invalid length. [ 231.843069][ T8141] netlink: 144 bytes leftover after parsing attributes in process `syz.2.706'. [ 232.470669][ T8152] netlink: 60 bytes leftover after parsing attributes in process `syz.0.710'. [ 232.496133][ T8152] netlink: 60 bytes leftover after parsing attributes in process `syz.0.710'. [ 232.830959][ T8160] netlink: 'syz.0.711': attribute type 10 has an invalid length. [ 232.914098][ T8160] hsr0: entered promiscuous mode [ 232.957566][ T8160] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 233.024898][ T8160] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 233.051057][ T8160] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 233.083852][ T8160] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 233.095574][ T8162] netlink: 'syz.3.712': attribute type 10 has an invalid length. [ 234.153731][ T8188] netlink: 'syz.0.717': attribute type 10 has an invalid length. [ 234.169344][ T8188] netlink: 40 bytes leftover after parsing attributes in process `syz.0.717'. [ 234.181597][ T8188] dummy0: entered promiscuous mode [ 234.199434][ T8188] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 234.249037][ T8192] netlink: 'syz.3.719': attribute type 10 has an invalid length. [ 234.891856][ T8207] netlink: 2 bytes leftover after parsing attributes in process `syz.3.725'. [ 234.913568][ T8207] batadv_slave_1: entered promiscuous mode [ 234.991246][ T8207] validate_nla: 2 callbacks suppressed [ 234.991289][ T8207] netlink: 'syz.3.725': attribute type 21 has an invalid length. [ 235.018814][ T8207] netlink: 'syz.3.725': attribute type 1 has an invalid length. [ 235.073187][ T8207] netlink: 144 bytes leftover after parsing attributes in process `syz.3.725'. [ 235.124641][ T8211] syzkaller0: entered allmulticast mode [ 235.524518][ T8220] netlink: 'syz.3.730': attribute type 10 has an invalid length. [ 235.923956][ T8229] netlink: 'syz.3.735': attribute type 10 has an invalid length. [ 235.945604][ T8230] netlink: 'syz.0.734': attribute type 10 has an invalid length. [ 236.518287][ T8247] netlink: 152 bytes leftover after parsing attributes in process `syz.1.743'. [ 236.531696][ T8247] netlink: 6 bytes leftover after parsing attributes in process `syz.1.743'. [ 237.400200][ T8259] netlink: 'syz.2.747': attribute type 10 has an invalid length. [ 237.800927][ T8266] netlink: 'syz.1.749': attribute type 10 has an invalid length. [ 238.348178][ T8282] netlink: 'syz.3.756': attribute type 10 has an invalid length. [ 239.628308][ T8316] netlink: 'syz.3.769': attribute type 10 has an invalid length. [ 239.656156][ T8313] netlink: 132 bytes leftover after parsing attributes in process `syz.1.768'. [ 240.099147][ T8326] netlink: 'syz.0.772': attribute type 10 has an invalid length. [ 240.114382][ T8325] FAULT_INJECTION: forcing a failure. [ 240.114382][ T8325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.134259][ T8325] CPU: 1 PID: 8325 Comm: syz.2.774 Not tainted syzkaller #0 [ 240.141723][ T8325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 240.152349][ T8325] Call Trace: [ 240.156303][ T8325] [ 240.159379][ T8325] dump_stack_lvl+0x18c/0x250 [ 240.164475][ T8325] ? show_regs_print_info+0x20/0x20 [ 240.170084][ T8325] ? load_image+0x420/0x420 [ 240.174697][ T8325] ? __lock_acquire+0x7d40/0x7d40 [ 240.180022][ T8325] ? snprintf+0xe9/0x140 [ 240.184311][ T8325] should_fail_ex+0x39d/0x4d0 [ 240.189038][ T8325] _copy_to_user+0x2f/0xa0 [ 240.193754][ T8325] simple_read_from_buffer+0xe7/0x150 [ 240.199333][ T8325] proc_fail_nth_read+0x1e8/0x260 [ 240.204670][ T8325] ? proc_fault_inject_write+0x360/0x360 [ 240.210804][ T8325] ? vfs_read+0x275/0x970 [ 240.215382][ T8325] ? proc_fault_inject_write+0x360/0x360 [ 240.221442][ T8325] vfs_read+0x28b/0x970 [ 240.226625][ T8325] ? kernel_read+0x1e0/0x1e0 [ 240.231712][ T8325] ? __fget_files+0x28/0x4b0 [ 240.236441][ T8325] ? __fget_files+0x28/0x4b0 [ 240.241529][ T8325] ? __fget_files+0x43d/0x4b0 [ 240.246524][ T8325] ? __fdget_pos+0x2a3/0x330 [ 240.251537][ T8325] ? ksys_read+0x75/0x260 [ 240.256046][ T8325] ksys_read+0x150/0x260 [ 240.260642][ T8325] ? vfs_write+0x990/0x990 [ 240.265465][ T8325] do_syscall_64+0x55/0xa0 [ 240.270126][ T8325] ? clear_bhb_loop+0x40/0x90 [ 240.275277][ T8325] ? clear_bhb_loop+0x40/0x90 [ 240.280426][ T8325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.286542][ T8325] RIP: 0033:0x7f160e35d04e [ 240.291145][ T8325] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 240.311557][ T8325] RSP: 002b:00007f160f277fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.320544][ T8325] RAX: ffffffffffffffda RBX: 00007f160f2786c0 RCX: 00007f160e35d04e [ 240.328817][ T8325] RDX: 000000000000000f RSI: 00007f160f2780a0 RDI: 0000000000000006 [ 240.337879][ T8325] RBP: 00007f160f278090 R08: 0000000000000000 R09: 0000000000000000 [ 240.346617][ T8325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.355427][ T8325] R13: 00007f160e616038 R14: 00007f160e615fa0 R15: 00007fff4c46e8c8 [ 240.363893][ T8325] [ 241.540649][ T8351] netlink: 'syz.3.782': attribute type 10 has an invalid length. [ 242.465261][ T8373] netlink: 164 bytes leftover after parsing attributes in process `syz.0.791'. [ 243.233002][ T8373] hsr_slave_1 (unregistering): left promiscuous mode [ 243.399260][ T8375] netlink: 'syz.0.791': attribute type 21 has an invalid length. [ 243.448342][ T8375] netlink: 164 bytes leftover after parsing attributes in process `syz.0.791'. [ 243.473195][ T8386] netlink: 'syz.3.796': attribute type 10 has an invalid length. [ 243.585880][ T8391] netlink: 152 bytes leftover after parsing attributes in process `syz.2.798'. [ 243.620224][ T8391] bond0: (slave bond_slave_0): Releasing backup interface [ 243.675564][ T8391] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 243.732720][ T8397] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.797'. [ 244.202393][ T8408] netlink: 'syz.3.803': attribute type 4 has an invalid length. [ 244.243004][ T8408] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.803'. [ 246.449864][ T8422] netlink: 'syz.0.808': attribute type 10 has an invalid length. [ 248.124007][ T8450] netlink: 152 bytes leftover after parsing attributes in process `syz.0.816'. [ 248.164507][ T8450] bond0: (slave bond_slave_0): Releasing backup interface [ 248.315303][ T8450] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 248.473219][ T8452] netlink: 'syz.2.817': attribute type 10 has an invalid length. [ 248.892320][ T8464] netlink: 'syz.2.820': attribute type 4 has an invalid length. [ 248.960353][ T8464] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.820'. [ 249.642216][ T8470] netlink: 'syz.1.823': attribute type 10 has an invalid length. [ 249.698124][ T8470] netlink: 'syz.1.823': attribute type 11 has an invalid length. [ 249.708850][ T8470] netlink: 'syz.1.823': attribute type 11 has an invalid length. [ 249.718273][ T8470] netlink: 'syz.1.823': attribute type 11 has an invalid length. [ 249.729247][ T8470] netlink: 'syz.1.823': attribute type 11 has an invalid length. [ 249.763780][ T8470] netlink: 'syz.1.823': attribute type 11 has an invalid length. [ 249.772929][ T8470] netlink: 'syz.1.823': attribute type 11 has an invalid length. [ 249.811130][ T8470] netlink: 'syz.1.823': attribute type 11 has an invalid length. [ 249.943904][ T8470] netlink: 'syz.1.823': attribute type 11 has an invalid length. [ 249.952711][ T8470] netlink: 'syz.1.823': attribute type 11 has an invalid length. [ 249.984225][ T8470] netlink: 'syz.1.823': attribute type 11 has an invalid length. [ 250.001983][ T8470] netlink: 'syz.1.823': attribute type 4 has an invalid length. [ 250.012070][ T8470] netlink: 'syz.1.823': attribute type 5 has an invalid length. [ 250.022402][ T8481] netlink: 'syz.3.826': attribute type 29 has an invalid length. [ 250.048978][ T8481] netlink: 'syz.3.826': attribute type 29 has an invalid length. [ 250.079923][ T8470] netlink: 208556 bytes leftover after parsing attributes in process `syz.1.823'. [ 250.392447][ T8487] netlink: 'syz.0.828': attribute type 10 has an invalid length. [ 250.592226][ T8490] delete_channel: no stack [ 250.603943][ T8490] delete_channel: no stack [ 250.902764][ T8501] netlink: 'syz.1.831': attribute type 10 has an invalid length. [ 251.222408][ T8511] FAULT_INJECTION: forcing a failure. [ 251.222408][ T8511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.274510][ T8511] CPU: 1 PID: 8511 Comm: syz.2.843 Not tainted syzkaller #0 [ 251.282215][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 251.292580][ T8511] Call Trace: [ 251.296008][ T8511] [ 251.298972][ T8511] dump_stack_lvl+0x18c/0x250 [ 251.303722][ T8511] ? show_regs_print_info+0x20/0x20 [ 251.309159][ T8511] ? load_image+0x420/0x420 [ 251.313721][ T8511] ? __might_fault+0xaa/0x120 [ 251.318744][ T8511] ? __lock_acquire+0x7d40/0x7d40 [ 251.324091][ T8511] should_fail_ex+0x39d/0x4d0 [ 251.328873][ T8511] _copy_from_user+0x2f/0xe0 [ 251.333864][ T8511] ____sys_sendmsg+0x2fd/0x960 [ 251.338701][ T8511] ? __sys_sendmsg_sock+0x30/0x30 [ 251.343998][ T8511] ? __import_iovec+0x3fa/0x850 [ 251.348928][ T8511] ? import_iovec+0x73/0xa0 [ 251.353506][ T8511] ___sys_sendmsg+0x2a6/0x360 [ 251.358256][ T8511] ? get_pid_task+0x20/0x1e0 [ 251.363348][ T8511] ? __sys_sendmsg+0x2a0/0x2a0 [ 251.368464][ T8511] ? __lock_acquire+0x7d40/0x7d40 [ 251.373744][ T8511] __se_sys_sendmsg+0x1c2/0x2b0 [ 251.378646][ T8511] ? __x64_sys_sendmsg+0x80/0x80 [ 251.383745][ T8511] ? lockdep_hardirqs_on+0x98/0x150 [ 251.389142][ T8511] do_syscall_64+0x55/0xa0 [ 251.393933][ T8511] ? clear_bhb_loop+0x40/0x90 [ 251.398928][ T8511] ? clear_bhb_loop+0x40/0x90 [ 251.403936][ T8511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.410063][ T8511] RIP: 0033:0x7f160e39c819 [ 251.414946][ T8511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.435214][ T8511] RSP: 002b:00007f160f278028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.444205][ T8511] RAX: ffffffffffffffda RBX: 00007f160e615fa0 RCX: 00007f160e39c819 [ 251.452226][ T8511] RDX: 0000000000040014 RSI: 0000200000001440 RDI: 0000000000000005 [ 251.460605][ T8511] RBP: 00007f160f278090 R08: 0000000000000000 R09: 0000000000000000 [ 251.469067][ T8511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.477385][ T8511] R13: 00007f160e616038 R14: 00007f160e615fa0 R15: 00007fff4c46e8c8 [ 251.485771][ T8511] [ 251.625209][ T8515] netlink: 176 bytes leftover after parsing attributes in process `syz.0.837'. [ 251.641558][ T8522] netlink: 'syz.1.836': attribute type 4 has an invalid length. [ 251.653182][ T8522] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.836'. [ 253.784367][ T8545] netlink: 'syz.0.845': attribute type 10 has an invalid length. [ 254.535819][ T8552] netlink: 'syz.3.848': attribute type 21 has an invalid length. [ 254.593584][ T8552] netlink: 168 bytes leftover after parsing attributes in process `syz.3.848'. [ 255.263955][ T8562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.852'. [ 255.820880][ T8569] netlink: 60 bytes leftover after parsing attributes in process `syz.3.853'. [ 255.867356][ T8572] netlink: 'syz.0.855': attribute type 10 has an invalid length. [ 255.902407][ T8569] netlink: 60 bytes leftover after parsing attributes in process `syz.3.853'. [ 255.922758][ T8566] netlink: 60 bytes leftover after parsing attributes in process `syz.3.853'. [ 255.948563][ T8569] netlink: 60 bytes leftover after parsing attributes in process `syz.3.853'. [ 256.051197][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.061207][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.174190][ T8566] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.853'. [ 256.193914][ T8566] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.853'. [ 256.227744][ T8566] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.853'. [ 256.413144][ T8584] FAULT_INJECTION: forcing a failure. [ 256.413144][ T8584] name failslab, interval 1, probability 0, space 0, times 0 [ 256.426330][ T8584] CPU: 1 PID: 8584 Comm: syz.1.859 Not tainted syzkaller #0 [ 256.433851][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 256.444409][ T8584] Call Trace: [ 256.448039][ T8584] [ 256.451003][ T8584] dump_stack_lvl+0x18c/0x250 [ 256.455930][ T8584] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 256.462238][ T8584] ? show_regs_print_info+0x20/0x20 [ 256.467758][ T8584] ? load_image+0x420/0x420 [ 256.472469][ T8584] ? finish_task_switch+0x26a/0x8f0 [ 256.477697][ T8584] ? finish_task_switch+0x265/0x8f0 [ 256.483177][ T8584] should_fail_ex+0x39d/0x4d0 [ 256.488008][ T8584] should_failslab+0x9/0x20 [ 256.492710][ T8584] slab_pre_alloc_hook+0x59/0x310 [ 256.498024][ T8584] kmem_cache_alloc+0x5a/0x2d0 [ 256.502818][ T8584] ? skb_clone+0x1eb/0x370 [ 256.507261][ T8584] skb_clone+0x1eb/0x370 [ 256.511706][ T8584] bpf_clone_redirect+0x167/0x4a0 [ 256.516764][ T8584] bpf_prog_e97454e6a39c6b06+0x61/0x66 [ 256.522343][ T8584] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 256.528614][ T8584] ? preempt_schedule+0xc0/0xd0 [ 256.533573][ T8584] ? bpf_test_run+0x174/0x870 [ 256.538440][ T8584] ? preempt_schedule_common+0x82/0xc0 [ 256.544014][ T8584] ? schedule_preempt_disabled+0x20/0x20 [ 256.549920][ T8584] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 256.555920][ T8584] ? lockdep_softirqs_on+0x580/0x580 [ 256.561342][ T8584] ? lock_chain_count+0x20/0x20 [ 256.566428][ T8584] ? preempt_schedule_thunk+0x1a/0x30 [ 256.571839][ T8584] ? __local_bh_disable_ip+0x108/0x1a0 [ 256.577337][ T8584] ? __cant_sleep+0x220/0x220 [ 256.582294][ T8584] ? __local_bh_enable_ip+0x14b/0x1c0 [ 256.587775][ T8584] ? _local_bh_enable+0xa0/0xa0 [ 256.592733][ T8584] ? bpf_test_timer_continue+0x135/0x380 [ 256.598473][ T8584] ? bpf_test_run+0x174/0x870 [ 256.603175][ T8584] bpf_test_run+0x2df/0x870 [ 256.607707][ T8584] ? bpf_test_run+0x174/0x870 [ 256.612487][ T8584] ? convert___skb_to_skb+0x590/0x590 [ 256.618062][ T8584] ? eth_get_headlen+0x210/0x210 [ 256.623018][ T8584] ? slab_build_skb+0x25f/0x3f0 [ 256.628489][ T8584] ? convert___skb_to_skb+0x3d/0x590 [ 256.633879][ T8584] bpf_prog_test_run_skb+0xad2/0x12b0 [ 256.639285][ T8584] ? cpu_online+0x60/0x60 [ 256.643644][ T8584] bpf_prog_test_run+0x321/0x390 [ 256.648601][ T8584] __sys_bpf+0x49d/0x890 [ 256.652970][ T8584] ? bpf_link_show_fdinfo+0x390/0x390 [ 256.658466][ T8584] ? lock_chain_count+0x20/0x20 [ 256.663454][ T8584] __x64_sys_bpf+0x7c/0x90 [ 256.668160][ T8584] do_syscall_64+0x55/0xa0 [ 256.672768][ T8584] ? clear_bhb_loop+0x40/0x90 [ 256.677655][ T8584] ? clear_bhb_loop+0x40/0x90 [ 256.682468][ T8584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.688572][ T8584] RIP: 0033:0x7fbbe179c819 [ 256.693022][ T8584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.712837][ T8584] RSP: 002b:00007fbbe2742028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 256.721376][ T8584] RAX: ffffffffffffffda RBX: 00007fbbe1a15fa0 RCX: 00007fbbe179c819 [ 256.729367][ T8584] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 256.737466][ T8584] RBP: 00007fbbe2742090 R08: 0000000000000000 R09: 0000000000000000 [ 256.745454][ T8584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.753459][ T8584] R13: 00007fbbe1a16038 R14: 00007fbbe1a15fa0 R15: 00007fffdfe55408 [ 256.761654][ T8584] [ 257.436606][ T8594] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.860'. [ 258.097645][ T8612] netlink: 'syz.2.866': attribute type 10 has an invalid length. [ 260.368373][ T8638] netlink: 'syz.3.875': attribute type 10 has an invalid length. [ 260.398300][ T8638] nla_validate_range_unsigned: 25 callbacks suppressed [ 260.398320][ T8638] netlink: 'syz.3.875': attribute type 11 has an invalid length. [ 260.425454][ T8638] netlink: 'syz.3.875': attribute type 11 has an invalid length. [ 260.437382][ T8638] netlink: 'syz.3.875': attribute type 11 has an invalid length. [ 260.459185][ T8638] netlink: 'syz.3.875': attribute type 11 has an invalid length. [ 260.489243][ T8638] netlink: 'syz.3.875': attribute type 11 has an invalid length. [ 260.523573][ T8638] netlink: 'syz.3.875': attribute type 11 has an invalid length. [ 260.573368][ T8638] netlink: 'syz.3.875': attribute type 11 has an invalid length. [ 260.600158][ T8638] netlink: 'syz.3.875': attribute type 11 has an invalid length. [ 260.632293][ T8649] FAULT_INJECTION: forcing a failure. [ 260.632293][ T8649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.648161][ T8638] netlink: 'syz.3.875': attribute type 11 has an invalid length. [ 260.665039][ T8649] CPU: 1 PID: 8649 Comm: syz.2.879 Not tainted syzkaller #0 [ 260.665059][ T8638] netlink: 'syz.3.875': attribute type 11 has an invalid length. [ 260.672382][ T8649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 260.672400][ T8649] Call Trace: [ 260.672410][ T8649] [ 260.672420][ T8649] dump_stack_lvl+0x18c/0x250 [ 260.672462][ T8649] ? show_regs_print_info+0x20/0x20 [ 260.672494][ T8649] ? load_image+0x420/0x420 [ 260.672526][ T8649] ? __lock_acquire+0x7d40/0x7d40 [ 260.672553][ T8649] ? snprintf+0xe9/0x140 [ 260.672584][ T8649] should_fail_ex+0x39d/0x4d0 [ 260.672621][ T8649] _copy_to_user+0x2f/0xa0 [ 260.672651][ T8649] simple_read_from_buffer+0xe7/0x150 [ 260.672690][ T8649] proc_fail_nth_read+0x1e8/0x260 [ 260.672721][ T8649] ? proc_fault_inject_write+0x360/0x360 [ 260.672753][ T8649] ? fsnotify_perm+0x271/0x5e0 [ 260.751299][ T8649] ? proc_fault_inject_write+0x360/0x360 [ 260.756968][ T8649] vfs_read+0x28b/0x970 [ 260.761169][ T8649] ? kernel_read+0x1e0/0x1e0 [ 260.765795][ T8649] ? __fget_files+0x28/0x4b0 [ 260.770407][ T8649] ? __fget_files+0x28/0x4b0 [ 260.775119][ T8649] ? __fget_files+0x43d/0x4b0 [ 260.780003][ T8649] ? __fdget_pos+0x2a3/0x330 [ 260.784712][ T8649] ? ksys_read+0x75/0x260 [ 260.789077][ T8649] ksys_read+0x150/0x260 [ 260.793462][ T8649] ? vfs_write+0x990/0x990 [ 260.797925][ T8649] ? lockdep_hardirqs_on+0x98/0x150 [ 260.803253][ T8649] do_syscall_64+0x55/0xa0 [ 260.807691][ T8649] ? clear_bhb_loop+0x40/0x90 [ 260.812423][ T8649] ? clear_bhb_loop+0x40/0x90 [ 260.817340][ T8649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.823274][ T8649] RIP: 0033:0x7f160e35d04e [ 260.827968][ T8649] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 260.848040][ T8649] RSP: 002b:00007f160f256fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 260.856575][ T8649] RAX: ffffffffffffffda RBX: 00007f160f2576c0 RCX: 00007f160e35d04e [ 260.864573][ T8649] RDX: 000000000000000f RSI: 00007f160f2570a0 RDI: 0000000000000005 [ 260.872651][ T8649] RBP: 00007f160f257090 R08: 0000000000000000 R09: 0000000000000000 [ 260.880815][ T8649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.888804][ T8649] R13: 00007f160e616128 R14: 00007f160e616090 R15: 00007fff4c46e8c8 [ 260.896811][ T8649] [ 260.925264][ T8638] netlink: 'syz.3.875': attribute type 4 has an invalid length. [ 260.934979][ T8638] netlink: 'syz.3.875': attribute type 5 has an invalid length. [ 260.951281][ T8638] __nla_validate_parse: 1 callbacks suppressed [ 260.951300][ T8638] netlink: 208556 bytes leftover after parsing attributes in process `syz.3.875'. [ 261.846396][ T8689] netlink: 'syz.3.890': attribute type 1 has an invalid length. [ 261.860065][ T8689] netlink: 63743 bytes leftover after parsing attributes in process `syz.3.890'. [ 261.891819][ T8691] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.891'. [ 262.623906][ T8705] netlink: 'syz.2.898': attribute type 10 has an invalid length. [ 262.932376][ T8714] FAULT_INJECTION: forcing a failure. [ 262.932376][ T8714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.949420][ T8714] CPU: 1 PID: 8714 Comm: syz.3.903 Not tainted syzkaller #0 [ 262.956886][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 262.967177][ T8714] Call Trace: [ 262.970497][ T8714] [ 262.973467][ T8714] dump_stack_lvl+0x18c/0x250 [ 262.978327][ T8714] ? show_regs_print_info+0x20/0x20 [ 262.983968][ T8714] ? load_image+0x420/0x420 [ 262.988615][ T8714] ? __lock_acquire+0x7d40/0x7d40 [ 262.993790][ T8714] should_fail_ex+0x39d/0x4d0 [ 262.998629][ T8714] _copy_from_user+0x2f/0xe0 [ 263.003364][ T8714] __copy_msghdr+0x3bb/0x580 [ 263.008102][ T8714] ___sys_sendmsg+0x214/0x360 [ 263.012826][ T8714] ? get_pid_task+0x20/0x1e0 [ 263.017553][ T8714] ? __sys_sendmsg+0x2a0/0x2a0 [ 263.022378][ T8714] ? __lock_acquire+0x7d40/0x7d40 [ 263.027561][ T8714] __se_sys_sendmsg+0x1c2/0x2b0 [ 263.032464][ T8714] ? __x64_sys_sendmsg+0x80/0x80 [ 263.037475][ T8714] ? lockdep_hardirqs_on+0x98/0x150 [ 263.042905][ T8714] do_syscall_64+0x55/0xa0 [ 263.047540][ T8714] ? clear_bhb_loop+0x40/0x90 [ 263.052278][ T8714] ? clear_bhb_loop+0x40/0x90 [ 263.057011][ T8714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.063008][ T8714] RIP: 0033:0x7fe6f1f9c819 [ 263.067478][ T8714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.087493][ T8714] RSP: 002b:00007fe6f2eb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.096277][ T8714] RAX: ffffffffffffffda RBX: 00007fe6f2215fa0 RCX: 00007fe6f1f9c819 [ 263.104394][ T8714] RDX: 0000000020000811 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 263.112507][ T8714] RBP: 00007fe6f2eb1090 R08: 0000000000000000 R09: 0000000000000000 [ 263.120533][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.128550][ T8714] R13: 00007fe6f2216038 R14: 00007fe6f2215fa0 R15: 00007ffff19be3a8 [ 263.136679][ T8714] [ 263.169273][ T8720] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.905'. [ 263.246533][ T8721] netlink: 'syz.2.905': attribute type 3 has an invalid length. [ 263.271082][ T8721] netlink: 132 bytes leftover after parsing attributes in process `syz.2.905'. [ 263.385260][ T8727] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 263.916141][ T8746] FAULT_INJECTION: forcing a failure. [ 263.916141][ T8746] name failslab, interval 1, probability 0, space 0, times 0 [ 263.929647][ T8746] CPU: 0 PID: 8746 Comm: syz.1.914 Not tainted syzkaller #0 [ 263.936984][ T8746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 263.947372][ T8746] Call Trace: [ 263.950684][ T8746] [ 263.953652][ T8746] dump_stack_lvl+0x18c/0x250 [ 263.958463][ T8746] ? show_regs_print_info+0x20/0x20 [ 263.963800][ T8746] ? load_image+0x420/0x420 [ 263.968337][ T8746] ? mark_lock+0x94/0x320 [ 263.972809][ T8746] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 263.979027][ T8746] should_fail_ex+0x39d/0x4d0 [ 263.983772][ T8746] should_failslab+0x9/0x20 [ 263.988337][ T8746] slab_pre_alloc_hook+0x59/0x310 [ 263.993426][ T8746] ? lockdep_hardirqs_on+0x98/0x150 [ 263.998671][ T8746] ? ip6_fraglist_init+0xb5/0x960 [ 264.003735][ T8746] ? ip6_fraglist_init+0xb5/0x960 [ 264.008794][ T8746] __kmem_cache_alloc_node+0x53/0x250 [ 264.014476][ T8746] ? ip6_fraglist_init+0xb5/0x960 [ 264.019639][ T8746] __kmalloc_node_track_caller+0xa2/0x230 [ 264.025584][ T8746] kmemdup+0x2b/0x70 [ 264.029526][ T8746] ip6_fraglist_init+0xb5/0x960 [ 264.034510][ T8746] ? ip6_mtu+0x7d/0x3f0 [ 264.038760][ T8746] ip6_fragment+0x1111/0x1fd0 [ 264.043665][ T8746] ? nf_hook+0x390/0x390 [ 264.048035][ T8746] ? ip6_frag_next+0xb40/0xb40 [ 264.052922][ T8746] ? ip6_send_skb+0x10f/0x380 [ 264.058021][ T8746] ip6_send_skb+0x1d5/0x380 [ 264.062589][ T8746] rawv6_push_pending_frames+0x6ee/0x8d0 [ 264.068462][ T8746] ? raw6_getfrag+0x3a0/0x3a0 [ 264.073201][ T8746] ? rawv6_send_hdrinc+0x1640/0x1640 [ 264.078612][ T8746] rawv6_sendmsg+0x131b/0x1770 [ 264.083616][ T8746] ? compat_rawv6_ioctl+0x70/0x70 [ 264.088785][ T8746] ? aa_sk_perm+0x83c/0x970 [ 264.093362][ T8746] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 264.099993][ T8746] ? inet_sendmsg+0x7c/0x2f0 [ 264.104614][ T8746] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 264.110108][ T8746] ? security_socket_sendmsg+0x80/0xa0 [ 264.115782][ T8746] ? inet_send_prepare+0x260/0x260 [ 264.121125][ T8746] ____sys_sendmsg+0x5ba/0x960 [ 264.126054][ T8746] ? __lock_acquire+0x7d40/0x7d40 [ 264.131215][ T8746] ? __asan_memset+0x22/0x40 [ 264.136197][ T8746] ? __sys_sendmsg_sock+0x30/0x30 [ 264.141252][ T8746] ? __import_iovec+0x5f2/0x850 [ 264.146138][ T8746] ? import_iovec+0x73/0xa0 [ 264.150783][ T8746] ___sys_sendmsg+0x2a6/0x360 [ 264.155488][ T8746] ? get_pid_task+0x20/0x1e0 [ 264.160209][ T8746] ? __sys_sendmsg+0x2a0/0x2a0 [ 264.165127][ T8746] ? __lock_acquire+0x7d40/0x7d40 [ 264.170225][ T8746] __se_sys_sendmsg+0x1c2/0x2b0 [ 264.175115][ T8746] ? __x64_sys_sendmsg+0x80/0x80 [ 264.180109][ T8746] ? lockdep_hardirqs_on+0x98/0x150 [ 264.185345][ T8746] do_syscall_64+0x55/0xa0 [ 264.189802][ T8746] ? clear_bhb_loop+0x40/0x90 [ 264.194513][ T8746] ? clear_bhb_loop+0x40/0x90 [ 264.199310][ T8746] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.205239][ T8746] RIP: 0033:0x7fbbe179c819 [ 264.209683][ T8746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.229584][ T8746] RSP: 002b:00007fbbe2742028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.238125][ T8746] RAX: ffffffffffffffda RBX: 00007fbbe1a15fa0 RCX: 00007fbbe179c819 [ 264.246130][ T8746] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 264.254161][ T8746] RBP: 00007fbbe2742090 R08: 0000000000000000 R09: 0000000000000000 [ 264.262287][ T8746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.270555][ T8746] R13: 00007fbbe1a16038 R14: 00007fbbe1a15fa0 R15: 00007fffdfe55408 [ 264.278672][ T8746] [ 264.370771][ T8749] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:2000:0023 with DS=0x3f [ 265.115280][ T8773] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.923'. [ 265.204704][ T8773] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 265.792731][ T8783] FAULT_INJECTION: forcing a failure. [ 265.792731][ T8783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.811423][ T8783] CPU: 0 PID: 8783 Comm: syz.2.928 Not tainted syzkaller #0 [ 265.818967][ T8783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 265.829508][ T8783] Call Trace: [ 265.832824][ T8783] [ 265.835905][ T8783] dump_stack_lvl+0x18c/0x250 [ 265.840754][ T8783] ? show_regs_print_info+0x20/0x20 [ 265.846247][ T8783] ? load_image+0x420/0x420 [ 265.850992][ T8783] ? __might_fault+0xaa/0x120 [ 265.855966][ T8783] ? __lock_acquire+0x7d40/0x7d40 [ 265.861222][ T8783] should_fail_ex+0x39d/0x4d0 [ 265.866228][ T8783] _copy_from_user+0x2f/0xe0 [ 265.870864][ T8783] bpf_prog_test_run_skb+0x266/0x12b0 [ 265.876402][ T8783] ? lockdep_hardirqs_on+0x98/0x150 [ 265.881650][ T8783] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 265.887849][ T8783] ? cpu_online+0x60/0x60 [ 265.892246][ T8783] ? cpu_online+0x60/0x60 [ 265.896623][ T8783] bpf_prog_test_run+0x321/0x390 [ 265.901935][ T8783] __sys_bpf+0x49d/0x890 [ 265.906228][ T8783] ? bpf_link_show_fdinfo+0x390/0x390 [ 265.911654][ T8783] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 265.918306][ T8783] __x64_sys_bpf+0x7c/0x90 [ 265.922937][ T8783] do_syscall_64+0x55/0xa0 [ 265.927477][ T8783] ? clear_bhb_loop+0x40/0x90 [ 265.932292][ T8783] ? clear_bhb_loop+0x40/0x90 [ 265.937209][ T8783] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.943146][ T8783] RIP: 0033:0x7f160e39c819 [ 265.947668][ T8783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.967928][ T8783] RSP: 002b:00007f160f278028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 265.976577][ T8783] RAX: ffffffffffffffda RBX: 00007f160e615fa0 RCX: 00007f160e39c819 [ 265.984683][ T8783] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 265.994008][ T8783] RBP: 00007f160f278090 R08: 0000000000000000 R09: 0000000000000000 [ 266.002218][ T8783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.010320][ T8783] R13: 00007f160e616038 R14: 00007f160e615fa0 R15: 00007fff4c46e8c8 [ 266.018533][ T8783] [ 266.473894][ T8796] netlink: 'syz.1.932': attribute type 21 has an invalid length. [ 266.481807][ T8796] netlink: 128 bytes leftover after parsing attributes in process `syz.1.932'. [ 266.573275][ T8796] netlink: 3 bytes leftover after parsing attributes in process `syz.1.932'. [ 266.715006][ T8801] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 266.722760][ T8801] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.935'. [ 267.150005][ T8810] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.939'. [ 267.194617][ T8810] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 267.693321][ T8823] netlink: 'syz.1.942': attribute type 10 has an invalid length. [ 268.346745][ T8840] netlink: 'syz.2.947': attribute type 21 has an invalid length. [ 268.354914][ T8840] netlink: 128 bytes leftover after parsing attributes in process `syz.2.947'. [ 268.364755][ T8840] netlink: 3 bytes leftover after parsing attributes in process `syz.2.947'. [ 268.956539][ T8859] netlink: 'syz.3.952': attribute type 10 has an invalid length. [ 268.972314][ T8858] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.957'. [ 269.591388][ T8867] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.955'. [ 270.146551][ T8877] netlink: 'syz.0.958': attribute type 21 has an invalid length. [ 270.195793][ T8877] netlink: 128 bytes leftover after parsing attributes in process `syz.0.958'. [ 270.254537][ T8877] netlink: 3 bytes leftover after parsing attributes in process `syz.0.958'. [ 270.705731][ T8890] FAULT_INJECTION: forcing a failure. [ 270.705731][ T8890] name failslab, interval 1, probability 0, space 0, times 0 [ 270.743001][ T8890] CPU: 1 PID: 8890 Comm: syz.1.962 Not tainted syzkaller #0 [ 270.750389][ T8890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 270.760499][ T8890] Call Trace: [ 270.764033][ T8890] [ 270.767008][ T8890] dump_stack_lvl+0x18c/0x250 [ 270.771748][ T8890] ? sctp_sendmsg+0x1575/0x28c0 [ 270.776848][ T8890] ? ___sys_sendmsg+0x2a6/0x360 [ 270.782272][ T8890] ? show_regs_print_info+0x20/0x20 [ 270.787550][ T8890] ? load_image+0x420/0x420 [ 270.792486][ T8890] should_fail_ex+0x39d/0x4d0 [ 270.797316][ T8890] should_failslab+0x9/0x20 [ 270.801955][ T8890] slab_pre_alloc_hook+0x59/0x310 [ 270.807121][ T8890] ? sctp_add_bind_addr+0x8c/0x360 [ 270.812432][ T8890] __kmem_cache_alloc_node+0x53/0x250 [ 270.818017][ T8890] ? sctp_add_bind_addr+0x8c/0x360 [ 270.823241][ T8890] kmalloc_trace+0x2a/0xe0 [ 270.827966][ T8890] sctp_add_bind_addr+0x8c/0x360 [ 270.833047][ T8890] sctp_copy_local_addr_list+0x315/0x4f0 [ 270.838717][ T8890] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 270.844629][ T8890] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 270.850981][ T8890] ? sctp_v4_is_any+0x35/0x60 [ 270.855764][ T8890] ? sctp_copy_one_addr+0x8c/0x350 [ 270.861164][ T8890] sctp_bind_addr_copy+0xb3/0x3c0 [ 270.866207][ T8890] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 270.872768][ T8890] sctp_connect_new_asoc+0x2f9/0x6a0 [ 270.878079][ T8890] ? __sctp_connect+0xd80/0xd80 [ 270.883030][ T8890] ? __local_bh_enable_ip+0x13a/0x1c0 [ 270.888419][ T8890] ? _local_bh_enable+0xa0/0xa0 [ 270.893378][ T8890] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 270.899204][ T8890] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 270.905130][ T8890] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 270.910705][ T8890] ? security_sctp_bind_connect+0x89/0xb0 [ 270.916449][ T8890] sctp_sendmsg+0x1575/0x28c0 [ 270.921211][ T8890] ? sctp_getsockopt+0xb60/0xb60 [ 270.926173][ T8890] ? aa_sk_perm+0x83c/0x970 [ 270.930712][ T8890] ? aa_af_perm+0x330/0x330 [ 270.935254][ T8890] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 270.942247][ T8890] ? sock_rps_record_flow+0x19/0x3f0 [ 270.947650][ T8890] ? inet_sendmsg+0x7c/0x2f0 [ 270.952533][ T8890] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 270.958015][ T8890] ? security_socket_sendmsg+0x80/0xa0 [ 270.963760][ T8890] ? inet_send_prepare+0x260/0x260 [ 270.969189][ T8890] ____sys_sendmsg+0x5ba/0x960 [ 270.974023][ T8890] ? __lock_acquire+0x7d40/0x7d40 [ 270.979285][ T8890] ? __asan_memset+0x22/0x40 [ 270.984342][ T8890] ? __sys_sendmsg_sock+0x30/0x30 [ 270.989402][ T8890] ? __import_iovec+0x5f2/0x850 [ 270.994482][ T8890] ? import_iovec+0x73/0xa0 [ 270.999022][ T8890] ___sys_sendmsg+0x2a6/0x360 [ 271.003829][ T8890] ? __sys_sendmsg+0x2a0/0x2a0 [ 271.008649][ T8890] ? trace_call_bpf+0xc3/0x6c0 [ 271.013499][ T8890] __se_sys_sendmsg+0x1c2/0x2b0 [ 271.018402][ T8890] ? __x64_sys_sendmsg+0x80/0x80 [ 271.023468][ T8890] ? lockdep_hardirqs_on+0x98/0x150 [ 271.028695][ T8890] do_syscall_64+0x55/0xa0 [ 271.033139][ T8890] ? clear_bhb_loop+0x40/0x90 [ 271.037921][ T8890] ? clear_bhb_loop+0x40/0x90 [ 271.042762][ T8890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.048684][ T8890] RIP: 0033:0x7fbbe179c819 [ 271.053116][ T8890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.072939][ T8890] RSP: 002b:00007fbbe2742028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.081666][ T8890] RAX: ffffffffffffffda RBX: 00007fbbe1a15fa0 RCX: 00007fbbe179c819 [ 271.089917][ T8890] RDX: 0000000040004044 RSI: 0000200000000140 RDI: 0000000000000003 [ 271.097982][ T8890] RBP: 00007fbbe2742090 R08: 0000000000000000 R09: 0000000000000000 [ 271.106055][ T8890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 271.114158][ T8890] R13: 00007fbbe1a16038 R14: 00007fbbe1a15fa0 R15: 00007fffdfe55408 [ 271.122193][ T8890] [ 271.151528][ T8892] netlink: 'syz.3.963': attribute type 10 has an invalid length. [ 271.908325][ T8907] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.966'. [ 272.909764][ T8925] netlink: 'syz.3.974': attribute type 10 has an invalid length. [ 274.027665][ T8946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.077386][ T8946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.100042][ T8944] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.978'. [ 274.136875][ T8946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.187094][ T8946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.945816][ T8948] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.980'. [ 275.893310][ T8965] netlink: 'syz.0.984': attribute type 10 has an invalid length. [ 277.239932][ T8983] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.989'. [ 277.984490][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.995'. [ 278.010649][ T9008] netlink: 'syz.0.997': attribute type 10 has an invalid length. [ 278.326858][ T9001] netlink: 'syz.1.995': attribute type 5 has an invalid length. [ 278.363630][ T9014] netlink: 'syz.3.999': attribute type 21 has an invalid length. [ 278.371443][ T9014] netlink: 128 bytes leftover after parsing attributes in process `syz.3.999'. [ 278.381253][ T9001] netlink: 'syz.1.995': attribute type 1 has an invalid length. [ 278.543814][ T9001] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.995'. [ 278.593749][ T9014] netlink: 3 bytes leftover after parsing attributes in process `syz.3.999'. [ 279.153290][ T9027] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1004'. [ 279.400817][ T9038] netlink: 'syz.0.1008': attribute type 10 has an invalid length. [ 279.672981][ T9044] IPv6: NLM_F_CREATE should be specified when creating new route [ 279.717890][ T9044] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1011'. [ 279.884949][ T9048] netlink: 'syz.3.1012': attribute type 21 has an invalid length. [ 279.916692][ T9048] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1012'. [ 279.960570][ T9048] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1012'. [ 280.902045][ T9073] netlink: 'syz.3.1019': attribute type 10 has an invalid length. [ 281.359943][ T9090] netlink: 'syz.2.1027': attribute type 17 has an invalid length. [ 281.374525][ T9090] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1027'. [ 281.436997][ T9090] netlink: 'syz.2.1027': attribute type 33 has an invalid length. [ 281.800222][ T9100] netlink: 'syz.0.1028': attribute type 21 has an invalid length. [ 282.060665][ T9108] netlink: 'syz.3.1032': attribute type 10 has an invalid length. [ 282.637290][ T9122] syzkaller0: entered allmulticast mode [ 283.204506][ T9135] netlink: 'syz.0.1042': attribute type 10 has an invalid length. [ 283.223944][ T9136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.232242][ T9136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.241046][ T9136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.248796][ T9136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.287015][ T9123] __nla_validate_parse: 3 callbacks suppressed [ 283.287037][ T9123] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1036'. [ 283.344051][ T9132] syzkaller0: entered allmulticast mode [ 283.367318][ T9123] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 283.388419][ T9123] CPU: 0 PID: 9123 Comm: syz.1.1036 Not tainted syzkaller #0 [ 283.395984][ T9123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 283.406094][ T9123] Call Trace: [ 283.409414][ T9123] [ 283.412479][ T9123] dump_stack_lvl+0x18c/0x250 [ 283.417221][ T9123] ? show_regs_print_info+0x20/0x20 [ 283.422457][ T9123] ? load_image+0x420/0x420 [ 283.427078][ T9123] sysfs_warn_dup+0x8e/0xa0 [ 283.431676][ T9123] sysfs_do_create_link_sd+0xc0/0x110 [ 283.437062][ T9123] device_add_class_symlinks+0x1cf/0x240 [ 283.442957][ T9123] device_add+0x507/0xc20 [ 283.447359][ T9123] wiphy_register+0x1dad/0x2ae0 [ 283.452267][ T9123] ? cfg80211_event_work+0x40/0x40 [ 283.457598][ T9123] ? minstrel_ht_alloc+0x88a/0x990 [ 283.462984][ T9123] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 283.469169][ T9123] ieee80211_register_hw+0x3464/0x4250 [ 283.474752][ T9123] ? ieee80211_tasklet_handler+0x20/0x20 [ 283.480489][ T9123] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 283.486486][ T9123] ? __debug_object_init+0xec/0x450 [ 283.491705][ T9123] ? __asan_memset+0x22/0x40 [ 283.496562][ T9123] ? __hrtimer_init+0x186/0x270 [ 283.501541][ T9123] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 283.507321][ T9123] ? mac80211_hwsim_free+0x220/0x220 [ 283.512637][ T9123] ? rcu_is_watching+0x15/0xb0 [ 283.517437][ T9123] ? kstrndup+0xbd/0x140 [ 283.521713][ T9123] hwsim_new_radio_nl+0xdc9/0x1a90 [ 283.526859][ T9123] ? __nla_validate+0x50/0x50 [ 283.531570][ T9123] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 283.537932][ T9123] ? __nla_parse+0x40/0x50 [ 283.542375][ T9123] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 283.548829][ T9123] genl_family_rcv_msg_doit+0x211/0x310 [ 283.554490][ T9123] ? end_current_label_crit_section+0x170/0x170 [ 283.561116][ T9123] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 283.567562][ T9123] ? bpf_lsm_capable+0x9/0x10 [ 283.572262][ T9123] ? security_capable+0x89/0xb0 [ 283.577231][ T9123] genl_rcv_msg+0x619/0x7a0 [ 283.582109][ T9123] ? genl_bind+0x360/0x360 [ 283.586545][ T9123] ? perf_trace_lock+0xfc/0x3b0 [ 283.591497][ T9123] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 283.597848][ T9123] ? perf_trace_lock+0xfc/0x3b0 [ 283.602739][ T9123] netlink_rcv_skb+0x241/0x4d0 [ 283.607532][ T9123] ? genl_bind+0x360/0x360 [ 283.612140][ T9123] ? netlink_ack+0x1180/0x1180 [ 283.616944][ T9123] ? __lock_acquire+0x7d40/0x7d40 [ 283.621989][ T9123] ? net_generic+0x1e/0x240 [ 283.626607][ T9123] ? down_read+0x1ac/0x2e0 [ 283.631313][ T9123] genl_rcv+0x28/0x40 [ 283.635332][ T9123] netlink_unicast+0x751/0x8d0 [ 283.640134][ T9123] netlink_sendmsg+0x8d0/0xbf0 [ 283.644948][ T9123] ? netlink_getsockopt+0x590/0x590 [ 283.650269][ T9123] ? aa_sock_msg_perm+0x94/0x150 [ 283.655233][ T9123] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 283.660808][ T9123] ? security_socket_sendmsg+0x80/0xa0 [ 283.666291][ T9123] ? netlink_getsockopt+0x590/0x590 [ 283.671613][ T9123] ____sys_sendmsg+0x5ba/0x960 [ 283.676406][ T9123] ? __asan_memset+0x22/0x40 [ 283.681023][ T9123] ? __sys_sendmsg_sock+0x30/0x30 [ 283.686069][ T9123] ? __import_iovec+0x5f2/0x850 [ 283.691034][ T9123] ? import_iovec+0x73/0xa0 [ 283.695568][ T9123] ___sys_sendmsg+0x2a6/0x360 [ 283.700274][ T9123] ? __sys_sendmsg+0x2a0/0x2a0 [ 283.705150][ T9123] __se_sys_sendmsg+0x1c2/0x2b0 [ 283.710235][ T9123] ? __x64_sys_sendmsg+0x80/0x80 [ 283.715316][ T9123] ? lockdep_hardirqs_on+0x98/0x150 [ 283.720565][ T9123] do_syscall_64+0x55/0xa0 [ 283.725094][ T9123] ? clear_bhb_loop+0x40/0x90 [ 283.729824][ T9123] ? clear_bhb_loop+0x40/0x90 [ 283.734528][ T9123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.740445][ T9123] RIP: 0033:0x7fbbe179c819 [ 283.744884][ T9123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.764860][ T9123] RSP: 002b:00007fbbe2721028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.773303][ T9123] RAX: ffffffffffffffda RBX: 00007fbbe1a16090 RCX: 00007fbbe179c819 [ 283.781484][ T9123] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 283.789514][ T9123] RBP: 00007fbbe1832c91 R08: 0000000000000000 R09: 0000000000000000 [ 283.797515][ T9123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.805512][ T9123] R13: 00007fbbe1a16128 R14: 00007fbbe1a16090 R15: 00007fffdfe55408 [ 283.813696][ T9123] [ 284.088040][ T9147] FAULT_INJECTION: forcing a failure. [ 284.088040][ T9147] name failslab, interval 1, probability 0, space 0, times 0 [ 284.133007][ T9147] CPU: 1 PID: 9147 Comm: syz.3.1045 Not tainted syzkaller #0 [ 284.140479][ T9147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 284.150820][ T9147] Call Trace: [ 284.154219][ T9147] [ 284.157327][ T9147] dump_stack_lvl+0x18c/0x250 [ 284.162167][ T9147] ? show_regs_print_info+0x20/0x20 [ 284.167435][ T9147] ? load_image+0x420/0x420 [ 284.172091][ T9147] ? mark_lock+0x94/0x320 [ 284.176601][ T9147] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 284.182981][ T9147] should_fail_ex+0x39d/0x4d0 [ 284.187703][ T9147] should_failslab+0x9/0x20 [ 284.192333][ T9147] slab_pre_alloc_hook+0x59/0x310 [ 284.197411][ T9147] ? lockdep_hardirqs_on+0x98/0x150 [ 284.202642][ T9147] ? ip6_fraglist_init+0xb5/0x960 [ 284.207703][ T9147] ? ip6_fraglist_init+0xb5/0x960 [ 284.212761][ T9147] __kmem_cache_alloc_node+0x53/0x250 [ 284.218192][ T9147] ? ip6_fraglist_init+0xb5/0x960 [ 284.223346][ T9147] __kmalloc_node_track_caller+0xa2/0x230 [ 284.229198][ T9147] kmemdup+0x2b/0x70 [ 284.233220][ T9147] ip6_fraglist_init+0xb5/0x960 [ 284.238197][ T9147] ? ip6_mtu+0x7d/0x3f0 [ 284.242480][ T9147] ip6_fragment+0x1111/0x1fd0 [ 284.247303][ T9147] ? nf_hook+0x390/0x390 [ 284.251674][ T9147] ? ip6_frag_next+0xb40/0xb40 [ 284.256482][ T9147] ? ip6_send_skb+0x10f/0x380 [ 284.261457][ T9147] ip6_send_skb+0x1d5/0x380 [ 284.266172][ T9147] rawv6_push_pending_frames+0x6ee/0x8d0 [ 284.271940][ T9147] ? raw6_getfrag+0x3a0/0x3a0 [ 284.276654][ T9147] ? rawv6_send_hdrinc+0x1640/0x1640 [ 284.281976][ T9147] rawv6_sendmsg+0x131b/0x1770 [ 284.286881][ T9147] ? compat_rawv6_ioctl+0x70/0x70 [ 284.291947][ T9147] ? aa_sk_perm+0x83c/0x970 [ 284.296498][ T9147] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 284.302955][ T9147] ? inet_sendmsg+0x7c/0x2f0 [ 284.307664][ T9147] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 284.313082][ T9147] ? security_socket_sendmsg+0x80/0xa0 [ 284.318570][ T9147] ? inet_send_prepare+0x260/0x260 [ 284.323743][ T9147] ____sys_sendmsg+0x5ba/0x960 [ 284.328561][ T9147] ? __lock_acquire+0x7d40/0x7d40 [ 284.333633][ T9147] ? __asan_memset+0x22/0x40 [ 284.338445][ T9147] ? __sys_sendmsg_sock+0x30/0x30 [ 284.343502][ T9147] ? __import_iovec+0x5f2/0x850 [ 284.348397][ T9147] ? import_iovec+0x73/0xa0 [ 284.352934][ T9147] ___sys_sendmsg+0x2a6/0x360 [ 284.357650][ T9147] ? get_pid_task+0x20/0x1e0 [ 284.362289][ T9147] ? __sys_sendmsg+0x2a0/0x2a0 [ 284.367116][ T9147] ? __lock_acquire+0x7d40/0x7d40 [ 284.372204][ T9147] __se_sys_sendmsg+0x1c2/0x2b0 [ 284.377107][ T9147] ? __x64_sys_sendmsg+0x80/0x80 [ 284.382105][ T9147] ? lockdep_hardirqs_on+0x98/0x150 [ 284.387429][ T9147] do_syscall_64+0x55/0xa0 [ 284.391877][ T9147] ? clear_bhb_loop+0x40/0x90 [ 284.396789][ T9147] ? clear_bhb_loop+0x40/0x90 [ 284.401538][ T9147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.407560][ T9147] RIP: 0033:0x7fe6f1f9c819 [ 284.412009][ T9147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.432014][ T9147] RSP: 002b:00007fe6f2eb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.440569][ T9147] RAX: ffffffffffffffda RBX: 00007fe6f2215fa0 RCX: 00007fe6f1f9c819 [ 284.448586][ T9147] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 284.456958][ T9147] RBP: 00007fe6f2eb1090 R08: 0000000000000000 R09: 0000000000000000 [ 284.465350][ T9147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 284.473538][ T9147] R13: 00007fe6f2216038 R14: 00007fe6f2215fa0 R15: 00007ffff19be3a8 [ 284.481827][ T9147] [ 284.531448][ T9151] netlink: 'syz.1.1046': attribute type 21 has an invalid length. [ 284.638966][ T9151] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1046'. [ 284.659393][ T9151] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1046'. [ 284.884413][ T9165] netlink: 'syz.2.1052': attribute type 10 has an invalid length. [ 285.228974][ T9166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.007003][ T9187] netlink: 'syz.2.1058': attribute type 2 has an invalid length. [ 286.047370][ T9187] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1058'. [ 286.413702][ T9193] netlink: 'syz.1.1061': attribute type 21 has an invalid length. [ 286.454574][ T9193] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1061'. [ 286.492123][ T9193] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1061'. [ 287.523842][ T9194] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1055'. [ 287.627024][ T9194] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 287.638632][ T9194] CPU: 0 PID: 9194 Comm: syz.3.1055 Not tainted syzkaller #0 [ 287.646253][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 287.656437][ T9194] Call Trace: [ 287.659874][ T9194] [ 287.662834][ T9194] dump_stack_lvl+0x18c/0x250 [ 287.667739][ T9194] ? show_regs_print_info+0x20/0x20 [ 287.673131][ T9194] ? load_image+0x420/0x420 [ 287.677845][ T9194] sysfs_warn_dup+0x8e/0xa0 [ 287.682402][ T9194] sysfs_do_create_link_sd+0xc0/0x110 [ 287.687835][ T9194] device_add_class_symlinks+0x1cf/0x240 [ 287.693517][ T9194] device_add+0x507/0xc20 [ 287.698101][ T9194] wiphy_register+0x1dad/0x2ae0 [ 287.703038][ T9194] ? cfg80211_event_work+0x40/0x40 [ 287.708195][ T9194] ? minstrel_ht_alloc+0x88a/0x990 [ 287.713359][ T9194] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 287.719468][ T9194] ieee80211_register_hw+0x3464/0x4250 [ 287.724999][ T9194] ? ieee80211_tasklet_handler+0x20/0x20 [ 287.730766][ T9194] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 287.736954][ T9194] ? __debug_object_init+0xec/0x450 [ 287.742379][ T9194] ? __asan_memset+0x22/0x40 [ 287.747024][ T9194] ? __hrtimer_init+0x186/0x270 [ 287.751952][ T9194] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 287.757845][ T9194] ? mac80211_hwsim_free+0x220/0x220 [ 287.763274][ T9194] ? rcu_is_watching+0x15/0xb0 [ 287.768090][ T9194] ? kstrndup+0xbd/0x140 [ 287.772559][ T9194] hwsim_new_radio_nl+0xdc9/0x1a90 [ 287.777745][ T9194] ? __nla_validate+0x50/0x50 [ 287.782654][ T9194] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 287.788821][ T9194] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 287.795462][ T9194] ? lockdep_hardirqs_on+0x98/0x150 [ 287.800709][ T9194] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 287.807010][ T9194] ? __nla_parse+0x40/0x50 [ 287.811483][ T9194] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 287.817870][ T9194] genl_family_rcv_msg_doit+0x211/0x310 [ 287.823474][ T9194] ? end_current_label_crit_section+0x170/0x170 [ 287.829858][ T9194] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 287.835846][ T9194] ? bpf_lsm_capable+0x9/0x10 [ 287.840675][ T9194] ? security_capable+0x89/0xb0 [ 287.845680][ T9194] genl_rcv_msg+0x619/0x7a0 [ 287.850250][ T9194] ? genl_bind+0x360/0x360 [ 287.854884][ T9194] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 287.861290][ T9194] netlink_rcv_skb+0x241/0x4d0 [ 287.866128][ T9194] ? genl_bind+0x360/0x360 [ 287.870687][ T9194] ? netlink_ack+0x1180/0x1180 [ 287.875596][ T9194] ? lockdep_hardirqs_on+0x98/0x150 [ 287.880884][ T9194] ? kasan_check_range+0x89/0x290 [ 287.886067][ T9194] ? down_read+0x1ac/0x2e0 [ 287.890713][ T9194] genl_rcv+0x28/0x40 [ 287.894740][ T9194] netlink_unicast+0x751/0x8d0 [ 287.899568][ T9194] netlink_sendmsg+0x8d0/0xbf0 [ 287.904393][ T9194] ? lockdep_hardirqs_on+0x98/0x150 [ 287.909844][ T9194] ? netlink_getsockopt+0x590/0x590 [ 287.915191][ T9194] ? security_socket_sendmsg+0x37/0xa0 [ 287.920711][ T9194] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 287.926139][ T9194] ? security_socket_sendmsg+0x80/0xa0 [ 287.931664][ T9194] ? netlink_getsockopt+0x590/0x590 [ 287.936947][ T9194] ____sys_sendmsg+0x5ba/0x960 [ 287.941862][ T9194] ? lockdep_hardirqs_on+0x98/0x150 [ 287.947208][ T9194] ? __sys_sendmsg_sock+0x30/0x30 [ 287.952294][ T9194] ? ___sys_sendmsg+0x28b/0x360 [ 287.957293][ T9194] ___sys_sendmsg+0x2a6/0x360 [ 287.962120][ T9194] ? __sys_sendmsg+0x2a0/0x2a0 [ 287.966945][ T9194] ? trace_call_bpf+0xc3/0x6c0 [ 287.971762][ T9194] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 287.978062][ T9194] __se_sys_sendmsg+0x1c2/0x2b0 [ 287.983035][ T9194] ? __x64_sys_sendmsg+0x80/0x80 [ 287.988019][ T9194] ? lockdep_hardirqs_on+0x98/0x150 [ 287.993348][ T9194] do_syscall_64+0x55/0xa0 [ 287.997801][ T9194] ? clear_bhb_loop+0x40/0x90 [ 288.002606][ T9194] ? clear_bhb_loop+0x40/0x90 [ 288.007316][ T9194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.013236][ T9194] RIP: 0033:0x7fe6f1f9c819 [ 288.017679][ T9194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.037780][ T9194] RSP: 002b:00007fe6f2e6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.046219][ T9194] RAX: ffffffffffffffda RBX: 00007fe6f2216180 RCX: 00007fe6f1f9c819 [ 288.054212][ T9194] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 288.062247][ T9194] RBP: 00007fe6f2032c91 R08: 0000000000000000 R09: 0000000000000000 [ 288.070345][ T9194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.078348][ T9194] R13: 00007fe6f2216218 R14: 00007fe6f2216180 R15: 00007ffff19be3a8 [ 288.086447][ T9194] [ 288.154817][ T9206] netlink: 'syz.0.1066': attribute type 29 has an invalid length. [ 288.179522][ T9206] netlink: 'syz.0.1066': attribute type 29 has an invalid length. [ 306.369661][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.378039][ T5782] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 306.391025][ T5782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.401937][ T5782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.410952][ T5782] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.419054][ T5782] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 306.428360][ T5782] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 306.436437][ T5782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.444708][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.454455][ T5782] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 306.462291][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.469827][ T5782] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 306.478599][ T5782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.487783][ T5782] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 306.498866][ T5775] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 306.506290][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.531821][ T5778] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 306.540306][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.593005][ T5775] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 307.613111][ T5775] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 307.621911][ T5775] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 307.630807][ T5775] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 307.638853][ T5775] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 307.646856][ T5775] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 307.800803][ T9275] chnl_net:caif_netlink_parms(): no params data found [ 308.115604][ T9273] chnl_net:caif_netlink_parms(): no params data found [ 308.177503][ T9272] chnl_net:caif_netlink_parms(): no params data found [ 308.290149][ T9275] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.308072][ T9275] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.316078][ T9275] bridge_slave_0: entered allmulticast mode [ 308.330078][ T9275] bridge_slave_0: entered promiscuous mode [ 308.402278][ T9275] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.420512][ T9275] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.428787][ T9275] bridge_slave_1: entered allmulticast mode [ 308.443690][ T9275] bridge_slave_1: entered promiscuous mode [ 308.602654][ T9275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.669201][ T9275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.685156][ T9272] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.692493][ T9272] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.707001][ T9272] bridge_slave_0: entered allmulticast mode [ 308.718302][ T9272] bridge_slave_0: entered promiscuous mode [ 308.777790][ T9272] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.787965][ T9272] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.801255][ T9272] bridge_slave_1: entered allmulticast mode [ 308.809290][ T9272] bridge_slave_1: entered promiscuous mode [ 308.846712][ T9273] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.864130][ T9273] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.871497][ T9273] bridge_slave_0: entered allmulticast mode [ 308.886424][ T9273] bridge_slave_0: entered promiscuous mode [ 308.921521][ T9275] team0: Port device team_slave_0 added [ 308.937740][ T9275] team0: Port device team_slave_1 added [ 308.949980][ T9273] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.961359][ T9273] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.978330][ T9273] bridge_slave_1: entered allmulticast mode [ 308.988100][ T9273] bridge_slave_1: entered promiscuous mode [ 309.081663][ T9272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.123855][ T9273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.144187][ T9272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.160817][ T9275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.181981][ T9275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.217989][ T9275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.241080][ T9273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.294976][ T9275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.302268][ T9275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.338955][ T9275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.400073][ T9272] team0: Port device team_slave_0 added [ 309.416625][ T9272] team0: Port device team_slave_1 added [ 309.522399][ T9273] team0: Port device team_slave_0 added [ 309.559703][ T9272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.570308][ T9272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.604237][ T9272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.491775][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.498383][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.427721][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.436415][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 420.548343][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz.0.1076:9242] [ 420.556635][ C1] Modules linked in: [ 420.560527][ C1] irq event stamp: 6639167 [ 420.565142][ C1] hardirqs last enabled at (6639166): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.576114][ C1] hardirqs last disabled at (6639167): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 420.586894][ C1] softirqs last enabled at (1448230): [] __irq_exit_rcu+0xd3/0x190 [ 420.596923][ C1] softirqs last disabled at (1448233): [] __irq_exit_rcu+0xd3/0x190 [ 420.606655][ C1] CPU: 1 PID: 9242 Comm: syz.0.1076 Not tainted syzkaller #0 [ 420.614080][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 420.624536][ C1] RIP: 0010:__sanitizer_cov_trace_cmp4+0x2e/0x90 [ 420.631157][ C1] Code: 48 8b 04 24 65 48 8b 15 30 92 7c 7e 65 8b 0d 31 92 7c 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 <74> 52 8b 8a f8 15 00 00 83 f9 03 75 47 48 8b 8a 00 16 00 00 44 8b [ 420.650976][ C1] RSP: 0018:ffffc900001ef050 EFLAGS: 00000246 [ 420.657064][ C1] RAX: ffffffff813b3a72 RBX: dffffc0000000000 RCX: 0000000000000100 [ 420.665053][ C1] RDX: ffff88802c008000 RSI: 000000000016dec9 RDI: 000000000016deca [ 420.673040][ C1] RBP: 000000000016deca R08: ffffc900001ef1f0 R09: 0000000000000010 [ 420.681467][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc900001ef128 [ 420.689453][ C1] R13: 000000000016dec9 R14: ffffc900001ef15d R15: 000000000007fb2e [ 420.697435][ C1] FS: 00007ff416c196c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 420.706375][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.713056][ C1] CR2: 00007ffaf4e15f40 CR3: 0000000057e75000 CR4: 00000000003506e0 [ 420.721144][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 420.729133][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 420.737156][ C1] Call Trace: [ 420.740631][ C1] [ 420.743488][ C1] unwind_next_frame+0x2b2/0x2970 [ 420.748550][ C1] ? ip_protocol_deliver_rcu+0x20d/0x3f0 [ 420.754207][ C1] ? ip_protocol_deliver_rcu+0x20e/0x3f0 [ 420.759862][ C1] ? ip_protocol_deliver_rcu+0x20e/0x3f0 [ 420.765508][ C1] ? stack_trace_save+0x100/0x100 [ 420.770635][ C1] arch_stack_walk+0x144/0x190 [ 420.775419][ C1] ? ip_protocol_deliver_rcu+0x20e/0x3f0 [ 420.781505][ C1] stack_trace_save+0xaa/0x100 [ 420.786580][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 420.792037][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 420.797255][ C1] ? sched_clock_cpu+0x75/0x430 [ 420.802218][ C1] kasan_set_track+0x4e/0x70 [ 420.806919][ C1] ? kasan_set_track+0x4e/0x70 [ 420.811696][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 420.816910][ C1] ? slab_post_alloc_hook+0x6e/0x4b0 [ 420.822219][ C1] ? kmem_cache_alloc+0x11a/0x2d0 [ 420.827261][ C1] ? skb_clone+0x1eb/0x370 [ 420.832142][ C1] ? dev_queue_xmit_nit+0x24d/0xbb0 [ 420.837847][ C1] ? dev_hard_start_xmit+0x148/0x740 [ 420.843178][ C1] ? sch_direct_xmit+0x25e/0x4c0 [ 420.848162][ C1] ? __dev_queue_xmit+0x165d/0x3660 [ 420.853400][ C1] ? ip_finish_output2+0xcec/0x11e0 [ 420.858711][ C1] ? ip_output+0x2a1/0x3b0 [ 420.863224][ C1] ? __ip_queue_xmit+0x1049/0x1950 [ 420.868344][ C1] ? __tcp_transmit_skb+0x1d6b/0x33f0 [ 420.873731][ C1] ? tcp_rcv_established+0xb06/0x1d20 [ 420.879155][ C1] ? tcp_v4_do_rcv+0x4ed/0xb80 [ 420.884082][ C1] ? tcp_v4_rcv+0x23bf/0x2af0 [ 420.888880][ C1] ? ip_protocol_deliver_rcu+0x20e/0x3f0 [ 420.894773][ C1] __kasan_slab_alloc+0x6c/0x80 [ 420.899836][ C1] slab_post_alloc_hook+0x6e/0x4b0 [ 420.904976][ C1] kmem_cache_alloc+0x11a/0x2d0 [ 420.909844][ C1] ? skb_clone+0x1eb/0x370 [ 420.914278][ C1] skb_clone+0x1eb/0x370 [ 420.918687][ C1] ? dev_queue_xmit_nit+0x235/0xbb0 [ 420.924184][ C1] dev_queue_xmit_nit+0x24d/0xbb0 [ 420.929244][ C1] ? lock_chain_count+0x20/0x20 [ 420.934219][ C1] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 420.939353][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.945535][ C1] dev_hard_start_xmit+0x148/0x740 [ 420.950691][ C1] sch_direct_xmit+0x25e/0x4c0 [ 420.955475][ C1] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0 [ 420.961686][ C1] ? __dev_queue_xmit+0x12cf/0x3660 [ 420.967448][ C1] __dev_queue_xmit+0x165d/0x3660 [ 420.972632][ C1] ? lapic_next_event+0x11/0x20 [ 420.977593][ C1] ? clockevents_program_event+0x230/0x310 [ 420.983446][ C1] ? __dev_queue_xmit+0x265/0x3660 [ 420.988591][ C1] ? mark_lock+0x94/0x320 [ 420.992983][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 420.998985][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 421.004304][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.010575][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 421.015886][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.022069][ C1] ? ip_finish_output2+0xb04/0x11e0 [ 421.027333][ C1] ? ip_finish_output2+0x457/0x11e0 [ 421.032576][ C1] ip_finish_output2+0xcec/0x11e0 [ 421.037662][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.043873][ C1] ? ip_finish_output2+0x457/0x11e0 [ 421.049293][ C1] ? ip_fragment+0x210/0x210 [ 421.053920][ C1] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 421.058812][ C1] ? ip_finish_output+0x3ef/0x4c0 [ 421.064053][ C1] ip_output+0x2a1/0x3b0 [ 421.068347][ C1] ? ip_output+0x60/0x3b0 [ 421.072873][ C1] ? __ip_queue_xmit+0x5d/0x1950 [ 421.077923][ C1] __ip_queue_xmit+0x1049/0x1950 [ 421.082970][ C1] ? __ip_queue_xmit+0x5d/0x1950 [ 421.087987][ C1] __tcp_transmit_skb+0x1d6b/0x33f0 [ 421.093397][ C1] ? __tcp_send_ack+0x5a0/0x5a0 [ 421.098444][ C1] ? __tcp_send_ack+0x176/0x5a0 [ 421.103400][ C1] tcp_rcv_established+0xb06/0x1d20 [ 421.108634][ C1] ? rt_is_expired+0x1c/0x2d0 [ 421.113364][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 421.118598][ C1] ? tcp_check_space+0xad0/0xad0 [ 421.123642][ C1] ? rt_is_expired+0x1c/0x2d0 [ 421.128425][ C1] ? rt_is_expired+0x250/0x2d0 [ 421.133298][ C1] tcp_v4_do_rcv+0x4ed/0xb80 [ 421.137947][ C1] tcp_v4_rcv+0x23bf/0x2af0 [ 421.142650][ C1] ? tcp_v4_rcv+0x1021/0x2af0 [ 421.147371][ C1] ? tcp_filter+0x90/0x90 [ 421.152018][ C1] ip_protocol_deliver_rcu+0x20e/0x3f0 [ 421.157879][ C1] ? ip_local_deliver_finish+0x1cb/0x510 [ 421.163723][ C1] ip_local_deliver_finish+0x2ca/0x510 [ 421.169294][ C1] NF_HOOK+0x32d/0x3b0 [ 421.173479][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.179764][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 421.184110][ C1] ? NF_HOOK+0x9f/0x3b0 [ 421.188285][ C1] ? ip_local_deliver+0x1b0/0x1b0 [ 421.193331][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 421.197851][ C1] ? ip_local_deliver+0x122/0x1b0 [ 421.203095][ C1] ip_sublist_rcv+0xa4c/0xd70 [ 421.207819][ C1] ? ip_list_rcv+0x440/0x440 [ 421.212461][ C1] ? ip_rcv_core+0xdb0/0xdb0 [ 421.217185][ C1] ip_list_rcv+0x3f2/0x440 [ 421.221626][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.227805][ C1] ? ip_rcv_finish+0x250/0x250 [ 421.232615][ C1] ? __netif_receive_skb_list_core+0x576/0x750 [ 421.239158][ C1] ? ip_rcv_finish+0x250/0x250 [ 421.244229][ C1] __netif_receive_skb_list_core+0x583/0x750 [ 421.250761][ C1] ? set_rps_cpu+0x6a0/0x6a0 [ 421.255365][ C1] ? read_tsc+0x9/0x20 [ 421.259455][ C1] netif_receive_skb_list_internal+0x943/0xca0 [ 421.265647][ C1] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 421.272079][ C1] ? dev_gro_receive+0x10ce/0x22c0 [ 421.277308][ C1] ? netif_receive_skb_core+0x230/0x230 [ 421.282975][ C1] napi_gro_receive+0x565/0xb00 [ 421.287915][ C1] receive_buf+0x2203/0x3820 [ 421.292761][ C1] ? virtnet_poll_tx+0x530/0x530 [ 421.297849][ C1] ? virtqueue_get_buf_ctx+0x697/0xd10 [ 421.303404][ C1] virtnet_poll+0x5dd/0x1280 [ 421.308062][ C1] ? refill_work+0x220/0x220 [ 421.312685][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.319057][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 421.324449][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.330641][ C1] __napi_poll+0xc0/0x460 [ 421.334993][ C1] net_rx_action+0x616/0xc40 [ 421.339615][ C1] ? net_tx_action+0x980/0x980 [ 421.344482][ C1] ? detach_timer+0x2b0/0x2b0 [ 421.349269][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.355476][ C1] handle_softirqs+0x280/0x820 [ 421.360342][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 421.365125][ C1] ? do_softirq+0x1a0/0x1a0 [ 421.369730][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 421.375558][ C1] __irq_exit_rcu+0xd3/0x190 [ 421.380161][ C1] ? irq_exit_rcu+0x20/0x20 [ 421.384859][ C1] irq_exit_rcu+0x9/0x20 [ 421.389205][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 421.395131][ C1] [ 421.398251][ C1] [ 421.401194][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.407831][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 421.413764][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 00 99 32 09 e8 9b 29 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 421.433805][ C1] RSP: 0018:ffffc9000f877918 EFLAGS: 00000286 [ 421.440079][ C1] RAX: 6fc538d0da874900 RBX: 0000000000000000 RCX: 6fc538d0da874900 [ 421.448072][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 421.456057][ C1] RBP: ffffc9000f877970 R08: ffffffff911c55ff R09: 1ffffffff2238abf [ 421.464165][ C1] R10: dffffc0000000000 R11: fffffbfff2238ac0 R12: ffff88802c008000 [ 421.472335][ C1] R13: dffffc0000000000 R14: ffff88801c258000 R15: ffff8880b8f3cac8 [ 421.480462][ C1] ? finish_task_switch+0x265/0x8f0 [ 421.485786][ C1] __schedule+0x155b/0x45a0 [ 421.490402][ C1] ? trace_irq_enable+0xbb/0xe0 [ 421.495288][ C1] ? asan.module_dtor+0x20/0x20 [ 421.500249][ C1] ? mark_lock+0x94/0x320 [ 421.504689][ C1] ? lock_chain_count+0x20/0x20 [ 421.509640][ C1] ? preempt_schedule+0xc0/0xd0 [ 421.514797][ C1] preempt_schedule_common+0x82/0xc0 [ 421.520366][ C1] preempt_schedule+0xc0/0xd0 [ 421.525216][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 421.531131][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.537309][ C1] preempt_schedule_thunk+0x1a/0x30 [ 421.542530][ C1] _raw_spin_unlock_irqrestore+0x111/0x120 [ 421.548372][ C1] ? _raw_spin_unlock+0x40/0x40 [ 421.553248][ C1] __se_sys_perf_event_open+0x183e/0x1c50 [ 421.559008][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 421.564753][ C1] ? lock_chain_count+0x20/0x20 [ 421.569975][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 421.575287][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 421.581207][ C1] do_syscall_64+0x55/0xa0 [ 421.585656][ C1] ? clear_bhb_loop+0x40/0x90 [ 421.590441][ C1] ? clear_bhb_loop+0x40/0x90 [ 421.595142][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.601222][ C1] RIP: 0033:0x7ff415d9c819 [ 421.605740][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.625988][ C1] RSP: 002b:00007ff416c19028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 421.634507][ C1] RAX: ffffffffffffffda RBX: 00007ff416015fa0 RCX: 00007ff415d9c819 [ 421.642489][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 421.650648][ C1] RBP: 00007ff415e32c91 R08: 0000000000000002 R09: 0000000000000000 [ 421.658811][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 421.666883][ C1] R13: 00007ff416016038 R14: 00007ff416015fa0 R15: 00007ffe9b9f7ce8 [ 421.674903][ C1] [ 421.678119][ C1] Sending NMI from CPU 1 to CPUs 0: [ 421.683447][ C0] NMI backtrace for cpu 0 [ 421.683456][ C0] CPU: 0 PID: 59 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 421.683470][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 421.683479][ C0] Workqueue: events_unbound toggle_allocation_gate [ 421.683504][ C0] RIP: 0010:smp_call_function_many_cond+0xe03/0x1140 [ 421.683524][ C0] Code: 89 ee 83 e6 01 31 ff e8 cb f5 0a 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 06 f2 0a 00 eb 38 f3 90 42 0f b6 04 2b <84> c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 ea f1 0a 00 eb e4 44 [ 421.683536][ C0] RSP: 0018:ffffc900015a7780 EFLAGS: 00000293 [ 421.683547][ C0] RAX: 0000000000000000 RBX: 1ffff110171e826d RCX: ffff88801bae1e00 [ 421.683557][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 421.683566][ C0] RBP: ffffc900015a7900 R08: ffffffff911c5507 R09: 1ffffffff2238aa0 [ 421.683576][ C0] R10: dffffc0000000000 R11: fffffbfff2238aa1 R12: ffff8880b8f41368 [ 421.683586][ C0] R13: dffffc0000000000 R14: ffff8880b8e3d148 R15: 0000000000000001 [ 421.683597][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 421.683609][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 421.683619][ C0] CR2: 00007ffcc09fafe0 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 421.683634][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 421.683643][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 421.683653][ C0] Call Trace: [ 421.683660][ C0] [ 421.683669][ C0] ? text_poke_sync+0x30/0x30 [ 421.683689][ C0] ? smp_call_function_many+0x40/0x40 [ 421.683705][ C0] ? text_poke+0xc0/0xc0 [ 421.683719][ C0] ? __mutex_trylock_common+0x159/0x260 [ 421.683735][ C0] ? trace_raw_output_contention_end+0xd0/0xd0 [ 421.683751][ C0] ? text_poke_sync+0x30/0x30 [ 421.683765][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 421.683782][ C0] ? kmem_cache_alloc_bulk+0x12a/0x5a0 [ 421.683816][ C0] text_poke_bp_batch+0x31e/0x990 [ 421.683836][ C0] ? text_poke_loc_init+0x880/0x880 [ 421.683851][ C0] ? mutex_lock_nested+0x20/0x20 [ 421.683865][ C0] ? text_poke_queue+0x140/0x190 [ 421.683885][ C0] ? arch_jump_label_transform_queue+0x93/0x100 [ 421.683910][ C0] text_poke_finish+0x30/0x50 [ 421.683926][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 421.683945][ C0] static_key_enable_cpuslocked+0x123/0x240 [ 421.683964][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 421.683983][ C0] static_key_enable+0x1a/0x20 [ 421.684000][ C0] toggle_allocation_gate+0xa8/0x260 [ 421.684019][ C0] ? show_object+0x70/0x70 [ 421.684039][ C0] ? read_lock_is_recursive+0x20/0x20 [ 421.684059][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 421.684076][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 421.684093][ C0] process_scheduled_works+0xa5d/0x15d0 [ 421.684123][ C0] ? worker_attach_to_pool+0x380/0x380 [ 421.684143][ C0] ? assign_work+0x3d2/0x5d0 [ 421.684163][ C0] worker_thread+0xa55/0xfc0 [ 421.684193][ C0] kthread+0x2fa/0x390 [ 421.684206][ C0] ? pr_cont_work+0x560/0x560 [ 421.684229][ C0] ? kthread_blkcg+0xd0/0xd0 [ 421.684243][ C0] ret_from_fork+0x48/0x80 [ 421.684260][ C0] ? kthread_blkcg+0xd0/0xd0 [ 421.684274][ C0] ret_from_fork_asm+0x11/0x20 [ 421.684306][ C0] [ 421.684441][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 422.016135][ C1] CPU: 1 PID: 9242 Comm: syz.0.1076 Tainted: G L syzkaller #0 [ 422.025006][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 422.035178][ C1] Call Trace: [ 422.039089][ C1] [ 422.041953][ C1] dump_stack_lvl+0x18c/0x250 [ 422.046765][ C1] ? show_regs_print_info+0x20/0x20 [ 422.052276][ C1] ? load_image+0x420/0x420 [ 422.056821][ C1] panic+0x2dc/0x730 [ 422.060758][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 422.065465][ C1] ? nmi_backtrace_stall_check+0x424/0x430 [ 422.071620][ C1] ? irq_work_queue+0xc3/0x140 [ 422.076711][ C1] watchdog_timer_fn+0x5f0/0x5f0 [ 422.081679][ C1] __hrtimer_run_queues+0x4e1/0xc40 [ 422.086903][ C1] ? proc_watchdog_cpumask+0xd0/0xd0 [ 422.092387][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 422.097804][ C1] ? read_tsc+0x9/0x20 [ 422.101892][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 422.106874][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 422.112790][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 422.118463][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.124456][ C1] RIP: 0010:__sanitizer_cov_trace_cmp4+0x2e/0x90 [ 422.130860][ C1] Code: 48 8b 04 24 65 48 8b 15 30 92 7c 7e 65 8b 0d 31 92 7c 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 <74> 52 8b 8a f8 15 00 00 83 f9 03 75 47 48 8b 8a 00 16 00 00 44 8b [ 422.151262][ C1] RSP: 0018:ffffc900001ef050 EFLAGS: 00000246 [ 422.157433][ C1] RAX: ffffffff813b3a72 RBX: dffffc0000000000 RCX: 0000000000000100 [ 422.165416][ C1] RDX: ffff88802c008000 RSI: 000000000016dec9 RDI: 000000000016deca [ 422.173756][ C1] RBP: 000000000016deca R08: ffffc900001ef1f0 R09: 0000000000000010 [ 422.181734][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc900001ef128 [ 422.182792][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 422.182804][ C0] rcu: 1-....: (1 GPs behind) idle=30ac/1/0x4000000000000000 softirq=24705/24706 fqs=3972 [ 422.182829][ C0] rcu: hardirqs softirqs csw/system [ 422.182835][ C0] rcu: number: 1241647 0 0 [ 422.182846][ C0] rcu: cputime: 15841 35024 41 ==> 52500(ms) [ 422.182858][ C0] rcu: (detected by 0, t=10502 jiffies, g=30505, q=1768 ncpus=2) [ 422.182872][ C0] Sending NMI from CPU 0 to CPUs 1: [ 422.182896][ C1] NMI backtrace for cpu 1 [ 422.182904][ C1] CPU: 1 PID: 9242 Comm: syz.0.1076 Tainted: G L syzkaller #0 [ 422.182919][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 422.182927][ C1] RIP: 0010:io_serial_in+0x77/0xb0 [ 422.182952][ C1] Code: e8 8e 6b de fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f a3 36 fd 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 44 89 f9 80 e1 07 38 c1 7c aa 4c [ 422.182964][ C1] RSP: 0018:ffffc900001ee2b8 EFLAGS: 00000002 [ 422.182977][ C1] RAX: 1ffffffff2ebea00 RBX: 00000000000003fd RCX: 0000000000000000 [ 422.182987][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 422.182996][ C1] RBP: ffffc900001ee4b0 R08: ffff888021580237 R09: 1ffff110042b0046 [ 422.183006][ C1] R10: dffffc0000000000 R11: ffffed10042b0047 R12: dffffc0000000000 [ 422.183016][ C1] R13: 000000000000269d R14: ffffffff975f5220 R15: 0000000000000000 [ 422.183026][ C1] FS: 00007ff416c196c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 422.183039][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.183049][ C1] CR2: 00007ffaf4e15f40 CR3: 0000000057e75000 CR4: 00000000003506e0 [ 422.183064][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 422.183073][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 422.183082][ C1] Call Trace: [ 422.183089][ C1] [ 422.183097][ C1] serial8250_console_write+0xf78/0x17f0 [ 422.183118][ C1] ? verify_lock_unused+0x140/0x140 [ 422.183143][ C1] ? serial8250_set_defaults+0x640/0x640 [ 422.183165][ C1] ? read_lock_is_recursive+0x20/0x20 [ 422.183197][ C1] ? console_flush_all+0x355/0xd20 [ 422.183217][ C1] console_flush_all+0x6db/0xd20 [ 422.183235][ C1] ? console_flush_all+0x10a/0xd20 [ 422.183253][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 422.183275][ C1] ? is_console_locked+0x20/0x20 [ 422.183290][ C1] ? up+0xe7/0x160 [ 422.183303][ C1] ? __down_timeout+0x10/0x10 [ 422.183318][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 422.183337][ C1] console_unlock+0xad/0x350 [ 422.183355][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 422.183370][ C1] ? vprintk_emit+0x53d/0x610 [ 422.183387][ C1] ? printk_sprint+0x460/0x460 [ 422.183403][ C1] ? vprintk_emit+0x53d/0x610 [ 422.183420][ C1] vprintk_emit+0x497/0x610 [ 422.183438][ C1] ? printk_sprint+0x460/0x460 [ 422.183454][ C1] ? _printk+0xde/0x130 [ 422.183478][ C1] _printk+0xde/0x130 [ 422.183495][ C1] ? copy_from_kernel_nofault+0x1eb/0x310 [ 422.183516][ C1] ? load_image+0x420/0x420 [ 422.183532][ C1] ? show_opcodes+0x146/0x170 [ 422.183555][ C1] __show_regs+0x225/0x600 [ 422.183572][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.183592][ C1] __show_trace_log_lvl+0x3bf/0x6c0 [ 422.183615][ C1] ? __sanitizer_cov_trace_cmp4+0x2e/0x90 [ 422.183635][ C1] dump_stack_lvl+0x18c/0x250 [ 422.183656][ C1] ? show_regs_print_info+0x20/0x20 [ 422.183676][ C1] ? load_image+0x420/0x420 [ 422.183700][ C1] panic+0x2dc/0x730 [ 422.183719][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 422.183734][ C1] ? nmi_backtrace_stall_check+0x424/0x430 [ 422.183754][ C1] ? irq_work_queue+0xc3/0x140 [ 422.183774][ C1] watchdog_timer_fn+0x5f0/0x5f0 [ 422.183795][ C1] __hrtimer_run_queues+0x4e1/0xc40 [ 422.183825][ C1] ? proc_watchdog_cpumask+0xd0/0xd0 [ 422.183847][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 422.183861][ C1] ? read_tsc+0x9/0x20 [ 422.183887][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 422.183915][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 422.183935][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 422.183952][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.183969][ C1] RIP: 0010:__sanitizer_cov_trace_cmp4+0x2e/0x90 [ 422.183987][ C1] Code: 48 8b 04 24 65 48 8b 15 30 92 7c 7e 65 8b 0d 31 92 7c 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 <74> 52 8b 8a f8 15 00 00 83 f9 03 75 47 48 8b 8a 00 16 00 00 44 8b [ 422.183998][ C1] RSP: 0018:ffffc900001ef050 EFLAGS: 00000246 [ 422.184009][ C1] RAX: ffffffff813b3a72 RBX: dffffc0000000000 RCX: 0000000000000100 [ 422.184019][ C1] RDX: ffff88802c008000 RSI: 000000000016dec9 RDI: 000000000016deca [ 422.184028][ C1] RBP: 000000000016deca R08: ffffc900001ef1f0 R09: 0000000000000010 [ 422.184038][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc900001ef128 [ 422.184047][ C1] R13: 000000000016dec9 R14: ffffc900001ef15d R15: 000000000007fb2e [ 422.184062][ C1] ? unwind_next_frame+0x2b2/0x2970 [ 422.184080][ C1] unwind_next_frame+0x2b2/0x2970 [ 422.184097][ C1] ? ip_protocol_deliver_rcu+0x20d/0x3f0 [ 422.184119][ C1] ? ip_protocol_deliver_rcu+0x20e/0x3f0 [ 422.184139][ C1] ? ip_protocol_deliver_rcu+0x20e/0x3f0 [ 422.184157][ C1] ? stack_trace_save+0x100/0x100 [ 422.184173][ C1] arch_stack_walk+0x144/0x190 [ 422.184199][ C1] ? ip_protocol_deliver_rcu+0x20e/0x3f0 [ 422.184220][ C1] stack_trace_save+0xaa/0x100 [ 422.184237][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 422.184254][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 422.184269][ C1] ? sched_clock_cpu+0x75/0x430 [ 422.184286][ C1] kasan_set_track+0x4e/0x70 [ 422.184302][ C1] ? kasan_set_track+0x4e/0x70 [ 422.184315][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 422.184330][ C1] ? slab_post_alloc_hook+0x6e/0x4b0 [ 422.184349][ C1] ? kmem_cache_alloc+0x11a/0x2d0 [ 422.184366][ C1] ? skb_clone+0x1eb/0x370 [ 422.184380][ C1] ? dev_queue_xmit_nit+0x24d/0xbb0 [ 422.184396][ C1] ? dev_hard_start_xmit+0x148/0x740 [ 422.184413][ C1] ? sch_direct_xmit+0x25e/0x4c0 [ 422.184428][ C1] ? __dev_queue_xmit+0x165d/0x3660 [ 422.184444][ C1] ? ip_finish_output2+0xcec/0x11e0 [ 422.184458][ C1] ? ip_output+0x2a1/0x3b0 [ 422.184471][ C1] ? __ip_queue_xmit+0x1049/0x1950 [ 422.184483][ C1] ? __tcp_transmit_skb+0x1d6b/0x33f0 [ 422.184500][ C1] ? tcp_rcv_established+0xb06/0x1d20 [ 422.184514][ C1] ? tcp_v4_do_rcv+0x4ed/0xb80 [ 422.184532][ C1] ? tcp_v4_rcv+0x23bf/0x2af0 [ 422.184550][ C1] ? ip_protocol_deliver_rcu+0x20e/0x3f0 [ 422.184588][ C1] __kasan_slab_alloc+0x6c/0x80 [ 422.184606][ C1] slab_post_alloc_hook+0x6e/0x4b0 [ 422.184629][ C1] kmem_cache_alloc+0x11a/0x2d0 [ 422.184648][ C1] ? skb_clone+0x1eb/0x370 [ 422.184664][ C1] skb_clone+0x1eb/0x370 [ 422.184678][ C1] ? dev_queue_xmit_nit+0x235/0xbb0 [ 422.184695][ C1] dev_queue_xmit_nit+0x24d/0xbb0 [ 422.184712][ C1] ? lock_chain_count+0x20/0x20 [ 422.184726][ C1] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 422.184744][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.184763][ C1] dev_hard_start_xmit+0x148/0x740 [ 422.184788][ C1] sch_direct_xmit+0x25e/0x4c0 [ 422.184807][ C1] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0 [ 422.184824][ C1] ? __dev_queue_xmit+0x12cf/0x3660 [ 422.184844][ C1] __dev_queue_xmit+0x165d/0x3660 [ 422.184861][ C1] ? lapic_next_event+0x11/0x20 [ 422.184876][ C1] ? clockevents_program_event+0x230/0x310 [ 422.184900][ C1] ? __dev_queue_xmit+0x265/0x3660 [ 422.184916][ C1] ? mark_lock+0x94/0x320 [ 422.184933][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 422.184951][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 422.184971][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.184988][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 422.185005][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.185025][ C1] ? ip_finish_output2+0xb04/0x11e0 [ 422.185042][ C1] ? ip_finish_output2+0x457/0x11e0 [ 422.185055][ C1] ip_finish_output2+0xcec/0x11e0 [ 422.185070][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.185087][ C1] ? ip_finish_output2+0x457/0x11e0 [ 422.185105][ C1] ? ip_fragment+0x210/0x210 [ 422.185119][ C1] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 422.185134][ C1] ? ip_finish_output+0x3ef/0x4c0 [ 422.185150][ C1] ip_output+0x2a1/0x3b0 [ 422.185165][ C1] ? ip_output+0x60/0x3b0 [ 422.185178][ C1] ? __ip_queue_xmit+0x5d/0x1950 [ 422.185199][ C1] __ip_queue_xmit+0x1049/0x1950 [ 422.185217][ C1] ? __ip_queue_xmit+0x5d/0x1950 [ 422.185232][ C1] __tcp_transmit_skb+0x1d6b/0x33f0 [ 422.185260][ C1] ? __tcp_send_ack+0x5a0/0x5a0 [ 422.185284][ C1] ? __tcp_send_ack+0x176/0x5a0 [ 422.185302][ C1] tcp_rcv_established+0xb06/0x1d20 [ 422.185317][ C1] ? rt_is_expired+0x1c/0x2d0 [ 422.185338][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 422.185363][ C1] ? tcp_check_space+0xad0/0xad0 [ 422.185377][ C1] ? rt_is_expired+0x1c/0x2d0 [ 422.185395][ C1] ? rt_is_expired+0x250/0x2d0 [ 422.185415][ C1] tcp_v4_do_rcv+0x4ed/0xb80 [ 422.185438][ C1] tcp_v4_rcv+0x23bf/0x2af0 [ 422.185457][ C1] ? tcp_v4_rcv+0x1021/0x2af0 [ 422.185492][ C1] ? tcp_filter+0x90/0x90 [ 422.185515][ C1] ip_protocol_deliver_rcu+0x20e/0x3f0 [ 422.185535][ C1] ? ip_local_deliver_finish+0x1cb/0x510 [ 422.185556][ C1] ip_local_deliver_finish+0x2ca/0x510 [ 422.185579][ C1] NF_HOOK+0x32d/0x3b0 [ 422.185597][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.185615][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 422.185633][ C1] ? NF_HOOK+0x9f/0x3b0 [ 422.185650][ C1] ? ip_local_deliver+0x1b0/0x1b0 [ 422.185671][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 422.185692][ C1] ? ip_local_deliver+0x122/0x1b0 [ 422.185712][ C1] ip_sublist_rcv+0xa4c/0xd70 [ 422.185737][ C1] ? ip_list_rcv+0x440/0x440 [ 422.185759][ C1] ? ip_rcv_core+0xdb0/0xdb0 [ 422.185783][ C1] ip_list_rcv+0x3f2/0x440 [ 422.185802][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.185823][ C1] ? ip_rcv_finish+0x250/0x250 [ 422.185842][ C1] ? __netif_receive_skb_list_core+0x576/0x750 [ 422.185859][ C1] ? ip_rcv_finish+0x250/0x250 [ 422.185879][ C1] __netif_receive_skb_list_core+0x583/0x750 [ 422.185901][ C1] ? set_rps_cpu+0x6a0/0x6a0 [ 422.185916][ C1] ? read_tsc+0x9/0x20 [ 422.185934][ C1] netif_receive_skb_list_internal+0x943/0xca0 [ 422.185957][ C1] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 422.185974][ C1] ? dev_gro_receive+0x10ce/0x22c0 [ 422.185988][ C1] ? netif_receive_skb_core+0x230/0x230 [ 422.186014][ C1] napi_gro_receive+0x565/0xb00 [ 422.186038][ C1] receive_buf+0x2203/0x3820 [ 422.186064][ C1] ? virtnet_poll_tx+0x530/0x530 [ 422.186080][ C1] ? virtqueue_get_buf_ctx+0x697/0xd10 [ 422.186104][ C1] virtnet_poll+0x5dd/0x1280 [ 422.186125][ C1] ? refill_work+0x220/0x220 [ 422.186142][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.186159][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 422.186176][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.186203][ C1] __napi_poll+0xc0/0x460 [ 422.186220][ C1] net_rx_action+0x616/0xc40 [ 422.186241][ C1] ? net_tx_action+0x980/0x980 [ 422.186256][ C1] ? detach_timer+0x2b0/0x2b0 [ 422.186271][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.186294][ C1] handle_softirqs+0x280/0x820 [ 422.186312][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 422.186328][ C1] ? do_softirq+0x1a0/0x1a0 [ 422.186344][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 422.186364][ C1] __irq_exit_rcu+0xd3/0x190 [ 422.186377][ C1] ? irq_exit_rcu+0x20/0x20 [ 422.186395][ C1] irq_exit_rcu+0x9/0x20 [ 422.186408][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 422.186425][ C1] [ 422.186429][ C1] [ 422.186434][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.186451][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 422.186466][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 00 99 32 09 e8 9b 29 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 422.186478][ C1] RSP: 0018:ffffc9000f877918 EFLAGS: 00000286 [ 422.186489][ C1] RAX: 6fc538d0da874900 RBX: 0000000000000000 RCX: 6fc538d0da874900 [ 422.186499][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 422.186509][ C1] RBP: ffffc9000f877970 R08: ffffffff911c55ff R09: 1ffffffff2238abf [ 422.186519][ C1] R10: dffffc0000000000 R11: fffffbfff2238ac0 R12: ffff88802c008000 [ 422.186529][ C1] R13: dffffc0000000000 R14: ffff88801c258000 R15: ffff8880b8f3cac8 [ 422.186548][ C1] ? finish_task_switch+0x265/0x8f0 [ 422.186566][ C1] __schedule+0x155b/0x45a0 [ 422.186586][ C1] ? trace_irq_enable+0xbb/0xe0 [ 422.186616][ C1] ? asan.module_dtor+0x20/0x20 [ 422.186637][ C1] ? mark_lock+0x94/0x320 [ 422.186657][ C1] ? lock_chain_count+0x20/0x20 [ 422.186671][ C1] ? preempt_schedule+0xc0/0xd0 [ 422.186692][ C1] preempt_schedule_common+0x82/0xc0 [ 422.186712][ C1] preempt_schedule+0xc0/0xd0 [ 422.186732][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 422.186752][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.186772][ C1] preempt_schedule_thunk+0x1a/0x30 [ 422.186795][ C1] _raw_spin_unlock_irqrestore+0x111/0x120 [ 422.186813][ C1] ? _raw_spin_unlock+0x40/0x40 [ 422.186834][ C1] __se_sys_perf_event_open+0x183e/0x1c50 [ 422.186857][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 422.186887][ C1] ? lock_chain_count+0x20/0x20 [ 422.186906][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 422.186921][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 422.186938][ C1] do_syscall_64+0x55/0xa0 [ 422.186951][ C1] ? clear_bhb_loop+0x40/0x90 [ 422.186967][ C1] ? clear_bhb_loop+0x40/0x90 [ 422.186984][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.187001][ C1] RIP: 0033:0x7ff415d9c819 [ 422.187014][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.187025][ C1] RSP: 002b:00007ff416c19028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 422.187039][ C1] RAX: ffffffffffffffda RBX: 00007ff416015fa0 RCX: 00007ff415d9c819 [ 422.187049][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 422.187058][ C1] RBP: 00007ff415e32c91 R08: 0000000000000002 R09: 0000000000000000 [ 422.187067][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 422.187077][ C1] R13: 00007ff416016038 R14: 00007ff416015fa0 R15: 00007ffe9b9f7ce8 [ 422.187094][ C1] [ 423.630216][ C1] R13: 000000000016dec9 R14: ffffc900001ef15d R15: 000000000007fb2e [ 423.638339][ C1] ? unwind_next_frame+0x2b2/0x2970 [ 423.643573][ C1] unwind_next_frame+0x2b2/0x2970 [ 423.648702][ C1] ? ip_protocol_deliver_rcu+0x20d/0x3f0 [ 423.654878][ C1] ? ip_protocol_deliver_rcu+0x20e/0x3f0 [ 423.660622][ C1] ? ip_protocol_deliver_rcu+0x20e/0x3f0 [ 423.666406][ C1] ? stack_trace_save+0x100/0x100 [ 423.671708][ C1] arch_stack_walk+0x144/0x190 [ 423.676594][ C1] ? ip_protocol_deliver_rcu+0x20e/0x3f0 [ 423.682359][ C1] stack_trace_save+0xaa/0x100 [ 423.687247][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 423.692377][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 423.697597][ C1] ? sched_clock_cpu+0x75/0x430 [ 423.702650][ C1] kasan_set_track+0x4e/0x70 [ 423.707341][ C1] ? kasan_set_track+0x4e/0x70 [ 423.712465][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 423.717686][ C1] ? slab_post_alloc_hook+0x6e/0x4b0 [ 423.723293][ C1] ? kmem_cache_alloc+0x11a/0x2d0 [ 423.728352][ C1] ? skb_clone+0x1eb/0x370 [ 423.732799][ C1] ? dev_queue_xmit_nit+0x24d/0xbb0 [ 423.738024][ C1] ? dev_hard_start_xmit+0x148/0x740 [ 423.743349][ C1] ? sch_direct_xmit+0x25e/0x4c0 [ 423.748502][ C1] ? __dev_queue_xmit+0x165d/0x3660 [ 423.753920][ C1] ? ip_finish_output2+0xcec/0x11e0 [ 423.759164][ C1] ? ip_output+0x2a1/0x3b0 [ 423.763963][ C1] ? __ip_queue_xmit+0x1049/0x1950 [ 423.769190][ C1] ? __tcp_transmit_skb+0x1d6b/0x33f0 [ 423.774937][ C1] ? tcp_rcv_established+0xb06/0x1d20 [ 423.780499][ C1] ? tcp_v4_do_rcv+0x4ed/0xb80 [ 423.785542][ C1] ? tcp_v4_rcv+0x23bf/0x2af0 [ 423.790427][ C1] ? ip_protocol_deliver_rcu+0x20e/0x3f0 [ 423.796171][ C1] __kasan_slab_alloc+0x6c/0x80 [ 423.801333][ C1] slab_post_alloc_hook+0x6e/0x4b0 [ 423.806500][ C1] kmem_cache_alloc+0x11a/0x2d0 [ 423.811469][ C1] ? skb_clone+0x1eb/0x370 [ 423.816128][ C1] skb_clone+0x1eb/0x370 [ 423.820950][ C1] ? dev_queue_xmit_nit+0x235/0xbb0 [ 423.826498][ C1] dev_queue_xmit_nit+0x24d/0xbb0 [ 423.831556][ C1] ? lock_chain_count+0x20/0x20 [ 423.836684][ C1] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 423.842247][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 423.848431][ C1] dev_hard_start_xmit+0x148/0x740 [ 423.855359][ C1] sch_direct_xmit+0x25e/0x4c0 [ 423.860517][ C1] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0 [ 423.867069][ C1] ? __dev_queue_xmit+0x12cf/0x3660 [ 423.872404][ C1] __dev_queue_xmit+0x165d/0x3660 [ 423.877536][ C1] ? lapic_next_event+0x11/0x20 [ 423.882571][ C1] ? clockevents_program_event+0x230/0x310 [ 423.888410][ C1] ? __dev_queue_xmit+0x265/0x3660 [ 423.893557][ C1] ? mark_lock+0x94/0x320 [ 423.898349][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 423.904565][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 423.910161][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 423.916377][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 423.921968][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 423.928357][ C1] ? ip_finish_output2+0xb04/0x11e0 [ 423.934733][ C1] ? ip_finish_output2+0x457/0x11e0 [ 423.939958][ C1] ip_finish_output2+0xcec/0x11e0 [ 423.945156][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 423.951455][ C1] ? ip_finish_output2+0x457/0x11e0 [ 423.956877][ C1] ? ip_fragment+0x210/0x210 [ 423.961771][ C1] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 423.967133][ C1] ? ip_finish_output+0x3ef/0x4c0 [ 423.972221][ C1] ip_output+0x2a1/0x3b0 [ 423.976679][ C1] ? ip_output+0x60/0x3b0 [ 423.981117][ C1] ? __ip_queue_xmit+0x5d/0x1950 [ 423.986246][ C1] __ip_queue_xmit+0x1049/0x1950 [ 423.991313][ C1] ? __ip_queue_xmit+0x5d/0x1950 [ 423.996350][ C1] __tcp_transmit_skb+0x1d6b/0x33f0 [ 424.001675][ C1] ? __tcp_send_ack+0x5a0/0x5a0 [ 424.006832][ C1] ? __tcp_send_ack+0x176/0x5a0 [ 424.011965][ C1] tcp_rcv_established+0xb06/0x1d20 [ 424.017195][ C1] ? rt_is_expired+0x1c/0x2d0 [ 424.021983][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 424.027330][ C1] ? tcp_check_space+0xad0/0xad0 [ 424.032369][ C1] ? rt_is_expired+0x1c/0x2d0 [ 424.037062][ C1] ? rt_is_expired+0x250/0x2d0 [ 424.042041][ C1] tcp_v4_do_rcv+0x4ed/0xb80 [ 424.046951][ C1] tcp_v4_rcv+0x23bf/0x2af0 [ 424.051473][ C1] ? tcp_v4_rcv+0x1021/0x2af0 [ 424.056222][ C1] ? tcp_filter+0x90/0x90 [ 424.060845][ C1] ip_protocol_deliver_rcu+0x20e/0x3f0 [ 424.066671][ C1] ? ip_local_deliver_finish+0x1cb/0x510 [ 424.072579][ C1] ip_local_deliver_finish+0x2ca/0x510 [ 424.078257][ C1] NF_HOOK+0x32d/0x3b0 [ 424.082486][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 424.088932][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 424.093228][ C1] ? NF_HOOK+0x9f/0x3b0 [ 424.097454][ C1] ? ip_local_deliver+0x1b0/0x1b0 [ 424.102780][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 424.107299][ C1] ? ip_local_deliver+0x122/0x1b0 [ 424.112526][ C1] ip_sublist_rcv+0xa4c/0xd70 [ 424.117557][ C1] ? ip_list_rcv+0x440/0x440 [ 424.122467][ C1] ? ip_rcv_core+0xdb0/0xdb0 [ 424.127446][ C1] ip_list_rcv+0x3f2/0x440 [ 424.132092][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 424.138557][ C1] ? ip_rcv_finish+0x250/0x250 [ 424.143352][ C1] ? __netif_receive_skb_list_core+0x576/0x750 [ 424.149546][ C1] ? ip_rcv_finish+0x250/0x250 [ 424.154584][ C1] __netif_receive_skb_list_core+0x583/0x750 [ 424.160866][ C1] ? set_rps_cpu+0x6a0/0x6a0 [ 424.165553][ C1] ? read_tsc+0x9/0x20 [ 424.169831][ C1] netif_receive_skb_list_internal+0x943/0xca0 [ 424.176292][ C1] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 424.183012][ C1] ? dev_gro_receive+0x10ce/0x22c0 [ 424.188318][ C1] ? netif_receive_skb_core+0x230/0x230 [ 424.194162][ C1] napi_gro_receive+0x565/0xb00 [ 424.199072][ C1] receive_buf+0x2203/0x3820 [ 424.203723][ C1] ? virtnet_poll_tx+0x530/0x530 [ 424.208892][ C1] ? virtqueue_get_buf_ctx+0x697/0xd10 [ 424.214636][ C1] virtnet_poll+0x5dd/0x1280 [ 424.219360][ C1] ? refill_work+0x220/0x220 [ 424.224135][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 424.230305][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 424.235698][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 424.241973][ C1] __napi_poll+0xc0/0x460 [ 424.246503][ C1] net_rx_action+0x616/0xc40 [ 424.251134][ C1] ? net_tx_action+0x980/0x980 [ 424.256201][ C1] ? detach_timer+0x2b0/0x2b0 [ 424.261097][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 424.267447][ C1] handle_softirqs+0x280/0x820 [ 424.272224][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 424.277024][ C1] ? do_softirq+0x1a0/0x1a0 [ 424.281574][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 424.287061][ C1] __irq_exit_rcu+0xd3/0x190 [ 424.291668][ C1] ? irq_exit_rcu+0x20/0x20 [ 424.296277][ C1] irq_exit_rcu+0x9/0x20 [ 424.300622][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 424.306327][ C1] [ 424.309358][ C1] [ 424.312382][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 424.318475][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 424.324580][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 00 99 32 09 e8 9b 29 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 424.345126][ C1] RSP: 0018:ffffc9000f877918 EFLAGS: 00000286 [ 424.351483][ C1] RAX: 6fc538d0da874900 RBX: 0000000000000000 RCX: 6fc538d0da874900 [ 424.359890][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 424.368146][ C1] RBP: ffffc9000f877970 R08: ffffffff911c55ff R09: 1ffffffff2238abf [ 424.376411][ C1] R10: dffffc0000000000 R11: fffffbfff2238ac0 R12: ffff88802c008000 [ 424.385292][ C1] R13: dffffc0000000000 R14: ffff88801c258000 R15: ffff8880b8f3cac8 [ 424.393509][ C1] ? finish_task_switch+0x265/0x8f0 [ 424.398728][ C1] __schedule+0x155b/0x45a0 [ 424.403369][ C1] ? trace_irq_enable+0xbb/0xe0 [ 424.408339][ C1] ? asan.module_dtor+0x20/0x20 [ 424.413233][ C1] ? mark_lock+0x94/0x320 [ 424.417859][ C1] ? lock_chain_count+0x20/0x20 [ 424.422730][ C1] ? preempt_schedule+0xc0/0xd0 [ 424.427687][ C1] preempt_schedule_common+0x82/0xc0 [ 424.433080][ C1] preempt_schedule+0xc0/0xd0 [ 424.437958][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 424.443713][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 424.450061][ C1] preempt_schedule_thunk+0x1a/0x30 [ 424.455503][ C1] _raw_spin_unlock_irqrestore+0x111/0x120 [ 424.461499][ C1] ? _raw_spin_unlock+0x40/0x40 [ 424.466383][ C1] __se_sys_perf_event_open+0x183e/0x1c50 [ 424.472211][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 424.478097][ C1] ? lock_chain_count+0x20/0x20 [ 424.482968][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 424.488207][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 424.494200][ C1] do_syscall_64+0x55/0xa0 [ 424.499096][ C1] ? clear_bhb_loop+0x40/0x90 [ 424.503873][ C1] ? clear_bhb_loop+0x40/0x90 [ 424.508826][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.515168][ C1] RIP: 0033:0x7ff415d9c819 [ 424.519699][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.539868][ C1] RSP: 002b:00007ff416c19028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 424.548598][ C1] RAX: ffffffffffffffda RBX: 00007ff416015fa0 RCX: 00007ff415d9c819 [ 424.556785][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 424.564787][ C1] RBP: 00007ff415e32c91 R08: 0000000000000002 R09: 0000000000000000 [ 424.573037][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 424.581291][ C1] R13: 00007ff416016038 R14: 00007ff416015fa0 R15: 00007ffe9b9f7ce8 [ 424.589403][ C1] [ 424.593691][ C1] Kernel Offset: disabled [ 424.598407][ C1] Rebooting in 86400 seconds..