last executing test programs: 2.321651599s ago: executing program 1 (id=1185): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000001e50f7a741925400000000000000000000000000000000000000000008e053c77f0239"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xaf, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4be3f9cbb2623032, @perf_config_ext={0x5}, 0x402, 0x0, 0x0, 0xe80a6b4847db2a6d, 0x5f, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000070000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe33) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000001, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d8030000000000", 0x2c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 2.093155734s ago: executing program 1 (id=1188): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c000000000000000f0f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) 1.939889917s ago: executing program 1 (id=1192): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0x2, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x108c0, 0xa7, 0x2, 0x9, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xb}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x24, &(0x7f0000000200), 0x4) perf_event_open(&(0x7f0000000040)={0x5, 0x69, 0x0, 0x1, 0x8, 0xa, 0x0, 0x4, 0x400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={0x0, 0x8}, 0x11950, 0x4854, 0x3, 0x6, 0x5, 0xb5, 0x5, 0x0, 0xc8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) close(0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e0000000000000004a6000003000000000000003aa06e21d3ea3e9cbe4c7e9189c92a436b19e768e2fb6b9ad7c65bcc298f9de5a4bf306e89f5f4af90783a90a07b2a4574e13c7ecb402920286ede27830f035f7761f246bad369350f49960553077e8a205377236439b1053694df36715032e29b275db0180190e75eed33968146a887c9ca625a5eb06fb5eda539630fffc2d3abe1776975b265dcaad260726e0bd6b06eda7704a67b73e8581c4df37563", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) perf_event_open$cgroup(&(0x7f0000000380)={0x5, 0x80, 0x7d, 0x6, 0x4, 0xc7, 0x0, 0x0, 0x20404, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x1, 0x81, 0x8, 0x1, 0x9, 0x793, 0x48, 0x0, 0x0, 0x0, 0x801}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x9d}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x800000}, 0x94) 1.889585978s ago: executing program 0 (id=1193): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x2, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xb}, 0x1c1c0, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f00000000000001000000000000000000000014000000000000000000000002000000000000000000000014000000000406000000000002000000008000000000000011000000000000000000000001000000000000000000000011000000000000000200fdff000000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) recvmsg(r1, &(0x7f0000000e00)={&(0x7f00000002c0)=@nfc, 0x80, 0x0, 0x0, &(0x7f0000000d80)=""/113, 0x71}, 0x60) setsockopt$sock_attach_bpf(r4, 0x6, 0x6, &(0x7f0000000740), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2545, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x400, 0x5, 0xfffffffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r5, 0x0, 0x24008840) sendmsg$kcm(r6, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, 0xfffffffe}, 0x80, 0x0}, 0x48404) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.82385821s ago: executing program 3 (id=1194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000000)=r1, 0x4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30040041) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) close(r3) r4 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x7fffffff}, 0x28) r5 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x2, 0x88) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x104101, 0x4, 0x0, 0x1, 0x200, 0x2, 0x1}, 0x0, 0x100004, 0xffffffffffffffff, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./cgroup/../file0\x00', 0x0, 0x10, r6}, 0x18) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000240)) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe000fff0000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.705465733s ago: executing program 0 (id=1195): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x8010, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x28, 0x3c, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700042005", @ANYRESDEC=r0], 0xfe33) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bff", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x335e) 1.115369496s ago: executing program 2 (id=1199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0xa, [@multicast, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @multicast, @multicast, @multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}]}) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'blkio'}, {0x2d, 'cpuset'}, {0x2d, 'memory'}, {0x2b, 'devices'}, {0x2d, 'cpuacct'}, {0x2b, 'net_prio'}]}, 0x33) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000140)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x5, 0x8, 0xf9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xd}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000340)=r4) r5 = openat$cgroup_subtree(r1, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)={[{0x2b, 'cpuacct'}, {0x2b, 'io'}, {0x2d, 'rdma'}, {0x2d, 'blkio'}, {0x2b, 'rlimit'}, {0x2d, 'blkio'}, {0x2d, 'net_prio'}, {0x2d, 'cpuset'}]}, 0x3b) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001680)={r6, 0x0, 0xfe, 0x1000, &(0x7f0000000440)="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", &(0x7f0000000540)=""/4096, 0x2, 0x0, 0xcf, 0x1d, &(0x7f0000001540)="4b7466b7e24a8a883d6321f0e2f4dcebae203852a2b66dd2fa597258ff61804fb34884819228960efb04dfcd4e8c8e3d8ba1b759771ec868c31182c5cc50014a165a1b2d0df363c18ce3b885ecc4759086c17ebaf388438f102515786a6850807e8d092bb05d1abc1cdcfa0a46eead97f13aa47c5dc6e46aab1f7ea1db80dbb15340ea824b531950833c2c598a912f06c7174c2ac7b594248b61a54975becb168bacc8b354da220d615e591e744b9dd077d160f85434f006d8e6195859e35f176437e674b535802a581247ce568576", &(0x7f0000001640)="d05182afdafcfd22efd1ae4d49f5dd8ac339a493b8779484bf5e40d764", 0x0, 0x0, 0xf}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x8, 0x5, 0x70df, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001900)='./cgroup/syz1\x00', 0x200002, 0x0) r12 = perf_event_open$cgroup(&(0x7f0000001940)={0x4, 0x80, 0x7, 0x6, 0xc9, 0x3, 0x0, 0x7, 0x280, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x6, 0x730ce6d4}, 0x40, 0x8, 0xffffffff, 0x5, 0x3, 0x62, 0x6, 0x0, 0x1}, r6, 0x2, 0xffffffffffffffff, 0x4) r13 = gettid() socketpair(0x21, 0x80000, 0x1000, &(0x7f00000019c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000001b00)={&(0x7f0000001740)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001880)=[{&(0x7f00000017c0)="9a57961343d7d29954b42c89a3227b7cef96a15f7ecd4674bb412a9a3c76be8a3c9fe1890963ee07cb034e0736aa5f3e738ec14300dc5499b0fd342c388cd6e3b4f33dd1fe786aa037b3ab3d88cdb29fe29fc199aef5b407a311efaee3", 0x5d}, {&(0x7f0000001840)}], 0x2, &(0x7f0000001a00)=[@rights={{0x18, 0x1, 0x1, [r3, r9]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r10, r2, r11, r12, r6, r6]}}, @cred={{0x1c, 0x1, 0x2, {r13, 0xee01, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r4, r14]}}], 0xc8, 0x4008000}, 0x20000000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r12, 0x4008240b, &(0x7f0000001b40)={0x0, 0x80, 0x9, 0x4, 0x5, 0x5, 0x0, 0x576, 0x84000, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x60000000000000, 0xfffffffffffffffa}, 0x5780550fd2c882f4, 0x4, 0x1, 0x3, 0x3, 0x3, 0x5, 0x0, 0x5, 0x0, 0x2}) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e80)={r6, 0xe0, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001bc0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f0000001c00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f0000001c80)=[{}, {}], 0x10, 0x10, &(0x7f0000001cc0), &(0x7f0000001d00), 0x8, 0x90, 0x8, 0x8, &(0x7f0000001d40)}}, 0x10) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000001ec0)=@base={0x2, 0x4, 0xfffffffc, 0xe0, 0x8000, r6, 0x7, '\x00', r16, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0x0, @value=r6}, 0x50) sendmsg(r14, &(0x7f00000024c0)={&(0x7f0000001f40)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001fc0)="283d62a21f0cf9ab94921c1c49aee19d9851d20f663cddb8717d73c0e501d93b7605b6b2dabd4a3f7edc68c13b2bca442692fdda31187d74cf7adb51bc6b9903caad28f46196b6fa66735a36b46bed8b4de7a25d44432c25d3fa458ddf9518875fdd563a9cf55209f83ff9efdd6d1cc5218f1a6f27093a41e848199c6bfa61641eb3547bff19332219f87152bd2344d8ffd488fbd3a1e7c730a3f87344384b9aa2f6d87f9dc2a169ecad620a67239111525d5ef241125cbeec4b13c66b950963796dafccc4fb66210ba194b37593b0c1573663823b", 0xd5}, {&(0x7f00000020c0)="df5b2ffa", 0x4}, {&(0x7f0000002100)="f8aee2712a4945479be500afc8a951aceaa5b7d331feb6414da0841bcd134b5d89a5dfaa6d9e678215af3e81b22bd5c941b261556447a8f0e59f32273b9fb999879a725364aa5d6cd61e1866d8f50262108f4694aaa0a486ffd5da8b688fbab19128d4768cd0036576e990fcf134a95b6e1b322d28fa981e334eb7ca73cce675ae9a0d51563a770d89a23aef7896c4e37437ca4084d1c906628c3c4db6204ee5d2127fb70e6adc2720135d3918337b0ccef2b7dfb0fc566e9631539285eeefa05ef760f65d4ea0f00b478d9f34e71a9b", 0xd0}, {&(0x7f0000002200)="1d472ef092c82ccf37d2cc670bee157a37766601306075a2170422e079a6a8d60837642efb5612dae279f23a9a00227a5262b76973129be03b298e3f8338ceb1b5af7abd31e22a3d6cc6df37911f197e1d3e3a29bcea390ae2abbaea29f9e9dfdf7b167c8d0a51fd7863753665aab113a94134cf85161793e2cabb065636a2e6b4a2c09a943177fbae515081aa1c914a692a09d59d0a91a0795d6e31d6a1a06c", 0xa0}, {&(0x7f00000022c0)="9a2a6c141c278261487f84ac7ed44c35f444b3c66ad41422ad840eff6c1db89218307f0715fb", 0x26}], 0x5, &(0x7f0000002380)=[{0x98, 0x0, 0xb, "3ef4fd89e2ea920b640f5ae927e850f79beeaef684cd7ed67b1aab4047b251d40a8c8947f1dc7aed459abd3aa17bc5c4068d1b7eca00a1fa338edab93d80fa8b0826be1440e92d2c7e30ea5e80a04219a98e3e82ff84459859fd5107519851144f832ca09c37129ad5aa7625049e30a3b594537f61d9da262ea63153711c271e8f8d47d4"}, {0xa8, 0x107, 0x5, "e8a8364dd04e40c44ea26699aca3767d9e98abe5b0eef726f8bde01496e5a194d46471478d478b8cfe05181410fee707357a3226c358a2fc6b50d4657c67e04b223e8eac6e8da9cbba7c814bd9a206a8afdaab96cf52582a8a31e502e31cf526d9e4e5eea674cdbb351e8053d1c715feef4e976deef1d7dd7f90a10e981dbfc81bdf5fc95c8d44937bbae0db9b2bed8c5e398898dfe2"}], 0x140}, 0x1) openat$cgroup_subtree(r6, &(0x7f0000002500), 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000003c40)={&(0x7f0000002540)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000002880)=[{&(0x7f00000025c0)="a8c15576e3a772fd0b52384f38ad4e5ebf2e8267e2091b8f3d960afacb08c4c6f4aa783154c83b99fc2f12c74cee5f4304e554edc65f143bf4605e", 0x3b}, {&(0x7f0000002600)="d76081f65d4a4d52f32fba6af6796fd011d171d3b0738e5ea32891261a3833774d4e14a67045ac701b870fc4ccb7cec38bbc19e960b89feca28f341b85cef2a3b6919d365c4871572877d2c5a45b60c6f01f93b300d724f94489bed53b458f4317ec7a3cf177c8b9627a23f1d70435f59162aa30674946bf3e7282f911da0a39a2f25dd2ac7fd827cbbe1a351c27e579c2c517f97256af1a412a1e65e818ddf5799b1d19ad0960e92203b1758a81184f8210e22e0c7dfaca80214407efc7428f54c88cc7217bc5e0bfc8f531214e071f653d8b9f5c4424d92c3f7ce2ce53fa79f501af94380ff129fbf7092bdc", 0xed}, {&(0x7f0000002700)="aa3f8cb9b005", 0x6}, {&(0x7f0000002740)="3b3bf662a0a1052be03e90ed7aabdb9ffd6921de8e49136e77a39ba0ec89d051787552c3f3cb7621a9228623349f2efbda3b2cfbc5ae597bec7fb85b04982cd1f46136f373e82135a7e43779edff74d614d81898fc3f51f54c79456daa19c097ecc5742c3d08043d6dbe2c5ee68712f06a827bb650db74e4acc1dfae38040f45ee78290aeb1534dd999825638d0d9f623bde", 0x92}, {&(0x7f0000002800)="57721aed159b6158ee65d0977896b76701887f6b75f1a5092502726cb4504aeafbf9ea9f7401ff9bb0d4b6de39d0f5dd53e065810031c67a6ceba25da1d4a8fe60604e1de36b27ebd852245344b011fcea330cf29bc527f42407780d7b16eb7797a1525be74e210d10475762811e267395afb95944f4", 0x76}], 0x5, &(0x7f0000002900)=[{0x1010, 0x114, 0x3, "c4584357893dc5b9a8ce14cd9e4e1639f9118394fccd5dcaada1fca119d4e1d8a5ee053ebbbe39704526c7ce73207096f7e9b0cdd4c5ce2374fd3f614865398c38243f4d14b0cb7437784cea16b27643d790bbfc0def5156bcee9b0d19d6af416ea0ed452b3b82919cb4eac729c2f95231245ba91f9754b344e1d8aea0f0f782f9dd037ab02e965763a1c01a0d03b72472e3d3af16dda25c1df2182ef1a8131e76c9c902698c3041f095da2e13e665dc6678c755124fdad010d52bd2e54210b1677b0d39ab5e2557b3afb3380252abf08febff12a3103f8961d7f775adf824ec0e1bd70f65329772642fc86d103c7075955881f6324b09d70ca03ec318c09b885072b3718b215b479fdcfe6608161537e4401d23175233f6daf7d63433dbd9b6953d365cc13c4a3f98019b76971a847611b5e02f39b2c7644ceadece78b2ac2947fd36835f0f01c486159f458d28a3ca7ab3cf1aec1119ed52c6c160588e5511e3c31a8b4e8565a31ab0b9122fc3f93564a3401b410576ae8d626343421541b1ae36bd877a14f88aa6b7cafae348d42efbe6dc7751c407afef60e0120f5a7dfd911cfc934703a217895afa1c6b5e66407d5d51dbf3d40eacf740714e13bfa7448b9f7cd69a00c704dafbea5fb07eda3515f588ac9be63cf82529062552f0684651e8d965e23b89d640c9d97ff5186e16911740da81d1e7e7bd4f2bc258b0b17174310856ad1184d9cde9f31e2899c0cd4fcade9f14e9c22ff09d3c5eb525fa815ecf1870486a97e308d6e1094026779fdd8a613dd5ceb8602a0f983dc8f302d2971fc528869b34e68ac0808e87d2f6a1e1ee09369a9fc015805ec8edcefcec6822bd0b5958b2cbc2bc679360ae6fc74e2366581759ab4f12451752d3e6119c9f246ae1fbd97a76bcd55431d664b2ab399b5e03924d48386d88e61912601dd50d533b34f1281d383f273c4af7c4869d548e4c180983995a5e05246814f31aa0d5e06aa27c167666ab60e2079a110d12d869e6489c6defb40ce5b3aa8b50a701d312187038db323da099e64413280a14da2a2598f0428497a6c858f8ca280837e4df5a19aa66b212d77d977d3ea8bd8d17e93b861ba687e195aff8bcd861384b27485c0489fd394175dea3d63fb161158a6c5de1bc8188f3f9bb004c8e01651285bab599c7706c411c90f37da9793868972b1916f8738f734086c983994e235b4713955f9557f6e75ff27fc5d004e433d0a840e122ac8ba8a6b9929cc63b88255d8c59c31953a3ebe814e18de9ed6b88ad54049a1bada1dec3a7b323a98810dcf337d2e262a14e0dbf82272ba73b03e84fc123562103420a8b05e99da38519988118a9d7678fe83d750ebf3697d8ec5004792086e4818c25f30ec4264aaf52bfc10e276dc3b0667a5ac4afae8ed424d6fcbaef90c1fce3e22d0079f8546da508a6f727b9dff3e59c2101c37564298f49b44130360d7f755e0a17eee591fe4f0218b66612201c6d8bbc919a576d563b6d601cd1099f703a31679fe5c8282f1aa8677245c3c4f70b5e34c2948041a7707ba49cfb8f1b985754fe6cbbb5d5592aaaddc83370c309f869402979e8ac320ff0aa11f234737e1a25d7fd2fdd7bf5fe6591a0c0b02a8d446eb17d9b9bddecb32703e8ed9798e80c0416f8ac1e56dcef3e20cd1a2c20b7e18869832741aa7c7fb2bee140097d0261648e1d4a14faa3276c0b0dcc7dafd3cf04c6f398494b124d68bce770c03113defb828c60921da9748c756f5b1b605ef749fa483f9a8afd5b8c5a1f11b9ba0ce8d40240dec20eaca9322a38eee0b8de35220a694b71bcda0bfa97f210313c794d44a14569d8697ec964291fe4ac4c83e520bfed1f88f69e11286cfeff03800fd07a70703c26a714570f7f798c09e4d2addaca4de4f8f03344f4d38c0a3505488fb1278dbb5fa84ade545afeb6a6f5cdab2ed195eafa5e92e74294184e4e164beb8d1938e65249e57e363907157c31adbf90047ad36e8fdc0b89d1ef827c31b2813d2ab1ca2a9d42ff38e2b882b407052929950a7556978f45876939e312a0b02a210e3207c090cdd7c6c55341d56073e9c1560de21b18ded7f8144befef293a7c75be598f5f85d437aaf415ab8a14d5fec70f63194a7f893122e0790976c8023dbaf0ae6be8239bd94ec32d02745b0819a856296c85fd1294f8f34d8f0fe3fbe9c028f306eef6d6738c1240ca77c025b6c253607c01b155cfcedd49a5c82ed9a8d82e83136938495dd237936bc2b3e7892a3e201ecafacceb54ca6f094e06c8b5dadb44453866963ceaecfa46ea29eae4b0b3eb021f89379393968b34c4256b2bb646c07b7bf9ad95fff9fa2b6e6a84d6a81fb39053a88552de530a10b5ec6bde2630e943fc9ea98572fb17b246743c11b500be310bd10dbda3d5de479d4d5e59279550c04ab0c239224f9caaa71c981a6a4b881bb4f39fbe81d8b887b5547b99c0bf86eb5d1117446999d5fc197d6ea92df359f46c4c38fc3a92e2ad437220d915bfbc8170276fc751f0fba62a2daa8aa63e17f01565a34d973004367f76bc6da8c5a13d6728257e9f06c0cb3ee2b2ffb0b4c13d5201433e2f748300fc8a9f21394fb4f29aaa26e1443e386505262622a3216d1e9d6693d6b8f2484d26ce9cbb8b6b1ce22c76a3ff158db94fc22d3bebc04426b502137290d3ddfc2c8264772e86f51cc46b9e529cbcb27a3881470a8beba36549721a0ad601fef8fdab7e3afe47185bd938670095d257e013f5889946a97414e23330e39e58ff064db88f03ee3842bb1ed956b06218a28c843d6af88d2bbd7f4b1edd9705cd3b9eebc0f2082633a231da649971d6f788ee34b862140b9d3b93f57a3a1ca015591b522eccfeabd3debd8392af4c70def31497b4499b496e1f341219ff6cf7308bd40e46da58cc99d946d880e33c6a13eb71d997f3607ec3b5a8bc5645001e93ebf5aff4795f28bd094320c22738ee32451f0e15d18966319d69fe7223dc48c2be47af2e0864e113518c5642383fe299e6f4bda82ee74412b4d8a1e03e0b9bf2631cc932bd16fc13b44b14acd887fea314a873eca81b3981e7721d75c16d2179065842665bf0e3ba6fb6cf82bb78dd0d9569bab19207653d683725d30453545f41612e1abe3e7421edb94d49ca6dce8a5345f176a373b3a22345daa711e943f8a4d750a9a896aed3ec38fb44cc7297fec8670d5644c9b046e6328483e9eb50290199a42024413b3b877e909424bf8f9c2d0c62c66bddb4ac9210c9559f6cef46bd3ab2e413a2c3debfdf7fc2db398f46cd357b2bdff5c21722f4facb1fa1be43cb72272d128c213d4aa005cd6d8969b768e70e2c63228c1b17fdb06dfa23738115f2638035aa9e25ed1fd925e2ea2e39be6472ddd8920a1f2a41a2bbe586d7139d1c7434659c900ab3f23fca06bdaba1b32e5aace5bdc6b0d4f19e15f016b6732615a4fd8bc9548835da0cc89ba3b25fb26c5d698d7e9405288d5335169230d056e28f894e4e92d1594a639c760469e11991235b56a9feb948a3bc60bb5b40ab867fc855edd1faa8bee7b178faada6f673dd5998b43481513935ab164fa27495f7c5128b904210c9a1c06aec837fbea809158f2dba6beaaf4f6ab2c077c2188fa27ac4f1c95a16f767b1e91f05028592d241781ddda1ce805e0afe5c5ae006cbe5b8f66e3306286549fc59933df6994731002b8a411d2a5cd03f1b40ea0e9fc3d3bb16db2b0ef66bd99a8f5fb96b016696aca7ac1c7f19be5a0038d892d91aba0dccaa4d35a52ce46503c285f85099c28577b46894e35f45b2704885cb245096976323d40b0d7bcff4f5b3c54ede49fc93342a7586f1faf1f2344c2fa5e46670a7629a66cd6e91e5917fd08c75f82b16c5138abe71926047a9fb2ba2a812f7ccfee2c4e17252bdb2045d4f94e7bafe5454f96b71702753e11bdc5d73e61b27ad4eb644b48898eff00808b7678e2cb009feb177a592f67f7800c7946f3fd7df0009382f4d6b2f8dd8699db37c2d454d6bd493f167657cfc393c4158fb0949fa2a6922eb20b38c75bab95a4ecacff1dfce32f20e3a37e44c0f98cd7f437f8e1f9be0d62150cb7c59b2da60d33f0079aacdcf358181b8dfba897ba2ef2fcca9b2bea14890bb4fdf5ed89ed9c314122220e7f088f78a42f8bc4ed860cfe227b7936534aca4c6f4b521aae6b83eb60f35dcb87ea69086f6972992cda463aee8c2605eeef6b55f202517e810cb5a2f1ad41d24d41a4073f8d88ebc27343bb5134c0cc9333a48ef5a019d1439e8c6315f53b4aafb598ea99f380391a3a3733fab9e2d2469f8f7f73bc5b089bb27a5f817987bda1aac1fd1321c9d177e5b3ecdf9befd06eb8e3ac5f425c7d9c364630a73a9b9f8912d9486f669e8d57b25fd6fd76ef1d3ea9de9df395f25ba21eeba52a8b03f6e07c3baa05535ddaef065709d6c4386d694457d9f7d48aeedcf03b903c23d3629b07003dcbbb62ca91c8d214b0118084c4893274bdbced6223a65c2f531523c840019656e5c1e60bce39c361df518ed05a0e6f62b906a5d054a31f30dd8c1fec5666036e6e41f12f2e901f828c4aef8af739581bb95ec02032d5d041d1aea28f60a96a3d1de39e371e949a4ec08358e2af17f67751824bcf4bfe9ba3306ad0f9140e7a2dcd3ba464f84826e9156afea4b0d1f2d99b71a08f8875768c11ef49ac159946d7ee836b7a2bd08574adc7e08233cb412ed3fc3022f964ee8b3c625d5c21a764dac57546c71d5ef060c1d6a76b7da550f06d8b31bed32cbb9e52ad6c345cd560f59078d4140977e62a06ecf5e8d244b7743384426e5b7a8ccfeca1d4c85880bea0f96fdc0aeb46372f9daa13e4061e0bd6e0b488e9546d00a4f914e84dde03afb8dc8d70813649260cc3e2c7ca5a7eb3a19fad1d91a173266050fd4e720f7af212e10dc7af5d3ca74729bf75cdf9b87b002633ed1ed53bd40f9a26e7cc7e5f5163a9a4f767da61d8dd1c6cca9ca3f9b52f3b13c12814bad5db60f291d7fb3e909a96dd57294548fcce2ea9912443de5ae9792f4652d07c2397dc6326869f19da52330e1add59ceb0551847e5289b80ff38ea3ff1ec86d1737721ffaa3dd3d7c280bc5cd802a63d104fb00d2ee08fc6266a8adf568a65a9c216660d215711168ffae3edc45bf90a50a648458fb2d3ec44d4a1fb716fd683c777939eaa9783a431caa60d65ca441f576c5bdc7233813c3d0de345ed78413186ee6a39499cf6df566b3d8f41e0aba4440e2bd82226f7bca1934eded922a021ee5087c7d9a8469628b904ed780c97f88d0d34895ab7c65744f9e76beca49f88dcd37b0d1210c4f9e636cb88fe7ee7a74084212abbbc45b0d40f2087172b0e36812be230250a9e3a409ae1212f9f61d81cb53cffc2ebd65aa149914cadbbdc6479ca4a3e95e79a474cc92b6a5e64e2e00ebfd2cbfe2dcfe73593a1033e4da32a108203bad755d205ce1d2c886710811120440a7ae24945ca4f2412f82c13f141e050aa810642ff09e3f3962f444ed29c82d77164b1e23903e01b6c846d4cd16f96729591e1954c1ac423680d65ad405c08754f8410de62d4c315c6e6305f3f32aa93dea928a3dae616f2833a1cfac7319258c51194c74257cfc3f67f4e150d6742a6ab881c8f0c58a2320c22e2e29a964bf53d8db0bbecfe0a5c4d475bd37724c869af0941a33874f84e59c376d7fad6b87a8d8ee1182ed0c0d6fb447242ebf84c4999196899cfe569a09c91184d642433551eba0a8f8951dbe0380eb2d11288486da27b61c266d"}, {0xd0, 0xff, 0x8, "379cffc8f900557730d08892390c6ff98d6ca886c7d215adf48a86b18af7bf72ceece577b4f9724f930fdb08bcb56fc81369c42dd87e664e6017a21715cfe000f0a4bb54a1159e35d22dc7214cb06245f4aa7fb50fc136623298751c71b81c4beba7aca8d164b53ae6369f9ec8ec3d32a64e9b1f4a635557f729ee8d69c5f725a910d99b86a014091c1d9c4829489480855e678b5ddc242a3a1cacb372f6e1d9aec2b3ae06b413d442d8d82b976620def83d82534602ec8a069a"}, {0xe0, 0x0, 0x10000, "2ef6582eb94373bb80981c522a3d72be7f7854c0e563d352df720066811cb3050466188b87f65c3c87f5284cb2ce8624115a21ad0cdb01b5ad99f857cf70d232829bbc244fe341d8b83c56726b09bd0b189864c12fbfb8770dae14b10b39286de2d41307b665fc3794f30a7e96d13d8f5a58022162a509d1263e80c29710988292829300622af260dd5d6b84a3d90234f916e230ec7714164f4c9b6071b38c5cb4831a7173657c504e13c03d86981c0ac82d4587026ca7a7afdaf17dda55732f7bef55978779eb2da188ca02"}, {0x20, 0x119, 0x5, "628971f1760c97d07c8a1b9bdedbf381"}, {0x18, 0x109, 0x1, "6fb2f749551933ad"}, {0x58, 0x110, 0xc7, "f86aa0240d29d626fcd6ed517a8f6681625b12202f9abda8a34389e6e3fb749427d9452428549c6a1e02e4a4cb8f8a394db62586e5ecb47c258dda44f4f200e58282993928f92093"}, {0x98, 0x10e, 0x5, "51c08524c3ff4a591b40f924a5d47677e4e6379272ae42a2c2c46b396f1cd1c7ead379d7295b6a367a3524781606a24ed31af9aac55aea4e2dbeef185bb876f1eba1e91818a320a2a2fc354e8d1201740a4e22be4629cc193a542ec9300ffbfa1607480e858f2a6c0fd0033a7dd897dd75645c1fa304e79f824bade13eb5ae2a9001fd8188bb"}, {0x48, 0x107, 0x2, "31ae39d3366bb616858c4b52fe1073699d6232e7b74ab2de75ad6c24eddd80f4b7fb996f8a95c3715996ccd6ea2a72e6f70ae905"}], 0x1330}, 0x20000900) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003d00)={{r6, 0xffffffffffffffff}, &(0x7f0000003c80), &(0x7f0000003cc0)=r8}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000004040)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004180)={0x18, 0x37, &(0x7f0000003d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@call={0x85, 0x0, 0x0, 0xaf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r18}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}, @ldst={0x3, 0x2, 0x2, 0x8, 0x4, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}], {{}, {}, {0x85, 0x0, 0x0, 0xe5d8c0e08aaeb3f0}}}, &(0x7f0000003f00)='syzkaller\x00', 0x6bc5, 0x47, &(0x7f0000003f40)=""/71, 0x41100, 0x12, '\x00', r16, 0x0, r6, 0x8, &(0x7f0000003fc0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000004000)={0x5, 0xe, 0x4, 0xecd}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000004080)=[r19, r17], &(0x7f00000040c0)=[{0x0, 0x3, 0xe, 0x4}, {0x3, 0x4, 0x8, 0x6}, {0x3, 0x5, 0xc, 0x7}, {0x0, 0x1, 0x9, 0xb}, {0x4, 0x1, 0x9, 0xb}, {0x2, 0x3, 0xe, 0x9}, {0x4, 0x2, 0x0, 0x4}, {0x5, 0x2, 0x1, 0xa}, {0x1, 0x2, 0x6, 0x8}]}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r15, 0x89e0, &(0x7f0000004240)={r6, r6}) 981.160348ms ago: executing program 1 (id=1200): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x94) 906.91256ms ago: executing program 0 (id=1201): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r1, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfe4b, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x16, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffb}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @ldst={0x3, 0x1, 0x0, 0x9, 0x3, 0x100, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0xc, 0x5, 0x4, 0x1, 0x1}]}, 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, 0x1b, r5, 0x8, &(0x7f0000000400)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x4, 0x7fffffff}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000480)=[r4], &(0x7f00000004c0)=[{0x1, 0x1, 0xc, 0x6}, {0x2, 0x3, 0x2, 0x7}, {0x1, 0x3, 0x2, 0x2}, {0x5, 0x5, 0x6, 0xb}, {0x3, 0x1, 0x10, 0xc}, {0x0, 0x3, 0x7, 0xa}, {0x2, 0x5, 0xd, 0x2}, {0x0, 0x4, 0x0, 0x5}, {0x3, 0x1, 0xc, 0x5}, {0x1, 0x2, 0x7, 0xc}], 0x10, 0x101}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7f}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r8, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0x13, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x21) setsockopt$sock_attach_bpf(r7, 0x0, 0x21, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/pid_for_children\x00') r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a802e8c6394f90324fc601000050008000900053582c104003e37000c0180fc0b1d00f80b", 0x33fe0}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000200)={r9}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd0e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x110c0, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa, 0x4, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x5, 0x4}, 0x84a0, 0x2f, 0x43a1bd79, 0x7, 0x9, 0x8, 0x8000, 0x0, 0xfffffffd, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xb) 904.24038ms ago: executing program 2 (id=1203): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 852.983871ms ago: executing program 1 (id=1204): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffd0}, @generic={0x66, 0x8, 0x0, 0x0, 0xffffffd0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x600}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x8000000}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80ffffff}, 0x94) 807.915572ms ago: executing program 3 (id=1205): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x1, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0xfffffffffffffffd, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x1}, 0x81400, 0xca, 0xfffffffd, 0x4, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, 0x0, 0x9a) 752.128794ms ago: executing program 2 (id=1206): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e00)="e6", 0x1}], 0x1}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 729.292394ms ago: executing program 1 (id=1207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="18160000", @ANYRES32=r0, @ANYBLOB="1da9000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0xb1, &(0x7f00000002c0)=""/177, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[r0, r0, r0, 0xffffffffffffffff, r0, r0, r0, r0], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYRES32=r1], 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000d40)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000019c0)={0x0, 0x0, &(0x7f00000018c0), &(0x7f0000001900), 0x10000, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x2a, 0x0, 0xffffffffffffffff, 0x37}, 0x24) 678.661755ms ago: executing program 2 (id=1208): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random="000010000b00"}) r3 = perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x101000, 0x32, 0x43a1b976, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000280)}], 0x2}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x29, 0xa, 0x1, &(0x7f0000000180)) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 524.255269ms ago: executing program 3 (id=1209): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000f4ff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="850000002e000000870a00000000000025000000000000009500000d0000000036e0fe9d628154331435e9e6ce79c9df0dafb05b570f3a5e216269570953ed4e8ef92cbd5659aa3327828105ea37cf394d0e22a71a3e05b26e86c93f9733f22bf8c4189a9b2b1351c0a4ea63d3371870918db0dad0aa5c36c1173f"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x4a) 454.31285ms ago: executing program 2 (id=1210): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000f31105200600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000070000000500000007000000c1000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000020000000000000000000000000000000000000000000000000b33a1145d8331e41c36cd7716d1eb90113dfd15c2fe8e2fb8dc3bbcaabebd5f44a02baa02a"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000340), 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)=ANY=[], 0x50) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc00000003000000060000000000000700000000070000000000000e01000000010000f40b00000000000008030000000a00000001cc04"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00K'], 0x38, 0x800}, 0x40800) r5 = socket$kcm(0x2, 0xfc4e5ec61c501851, 0x0) sendmsg(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000740)="ecfd5dd05d6c0e6578521ac4e478af07c681a27448cc50044f340c5dc69cc58e120af98a620e851653d5faa8f685f8d3fc9db17b661ea653826bc6f0b912291acd05d2e8defb939fdb46ed4e5d3ee7e2fa62617977c3e3ec5370804dd0630720b5dc04a43c1fa19f4b14a46589d79849e4efb468e2149e7a256f0beeb2f36ff416e61e0ca1037f77375ee261912ef24892cbc7b198091681e0fca61e", 0x9c}, {&(0x7f0000000040)="68ca218686a9c9e719fa8197085e22ebd0f1", 0x12}, {&(0x7f0000002800)="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", 0x1094}], 0x3}, 0x40e4804) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="ee6961af4e196436912b9535b7000000000000006111900000000000c6000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}, 0x10140) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) 448.20539ms ago: executing program 3 (id=1211): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000c0000000600000001000085ffffff7f0900000001080000cd34076100302e00302e5f00612e08"], &(0x7f0000001140)=""/219, 0x3c, 0xdb, 0x1}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0xf) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f00000000c0)="e0b9545dd30a37", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_config_ext={0x6, 0x9}, 0x0, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r4, 0x0, 0x10001) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x6, 0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)=[{0x4, 0x5, 0xe, 0x5}, {0x2, 0x2, 0x8, 0xa}], 0x10, 0x7}, 0x94) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f00000002c0)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) recvmsg(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) 354.988022ms ago: executing program 0 (id=1212): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000700000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 231.542175ms ago: executing program 3 (id=1213): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb703}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000140)='syzkaller\x00', 0xb8, 0xe1, &(0x7f0000000180)=""/225, 0x40f00, 0x4, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xa, 0x9}, 0x10, 0x12b0d, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x4, 0x1, 0xb, 0x5}], 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r1, 0x4) r2 = openat$cgroup_ro(r0, &(0x7f0000000480)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x200002, 0x0) socketpair(0x29, 0x3, 0x2, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open$cgroup(&(0x7f0000000540)={0x1, 0x80, 0x3, 0x4, 0x6, 0x1, 0x0, 0x1, 0x98e5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xcf, 0x4, @perf_config_ext={0x6, 0x6ac}, 0x7220, 0x8f2a, 0x19e, 0x6, 0xffffffffffff1fa6, 0x3, 0x8, 0x0, 0x9, 0x0, 0x6}, r3, 0x8, 0xffffffffffffffff, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, r6, 0x0, 0x8, &(0x7f00000005c0)='-(#^\\/{\x00', 0x0}, 0x30) r8 = syz_clone(0x80000, &(0x7f0000000640)="d75e082e4f0a03ef3e79e4fa8e1da1783576baf04899343928df346a296f2fcf475ce6a5a0a870c4e345bd0a2b95210629c4822c1e52e510ea9cd323a1135fd02d926e0c79278b7aae0870308dca9f385e983387ac944e9a986e3207c411a137ab0557eaac72b3a32f1bc3ef0e7404389c66872247194fefe1d4bba46b40a930e5c32d947821d440ae9f04c52596b6a3bb58a2e3fd2bef01bb904418208860fe51c2a4199699730b4d2802bb18f68b71875b7749afa8ed6310c3b7ff77f18016efc5d08b0ac9facb2312e5e63f", 0xcd, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)="1ad7b84c2199ffba209c416aed0739aef334b2afa5126719209726bd1564d8dd66572cb3170ad6df5a9ba20f5c0f579ca42ec98f5fcbba936a9c0239533162691d13bb15827b79144377ec35e06beb99a6604c2e8e9685aae7d38dae4ce8fc02966666fc96aa1ce980a75a") r9 = syz_open_procfs$namespace(r8, &(0x7f0000000840)='ns/net\x00') r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000880)={r2}, 0x8) sendmsg$inet(r10, &(0x7f00000009c0)={&(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000900)="e80f8b52fda2ce1c0f4390ceacbca5b70a6a58df25664914b8f5e635b99e488bb234eaeef7254147f7", 0x29}], 0x1, &(0x7f0000000980)=[@ip_retopts={{0x40, 0x0, 0x7, {[@rr={0x7, 0x1b, 0xf4, [@multicast2, @multicast1, @loopback, @rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x42}]}, @generic={0x89, 0x12, "b432bb50c3d579615588b3c0bc0faa4c"}]}}}], 0x40}, 0x4000) r11 = socket$kcm(0x29, 0x2, 0x0) r12 = openat$cgroup(r3, &(0x7f0000000b80)='syz1\x00', 0x200002, 0x0) sendmsg$unix(r10, &(0x7f0000000cc0)={&(0x7f0000000a00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a80)="eb064d3a3d839574ea9910bc265772f7776ffe4b120bb2b4b6bb36bd1f24aba3641645d330e0d997b8501c74793251b687", 0x31}, {&(0x7f0000000ac0)="2f6f2f417f33393a36ff0eb450dfc9bde52b8ee38b285e1639f1ccd3aee7a1e4d80a16996e7c178456a9a0789be1933dbe1e7be330054900b3b820d43f2250cbd5614a75ed0816fea20d6b", 0x4b}], 0x2, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r5, r0, r9]}}, @rights={{0x1c, 0x1, 0x1, [r0, r5, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r9, r11, r4, r1, r1, r4, r10]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee00, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r0, r10, r4, r4, r6, r12, r2]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee00, 0xee01}}}], 0x100, 0x20000000}, 0x4000) recvmsg$kcm(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000d00)=""/94, 0x5e}, {&(0x7f0000000d80)=""/227, 0xe3}, {&(0x7f0000000e80)=""/197, 0xc5}, {&(0x7f0000000f80)=""/155, 0x9b}, {&(0x7f0000001040)=""/128, 0x80}, {&(0x7f00000010c0)=""/132, 0x84}, {&(0x7f0000001180)=""/205, 0xcd}], 0x7, &(0x7f0000001300)}, 0x10000) ioctl$TUNSETCARRIER(r10, 0x400454e2, &(0x7f0000001380)=0x1) openat$cgroup_subtree(r10, &(0x7f00000013c0), 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001400)="3a7bcadbf7dc17bff36dba44062a3005a4b9720ba11f5824e91ab86f8c71645d11c0acac57c8349e5d24159a64", 0x2d}, {&(0x7f0000001440)="d77ba6fdd5c9456ffb41cad63d07a9333799b75741e5286759c8a02f141821e738b2b7e982fa84121522543cf32fbd44a50105f0a5d797da7b4ff60355e6807bf255722b20f411e7910db4ba7c26ed89bbecbe4dd08aaa3dc1b2bcee051447f40ca509440b3992233f51ea3945347250b81641b5104540282a00eacf22275db840614fd6e87d01662d43cf56f292206aadf199af3583c8f0", 0x98}], 0x2}, 0x4000051) socket$kcm(0x29, 0xf, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001600)={r0, 0x58, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0x21, 0x8001, 0x1, 0xa, 0x44314, r10, 0x10001, '\x00', r13, r0, 0x5, 0x2, 0x3}, 0x50) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000016c0)={r7}, 0x4) write$cgroup_pid(r10, &(0x7f0000001700)=r8, 0x12) r15 = openat$cgroup(r12, &(0x7f0000001740)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001880)={@fallback=r15, 0xc, 0x0, 0x6, &(0x7f0000001780)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000017c0)=[0x0], &(0x7f0000001800)=[0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000018c0)={@map=r0, r1, 0x1b, 0x0, r1, @void, @value=r14, @void, @void, r16}, 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001900)={0x800}, 0x8) sendmsg$sock(r5, &(0x7f0000001b40)={&(0x7f0000001940)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e23, 0x1}}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000019c0)="9a98ff82dc6bceef7b005670d1a7053c38462d6d6fd3068c080e4a967c4404a91c305a4dac9492b356d63eaf55edafeb3eca26fcec6a524d87f999a538a691d1e4d7552276a874aad19052b5845128d91ae605a7c04193e3ebec8977e6316c103661f5804384e4cb0bcec2bbdc7d54382a39e7", 0x73}, {&(0x7f0000001a40)="4c497ace106db908ea0160111f0f0fb3121df236fdda77ef12d9aa9fb4df137b", 0x20}], 0x2, &(0x7f0000001ac0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}], 0x60}, 0x2040) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001bc0)=r8, 0x12) 209.225776ms ago: executing program 0 (id=1214): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 127.420238ms ago: executing program 0 (id=1215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000000)=r1, 0x4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30040041) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) close(r3) r4 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x7fffffff}, 0x28) r5 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x2, 0x88) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x104101, 0x4, 0x0, 0x1, 0x200, 0x2, 0x1}, 0x0, 0x100004, 0xffffffffffffffff, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./cgroup/../file0\x00', 0x0, 0x10, r6}, 0x18) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000240)) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe000fff0000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 126.920007ms ago: executing program 2 (id=1216): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e2306", 0x12}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc050) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r4 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x1}], 0x1}, 0xf8) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000440)={&(0x7f00000005c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r4, r2, 0x0, 0x0, 0x0}, 0x30) r7 = perf_event_open(&(0x7f00000000c0)={0x7, 0x80, 0x0, 0x25, 0x1, 0x51, 0x0, 0x6, 0x4, 0xb, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffff272, 0x1, @perf_config_ext={0x7, 0x80000001}, 0x100000, 0x6, 0x3c3, 0x4, 0x1, 0x7f, 0x401, 0x0, 0x4, 0x0, 0x7f}, 0x0, 0xa, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xf8, 0x3, 0xf1, 0x5, 0x0, 0x100000000, 0x8000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x3ff, 0x1, 0x0, 0x4f1, 0x10001, 0x6, 0x0, 0x5, 0x0, 0x1}, r4, 0xb, r7, 0x3) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000053000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r11) r12 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r12, 0x113, 0x2, 0x0, 0x0) 0s ago: executing program 3 (id=1217): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x1, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0xfffffffffffffffd, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x1}, 0x81400, 0xca, 0xfffffffd, 0x4, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x9a) kernel console output (not intermixed with test programs): [ T6346] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.225'. [ 107.106562][ T5087] Bluetooth: hci1: Malformed LE Event: 0x0b [ 107.215547][ T5087] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 107.394306][ T6372] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.236'. [ 107.578575][ T6374] FAULT_INJECTION: forcing a failure. [ 107.578575][ T6374] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 107.582845][ T6378] netlink: 140 bytes leftover after parsing attributes in process `syz.2.238'. [ 107.611016][ T6374] CPU: 1 PID: 6374 Comm: syz.1.237 Not tainted syzkaller #0 [ 107.618455][ T6374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.621753][ T6378] netlink: 6 bytes leftover after parsing attributes in process `syz.2.238'. [ 107.628862][ T6374] Call Trace: [ 107.628875][ T6374] [ 107.628883][ T6374] dump_stack_lvl+0x18c/0x250 [ 107.628912][ T6374] ? show_regs_print_info+0x20/0x20 [ 107.628932][ T6374] ? load_image+0x420/0x420 [ 107.658454][ T6374] ? __might_fault+0xaa/0x120 [ 107.663178][ T6374] ? __lock_acquire+0x7d80/0x7d80 [ 107.668254][ T6374] should_fail_ex+0x394/0x4c0 [ 107.673423][ T6374] _copy_from_iter+0x1cd/0x1290 [ 107.678326][ T6374] ? rcu_is_watching+0x15/0xb0 [ 107.683286][ T6374] ? copyout_mc+0x70/0x70 [ 107.687987][ T6374] ? __virt_addr_valid+0x10c/0x380 [ 107.693397][ T6374] ? __virt_addr_valid+0x10c/0x380 [ 107.698991][ T6374] ? __virt_addr_valid+0x10c/0x380 [ 107.704261][ T6374] ? __check_object_size+0x4fc/0xa40 [ 107.710001][ T6374] netlink_sendmsg+0x76b/0xbf0 [ 107.714971][ T6374] ? netlink_getsockopt+0x590/0x590 [ 107.720896][ T6374] ? apparmor_socket_sendmsg+0x8e/0x330 [ 107.727187][ T6374] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 107.732642][ T6374] ? security_socket_sendmsg+0x80/0xa0 [ 107.738541][ T6374] ? netlink_getsockopt+0x590/0x590 [ 107.744526][ T6374] ____sys_sendmsg+0x61b/0x980 [ 107.749612][ T6374] ? __asan_memset+0x22/0x40 [ 107.754224][ T6374] ? __sys_sendmsg_sock+0x30/0x30 [ 107.759247][ T6374] ? __import_iovec+0x5f2/0x850 [ 107.764106][ T6374] ? import_iovec+0x73/0xa0 [ 107.768617][ T6374] ___sys_sendmsg+0x2a6/0x360 [ 107.773409][ T6374] ? __sys_sendmsg+0x2b0/0x2b0 [ 107.778461][ T6374] ? ktime_get+0x7f/0x280 [ 107.782927][ T6374] __se_sys_sendmsg+0x1d0/0x2c0 [ 107.787797][ T6374] ? perf_trace_preemptirq_template+0x269/0x330 [ 107.794415][ T6374] ? __x64_sys_sendmsg+0x80/0x80 [ 107.799827][ T6374] ? lockdep_hardirqs_on+0x98/0x150 [ 107.805131][ T6374] do_syscall_64+0x55/0xb0 [ 107.809548][ T6374] ? clear_bhb_loop+0x40/0x90 [ 107.814241][ T6374] ? clear_bhb_loop+0x40/0x90 [ 107.819000][ T6374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.824891][ T6374] RIP: 0033:0x7fdcfe79e0d9 [ 107.829350][ T6374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.849318][ T6374] RSP: 002b:00007fdcfc9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.857739][ T6374] RAX: ffffffffffffffda RBX: 00007fdcfea25fa0 RCX: 00007fdcfe79e0d9 [ 107.865720][ T6374] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 107.873801][ T6374] RBP: 00007fdcfc9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 107.882018][ T6374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.890197][ T6374] R13: 00007fdcfea26038 R14: 00007fdcfea25fa0 R15: 00007fff3e414288 [ 107.898208][ T6374] [ 108.211886][ T5087] Bluetooth: hci2: Malformed LE Event: 0x0b [ 108.288305][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 108.578299][ T6396] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.247'. [ 109.110201][ T6409] Driver unsupported XDP return value 0 on prog (id 160) dev N/A, expect packet loss! [ 109.157697][ T6409] Ù: renamed from bond_slave_1 (while UP) [ 109.214386][ T5087] Bluetooth: hci1: Malformed LE Event: 0x0b [ 109.342999][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 109.457428][ T6419] netlink: 'syz.2.257': attribute type 10 has an invalid length. [ 109.625021][ T6430] netlink: 'syz.1.260': attribute type 5 has an invalid length. [ 110.081698][ T6444] __nla_validate_parse: 1 callbacks suppressed [ 110.081715][ T6444] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.267'. [ 110.095349][ T5087] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 110.304823][ T5087] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 110.335037][ T6449] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.365779][ T6449] netlink: 1 bytes leftover after parsing attributes in process `syz.0.270'. [ 110.808140][ T6467] FAULT_INJECTION: forcing a failure. [ 110.808140][ T6467] name failslab, interval 1, probability 0, space 0, times 0 [ 110.846641][ T6467] CPU: 1 PID: 6467 Comm: syz.2.275 Not tainted syzkaller #0 [ 110.854092][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.864353][ T6467] Call Trace: [ 110.867738][ T6467] [ 110.870867][ T6467] dump_stack_lvl+0x18c/0x250 [ 110.875585][ T6467] ? sctp_sendmsg+0x1519/0x27b0 [ 110.881299][ T6467] ? ___sys_sendmsg+0x2a6/0x360 [ 110.886355][ T6467] ? show_regs_print_info+0x20/0x20 [ 110.891594][ T6467] ? load_image+0x420/0x420 [ 110.896363][ T6467] should_fail_ex+0x394/0x4c0 [ 110.901454][ T6467] should_failslab+0x9/0x20 [ 110.906285][ T6467] slab_pre_alloc_hook+0x59/0x300 [ 110.911710][ T6467] ? sctp_add_bind_addr+0x8c/0x360 [ 110.916862][ T6467] __kmem_cache_alloc_node+0x53/0x250 [ 110.922471][ T6467] ? sctp_add_bind_addr+0x8c/0x360 [ 110.927675][ T6467] kmalloc_trace+0x2a/0xe0 [ 110.932185][ T6467] sctp_add_bind_addr+0x8c/0x360 [ 110.937297][ T6467] sctp_copy_local_addr_list+0x31b/0x4e0 [ 110.942973][ T6467] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 110.948726][ T6467] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 110.954827][ T6467] ? sctp_v6_is_any+0x64/0x70 [ 110.959720][ T6467] ? sctp_copy_one_addr+0x8c/0x350 [ 110.964876][ T6467] sctp_bind_addr_copy+0xb3/0x3c0 [ 110.969952][ T6467] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 110.976326][ T6467] sctp_connect_new_asoc+0x2f9/0x6a0 [ 110.981694][ T6467] ? __sctp_connect+0xd80/0xd80 [ 110.986577][ T6467] ? __local_bh_enable_ip+0x13a/0x1c0 [ 110.992160][ T6467] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 110.997844][ T6467] ? security_sctp_bind_connect+0x89/0xb0 [ 111.003605][ T6467] sctp_sendmsg+0x1519/0x27b0 [ 111.008326][ T6467] ? sctp_getsockopt+0xb60/0xb60 [ 111.013576][ T6467] ? aa_af_perm+0x330/0x330 [ 111.018121][ T6467] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 111.024665][ T6467] ? sock_rps_record_flow+0x19/0x3f0 [ 111.030046][ T6467] ? inet_sendmsg+0xce/0x2a0 [ 111.034907][ T6467] ? inet_send_prepare+0x250/0x250 [ 111.040055][ T6467] ____sys_sendmsg+0x61b/0x980 [ 111.044962][ T6467] ? __sys_sendmsg_sock+0x30/0x30 [ 111.050290][ T6467] ? __import_iovec+0x5f2/0x850 [ 111.055191][ T6467] ? import_iovec+0x73/0xa0 [ 111.059738][ T6467] ___sys_sendmsg+0x2a6/0x360 [ 111.064532][ T6467] ? get_pid_task+0x20/0x1e0 [ 111.069269][ T6467] ? __sys_sendmsg+0x2b0/0x2b0 [ 111.074128][ T6467] ? __lock_acquire+0x7d80/0x7d80 [ 111.079201][ T6467] __se_sys_sendmsg+0x1d0/0x2c0 [ 111.084195][ T6467] ? perf_trace_preemptirq_template+0x269/0x330 [ 111.090571][ T6467] ? __x64_sys_sendmsg+0x80/0x80 [ 111.095566][ T6467] ? lockdep_hardirqs_on+0x98/0x150 [ 111.101093][ T6467] do_syscall_64+0x55/0xb0 [ 111.106080][ T6467] ? clear_bhb_loop+0x40/0x90 [ 111.110796][ T6467] ? clear_bhb_loop+0x40/0x90 [ 111.115697][ T6467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.122966][ T6467] RIP: 0033:0x7f065df9e0d9 [ 111.127850][ T6467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.149032][ T6467] RSP: 002b:00007f065ee78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.157647][ T6467] RAX: ffffffffffffffda RBX: 00007f065e225fa0 RCX: 00007f065df9e0d9 [ 111.165636][ T6467] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000004 [ 111.173998][ T6467] RBP: 00007f065ee78090 R08: 0000000000000000 R09: 0000000000000000 [ 111.182252][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.190807][ T6467] R13: 00007f065e226038 R14: 00007f065e225fa0 R15: 00007ffefb0d2668 [ 111.199007][ T6467] [ 111.523525][ T6472] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.277'. [ 111.544820][ T6476] netlink: 160 bytes leftover after parsing attributes in process `syz.2.279'. [ 111.576920][ T5087] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 111.695491][ T5087] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 112.481522][ T5087] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 113.857058][ T6499] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.289'. [ 114.151024][ T5087] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 114.188052][ T6512] FAULT_INJECTION: forcing a failure. [ 114.188052][ T6512] name failslab, interval 1, probability 0, space 0, times 0 [ 114.202779][ T6512] CPU: 0 PID: 6512 Comm: syz.1.294 Not tainted syzkaller #0 [ 114.210410][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.220776][ T6512] Call Trace: [ 114.224094][ T6512] [ 114.227257][ T6512] dump_stack_lvl+0x18c/0x250 [ 114.232109][ T6512] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 114.238398][ T6512] ? show_regs_print_info+0x20/0x20 [ 114.243739][ T6512] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 114.250869][ T6512] should_fail_ex+0x394/0x4c0 [ 114.255681][ T6512] should_failslab+0x9/0x20 [ 114.260430][ T6512] slab_pre_alloc_hook+0x59/0x300 [ 114.265683][ T6512] kmem_cache_alloc+0x5a/0x2c0 [ 114.270488][ T6512] ? skb_clone+0x1eb/0x370 [ 114.275230][ T6512] skb_clone+0x1eb/0x370 [ 114.279501][ T6512] __netlink_deliver_tap+0x411/0x7f0 [ 114.284831][ T6512] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.290055][ T6512] netlink_deliver_tap+0x19c/0x1b0 [ 114.295206][ T6512] netlink_unicast+0x77b/0x930 [ 114.299989][ T6512] netlink_sendmsg+0x8d0/0xbf0 [ 114.304761][ T6512] ? netlink_getsockopt+0x590/0x590 [ 114.310157][ T6512] ? apparmor_socket_sendmsg+0x8e/0x330 [ 114.315969][ T6512] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 114.321278][ T6512] ? security_socket_sendmsg+0x80/0xa0 [ 114.326837][ T6512] ? netlink_getsockopt+0x590/0x590 [ 114.332294][ T6512] ____sys_sendmsg+0x61b/0x980 [ 114.337064][ T6512] ? __asan_memset+0x22/0x40 [ 114.341740][ T6512] ? __sys_sendmsg_sock+0x30/0x30 [ 114.347005][ T6512] ? __import_iovec+0x5f2/0x850 [ 114.351899][ T6512] ? import_iovec+0x73/0xa0 [ 114.356689][ T6512] ___sys_sendmsg+0x2a6/0x360 [ 114.361393][ T6512] ? __sys_sendmsg+0x2b0/0x2b0 [ 114.366316][ T6512] ? ktime_get+0x7f/0x280 [ 114.371121][ T6512] __se_sys_sendmsg+0x1d0/0x2c0 [ 114.375992][ T6512] ? perf_trace_preemptirq_template+0x269/0x330 [ 114.382253][ T6512] ? __x64_sys_sendmsg+0x80/0x80 [ 114.387222][ T6512] ? lockdep_hardirqs_on+0x98/0x150 [ 114.392462][ T6512] do_syscall_64+0x55/0xb0 [ 114.397151][ T6512] ? clear_bhb_loop+0x40/0x90 [ 114.401853][ T6512] ? clear_bhb_loop+0x40/0x90 [ 114.406816][ T6512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.412813][ T6512] RIP: 0033:0x7fdcfe79e0d9 [ 114.417453][ T6512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.437793][ T6512] RSP: 002b:00007fdcfc9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.446858][ T6512] RAX: ffffffffffffffda RBX: 00007fdcfea25fa0 RCX: 00007fdcfe79e0d9 [ 114.454937][ T6512] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 114.463243][ T6512] RBP: 00007fdcfc9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 114.471323][ T6512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.479297][ T6512] R13: 00007fdcfea26038 R14: 00007fdcfea25fa0 R15: 00007fff3e414288 [ 114.487477][ T6512] [ 114.504029][ T6512] netlink: 'syz.1.294': attribute type 10 has an invalid length. [ 114.735455][ T5087] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 114.815191][ T6528] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.300'. [ 115.249866][ T5087] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 115.349337][ T5087] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 115.443924][ T6554] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.312'. [ 115.591011][ T6561] netlink: 'syz.2.314': attribute type 10 has an invalid length. [ 115.882938][ T5087] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 115.969903][ T6582] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.322'. [ 116.073122][ T5087] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 116.286802][ T6592] netlink: 'syz.1.327': attribute type 22 has an invalid length. [ 116.296973][ T6592] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.327'. [ 116.319850][ T6593] netlink: 'syz.1.327': attribute type 22 has an invalid length. [ 116.328879][ T6593] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.327'. [ 116.355757][ T6595] FAULT_INJECTION: forcing a failure. [ 116.355757][ T6595] name failslab, interval 1, probability 0, space 0, times 0 [ 116.397898][ T6595] CPU: 1 PID: 6595 Comm: syz.0.328 Not tainted syzkaller #0 [ 116.405347][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.415955][ T6595] Call Trace: [ 116.419330][ T6595] [ 116.422272][ T6595] dump_stack_lvl+0x18c/0x250 [ 116.426967][ T6595] ? sctp_sendmsg+0x1519/0x27b0 [ 116.431829][ T6595] ? ___sys_sendmsg+0x2a6/0x360 [ 116.436775][ T6595] ? show_regs_print_info+0x20/0x20 [ 116.442009][ T6595] ? load_image+0x420/0x420 [ 116.446789][ T6595] should_fail_ex+0x394/0x4c0 [ 116.451601][ T6595] should_failslab+0x9/0x20 [ 116.456344][ T6595] slab_pre_alloc_hook+0x59/0x300 [ 116.461391][ T6595] ? sctp_add_bind_addr+0x8c/0x360 [ 116.466514][ T6595] __kmem_cache_alloc_node+0x53/0x250 [ 116.471941][ T6595] ? sctp_add_bind_addr+0x8c/0x360 [ 116.477115][ T6595] kmalloc_trace+0x2a/0xe0 [ 116.481559][ T6595] sctp_add_bind_addr+0x8c/0x360 [ 116.486522][ T6595] sctp_copy_local_addr_list+0x31b/0x4e0 [ 116.492192][ T6595] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 116.497960][ T6595] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 116.504055][ T6595] ? sctp_v6_is_any+0x64/0x70 [ 116.508744][ T6595] ? sctp_copy_one_addr+0x8c/0x350 [ 116.513972][ T6595] sctp_bind_addr_copy+0xb3/0x3c0 [ 116.519015][ T6595] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 116.525367][ T6595] sctp_connect_new_asoc+0x2f9/0x6a0 [ 116.530790][ T6595] ? __sctp_connect+0xd80/0xd80 [ 116.535661][ T6595] ? __local_bh_enable_ip+0x13a/0x1c0 [ 116.541276][ T6595] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 116.546849][ T6595] ? security_sctp_bind_connect+0x89/0xb0 [ 116.552883][ T6595] sctp_sendmsg+0x1519/0x27b0 [ 116.557607][ T6595] ? sctp_getsockopt+0xb60/0xb60 [ 116.562658][ T6595] ? aa_af_perm+0x330/0x330 [ 116.567203][ T6595] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 116.573964][ T6595] ? sock_rps_record_flow+0x19/0x3f0 [ 116.579479][ T6595] ? inet_sendmsg+0xce/0x2a0 [ 116.584190][ T6595] ? inet_send_prepare+0x250/0x250 [ 116.589776][ T6595] ____sys_sendmsg+0x61b/0x980 [ 116.594710][ T6595] ? __sys_sendmsg_sock+0x30/0x30 [ 116.599932][ T6595] ? __import_iovec+0x5f2/0x850 [ 116.604819][ T6595] ? import_iovec+0x73/0xa0 [ 116.609374][ T6595] ___sys_sendmsg+0x2a6/0x360 [ 116.614083][ T6595] ? get_pid_task+0x20/0x1e0 [ 116.619053][ T6595] ? __sys_sendmsg+0x2b0/0x2b0 [ 116.623954][ T6595] ? __lock_acquire+0x7d80/0x7d80 [ 116.629137][ T6595] __se_sys_sendmsg+0x1d0/0x2c0 [ 116.634207][ T6595] ? perf_trace_preemptirq_template+0x269/0x330 [ 116.640495][ T6595] ? __x64_sys_sendmsg+0x80/0x80 [ 116.645500][ T6595] ? lockdep_hardirqs_on+0x98/0x150 [ 116.650731][ T6595] do_syscall_64+0x55/0xb0 [ 116.655151][ T6595] ? clear_bhb_loop+0x40/0x90 [ 116.659849][ T6595] ? clear_bhb_loop+0x40/0x90 [ 116.664732][ T6595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.670839][ T6595] RIP: 0033:0x7fd93639e0d9 [ 116.675292][ T6595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.695397][ T6595] RSP: 002b:00007fd937198028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.704903][ T6595] RAX: ffffffffffffffda RBX: 00007fd936625fa0 RCX: 00007fd93639e0d9 [ 116.713851][ T6595] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000004 [ 116.722109][ T6595] RBP: 00007fd937198090 R08: 0000000000000000 R09: 0000000000000000 [ 116.730530][ T6595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.738618][ T6595] R13: 00007fd936626038 R14: 00007fd936625fa0 R15: 00007ffcad9adaa8 [ 116.746735][ T6595] [ 116.878252][ T6604] tap0: tun_chr_ioctl cmd 2147767511 [ 117.003917][ T6608] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.332'. [ 117.058062][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 117.149935][ T5087] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 117.669531][ T6638] FAULT_INJECTION: forcing a failure. [ 117.669531][ T6638] name failslab, interval 1, probability 0, space 0, times 0 [ 117.707845][ T6638] CPU: 0 PID: 6638 Comm: syz.1.344 Not tainted syzkaller #0 [ 117.715738][ T6638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.726376][ T6638] Call Trace: [ 117.729947][ T6638] [ 117.733262][ T6638] dump_stack_lvl+0x18c/0x250 [ 117.738046][ T6638] ? show_regs_print_info+0x20/0x20 [ 117.743637][ T6638] ? load_image+0x420/0x420 [ 117.748215][ T6638] ? __might_sleep+0xe0/0xe0 [ 117.753291][ T6638] ? __lock_acquire+0x7d80/0x7d80 [ 117.758501][ T6638] should_fail_ex+0x394/0x4c0 [ 117.763363][ T6638] should_failslab+0x9/0x20 [ 117.768080][ T6638] slab_pre_alloc_hook+0x59/0x300 [ 117.774080][ T6638] ? rtnl_newlink+0x10d/0x2170 [ 117.779207][ T6638] __kmem_cache_alloc_node+0x53/0x250 [ 117.784804][ T6638] ? rtnl_newlink+0x10d/0x2170 [ 117.789587][ T6638] kmalloc_trace+0x2a/0xe0 [ 117.794197][ T6638] rtnl_newlink+0x10d/0x2170 [ 117.799078][ T6638] ? arch_stack_walk+0x160/0x190 [ 117.804441][ T6638] ? verify_lock_unused+0x140/0x140 [ 117.809682][ T6638] ? __mutex_trylock_common+0x160/0x270 [ 117.815249][ T6638] ? rtnl_setlink+0x4e0/0x4e0 [ 117.820453][ T6638] ? trace_raw_output_contention_end+0xd0/0xd0 [ 117.827053][ T6638] ? rcu_is_watching+0x15/0xb0 [ 117.831993][ T6638] ? trace_contention_end+0x39/0xe0 [ 117.837339][ T6638] ? __mutex_lock+0x30d/0xc80 [ 117.842020][ T6638] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 117.847140][ T6638] ? mutex_lock_nested+0x20/0x20 [ 117.852356][ T6638] ? rtnl_setlink+0x4e0/0x4e0 [ 117.857143][ T6638] rtnetlink_rcv_msg+0x843/0xf90 [ 117.862174][ T6638] ? rtnetlink_rcv_msg+0x220/0xf90 [ 117.867412][ T6638] ? rtnetlink_bind+0x80/0x80 [ 117.872091][ T6638] ? perf_trace_preemptirq_template+0xac/0x330 [ 117.878283][ T6638] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 117.884350][ T6638] ? lock_chain_count+0x20/0x20 [ 117.889286][ T6638] ? __local_bh_enable_ip+0x13a/0x1c0 [ 117.894845][ T6638] ? lockdep_hardirqs_on+0x98/0x150 [ 117.900128][ T6638] ? __local_bh_enable_ip+0x13a/0x1c0 [ 117.905722][ T6638] ? _local_bh_enable+0xa0/0xa0 [ 117.910686][ T6638] ? __dev_queue_xmit+0x275/0x3630 [ 117.916163][ T6638] ? __dev_queue_xmit+0x1bc2/0x3630 [ 117.921500][ T6638] ? __dev_queue_xmit+0x275/0x3630 [ 117.926645][ T6638] ? ref_tracker_free+0x686/0x830 [ 117.931763][ T6638] netlink_rcv_skb+0x235/0x4c0 [ 117.936711][ T6638] ? rtnetlink_bind+0x80/0x80 [ 117.941636][ T6638] ? netlink_ack+0x1160/0x1160 [ 117.946655][ T6638] ? __lock_acquire+0x7d80/0x7d80 [ 117.951710][ T6638] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.957123][ T6638] netlink_unicast+0x7b1/0x930 [ 117.962279][ T6638] netlink_sendmsg+0x8d0/0xbf0 [ 117.967352][ T6638] ? netlink_getsockopt+0x590/0x590 [ 117.972773][ T6638] ? apparmor_socket_sendmsg+0x8e/0x330 [ 117.978419][ T6638] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 117.983794][ T6638] ? security_socket_sendmsg+0x80/0xa0 [ 117.989291][ T6638] ? netlink_getsockopt+0x590/0x590 [ 117.994584][ T6638] ____sys_sendmsg+0x61b/0x980 [ 117.999359][ T6638] ? __asan_memset+0x22/0x40 [ 118.004070][ T6638] ? __sys_sendmsg_sock+0x30/0x30 [ 118.009112][ T6638] ? __import_iovec+0x5f2/0x850 [ 118.014003][ T6638] ? import_iovec+0x73/0xa0 [ 118.018527][ T6638] ___sys_sendmsg+0x2a6/0x360 [ 118.023227][ T6638] ? get_pid_task+0x20/0x1e0 [ 118.027909][ T6638] ? __sys_sendmsg+0x2b0/0x2b0 [ 118.032999][ T6638] ? __lock_acquire+0x7d80/0x7d80 [ 118.038220][ T6638] __se_sys_sendmsg+0x1d0/0x2c0 [ 118.043336][ T6638] ? __x64_sys_sendmsg+0x80/0x80 [ 118.048543][ T6638] ? lockdep_hardirqs_on+0x98/0x150 [ 118.054528][ T6638] do_syscall_64+0x55/0xb0 [ 118.059039][ T6638] ? clear_bhb_loop+0x40/0x90 [ 118.063805][ T6638] ? clear_bhb_loop+0x40/0x90 [ 118.068491][ T6638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.074787][ T6638] RIP: 0033:0x7fdcfe79e0d9 [ 118.079198][ T6638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.099189][ T6638] RSP: 002b:00007fdcfc9d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.107980][ T6638] RAX: ffffffffffffffda RBX: 00007fdcfea26090 RCX: 00007fdcfe79e0d9 [ 118.116140][ T6638] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 118.124288][ T6638] RBP: 00007fdcfc9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 118.132521][ T6638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.141119][ T6638] R13: 00007fdcfea26128 R14: 00007fdcfea26090 R15: 00007fff3e414288 [ 118.149567][ T6638] [ 118.343815][ T5087] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 118.364619][ T6644] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.346'. [ 118.488156][ T5087] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 118.576020][ T6648] netlink: 196 bytes leftover after parsing attributes in process `syz.3.348'. [ 119.049090][ T6665] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.356'. [ 119.121497][ T6667] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 119.142086][ T6667] netlink: 'syz.1.357': attribute type 4 has an invalid length. [ 119.182306][ T6667] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.357'. [ 119.221839][ T6669] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 119.240668][ T6669] netlink: 'syz.1.357': attribute type 4 has an invalid length. [ 119.289060][ T6669] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.357'. [ 119.305830][ T5087] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 120.198790][ T6691] netlink: 'syz.3.363': attribute type 10 has an invalid length. [ 121.152493][ T6695] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.366'. [ 121.595281][ T5087] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 121.693739][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 121.864593][ T6715] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.376'. [ 121.992677][ T6720] FAULT_INJECTION: forcing a failure. [ 121.992677][ T6720] name failslab, interval 1, probability 0, space 0, times 0 [ 122.019742][ T6720] CPU: 0 PID: 6720 Comm: syz.3.379 Not tainted syzkaller #0 [ 122.027097][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.037777][ T6720] Call Trace: [ 122.041170][ T6720] [ 122.044197][ T6720] dump_stack_lvl+0x18c/0x250 [ 122.048893][ T6720] ? sctp_sendmsg+0x1519/0x27b0 [ 122.054545][ T6720] ? ___sys_sendmsg+0x2a6/0x360 [ 122.059585][ T6720] ? show_regs_print_info+0x20/0x20 [ 122.064794][ T6720] ? load_image+0x420/0x420 [ 122.069423][ T6720] should_fail_ex+0x394/0x4c0 [ 122.074203][ T6720] should_failslab+0x9/0x20 [ 122.078716][ T6720] slab_pre_alloc_hook+0x59/0x300 [ 122.083802][ T6720] ? sctp_add_bind_addr+0x8c/0x360 [ 122.089019][ T6720] __kmem_cache_alloc_node+0x53/0x250 [ 122.094506][ T6720] ? sctp_add_bind_addr+0x8c/0x360 [ 122.099631][ T6720] kmalloc_trace+0x2a/0xe0 [ 122.104167][ T6720] sctp_add_bind_addr+0x8c/0x360 [ 122.109122][ T6720] sctp_copy_local_addr_list+0x31b/0x4e0 [ 122.114862][ T6720] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 122.121003][ T6720] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 122.127114][ T6720] ? sctp_v6_is_any+0x64/0x70 [ 122.131814][ T6720] ? sctp_copy_one_addr+0x8c/0x350 [ 122.137211][ T6720] sctp_bind_addr_copy+0xb3/0x3c0 [ 122.142349][ T6720] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 122.148790][ T6720] sctp_connect_new_asoc+0x2f9/0x6a0 [ 122.154310][ T6720] ? __sctp_connect+0xd80/0xd80 [ 122.159541][ T6720] ? __local_bh_enable_ip+0x13a/0x1c0 [ 122.164931][ T6720] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 122.170607][ T6720] ? security_sctp_bind_connect+0x89/0xb0 [ 122.176539][ T6720] sctp_sendmsg+0x1519/0x27b0 [ 122.181273][ T6720] ? sctp_getsockopt+0xb60/0xb60 [ 122.186244][ T6720] ? aa_af_perm+0x330/0x330 [ 122.190887][ T6720] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 122.197646][ T6720] ? sock_rps_record_flow+0x19/0x3f0 [ 122.203044][ T6720] ? inet_sendmsg+0xce/0x2a0 [ 122.207836][ T6720] ? inet_send_prepare+0x250/0x250 [ 122.213228][ T6720] ____sys_sendmsg+0x61b/0x980 [ 122.218017][ T6720] ? __sys_sendmsg_sock+0x30/0x30 [ 122.223074][ T6720] ? __import_iovec+0x5f2/0x850 [ 122.227962][ T6720] ? import_iovec+0x73/0xa0 [ 122.232489][ T6720] ___sys_sendmsg+0x2a6/0x360 [ 122.237217][ T6720] ? __sys_sendmsg+0x2b0/0x2b0 [ 122.242015][ T6720] ? trace_call_bpf+0xc3/0x6c0 [ 122.246811][ T6720] __se_sys_sendmsg+0x1d0/0x2c0 [ 122.251680][ T6720] ? perf_trace_preemptirq_template+0x269/0x330 [ 122.258075][ T6720] ? __x64_sys_sendmsg+0x80/0x80 [ 122.263107][ T6720] ? lockdep_hardirqs_on+0x98/0x150 [ 122.268862][ T6720] do_syscall_64+0x55/0xb0 [ 122.273566][ T6720] ? clear_bhb_loop+0x40/0x90 [ 122.278296][ T6720] ? clear_bhb_loop+0x40/0x90 [ 122.283092][ T6720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.289128][ T6720] RIP: 0033:0x7f31dcf9e0d9 [ 122.293784][ T6720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.313766][ T6720] RSP: 002b:00007f31dde85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.322293][ T6720] RAX: ffffffffffffffda RBX: 00007f31dd225fa0 RCX: 00007f31dcf9e0d9 [ 122.330405][ T6720] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000004 [ 122.338392][ T6720] RBP: 00007f31dde85090 R08: 0000000000000000 R09: 0000000000000000 [ 122.346815][ T6720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.355148][ T6720] R13: 00007f31dd226038 R14: 00007f31dd225fa0 R15: 00007ffd122d8928 [ 122.363165][ T6720] [ 122.757468][ T6736] netlink: 60 bytes leftover after parsing attributes in process `syz.2.382'. [ 122.771429][ T5087] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 123.006128][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 123.107015][ T6745] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.388'. [ 123.502709][ T6762] netlink: 'syz.2.393': attribute type 10 has an invalid length. [ 123.521913][ T6762] FAULT_INJECTION: forcing a failure. [ 123.521913][ T6762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.571898][ T6762] CPU: 0 PID: 6762 Comm: syz.2.393 Not tainted syzkaller #0 [ 123.579950][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.590459][ T6762] Call Trace: [ 123.593842][ T6762] [ 123.596776][ T6762] dump_stack_lvl+0x18c/0x250 [ 123.601552][ T6762] ? show_regs_print_info+0x20/0x20 [ 123.606856][ T6762] ? load_image+0x420/0x420 [ 123.612128][ T6762] ? __lock_acquire+0x7d80/0x7d80 [ 123.617285][ T6762] ? snprintf+0xe9/0x140 [ 123.621551][ T6762] should_fail_ex+0x394/0x4c0 [ 123.626331][ T6762] _copy_to_user+0x2f/0xa0 [ 123.630772][ T6762] simple_read_from_buffer+0xe7/0x150 [ 123.636192][ T6762] proc_fail_nth_read+0x1e8/0x260 [ 123.641250][ T6762] ? proc_fault_inject_write+0x360/0x360 [ 123.647189][ T6762] ? fsnotify_perm+0x271/0x5e0 [ 123.651987][ T6762] ? proc_fault_inject_write+0x360/0x360 [ 123.657919][ T6762] vfs_read+0x298/0x990 [ 123.662209][ T6762] ? kernel_read+0x1e0/0x1e0 [ 123.666846][ T6762] ? __fget_files+0x28/0x460 [ 123.671456][ T6762] ? __fget_files+0x3fc/0x460 [ 123.676201][ T6762] ? __fdget_pos+0x2a3/0x330 [ 123.681085][ T6762] ? ksys_read+0x74/0x260 [ 123.685899][ T6762] ksys_read+0x151/0x260 [ 123.690417][ T6762] ? vfs_write+0x9a0/0x9a0 [ 123.694868][ T6762] ? lockdep_hardirqs_on+0x98/0x150 [ 123.700331][ T6762] do_syscall_64+0x55/0xb0 [ 123.704970][ T6762] ? clear_bhb_loop+0x40/0x90 [ 123.709943][ T6762] ? clear_bhb_loop+0x40/0x90 [ 123.714816][ T6762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.721095][ T6762] RIP: 0033:0x7f065df5e90e [ 123.725696][ T6762] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 123.745574][ T6762] RSP: 002b:00007f065ee77fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.753992][ T6762] RAX: ffffffffffffffda RBX: 00007f065ee786c0 RCX: 00007f065df5e90e [ 123.762064][ T6762] RDX: 000000000000000f RSI: 00007f065ee780a0 RDI: 000000000000000e [ 123.770101][ T6762] RBP: 00007f065ee78090 R08: 0000000000000000 R09: 0000000000000000 [ 123.778427][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.786428][ T6762] R13: 00007f065e226038 R14: 00007f065e225fa0 R15: 00007ffefb0d2668 [ 123.794416][ T6762] [ 123.969198][ T5087] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 124.146649][ T5087] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 124.198540][ T6777] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.399'. [ 124.895776][ T5087] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 124.918517][ T6803] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.410'. [ 125.168415][ T5087] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 125.457783][ T6815] netlink: 'syz.2.416': attribute type 10 has an invalid length. [ 125.475704][ T6817] netlink: 'syz.3.417': attribute type 4 has an invalid length. [ 125.526892][ T6817] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.417'. [ 125.681924][ T5087] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 125.682223][ T6828] netlink: 'syz.1.420': attribute type 25 has an invalid length. [ 125.730097][ T6828] netlink: 'syz.1.420': attribute type 3 has an invalid length. [ 125.771276][ T6828] netlink: 'syz.1.420': attribute type 10 has an invalid length. [ 125.779343][ T6828] netlink: 40 bytes leftover after parsing attributes in process `syz.1.420'. [ 125.814892][ T6828] batman_adv: batadv0: Adding interface: virt_wifi0 [ 125.822176][ T6828] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.848742][ T6828] batman_adv: batadv0: Interface activated: virt_wifi0 [ 125.858419][ T6835] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.424'. [ 126.103301][ T5087] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 126.453934][ T6850] FAULT_INJECTION: forcing a failure. [ 126.453934][ T6850] name failslab, interval 1, probability 0, space 0, times 0 [ 126.478178][ T6850] CPU: 1 PID: 6850 Comm: syz.2.429 Not tainted syzkaller #0 [ 126.485649][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.496359][ T6850] Call Trace: [ 126.499752][ T6850] [ 126.502711][ T6850] dump_stack_lvl+0x18c/0x250 [ 126.507423][ T6850] ? sctp_sendmsg+0x1519/0x27b0 [ 126.512306][ T6850] ? ___sys_sendmsg+0x2a6/0x360 [ 126.517179][ T6850] ? show_regs_print_info+0x20/0x20 [ 126.522531][ T6850] ? load_image+0x420/0x420 [ 126.527148][ T6850] should_fail_ex+0x394/0x4c0 [ 126.531918][ T6850] should_failslab+0x9/0x20 [ 126.536599][ T6850] slab_pre_alloc_hook+0x59/0x300 [ 126.541724][ T6850] ? sctp_add_bind_addr+0x8c/0x360 [ 126.546923][ T6850] __kmem_cache_alloc_node+0x53/0x250 [ 126.552502][ T6850] ? sctp_add_bind_addr+0x8c/0x360 [ 126.557638][ T6850] kmalloc_trace+0x2a/0xe0 [ 126.562162][ T6850] sctp_add_bind_addr+0x8c/0x360 [ 126.567220][ T6850] sctp_copy_local_addr_list+0x31b/0x4e0 [ 126.572950][ T6850] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 126.578867][ T6850] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 126.585126][ T6850] ? sctp_v6_is_any+0x64/0x70 [ 126.589864][ T6850] ? sctp_copy_one_addr+0x8c/0x350 [ 126.595005][ T6850] sctp_bind_addr_copy+0xb3/0x3c0 [ 126.600046][ T6850] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 126.606420][ T6850] sctp_connect_new_asoc+0x2f9/0x6a0 [ 126.611825][ T6850] ? __sctp_connect+0xd80/0xd80 [ 126.616703][ T6850] ? __local_bh_enable_ip+0x13a/0x1c0 [ 126.622263][ T6850] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 126.627826][ T6850] ? security_sctp_bind_connect+0x89/0xb0 [ 126.633546][ T6850] sctp_sendmsg+0x1519/0x27b0 [ 126.638237][ T6850] ? sctp_getsockopt+0xb60/0xb60 [ 126.643179][ T6850] ? aa_af_perm+0x330/0x330 [ 126.648094][ T6850] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 126.654537][ T6850] ? sock_rps_record_flow+0x19/0x3f0 [ 126.659926][ T6850] ? inet_sendmsg+0xce/0x2a0 [ 126.664795][ T6850] ? inet_send_prepare+0x250/0x250 [ 126.670018][ T6850] ____sys_sendmsg+0x61b/0x980 [ 126.674904][ T6850] ? __sys_sendmsg_sock+0x30/0x30 [ 126.679955][ T6850] ? __import_iovec+0x5f2/0x850 [ 126.684919][ T6850] ? import_iovec+0x73/0xa0 [ 126.689536][ T6850] ___sys_sendmsg+0x2a6/0x360 [ 126.694235][ T6850] ? get_pid_task+0x20/0x1e0 [ 126.698881][ T6850] ? __sys_sendmsg+0x2b0/0x2b0 [ 126.703872][ T6850] ? __lock_acquire+0x7d80/0x7d80 [ 126.708964][ T6850] __se_sys_sendmsg+0x1d0/0x2c0 [ 126.713872][ T6850] ? perf_trace_preemptirq_template+0x269/0x330 [ 126.720303][ T6850] ? __x64_sys_sendmsg+0x80/0x80 [ 126.725651][ T6850] ? lockdep_hardirqs_on+0x98/0x150 [ 126.730968][ T6850] do_syscall_64+0x55/0xb0 [ 126.735570][ T6850] ? clear_bhb_loop+0x40/0x90 [ 126.740293][ T6850] ? clear_bhb_loop+0x40/0x90 [ 126.745271][ T6850] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.751562][ T6850] RIP: 0033:0x7f065df9e0d9 [ 126.756001][ T6850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.776056][ T6850] RSP: 002b:00007f065ee78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.785488][ T6850] RAX: ffffffffffffffda RBX: 00007f065e225fa0 RCX: 00007f065df9e0d9 [ 126.793891][ T6850] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000004 [ 126.801969][ T6850] RBP: 00007f065ee78090 R08: 0000000000000000 R09: 0000000000000000 [ 126.810269][ T6850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.818386][ T6850] R13: 00007f065e226038 R14: 00007f065e225fa0 R15: 00007ffefb0d2668 [ 126.827354][ T6850] [ 126.862237][ T5087] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 126.986875][ T6861] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.434'. [ 127.263239][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 127.771242][ T6896] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.447'. [ 128.191175][ T5087] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 128.773850][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 128.864707][ T5087] Bluetooth: Frame is too long (len 149, expected len 4) [ 128.899629][ T6942] netlink: 'syz.3.466': attribute type 10 has an invalid length. [ 129.799286][ T5087] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 130.461388][ T5087] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 130.577899][ T7036] FAULT_INJECTION: forcing a failure. [ 130.577899][ T7036] name failslab, interval 1, probability 0, space 0, times 0 [ 130.598653][ T7036] CPU: 0 PID: 7036 Comm: syz.2.483 Not tainted syzkaller #0 [ 130.606288][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.616667][ T7036] Call Trace: [ 130.620013][ T7036] [ 130.622982][ T7036] dump_stack_lvl+0x18c/0x250 [ 130.627963][ T7036] ? sctp_sendmsg+0x1519/0x27b0 [ 130.632950][ T7036] ? ___sys_sendmsg+0x2a6/0x360 [ 130.638321][ T7036] ? show_regs_print_info+0x20/0x20 [ 130.643658][ T7036] ? load_image+0x420/0x420 [ 130.648341][ T7036] should_fail_ex+0x394/0x4c0 [ 130.653522][ T7036] should_failslab+0x9/0x20 [ 130.658436][ T7036] slab_pre_alloc_hook+0x59/0x300 [ 130.663605][ T7036] ? sctp_add_bind_addr+0x8c/0x360 [ 130.669324][ T7036] __kmem_cache_alloc_node+0x53/0x250 [ 130.675526][ T7036] ? sctp_add_bind_addr+0x8c/0x360 [ 130.680933][ T7036] kmalloc_trace+0x2a/0xe0 [ 130.685563][ T7036] sctp_add_bind_addr+0x8c/0x360 [ 130.691343][ T7036] sctp_copy_local_addr_list+0x31b/0x4e0 [ 130.697264][ T7036] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 130.703434][ T7036] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 130.709521][ T7036] ? sctp_v6_is_any+0x64/0x70 [ 130.714197][ T7036] ? sctp_copy_one_addr+0x8c/0x350 [ 130.719562][ T7036] sctp_bind_addr_copy+0xb3/0x3c0 [ 130.724698][ T7036] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 130.732096][ T7036] sctp_connect_new_asoc+0x2f9/0x6a0 [ 130.738014][ T7036] ? __sctp_connect+0xd80/0xd80 [ 130.743198][ T7036] ? __local_bh_enable_ip+0x13a/0x1c0 [ 130.748712][ T7036] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 130.754295][ T7036] ? security_sctp_bind_connect+0x89/0xb0 [ 130.760156][ T7036] sctp_sendmsg+0x1519/0x27b0 [ 130.765202][ T7036] ? sctp_getsockopt+0xb60/0xb60 [ 130.770698][ T7036] ? aa_af_perm+0x330/0x330 [ 130.775440][ T7036] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 130.782728][ T7036] ? sock_rps_record_flow+0x19/0x3f0 [ 130.788390][ T7036] ? inet_sendmsg+0xce/0x2a0 [ 130.793442][ T7036] ? inet_send_prepare+0x250/0x250 [ 130.798738][ T7036] ____sys_sendmsg+0x61b/0x980 [ 130.803512][ T7036] ? __sys_sendmsg_sock+0x30/0x30 [ 130.809345][ T7036] ? __import_iovec+0x5f2/0x850 [ 130.815000][ T7036] ? import_iovec+0x73/0xa0 [ 130.819801][ T7036] ___sys_sendmsg+0x2a6/0x360 [ 130.824674][ T7036] ? get_pid_task+0x20/0x1e0 [ 130.830987][ T7036] ? __sys_sendmsg+0x2b0/0x2b0 [ 130.836474][ T7036] ? __lock_acquire+0x7d80/0x7d80 [ 130.841625][ T7036] __se_sys_sendmsg+0x1d0/0x2c0 [ 130.846663][ T7036] ? perf_trace_preemptirq_template+0x269/0x330 [ 130.853226][ T7036] ? __x64_sys_sendmsg+0x80/0x80 [ 130.858420][ T7036] ? lockdep_hardirqs_on+0x98/0x150 [ 130.863641][ T7036] do_syscall_64+0x55/0xb0 [ 130.868253][ T7036] ? clear_bhb_loop+0x40/0x90 [ 130.873044][ T7036] ? clear_bhb_loop+0x40/0x90 [ 130.877775][ T7036] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.883694][ T7036] RIP: 0033:0x7f065df9e0d9 [ 130.888146][ T7036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.908208][ T7036] RSP: 002b:00007f065ee78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.917092][ T7036] RAX: ffffffffffffffda RBX: 00007f065e225fa0 RCX: 00007f065df9e0d9 [ 130.925307][ T7036] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000004 [ 130.933450][ T7036] RBP: 00007f065ee78090 R08: 0000000000000000 R09: 0000000000000000 [ 130.941520][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.949686][ T7036] R13: 00007f065e226038 R14: 00007f065e225fa0 R15: 00007ffefb0d2668 [ 130.957858][ T7036] [ 131.274959][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 131.410257][ T7051] syzkaller0: entered promiscuous mode [ 131.429273][ T7051] syzkaller0: entered allmulticast mode [ 131.466722][ T7052] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 131.475659][ T5087] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 132.189297][ T5087] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 132.387458][ T5087] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 132.597789][ T7104] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.508'. [ 133.025168][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 133.269748][ T7120] netlink: 'syz.3.514': attribute type 10 has an invalid length. [ 133.315954][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.322815][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.618691][ T7154] FAULT_INJECTION: forcing a failure. [ 134.618691][ T7154] name failslab, interval 1, probability 0, space 0, times 0 [ 134.636690][ T7154] CPU: 0 PID: 7154 Comm: syz.2.529 Not tainted syzkaller #0 [ 134.644228][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.654486][ T7154] Call Trace: [ 134.657788][ T7154] [ 134.660756][ T7154] dump_stack_lvl+0x18c/0x250 [ 134.665778][ T7154] ? sctp_sendmsg+0x1519/0x27b0 [ 134.670663][ T7154] ? ___sys_sendmsg+0x2a6/0x360 [ 134.675546][ T7154] ? show_regs_print_info+0x20/0x20 [ 134.680870][ T7154] ? load_image+0x420/0x420 [ 134.685601][ T7154] should_fail_ex+0x394/0x4c0 [ 134.690580][ T7154] should_failslab+0x9/0x20 [ 134.695248][ T7154] slab_pre_alloc_hook+0x59/0x300 [ 134.700496][ T7154] ? sctp_add_bind_addr+0x8c/0x360 [ 134.705889][ T7154] __kmem_cache_alloc_node+0x53/0x250 [ 134.711369][ T7154] ? sctp_add_bind_addr+0x8c/0x360 [ 134.716693][ T7154] kmalloc_trace+0x2a/0xe0 [ 134.721270][ T7154] sctp_add_bind_addr+0x8c/0x360 [ 134.726505][ T7154] sctp_copy_local_addr_list+0x31b/0x4e0 [ 134.732816][ T7154] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 134.739046][ T7154] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 134.746157][ T7154] ? sctp_v6_is_any+0x64/0x70 [ 134.751188][ T7154] ? sctp_copy_one_addr+0x8c/0x350 [ 134.756693][ T7154] sctp_bind_addr_copy+0xb3/0x3c0 [ 134.761743][ T7154] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 134.768402][ T7154] sctp_connect_new_asoc+0x2f9/0x6a0 [ 134.773828][ T7154] ? __sctp_connect+0xd80/0xd80 [ 134.779308][ T7154] ? __local_bh_enable_ip+0x13a/0x1c0 [ 134.785067][ T7154] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 134.791031][ T7154] ? security_sctp_bind_connect+0x89/0xb0 [ 134.796853][ T7154] sctp_sendmsg+0x1519/0x27b0 [ 134.801889][ T7154] ? sctp_getsockopt+0xb60/0xb60 [ 134.806863][ T7154] ? aa_af_perm+0x330/0x330 [ 134.811481][ T7154] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 134.818006][ T7154] ? sock_rps_record_flow+0x19/0x3f0 [ 134.823293][ T7154] ? inet_sendmsg+0xce/0x2a0 [ 134.827891][ T7154] ? inet_send_prepare+0x250/0x250 [ 134.832999][ T7154] ____sys_sendmsg+0x61b/0x980 [ 134.837858][ T7154] ? __sys_sendmsg_sock+0x30/0x30 [ 134.842992][ T7154] ? __import_iovec+0x5f2/0x850 [ 134.847873][ T7154] ? import_iovec+0x73/0xa0 [ 134.852670][ T7154] ___sys_sendmsg+0x2a6/0x360 [ 134.857572][ T7154] ? get_pid_task+0x20/0x1e0 [ 134.862520][ T7154] ? __sys_sendmsg+0x2b0/0x2b0 [ 134.867764][ T7154] ? __lock_acquire+0x7d80/0x7d80 [ 134.872931][ T7154] __se_sys_sendmsg+0x1d0/0x2c0 [ 134.878139][ T7154] ? perf_trace_preemptirq_template+0x269/0x330 [ 134.884587][ T7154] ? __x64_sys_sendmsg+0x80/0x80 [ 134.889656][ T7154] ? lockdep_hardirqs_on+0x98/0x150 [ 134.895416][ T7154] do_syscall_64+0x55/0xb0 [ 134.899928][ T7154] ? clear_bhb_loop+0x40/0x90 [ 134.905853][ T7154] ? clear_bhb_loop+0x40/0x90 [ 134.913031][ T7154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.920032][ T7154] RIP: 0033:0x7f065df9e0d9 [ 134.925196][ T7154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.946922][ T7154] RSP: 002b:00007f065ee78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.955646][ T7154] RAX: ffffffffffffffda RBX: 00007f065e225fa0 RCX: 00007f065df9e0d9 [ 134.964027][ T7154] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000004 [ 134.972029][ T7154] RBP: 00007f065ee78090 R08: 0000000000000000 R09: 0000000000000000 [ 134.980115][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.988107][ T7154] R13: 00007f065e226038 R14: 00007f065e225fa0 R15: 00007ffefb0d2668 [ 134.996192][ T7154] [ 135.023806][ T7150] netlink: 'syz.0.527': attribute type 19 has an invalid length. [ 135.032441][ T7150] netlink: 36 bytes leftover after parsing attributes in process `syz.0.527'. [ 135.224011][ T7165] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.531'. [ 135.487170][ T7178] FAULT_INJECTION: forcing a failure. [ 135.487170][ T7178] name failslab, interval 1, probability 0, space 0, times 0 [ 135.550118][ T7178] CPU: 0 PID: 7178 Comm: syz.3.537 Not tainted syzkaller #0 [ 135.554247][ T5087] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 135.557748][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.557770][ T7178] Call Trace: [ 135.557782][ T7178] [ 135.557795][ T7178] dump_stack_lvl+0x18c/0x250 [ 135.557834][ T7178] ? show_regs_print_info+0x20/0x20 [ 135.557860][ T7178] ? load_image+0x420/0x420 [ 135.597576][ T7178] ? __might_sleep+0xe0/0xe0 [ 135.602394][ T7178] ? __lock_acquire+0x7d80/0x7d80 [ 135.607626][ T7178] should_fail_ex+0x394/0x4c0 [ 135.612418][ T7178] should_failslab+0x9/0x20 [ 135.616961][ T7178] slab_pre_alloc_hook+0x59/0x300 [ 135.622087][ T7178] ? __get_vm_area_node+0x125/0x370 [ 135.627407][ T7178] __kmem_cache_alloc_node+0x53/0x250 [ 135.632819][ T7178] ? __get_vm_area_node+0x125/0x370 [ 135.638394][ T7178] kmalloc_node_trace+0x26/0xe0 [ 135.643579][ T7178] __get_vm_area_node+0x125/0x370 [ 135.648710][ T7178] __vmalloc_node_range+0x36f/0x1320 [ 135.654425][ T7178] ? netlink_sendmsg+0x602/0xbf0 [ 135.659413][ T7178] ? netlink_insert+0x1094/0x1390 [ 135.664501][ T7178] ? netlink_insert+0x2ba/0x1390 [ 135.669641][ T7178] ? free_vm_area+0x50/0x50 [ 135.674382][ T7178] ? netlink_sendmsg+0x602/0xbf0 [ 135.679393][ T7178] vmalloc+0x79/0x90 [ 135.683521][ T7178] ? netlink_sendmsg+0x602/0xbf0 [ 135.688625][ T7178] netlink_sendmsg+0x602/0xbf0 [ 135.693628][ T7178] ? netlink_getsockopt+0x590/0x590 [ 135.698996][ T7178] ? apparmor_socket_sendmsg+0x8e/0x330 [ 135.704706][ T7178] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 135.710228][ T7178] ? security_socket_sendmsg+0x80/0xa0 [ 135.715889][ T7178] sock_write_iter+0x2dc/0x420 [ 135.720682][ T7178] ? sock_read_iter+0x3f0/0x3f0 [ 135.725617][ T7178] ? common_file_perm+0x198/0x1f0 [ 135.730804][ T7178] vfs_write+0x474/0x9a0 [ 135.735174][ T7178] ? file_end_write+0x250/0x250 [ 135.740342][ T7178] ? __fget_files+0x3fc/0x460 [ 135.745283][ T7178] ? __fdget_pos+0x1d8/0x330 [ 135.750120][ T7178] ? ksys_write+0x74/0x260 [ 135.754740][ T7178] ksys_write+0x151/0x260 [ 135.759125][ T7178] ? __ia32_sys_read+0x90/0x90 [ 135.763925][ T7178] ? lockdep_hardirqs_on+0x98/0x150 [ 135.769241][ T7178] do_syscall_64+0x55/0xb0 [ 135.773784][ T7178] ? clear_bhb_loop+0x40/0x90 [ 135.778791][ T7178] ? clear_bhb_loop+0x40/0x90 [ 135.783516][ T7178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.789515][ T7178] RIP: 0033:0x7f31dcf9e0d9 [ 135.794036][ T7178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.814311][ T7178] RSP: 002b:00007f31dde85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.823844][ T7178] RAX: ffffffffffffffda RBX: 00007f31dd225fa0 RCX: 00007f31dcf9e0d9 [ 135.832468][ T7178] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000006 [ 135.840651][ T7178] RBP: 00007f31dde85090 R08: 0000000000000000 R09: 0000000000000000 [ 135.848952][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.857378][ T7178] R13: 00007f31dd226038 R14: 00007f31dd225fa0 R15: 00007ffd122d8928 [ 135.865516][ T7178] [ 135.873398][ T7178] syz.3.537: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 135.892066][ T7178] CPU: 1 PID: 7178 Comm: syz.3.537 Not tainted syzkaller #0 [ 135.899703][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.909899][ T7178] Call Trace: [ 135.913318][ T7178] [ 135.916389][ T7178] dump_stack_lvl+0x18c/0x250 [ 135.921444][ T7178] ? show_regs_print_info+0x20/0x20 [ 135.926719][ T7178] ? load_image+0x420/0x420 [ 135.931404][ T7178] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 135.938040][ T7178] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 135.944664][ T7178] warn_alloc+0x246/0x340 [ 135.949024][ T7178] ? __get_vm_area_node+0x125/0x370 [ 135.954282][ T7178] ? zone_watermark_ok_safe+0x230/0x230 [ 135.960340][ T7178] ? rcu_is_watching+0x15/0xb0 [ 135.965218][ T7178] ? __get_vm_area_node+0x356/0x370 [ 135.970572][ T7178] __vmalloc_node_range+0x394/0x1320 [ 135.976524][ T7178] ? netlink_insert+0x1094/0x1390 [ 135.981737][ T7178] ? netlink_insert+0x2ba/0x1390 [ 135.986824][ T7178] ? free_vm_area+0x50/0x50 [ 135.991567][ T7178] ? netlink_sendmsg+0x602/0xbf0 [ 135.996609][ T7178] vmalloc+0x79/0x90 [ 136.000531][ T7178] ? netlink_sendmsg+0x602/0xbf0 [ 136.005486][ T7178] netlink_sendmsg+0x602/0xbf0 [ 136.010465][ T7178] ? netlink_getsockopt+0x590/0x590 [ 136.015705][ T7178] ? apparmor_socket_sendmsg+0x8e/0x330 [ 136.021371][ T7178] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 136.027194][ T7178] ? security_socket_sendmsg+0x80/0xa0 [ 136.032701][ T7178] sock_write_iter+0x2dc/0x420 [ 136.037492][ T7178] ? sock_read_iter+0x3f0/0x3f0 [ 136.042417][ T7178] ? common_file_perm+0x198/0x1f0 [ 136.047509][ T7178] vfs_write+0x474/0x9a0 [ 136.051821][ T7178] ? file_end_write+0x250/0x250 [ 136.056760][ T7178] ? __fget_files+0x3fc/0x460 [ 136.062221][ T7178] ? __fdget_pos+0x1d8/0x330 [ 136.066959][ T7178] ? ksys_write+0x74/0x260 [ 136.071430][ T7178] ksys_write+0x151/0x260 [ 136.075894][ T7178] ? __ia32_sys_read+0x90/0x90 [ 136.080817][ T7178] ? lockdep_hardirqs_on+0x98/0x150 [ 136.086192][ T7178] do_syscall_64+0x55/0xb0 [ 136.090823][ T7178] ? clear_bhb_loop+0x40/0x90 [ 136.095829][ T7178] ? clear_bhb_loop+0x40/0x90 [ 136.100570][ T7178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.106653][ T7178] RIP: 0033:0x7f31dcf9e0d9 [ 136.111188][ T7178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.131178][ T7178] RSP: 002b:00007f31dde85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.139704][ T7178] RAX: ffffffffffffffda RBX: 00007f31dd225fa0 RCX: 00007f31dcf9e0d9 [ 136.147884][ T7178] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000006 [ 136.156224][ T7178] RBP: 00007f31dde85090 R08: 0000000000000000 R09: 0000000000000000 [ 136.164237][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.172852][ T7178] R13: 00007f31dd226038 R14: 00007f31dd225fa0 R15: 00007ffd122d8928 [ 136.181395][ T7178] [ 136.221105][ T7178] Mem-Info: [ 136.224371][ T7178] active_anon:7276 inactive_anon:0 isolated_anon:0 [ 136.224371][ T7178] active_file:10977 inactive_file:39970 isolated_file:0 [ 136.224371][ T7178] unevictable:768 dirty:128 writeback:0 [ 136.224371][ T7178] slab_reclaimable:10375 slab_unreclaimable:90489 [ 136.224371][ T7178] mapped:24235 shmem:1361 pagetables:549 [ 136.224371][ T7178] sec_pagetables:0 bounce:0 [ 136.224371][ T7178] kernel_misc_reclaimable:0 [ 136.224371][ T7178] free:1350192 free_pcp:13747 free_cma:0 [ 136.302230][ T7178] Node 0 active_anon:28904kB inactive_anon:0kB active_file:43908kB inactive_file:159680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96940kB dirty:512kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10828kB pagetables:1996kB sec_pagetables:0kB all_unreclaimable? no [ 136.346673][ T7178] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 136.397019][ T7178] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 136.425283][ T7178] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 136.439405][ T7181] netlink: 'syz.2.540': attribute type 5 has an invalid length. [ 136.449335][ T7178] Node 0 DMA32 free:1491920kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:28960kB inactive_anon:0kB active_file:43908kB inactive_file:158856kB unevictable:1536kB writepending:512kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:33056kB local_pcp:12808kB free_cma:0kB [ 136.490372][ T7178] lowmem_reserve[]: 0 0 0 0 0 [ 136.495701][ T7178] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 136.533059][ T7178] lowmem_reserve[]: 0 0 0 0 0 [ 136.537951][ T7178] Node 1 Normal free:3893736kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21996kB local_pcp:8012kB free_cma:0kB [ 136.573292][ T7178] lowmem_reserve[]: 0 0 0 0 0 [ 136.578130][ T7178] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 136.591433][ T7178] Node 0 DMA32: 0*4kB 2*8kB (UE) 484*16kB (UM) 530*32kB (UME) 353*64kB (UM) 48*128kB (UM) 49*256kB (UME) 25*512kB (UME) 6*1024kB (UME) 5*2048kB (UM) 341*4096kB (UM) = 1491920kB [ 136.610449][ T7178] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 136.679418][ T7178] Node 1 Normal: 292*4kB (UME) 63*8kB (UME) 50*16kB (UME) 78*32kB (UME) 14*64kB (UME) 4*128kB (UME) 1*256kB (M) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3893736kB [ 136.736020][ T7178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.767511][ T7178] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.777587][ T7178] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.789826][ T7178] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.805396][ T7178] 52308 total pagecache pages [ 136.810197][ T7178] 0 pages in swap cache [ 136.814697][ T7178] Free swap = 124996kB [ 136.818969][ T7178] Total swap = 124996kB [ 136.826758][ T7178] 2097051 pages RAM [ 136.831408][ T7178] 0 pages HighMem/MovableOnly [ 136.836588][ T7178] 416958 pages reserved [ 136.845443][ T7178] 0 pages cma reserved [ 137.338978][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 137.377206][ T7208] netlink: 'syz.0.551': attribute type 2 has an invalid length. [ 138.139154][ T5087] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 138.311120][ T7242] netlink: 'syz.0.565': attribute type 10 has an invalid length. [ 138.783673][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 139.062537][ T7269] netlink: 'syz.1.577': attribute type 11 has an invalid length. [ 139.087076][ T7269] netlink: 212832 bytes leftover after parsing attributes in process `syz.1.577'. [ 139.190630][ T7271] FAULT_INJECTION: forcing a failure. [ 139.190630][ T7271] name failslab, interval 1, probability 0, space 0, times 0 [ 139.215542][ T7271] CPU: 1 PID: 7271 Comm: syz.0.578 Not tainted syzkaller #0 [ 139.223305][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.233488][ T7271] Call Trace: [ 139.236870][ T7271] [ 139.240098][ T7271] dump_stack_lvl+0x18c/0x250 [ 139.244821][ T7271] ? sctp_sendmsg+0x1519/0x27b0 [ 139.249804][ T7271] ? ___sys_sendmsg+0x2a6/0x360 [ 139.254794][ T7271] ? show_regs_print_info+0x20/0x20 [ 139.260199][ T7271] ? load_image+0x420/0x420 [ 139.264893][ T7271] should_fail_ex+0x394/0x4c0 [ 139.269703][ T7271] should_failslab+0x9/0x20 [ 139.274766][ T7271] slab_pre_alloc_hook+0x59/0x300 [ 139.280028][ T7271] ? sctp_add_bind_addr+0x8c/0x360 [ 139.285179][ T7271] __kmem_cache_alloc_node+0x53/0x250 [ 139.290596][ T7271] ? sctp_add_bind_addr+0x8c/0x360 [ 139.295745][ T7271] kmalloc_trace+0x2a/0xe0 [ 139.300205][ T7271] sctp_add_bind_addr+0x8c/0x360 [ 139.305423][ T7271] sctp_copy_local_addr_list+0x31b/0x4e0 [ 139.311262][ T7271] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 139.317190][ T7271] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 139.323365][ T7271] ? sctp_v6_is_any+0x64/0x70 [ 139.328533][ T7271] ? sctp_copy_one_addr+0x8c/0x350 [ 139.333868][ T7271] sctp_bind_addr_copy+0xb3/0x3c0 [ 139.339103][ T7271] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 139.345450][ T7271] sctp_connect_new_asoc+0x2f9/0x6a0 [ 139.351634][ T7271] ? __sctp_connect+0xd80/0xd80 [ 139.356834][ T7271] ? __local_bh_enable_ip+0x13a/0x1c0 [ 139.362307][ T7271] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 139.368154][ T7271] ? security_sctp_bind_connect+0x89/0xb0 [ 139.373882][ T7271] sctp_sendmsg+0x1519/0x27b0 [ 139.378567][ T7271] ? sctp_getsockopt+0xb60/0xb60 [ 139.383605][ T7271] ? aa_af_perm+0x330/0x330 [ 139.388118][ T7271] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 139.394797][ T7271] ? sock_rps_record_flow+0x19/0x3f0 [ 139.400082][ T7271] ? inet_sendmsg+0xce/0x2a0 [ 139.404670][ T7271] ? inet_send_prepare+0x250/0x250 [ 139.410044][ T7271] ____sys_sendmsg+0x61b/0x980 [ 139.414990][ T7271] ? __sys_sendmsg_sock+0x30/0x30 [ 139.420186][ T7271] ? __import_iovec+0x5f2/0x850 [ 139.425070][ T7271] ? import_iovec+0x73/0xa0 [ 139.429593][ T7271] ___sys_sendmsg+0x2a6/0x360 [ 139.434274][ T7271] ? get_pid_task+0x20/0x1e0 [ 139.439056][ T7271] ? __sys_sendmsg+0x2b0/0x2b0 [ 139.443957][ T7271] ? __lock_acquire+0x7d80/0x7d80 [ 139.449032][ T7271] __se_sys_sendmsg+0x1d0/0x2c0 [ 139.454066][ T7271] ? perf_trace_preemptirq_template+0x269/0x330 [ 139.460435][ T7271] ? __x64_sys_sendmsg+0x80/0x80 [ 139.465448][ T7271] ? lockdep_hardirqs_on+0x98/0x150 [ 139.470666][ T7271] do_syscall_64+0x55/0xb0 [ 139.475268][ T7271] ? clear_bhb_loop+0x40/0x90 [ 139.479975][ T7271] ? clear_bhb_loop+0x40/0x90 [ 139.484673][ T7271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.490599][ T7271] RIP: 0033:0x7fd93639e0d9 [ 139.495026][ T7271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.514993][ T7271] RSP: 002b:00007fd937198028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.523417][ T7271] RAX: ffffffffffffffda RBX: 00007fd936625fa0 RCX: 00007fd93639e0d9 [ 139.531826][ T7271] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000004 [ 139.539808][ T7271] RBP: 00007fd937198090 R08: 0000000000000000 R09: 0000000000000000 [ 139.547843][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.555989][ T7271] R13: 00007fd936626038 R14: 00007fd936625fa0 R15: 00007ffcad9adaa8 [ 139.564167][ T7271] [ 139.795426][ T5087] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 139.960954][ T7292] netlink: 156 bytes leftover after parsing attributes in process `syz.1.586'. [ 140.114795][ T7288] netlink: 'syz.1.586': attribute type 28 has an invalid length. [ 140.136766][ T7288] netlink: 'syz.1.586': attribute type 29 has an invalid length. [ 140.150437][ T5087] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 140.173285][ T7288] netlink: 132 bytes leftover after parsing attributes in process `syz.1.586'. [ 140.365819][ T7302] netlink: 212424 bytes leftover after parsing attributes in process `syz.2.591'. [ 140.403148][ T7304] netlink: 212424 bytes leftover after parsing attributes in process `syz.0.592'. [ 140.658202][ T5087] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 140.897998][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 141.370110][ T5087] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 141.817415][ T5087] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 141.837676][ T7352] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.610'. [ 142.142190][ T7355] netlink: 'syz.0.611': attribute type 10 has an invalid length. [ 142.397982][ T5087] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 142.442994][ T7359] syzkaller0: entered promiscuous mode [ 142.453776][ T7359] syzkaller0: entered allmulticast mode [ 142.715247][ T5087] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 144.548479][ T7386] FAULT_INJECTION: forcing a failure. [ 144.548479][ T7386] name failslab, interval 1, probability 0, space 0, times 0 [ 144.568542][ T7386] CPU: 0 PID: 7386 Comm: syz.3.623 Not tainted syzkaller #0 [ 144.575901][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.586208][ T7386] Call Trace: [ 144.589776][ T7386] [ 144.592726][ T7386] dump_stack_lvl+0x18c/0x250 [ 144.597450][ T7386] ? sctp_sendmsg+0x1519/0x27b0 [ 144.602352][ T7386] ? ___sys_sendmsg+0x2a6/0x360 [ 144.607251][ T7386] ? show_regs_print_info+0x20/0x20 [ 144.612964][ T7386] ? load_image+0x420/0x420 [ 144.618095][ T7386] should_fail_ex+0x394/0x4c0 [ 144.622841][ T7386] should_failslab+0x9/0x20 [ 144.627750][ T7386] slab_pre_alloc_hook+0x59/0x300 [ 144.633188][ T7386] ? sctp_add_bind_addr+0x8c/0x360 [ 144.638335][ T7386] __kmem_cache_alloc_node+0x53/0x250 [ 144.643949][ T7386] ? sctp_add_bind_addr+0x8c/0x360 [ 144.649536][ T7386] kmalloc_trace+0x2a/0xe0 [ 144.654164][ T7386] sctp_add_bind_addr+0x8c/0x360 [ 144.659141][ T7386] sctp_copy_local_addr_list+0x31b/0x4e0 [ 144.665158][ T7386] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 144.671166][ T7386] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 144.677355][ T7386] ? sctp_v6_is_any+0x64/0x70 [ 144.682146][ T7386] ? sctp_copy_one_addr+0x8c/0x350 [ 144.687282][ T7386] sctp_bind_addr_copy+0xb3/0x3c0 [ 144.692339][ T7386] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 144.699058][ T7386] sctp_connect_new_asoc+0x2f9/0x6a0 [ 144.704720][ T7386] ? __sctp_connect+0xd80/0xd80 [ 144.709684][ T7386] ? __local_bh_enable_ip+0x13a/0x1c0 [ 144.715354][ T7386] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 144.721808][ T7386] ? security_sctp_bind_connect+0x89/0xb0 [ 144.727841][ T7386] sctp_sendmsg+0x1519/0x27b0 [ 144.732905][ T7386] ? sctp_getsockopt+0xb60/0xb60 [ 144.738049][ T7386] ? aa_af_perm+0x330/0x330 [ 144.742852][ T7386] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 144.749379][ T7386] ? sock_rps_record_flow+0x19/0x3f0 [ 144.754972][ T7386] ? inet_sendmsg+0xce/0x2a0 [ 144.759582][ T7386] ? inet_send_prepare+0x250/0x250 [ 144.764721][ T7386] ____sys_sendmsg+0x61b/0x980 [ 144.769629][ T7386] ? __sys_sendmsg_sock+0x30/0x30 [ 144.774848][ T7386] ? __import_iovec+0x5f2/0x850 [ 144.779724][ T7386] ? import_iovec+0x73/0xa0 [ 144.784434][ T7386] ___sys_sendmsg+0x2a6/0x360 [ 144.789314][ T7386] ? get_pid_task+0x20/0x1e0 [ 144.794340][ T7386] ? __sys_sendmsg+0x2b0/0x2b0 [ 144.799239][ T7386] ? __lock_acquire+0x7d80/0x7d80 [ 144.804349][ T7386] __se_sys_sendmsg+0x1d0/0x2c0 [ 144.809416][ T7386] ? perf_trace_preemptirq_template+0x269/0x330 [ 144.815855][ T7386] ? __x64_sys_sendmsg+0x80/0x80 [ 144.820848][ T7386] ? lockdep_hardirqs_on+0x98/0x150 [ 144.826067][ T7386] do_syscall_64+0x55/0xb0 [ 144.830504][ T7386] ? clear_bhb_loop+0x40/0x90 [ 144.835737][ T7386] ? clear_bhb_loop+0x40/0x90 [ 144.840445][ T7386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.846352][ T7386] RIP: 0033:0x7f31dcf9e0d9 [ 144.850773][ T7386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.870838][ T7386] RSP: 002b:00007f31dde85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.879461][ T7386] RAX: ffffffffffffffda RBX: 00007f31dd225fa0 RCX: 00007f31dcf9e0d9 [ 144.887620][ T7386] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000004 [ 144.895773][ T7386] RBP: 00007f31dde85090 R08: 0000000000000000 R09: 0000000000000000 [ 144.904724][ T7386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.913064][ T7386] R13: 00007f31dd226038 R14: 00007f31dd225fa0 R15: 00007ffd122d8928 [ 144.921354][ T7386] [ 144.996353][ T5087] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 145.338484][ T5087] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 145.358872][ T7407] netlink: 132 bytes leftover after parsing attributes in process `syz.0.631'. [ 145.672981][ T5087] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 146.092517][ T5087] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 146.482443][ T5087] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 146.949080][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 147.037941][ T7470] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.661'. [ 147.275225][ T5087] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 147.329331][ T7486] FAULT_INJECTION: forcing a failure. [ 147.329331][ T7486] name failslab, interval 1, probability 0, space 0, times 0 [ 147.371230][ T7486] CPU: 1 PID: 7486 Comm: syz.3.667 Not tainted syzkaller #0 [ 147.378684][ T7486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.389498][ T7486] Call Trace: [ 147.392994][ T7486] [ 147.396492][ T7486] dump_stack_lvl+0x18c/0x250 [ 147.401391][ T7486] ? show_regs_print_info+0x20/0x20 [ 147.407646][ T7486] ? load_image+0x420/0x420 [ 147.412811][ T7486] ? __lock_acquire+0x7d80/0x7d80 [ 147.419254][ T7486] should_fail_ex+0x394/0x4c0 [ 147.424551][ T7486] should_failslab+0x9/0x20 [ 147.429566][ T7486] slab_pre_alloc_hook+0x59/0x300 [ 147.434985][ T7486] ? sctp_transport_new+0x7e/0x630 [ 147.441267][ T7486] __kmem_cache_alloc_node+0x53/0x250 [ 147.447588][ T7486] ? sctp_transport_new+0x7e/0x630 [ 147.452982][ T7486] kmalloc_trace+0x2a/0xe0 [ 147.458201][ T7486] sctp_transport_new+0x7e/0x630 [ 147.463782][ T7486] sctp_assoc_add_peer+0x2ae/0x1440 [ 147.469223][ T7486] sctp_connect_new_asoc+0x323/0x6a0 [ 147.474647][ T7486] ? __sctp_connect+0xd80/0xd80 [ 147.479719][ T7486] ? __local_bh_enable_ip+0x13a/0x1c0 [ 147.485239][ T7486] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 147.490914][ T7486] ? security_sctp_bind_connect+0x89/0xb0 [ 147.496763][ T7486] sctp_sendmsg+0x1519/0x27b0 [ 147.502107][ T7486] ? sctp_getsockopt+0xb60/0xb60 [ 147.507361][ T7486] ? aa_af_perm+0x330/0x330 [ 147.512086][ T7486] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 147.518585][ T7486] ? sock_rps_record_flow+0x19/0x3f0 [ 147.524238][ T7486] ? inet_sendmsg+0xce/0x2a0 [ 147.529328][ T7486] ? inet_send_prepare+0x250/0x250 [ 147.534483][ T7486] ____sys_sendmsg+0x61b/0x980 [ 147.539569][ T7486] ? __sys_sendmsg_sock+0x30/0x30 [ 147.544655][ T7486] ? __import_iovec+0x5f2/0x850 [ 147.549621][ T7486] ? import_iovec+0x73/0xa0 [ 147.554403][ T7486] ___sys_sendmsg+0x2a6/0x360 [ 147.559653][ T7486] ? get_pid_task+0x20/0x1e0 [ 147.564448][ T7486] ? __sys_sendmsg+0x2b0/0x2b0 [ 147.569288][ T7486] ? __lock_acquire+0x7d80/0x7d80 [ 147.574600][ T7486] __se_sys_sendmsg+0x1d0/0x2c0 [ 147.579552][ T7486] ? perf_trace_preemptirq_template+0x269/0x330 [ 147.586063][ T7486] ? __x64_sys_sendmsg+0x80/0x80 [ 147.591208][ T7486] ? lockdep_hardirqs_on+0x98/0x150 [ 147.596541][ T7486] do_syscall_64+0x55/0xb0 [ 147.601087][ T7486] ? clear_bhb_loop+0x40/0x90 [ 147.605979][ T7486] ? clear_bhb_loop+0x40/0x90 [ 147.611204][ T7486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.617133][ T7486] RIP: 0033:0x7f31dcf9e0d9 [ 147.621555][ T7486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.642397][ T7486] RSP: 002b:00007f31dde85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.651190][ T7486] RAX: ffffffffffffffda RBX: 00007f31dd225fa0 RCX: 00007f31dcf9e0d9 [ 147.659429][ T7486] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000004 [ 147.667702][ T7486] RBP: 00007f31dde85090 R08: 0000000000000000 R09: 0000000000000000 [ 147.676136][ T7486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 147.685013][ T7486] R13: 00007f31dd226038 R14: 00007f31dd225fa0 R15: 00007ffd122d8928 [ 147.693354][ T7486] [ 147.971083][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 148.065780][ T7501] syz.3.673 uses obsolete (PF_INET,SOCK_PACKET) [ 148.077454][ T7503] netlink: 14 bytes leftover after parsing attributes in process `syz.3.673'. [ 148.307498][ T7511] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.676'. [ 148.359964][ T5087] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 148.870957][ T5087] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 149.694444][ T5087] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 150.106947][ T7550] ref_ctr_offset mismatch. inode: 0x390 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 150.124745][ T7551] ref_ctr_offset mismatch. inode: 0x390 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 150.436607][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 150.592898][ T7564] netlink: 'syz.2.699': attribute type 10 has an invalid length. [ 150.602317][ T7567] netlink: set zone limit has 8 unknown bytes [ 150.615257][ T7566] netlink: 'syz.1.700': attribute type 49 has an invalid length. [ 150.658680][ T5087] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 150.832470][ T7581] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 151.005337][ T7588] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.709'. [ 151.072861][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 151.290381][ T7596] netlink: 'syz.2.711': attribute type 2 has an invalid length. [ 151.330802][ T7596] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.711'. [ 151.583762][ T7606] netlink: 'syz.3.716': attribute type 64 has an invalid length. [ 151.597892][ T5087] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 152.104887][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 152.464404][ T5087] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 153.198529][ T5087] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 153.219824][ T5087] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 153.381603][ T7658] netlink: 'syz.3.739': attribute type 10 has an invalid length. [ 153.645882][ T7669] netlink: 'syz.2.744': attribute type 29 has an invalid length. [ 153.675024][ T7669] netlink: 'syz.2.744': attribute type 29 has an invalid length. [ 153.721400][ T7671] netlink: 'syz.2.744': attribute type 29 has an invalid length. [ 153.778862][ T7669] netlink: 'syz.2.744': attribute type 29 has an invalid length. [ 153.798785][ T7669] netlink: 'syz.2.744': attribute type 29 has an invalid length. [ 153.823409][ T5087] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 154.074419][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 154.306163][ T7686] FAULT_INJECTION: forcing a failure. [ 154.306163][ T7686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.325055][ T7686] CPU: 1 PID: 7686 Comm: syz.0.751 Not tainted syzkaller #0 [ 154.332498][ T7686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.342706][ T7686] Call Trace: [ 154.346094][ T7686] [ 154.349031][ T7686] dump_stack_lvl+0x18c/0x250 [ 154.353747][ T7686] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 154.360019][ T7686] ? show_regs_print_info+0x20/0x20 [ 154.365401][ T7686] ? load_image+0x420/0x420 [ 154.370019][ T7686] should_fail_ex+0x394/0x4c0 [ 154.374717][ T7686] _copy_from_user+0x2f/0xe0 [ 154.379401][ T7686] ___sys_sendmsg+0x1c7/0x360 [ 154.384108][ T7686] ? __sys_sendmsg+0x2b0/0x2b0 [ 154.388994][ T7686] __se_sys_sendmsg+0x1d0/0x2c0 [ 154.393845][ T7686] ? perf_trace_preemptirq_template+0x269/0x330 [ 154.400265][ T7686] ? __x64_sys_sendmsg+0x80/0x80 [ 154.405222][ T7686] ? lockdep_hardirqs_on+0x98/0x150 [ 154.410516][ T7686] do_syscall_64+0x55/0xb0 [ 154.415028][ T7686] ? clear_bhb_loop+0x40/0x90 [ 154.419818][ T7686] ? clear_bhb_loop+0x40/0x90 [ 154.424527][ T7686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.430434][ T7686] RIP: 0033:0x7fd93639e0d9 [ 154.434883][ T7686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.454763][ T7686] RSP: 002b:00007fd937198028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.463441][ T7686] RAX: ffffffffffffffda RBX: 00007fd936625fa0 RCX: 00007fd93639e0d9 [ 154.471494][ T7686] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000a [ 154.479953][ T7686] RBP: 00007fd937198090 R08: 0000000000000000 R09: 0000000000000000 [ 154.487925][ T7686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.495976][ T7686] R13: 00007fd936626038 R14: 00007fd936625fa0 R15: 00007ffcad9adaa8 [ 154.503975][ T7686] [ 154.649084][ T7695] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 154.798948][ T5087] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 155.129418][ T5087] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 155.414993][ T7723] netlink: 116 bytes leftover after parsing attributes in process `syz.1.766'. [ 155.427655][ T7723] wlan1: mtu greater than device maximum [ 155.435470][ T7723] team0: Device wlan1 failed to change mtu [ 155.451231][ T7723] netlink: 132 bytes leftover after parsing attributes in process `syz.1.766'. [ 155.487414][ T5087] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 155.776022][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 156.076360][ T7738] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.774'. [ 156.090303][ T7738] tc_dump_action: action bad kind [ 156.238624][ T5087] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 156.443475][ T7757] validate_nla: 5 callbacks suppressed [ 156.443525][ T7757] netlink: 'syz.1.782': attribute type 10 has an invalid length. [ 156.467465][ T7765] FAULT_INJECTION: forcing a failure. [ 156.467465][ T7765] name failslab, interval 1, probability 0, space 0, times 0 [ 156.505551][ T7765] CPU: 0 PID: 7765 Comm: syz.0.784 Not tainted syzkaller #0 [ 156.513018][ T7765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.523196][ T7765] Call Trace: [ 156.526558][ T7765] [ 156.529585][ T7765] dump_stack_lvl+0x18c/0x250 [ 156.534276][ T7765] ? sctp_sendmsg+0x1519/0x27b0 [ 156.539131][ T7765] ? ___sys_sendmsg+0x2a6/0x360 [ 156.544004][ T7765] ? show_regs_print_info+0x20/0x20 [ 156.549577][ T7765] ? load_image+0x420/0x420 [ 156.554211][ T7765] should_fail_ex+0x394/0x4c0 [ 156.559023][ T7765] should_failslab+0x9/0x20 [ 156.563618][ T7765] slab_pre_alloc_hook+0x59/0x300 [ 156.568813][ T7765] ? sctp_add_bind_addr+0x8c/0x360 [ 156.573942][ T7765] __kmem_cache_alloc_node+0x53/0x250 [ 156.579345][ T7765] ? sctp_add_bind_addr+0x8c/0x360 [ 156.585001][ T7765] kmalloc_trace+0x2a/0xe0 [ 156.589631][ T7765] sctp_add_bind_addr+0x8c/0x360 [ 156.594678][ T7765] sctp_copy_local_addr_list+0x31b/0x4e0 [ 156.600330][ T7765] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 156.606262][ T7765] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 156.612533][ T7765] ? sctp_v6_is_any+0x64/0x70 [ 156.617510][ T7765] ? sctp_copy_one_addr+0x8c/0x350 [ 156.622645][ T7765] sctp_bind_addr_copy+0xb3/0x3c0 [ 156.627698][ T7765] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 156.634394][ T7765] sctp_connect_new_asoc+0x2f9/0x6a0 [ 156.639863][ T7765] ? __sctp_connect+0xd80/0xd80 [ 156.644911][ T7765] ? __local_bh_enable_ip+0x13a/0x1c0 [ 156.650515][ T7765] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 156.656095][ T7765] ? security_sctp_bind_connect+0x89/0xb0 [ 156.662035][ T7765] sctp_sendmsg+0x1519/0x27b0 [ 156.666755][ T7765] ? sctp_getsockopt+0xb60/0xb60 [ 156.671706][ T7765] ? aa_af_perm+0x330/0x330 [ 156.676323][ T7765] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 156.682872][ T7765] ? sock_rps_record_flow+0x19/0x3f0 [ 156.688739][ T7765] ? inet_sendmsg+0xce/0x2a0 [ 156.693414][ T7765] ? inet_send_prepare+0x250/0x250 [ 156.698546][ T7765] ____sys_sendmsg+0x61b/0x980 [ 156.703453][ T7765] ? __sys_sendmsg_sock+0x30/0x30 [ 156.708605][ T7765] ? __import_iovec+0x5f2/0x850 [ 156.713750][ T7765] ? import_iovec+0x73/0xa0 [ 156.718316][ T7765] ___sys_sendmsg+0x2a6/0x360 [ 156.723221][ T7765] ? __sys_sendmsg+0x2b0/0x2b0 [ 156.728116][ T7765] ? trace_call_bpf+0xc3/0x6c0 [ 156.732913][ T7765] __se_sys_sendmsg+0x1d0/0x2c0 [ 156.737779][ T7765] ? perf_trace_preemptirq_template+0x269/0x330 [ 156.744115][ T7765] ? __x64_sys_sendmsg+0x80/0x80 [ 156.749342][ T7765] ? lockdep_hardirqs_on+0x98/0x150 [ 156.754573][ T7765] do_syscall_64+0x55/0xb0 [ 156.759317][ T7765] ? clear_bhb_loop+0x40/0x90 [ 156.764917][ T7765] ? clear_bhb_loop+0x40/0x90 [ 156.769668][ T7765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.775818][ T7765] RIP: 0033:0x7fd93639e0d9 [ 156.780419][ T7765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.800362][ T7765] RSP: 002b:00007fd937198028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.808825][ T7765] RAX: ffffffffffffffda RBX: 00007fd936625fa0 RCX: 00007fd93639e0d9 [ 156.817005][ T7765] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000004 [ 156.825046][ T7765] RBP: 00007fd937198090 R08: 0000000000000000 R09: 0000000000000000 [ 156.833293][ T7765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.841375][ T7765] R13: 00007fd936626038 R14: 00007fd936625fa0 R15: 00007ffcad9adaa8 [ 156.849461][ T7765] [ 157.067343][ T5087] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 157.555653][ T7785] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 157.613054][ T5087] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 157.716674][ T7790] FAULT_INJECTION: forcing a failure. [ 157.716674][ T7790] name failslab, interval 1, probability 0, space 0, times 0 [ 157.760973][ T7790] CPU: 1 PID: 7790 Comm: syz.0.794 Not tainted syzkaller #0 [ 157.768442][ T7790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.778866][ T7790] Call Trace: [ 157.782204][ T7790] [ 157.785188][ T7790] dump_stack_lvl+0x18c/0x250 [ 157.790048][ T7790] ? show_regs_print_info+0x20/0x20 [ 157.795426][ T7790] ? load_image+0x420/0x420 [ 157.799941][ T7790] ? __might_sleep+0xe0/0xe0 [ 157.804624][ T7790] ? __lock_acquire+0x7d80/0x7d80 [ 157.809685][ T7790] should_fail_ex+0x394/0x4c0 [ 157.814385][ T7790] should_failslab+0x9/0x20 [ 157.818926][ T7790] slab_pre_alloc_hook+0x59/0x300 [ 157.824084][ T7790] ? __lock_acquire+0x7d80/0x7d80 [ 157.829115][ T7790] kmem_cache_alloc_node+0x5e/0x310 [ 157.834313][ T7790] ? __alloc_skb+0x103/0x2c0 [ 157.838900][ T7790] __alloc_skb+0x103/0x2c0 [ 157.843314][ T7790] netlink_sendmsg+0x66a/0xbf0 [ 157.848088][ T7790] ? netlink_getsockopt+0x590/0x590 [ 157.853292][ T7790] ? apparmor_socket_sendmsg+0x8e/0x330 [ 157.858924][ T7790] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 157.864234][ T7790] ? security_socket_sendmsg+0x80/0xa0 [ 157.869880][ T7790] ? netlink_getsockopt+0x590/0x590 [ 157.875174][ T7790] ____sys_sendmsg+0x61b/0x980 [ 157.879952][ T7790] ? __asan_memset+0x22/0x40 [ 157.884836][ T7790] ? __sys_sendmsg_sock+0x30/0x30 [ 157.889890][ T7790] ? __import_iovec+0x5f2/0x850 [ 157.895037][ T7790] ? import_iovec+0x73/0xa0 [ 157.899646][ T7790] ___sys_sendmsg+0x2a6/0x360 [ 157.904513][ T7790] ? get_pid_task+0x20/0x1e0 [ 157.909208][ T7790] ? __sys_sendmsg+0x2b0/0x2b0 [ 157.913985][ T7790] ? __lock_acquire+0x7d80/0x7d80 [ 157.921562][ T7790] __se_sys_sendmsg+0x1d0/0x2c0 [ 157.926444][ T7790] ? __x64_sys_sendmsg+0x80/0x80 [ 157.931581][ T7790] ? syscall_enter_from_user_mode+0x2e/0x80 [ 157.937742][ T7790] do_syscall_64+0x55/0xb0 [ 157.942394][ T7790] ? clear_bhb_loop+0x40/0x90 [ 157.947449][ T7790] ? clear_bhb_loop+0x40/0x90 [ 157.952333][ T7790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.958251][ T7790] RIP: 0033:0x7fd93639e0d9 [ 157.962667][ T7790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.982813][ T7790] RSP: 002b:00007fd9345f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.991310][ T7790] RAX: ffffffffffffffda RBX: 00007fd936626090 RCX: 00007fd93639e0d9 [ 157.999562][ T7790] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000a [ 158.007741][ T7790] RBP: 00007fd9345f6090 R08: 0000000000000000 R09: 0000000000000000 [ 158.015805][ T7790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.023782][ T7790] R13: 00007fd936626128 R14: 00007fd936626090 R15: 00007ffcad9adaa8 [ 158.031862][ T7790] [ 158.280211][ T7800] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.797'. [ 158.438353][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 158.776677][ T7804] netlink: 'syz.1.799': attribute type 21 has an invalid length. [ 158.814547][ T7804] netlink: 'syz.1.799': attribute type 6 has an invalid length. [ 158.833561][ T7804] netlink: 132 bytes leftover after parsing attributes in process `syz.1.799'. [ 158.991171][ T7804] netlink: 'syz.1.799': attribute type 10 has an invalid length. [ 159.004900][ T7804] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 159.134657][ T7804] batman_adv: batadv0: Removing interface: virt_wifi0 [ 159.135887][ T5087] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 159.309660][ T7804] team0: Port device virt_wifi0 added [ 159.463599][ T7819] pim6reg1: entered promiscuous mode [ 159.469108][ T7819] pim6reg1: entered allmulticast mode [ 159.762942][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 160.047405][ T7837] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.810'. [ 160.194308][ T7006] batman_adv: batadv_iv_ogm_emit: soft interface switch for queued OGM [ 160.349366][ T5087] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 160.580379][ T7853] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.588553][ T7853] netlink: 1 bytes leftover after parsing attributes in process `syz.1.817'. [ 160.868085][ T5087] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 161.332323][ T5087] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 161.607618][ T7886] syzkaller0: entered promiscuous mode [ 161.613192][ T7886] syzkaller0: entered allmulticast mode [ 162.159455][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 163.213040][ T5087] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 164.918583][ T5087] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 165.112195][ T7941] tap0: tun_chr_ioctl cmd 1074025677 [ 165.119569][ T7941] tap0: linktype set to 774 [ 165.538238][ T5087] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 165.874613][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 166.075622][ T7969] netlink: 'syz.0.864': attribute type 10 has an invalid length. [ 166.108643][ T7974] netlink: 132 bytes leftover after parsing attributes in process `syz.3.863'. [ 166.192886][ T7980] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.866'. [ 166.230498][ T5087] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 166.297282][ T7987] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 166.304124][ T7987] syzkaller0: linktype set to 0 [ 166.524542][ T7995] FAULT_INJECTION: forcing a failure. [ 166.524542][ T7995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.540157][ T7995] CPU: 1 PID: 7995 Comm: syz.1.874 Not tainted syzkaller #0 [ 166.547633][ T7995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.558326][ T7995] Call Trace: [ 166.561726][ T7995] [ 166.564680][ T7995] dump_stack_lvl+0x18c/0x250 [ 166.569659][ T7995] ? show_regs_print_info+0x20/0x20 [ 166.575251][ T7995] ? load_image+0x420/0x420 [ 166.579902][ T7995] should_fail_ex+0x394/0x4c0 [ 166.584853][ T7995] _copy_from_iter+0x1cd/0x1290 [ 166.589740][ T7995] ? copyout_mc+0x70/0x70 [ 166.594310][ T7995] ? __virt_addr_valid+0x10c/0x380 [ 166.599532][ T7995] ? __virt_addr_valid+0x10c/0x380 [ 166.604948][ T7995] ? __virt_addr_valid+0x10c/0x380 [ 166.610713][ T7995] ? __check_object_size+0x4fc/0xa40 [ 166.616651][ T7995] netlink_sendmsg+0x76b/0xbf0 [ 166.621711][ T7995] ? netlink_getsockopt+0x590/0x590 [ 166.627211][ T7995] ? apparmor_socket_sendmsg+0x8e/0x330 [ 166.633155][ T7995] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 166.638560][ T7995] ? security_socket_sendmsg+0x80/0xa0 [ 166.644191][ T7995] ? netlink_getsockopt+0x590/0x590 [ 166.649503][ T7995] ____sys_sendmsg+0x61b/0x980 [ 166.654381][ T7995] ? __asan_memset+0x22/0x40 [ 166.659004][ T7995] ? __sys_sendmsg_sock+0x30/0x30 [ 166.664154][ T7995] ? __import_iovec+0x5f2/0x850 [ 166.669119][ T7995] ? import_iovec+0x73/0xa0 [ 166.673809][ T7995] ___sys_sendmsg+0x2a6/0x360 [ 166.678494][ T7995] ? __sys_sendmsg+0x2b0/0x2b0 [ 166.683477][ T7995] __se_sys_sendmsg+0x1d0/0x2c0 [ 166.688331][ T7995] ? __x64_sys_sendmsg+0x80/0x80 [ 166.693472][ T7995] ? lockdep_hardirqs_on+0x98/0x150 [ 166.698783][ T7995] do_syscall_64+0x55/0xb0 [ 166.703495][ T7995] ? clear_bhb_loop+0x40/0x90 [ 166.708370][ T7995] ? clear_bhb_loop+0x40/0x90 [ 166.713254][ T7995] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.719483][ T7995] RIP: 0033:0x7fdcfe79e0d9 [ 166.724232][ T7995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.744217][ T7995] RSP: 002b:00007fdcfc9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.752839][ T7995] RAX: ffffffffffffffda RBX: 00007fdcfea25fa0 RCX: 00007fdcfe79e0d9 [ 166.762751][ T7995] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000a [ 166.772898][ T7995] RBP: 00007fdcfc9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 166.781938][ T7995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.791457][ T7995] R13: 00007fdcfea26038 R14: 00007fdcfea25fa0 R15: 00007fff3e414288 [ 166.799991][ T7995] [ 166.972908][ T5087] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 167.176666][ T5087] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 167.394609][ T8013] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.404158][ T8013] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.432925][ T8013] bridge0: entered allmulticast mode [ 167.774782][ T5087] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 168.066653][ T5087] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 168.695049][ T5087] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 169.062922][ T5087] Bluetooth: hci3: Malformed LE Event: 0x0b [ 169.244079][ T8089] netlink: 'syz.0.909': attribute type 12 has an invalid length. [ 169.258756][ T8087] FAULT_INJECTION: forcing a failure. [ 169.258756][ T8087] name failslab, interval 1, probability 0, space 0, times 0 [ 169.288131][ T8089] netlink: 'syz.0.909': attribute type 11 has an invalid length. [ 169.299020][ T8083] netlink: 'syz.2.907': attribute type 10 has an invalid length. [ 169.310566][ T8089] netlink: 188816 bytes leftover after parsing attributes in process `syz.0.909'. [ 169.322776][ T8087] CPU: 1 PID: 8087 Comm: syz.3.908 Not tainted syzkaller #0 [ 169.330390][ T8087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.340909][ T8087] Call Trace: [ 169.344664][ T8087] [ 169.347726][ T8087] dump_stack_lvl+0x18c/0x250 [ 169.352613][ T8087] ? show_regs_print_info+0x20/0x20 [ 169.358393][ T8087] ? load_image+0x420/0x420 [ 169.363481][ T8087] ? __lock_acquire+0x7d80/0x7d80 [ 169.369057][ T8087] should_fail_ex+0x394/0x4c0 [ 169.373962][ T8087] should_failslab+0x9/0x20 [ 169.379296][ T8087] slab_pre_alloc_hook+0x59/0x300 [ 169.384980][ T8087] ? rcu_is_watching+0x15/0xb0 [ 169.390159][ T8087] ? sctp_stream_init_ext+0x57/0x170 [ 169.395484][ T8087] __kmem_cache_alloc_node+0x53/0x250 [ 169.401257][ T8087] ? sctp_stream_init_ext+0x57/0x170 [ 169.407012][ T8087] kmalloc_trace+0x2a/0xe0 [ 169.411603][ T8087] sctp_stream_init_ext+0x57/0x170 [ 169.416999][ T8087] sctp_sendmsg_to_asoc+0x12cc/0x17f0 [ 169.422686][ T8087] ? __genradix_ptr+0x1cf/0x210 [ 169.427660][ T8087] ? sctp_connect_new_asoc+0x522/0x6a0 [ 169.433702][ T8087] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 169.439720][ T8087] ? __sctp_connect+0xd80/0xd80 [ 169.444640][ T8087] ? __local_bh_enable_ip+0x13a/0x1c0 [ 169.451621][ T8087] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 169.457753][ T8087] ? security_sctp_bind_connect+0x89/0xb0 [ 169.464961][ T8087] sctp_sendmsg+0x1afa/0x27b0 [ 169.470373][ T8087] ? sctp_getsockopt+0xb60/0xb60 [ 169.475595][ T8087] ? aa_af_perm+0x330/0x330 [ 169.480414][ T8087] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 169.488446][ T8087] ? sock_rps_record_flow+0x19/0x3f0 [ 169.493865][ T8087] ? inet_sendmsg+0xce/0x2a0 [ 169.498681][ T8087] ? inet_send_prepare+0x250/0x250 [ 169.503979][ T8087] ____sys_sendmsg+0x61b/0x980 [ 169.509276][ T8087] ? __sys_sendmsg_sock+0x30/0x30 [ 169.514422][ T8087] ? __import_iovec+0x5f2/0x850 [ 169.519340][ T8087] ? import_iovec+0x73/0xa0 [ 169.524026][ T8087] ___sys_sendmsg+0x2a6/0x360 [ 169.528808][ T8087] ? get_pid_task+0x20/0x1e0 [ 169.533506][ T8087] ? __sys_sendmsg+0x2b0/0x2b0 [ 169.538371][ T8087] ? __lock_acquire+0x7d80/0x7d80 [ 169.543442][ T8087] __se_sys_sendmsg+0x1d0/0x2c0 [ 169.548323][ T8087] ? perf_trace_preemptirq_template+0x269/0x330 [ 169.554665][ T8087] ? __x64_sys_sendmsg+0x80/0x80 [ 169.559645][ T8087] ? lockdep_hardirqs_on+0x98/0x150 [ 169.564940][ T8087] do_syscall_64+0x55/0xb0 [ 169.569357][ T8087] ? clear_bhb_loop+0x40/0x90 [ 169.574127][ T8087] ? clear_bhb_loop+0x40/0x90 [ 169.578913][ T8087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.584985][ T8087] RIP: 0033:0x7f31dcf9e0d9 [ 169.589750][ T8087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.610270][ T8087] RSP: 002b:00007f31dde85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.619084][ T8087] RAX: ffffffffffffffda RBX: 00007f31dd225fa0 RCX: 00007f31dcf9e0d9 [ 169.627103][ T8087] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000004 [ 169.635261][ T8087] RBP: 00007f31dde85090 R08: 0000000000000000 R09: 0000000000000000 [ 169.643498][ T8087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.651759][ T8087] R13: 00007f31dd226038 R14: 00007f31dd225fa0 R15: 00007ffd122d8928 [ 169.660294][ T8087] [ 169.673530][ T8090] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 169.745637][ T8090] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 170.159586][ T8103] FAULT_INJECTION: forcing a failure. [ 170.159586][ T8103] name failslab, interval 1, probability 0, space 0, times 0 [ 170.200146][ T8103] CPU: 0 PID: 8103 Comm: syz.3.914 Not tainted syzkaller #0 [ 170.208182][ T8103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.219592][ T8103] Call Trace: [ 170.223297][ T8103] [ 170.226632][ T8103] dump_stack_lvl+0x18c/0x250 [ 170.231532][ T8103] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 170.237496][ T8103] ? show_regs_print_info+0x20/0x20 [ 170.243046][ T8103] ? load_image+0x420/0x420 [ 170.247991][ T8103] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 170.254370][ T8103] should_fail_ex+0x394/0x4c0 [ 170.259297][ T8103] should_failslab+0x9/0x20 [ 170.264018][ T8103] slab_pre_alloc_hook+0x59/0x300 [ 170.269683][ T8103] ? lockdep_hardirqs_on+0x98/0x150 [ 170.275220][ T8103] kmem_cache_alloc+0x5a/0x2c0 [ 170.280386][ T8103] ? skb_clone+0x1eb/0x370 [ 170.284892][ T8103] skb_clone+0x1eb/0x370 [ 170.289552][ T8103] __netlink_deliver_tap+0x411/0x7f0 [ 170.295329][ T8103] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.300836][ T8103] netlink_deliver_tap+0x19c/0x1b0 [ 170.305993][ T8103] netlink_unicast+0x77b/0x930 [ 170.311102][ T8103] netlink_sendmsg+0x8d0/0xbf0 [ 170.318216][ T8103] ? netlink_getsockopt+0x590/0x590 [ 170.323621][ T8103] ? apparmor_socket_sendmsg+0x8e/0x330 [ 170.329542][ T8103] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 170.334931][ T8103] ? security_socket_sendmsg+0x80/0xa0 [ 170.341266][ T8103] ? netlink_getsockopt+0x590/0x590 [ 170.346950][ T8103] ____sys_sendmsg+0x61b/0x980 [ 170.352058][ T8103] ? __asan_memset+0x22/0x40 [ 170.357167][ T8103] ? __sys_sendmsg_sock+0x30/0x30 [ 170.362396][ T8103] ? __import_iovec+0x5f2/0x850 [ 170.367336][ T8103] ? import_iovec+0x73/0xa0 [ 170.372475][ T8103] ___sys_sendmsg+0x2a6/0x360 [ 170.377290][ T8103] ? __sys_sendmsg+0x2b0/0x2b0 [ 170.382375][ T8103] __se_sys_sendmsg+0x1d0/0x2c0 [ 170.387533][ T8103] ? __x64_sys_sendmsg+0x80/0x80 [ 170.393148][ T8103] ? syscall_enter_from_user_mode+0x2e/0x80 [ 170.399370][ T8103] do_syscall_64+0x55/0xb0 [ 170.403807][ T8103] ? clear_bhb_loop+0x40/0x90 [ 170.408999][ T8103] ? clear_bhb_loop+0x40/0x90 [ 170.413710][ T8103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.420114][ T8103] RIP: 0033:0x7f31dcf9e0d9 [ 170.424653][ T8103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.445450][ T8103] RSP: 002b:00007f31dde85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.454272][ T8103] RAX: ffffffffffffffda RBX: 00007f31dd225fa0 RCX: 00007f31dcf9e0d9 [ 170.463432][ T8103] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000a [ 170.471775][ T8103] RBP: 00007f31dde85090 R08: 0000000000000000 R09: 0000000000000000 [ 170.479891][ T8103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.488097][ T8103] R13: 00007f31dd226038 R14: 00007f31dd225fa0 R15: 00007ffd122d8928 [ 170.496286][ T8103] [ 170.642149][ T5087] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 170.963346][ T5087] Bluetooth: hci3: Malformed LE Event: 0x0b [ 171.273217][ T8119] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 171.306871][ T8119] syzkaller0: entered promiscuous mode [ 171.331975][ T8119] syzkaller0: entered allmulticast mode [ 171.774321][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 174.653810][ T8143] netlink: 'syz.2.931': attribute type 10 has an invalid length. [ 174.668610][ T5087] Bluetooth: hci1: Malformed LE Event: 0x0b [ 174.676903][ T8143] netlink: 40 bytes leftover after parsing attributes in process `syz.2.931'. [ 174.695889][ T8143] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 175.212537][ T5087] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 175.418504][ T5087] Bluetooth: hci0: Malformed LE Event: 0x0b [ 176.221671][ T8190] netlink: 'syz.1.950': attribute type 10 has an invalid length. [ 176.432474][ T5087] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 176.935889][ T5087] Bluetooth: hci0: Malformed LE Event: 0x0b [ 176.961347][ T8202] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.956'. [ 176.977669][ T8204] FAULT_INJECTION: forcing a failure. [ 176.977669][ T8204] name failslab, interval 1, probability 0, space 0, times 0 [ 176.995979][ T8204] CPU: 0 PID: 8204 Comm: syz.0.957 Not tainted syzkaller #0 [ 177.003419][ T8204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.013831][ T8204] Call Trace: [ 177.017145][ T8204] [ 177.020086][ T8204] dump_stack_lvl+0x18c/0x250 [ 177.024781][ T8204] ? show_regs_print_info+0x20/0x20 [ 177.030157][ T8204] ? load_image+0x420/0x420 [ 177.034672][ T8204] ? __lock_acquire+0x7d80/0x7d80 [ 177.039872][ T8204] ? trace_raw_output_contention_end+0xd0/0xd0 [ 177.046196][ T8204] should_fail_ex+0x394/0x4c0 [ 177.050881][ T8204] should_failslab+0x9/0x20 [ 177.055385][ T8204] slab_pre_alloc_hook+0x59/0x300 [ 177.060417][ T8204] ? __inet_diag_dump_start+0x8b/0x9f0 [ 177.066056][ T8204] __kmem_cache_alloc_node+0x53/0x250 [ 177.071613][ T8204] ? __inet_diag_dump_start+0x8b/0x9f0 [ 177.077419][ T8204] kmalloc_trace+0x2a/0xe0 [ 177.082046][ T8204] __inet_diag_dump_start+0x8b/0x9f0 [ 177.087505][ T8204] ? netlink_lookup+0x30/0x200 [ 177.092268][ T8204] ? netlink_lookup+0x30/0x200 [ 177.097053][ T8204] __netlink_dump_start+0x43c/0x7a0 [ 177.102406][ T8204] inet_diag_rcv_msg_compat+0x215/0x440 [ 177.108179][ T8204] ? __inet_diag_dump+0x380/0x380 [ 177.113493][ T8204] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.119912][ T8204] ? lockdep_hardirqs_on+0x98/0x150 [ 177.125374][ T8204] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 177.131266][ T8204] ? inet_diag_dump_start_compat+0x20/0x20 [ 177.137162][ T8204] ? inet_diag_dump+0x50/0x50 [ 177.141956][ T8204] ? __inet_diag_dump+0x380/0x380 [ 177.147353][ T8204] sock_diag_rcv_msg+0x3d3/0x5f0 [ 177.153994][ T8204] netlink_rcv_skb+0x235/0x4c0 [ 177.158772][ T8204] ? sock_diag_bind+0xb0/0xb0 [ 177.163484][ T8204] ? netlink_ack+0x1160/0x1160 [ 177.168531][ T8204] ? __lock_acquire+0x7d80/0x7d80 [ 177.173658][ T8204] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.178897][ T8204] sock_diag_rcv+0x2a/0x40 [ 177.183381][ T8204] netlink_unicast+0x7b1/0x930 [ 177.188596][ T8204] netlink_sendmsg+0x8d0/0xbf0 [ 177.193488][ T8204] ? netlink_getsockopt+0x590/0x590 [ 177.198706][ T8204] ? apparmor_socket_sendmsg+0x8e/0x330 [ 177.204462][ T8204] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 177.209939][ T8204] ? security_socket_sendmsg+0x80/0xa0 [ 177.215484][ T8204] ? netlink_getsockopt+0x590/0x590 [ 177.220701][ T8204] ____sys_sendmsg+0x61b/0x980 [ 177.225660][ T8204] ? __asan_memset+0x22/0x40 [ 177.230340][ T8204] ? __sys_sendmsg_sock+0x30/0x30 [ 177.235359][ T8204] ? __import_iovec+0x5f2/0x850 [ 177.240316][ T8204] ? import_iovec+0x73/0xa0 [ 177.245181][ T8204] ___sys_sendmsg+0x2a6/0x360 [ 177.250059][ T8204] ? __sys_sendmsg+0x2b0/0x2b0 [ 177.254847][ T8204] ? ktime_get+0x7f/0x280 [ 177.259282][ T8204] __se_sys_sendmsg+0x1d0/0x2c0 [ 177.264598][ T8204] ? __x64_sys_sendmsg+0x80/0x80 [ 177.269553][ T8204] ? lockdep_hardirqs_on+0x98/0x150 [ 177.274871][ T8204] do_syscall_64+0x55/0xb0 [ 177.279291][ T8204] ? clear_bhb_loop+0x40/0x90 [ 177.284158][ T8204] ? clear_bhb_loop+0x40/0x90 [ 177.288922][ T8204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.295256][ T8204] RIP: 0033:0x7fd93639e0d9 [ 177.300132][ T8204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.320208][ T8204] RSP: 002b:00007fd937198028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.328661][ T8204] RAX: ffffffffffffffda RBX: 00007fd936625fa0 RCX: 00007fd93639e0d9 [ 177.336865][ T8204] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000a [ 177.345103][ T8204] RBP: 00007fd937198090 R08: 0000000000000000 R09: 0000000000000000 [ 177.353528][ T8204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.362454][ T8204] R13: 00007fd936626038 R14: 00007fd936625fa0 R15: 00007ffcad9adaa8 [ 177.370740][ T8204] [ 178.247112][ T5087] Bluetooth: hci3: Malformed LE Event: 0x0b [ 178.513637][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 179.069888][ T8251] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.973'. [ 179.640642][ T5087] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 179.917394][ T8280] netlink: 763 bytes leftover after parsing attributes in process `syz.3.984'. [ 180.395278][ T5087] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 180.463054][ T8298] netlink: 'syz.0.992': attribute type 1 has an invalid length. [ 180.471254][ T8298] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.992'. [ 180.645351][ T8302] netlink: 'syz.3.994': attribute type 10 has an invalid length. [ 180.827890][ T8310] FAULT_INJECTION: forcing a failure. [ 180.827890][ T8310] name failslab, interval 1, probability 0, space 0, times 0 [ 180.850868][ T8310] CPU: 0 PID: 8310 Comm: syz.0.997 Not tainted syzkaller #0 [ 180.858505][ T8310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.868981][ T8310] Call Trace: [ 180.872365][ T8310] [ 180.875302][ T8310] dump_stack_lvl+0x18c/0x250 [ 180.880014][ T8310] ? show_regs_print_info+0x20/0x20 [ 180.885348][ T8310] ? load_image+0x420/0x420 [ 180.890133][ T8310] ? __might_sleep+0xe0/0xe0 [ 180.894817][ T8310] ? __lock_acquire+0x7d80/0x7d80 [ 180.899967][ T8310] ? stack_trace_save+0xaa/0x100 [ 180.905202][ T8310] ? stack_trace_snprint+0xf0/0xf0 [ 180.910785][ T8310] should_fail_ex+0x394/0x4c0 [ 180.915933][ T8310] should_failslab+0x9/0x20 [ 180.922567][ T8310] slab_pre_alloc_hook+0x59/0x300 [ 180.928399][ T8310] ? __kasan_kmalloc+0x8f/0xa0 [ 180.933298][ T8310] ? __inet_diag_dump_start+0x8b/0x9f0 [ 180.938814][ T8310] ? __netlink_dump_start+0x43c/0x7a0 [ 180.944353][ T8310] kmem_cache_alloc_node+0x5e/0x310 [ 180.949680][ T8310] ? ___sys_sendmsg+0x2a6/0x360 [ 180.954766][ T8310] ? __alloc_skb+0x103/0x2c0 [ 180.959374][ T8310] __alloc_skb+0x103/0x2c0 [ 180.963885][ T8310] netlink_dump+0x1ee/0xec0 [ 180.968480][ T8310] ? netlink_lookup+0x200/0x200 [ 180.973430][ T8310] ? __kasan_kmalloc+0x8f/0xa0 [ 180.978313][ T8310] ? __inet_diag_dump_start+0x886/0x9f0 [ 180.983987][ T8310] ? netlink_lookup+0x30/0x200 [ 180.988770][ T8310] __netlink_dump_start+0x57c/0x7a0 [ 180.993979][ T8310] inet_diag_rcv_msg_compat+0x215/0x440 [ 180.999556][ T8310] ? __inet_diag_dump+0x380/0x380 [ 181.004720][ T8310] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 181.010887][ T8310] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 181.016452][ T8310] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 181.022368][ T8310] ? inet_diag_dump_start_compat+0x20/0x20 [ 181.028713][ T8310] ? inet_diag_dump+0x50/0x50 [ 181.034425][ T8310] ? __inet_diag_dump+0x380/0x380 [ 181.039556][ T8310] sock_diag_rcv_msg+0x3d3/0x5f0 [ 181.044621][ T8310] netlink_rcv_skb+0x235/0x4c0 [ 181.049558][ T8310] ? sock_diag_bind+0xb0/0xb0 [ 181.054367][ T8310] ? netlink_ack+0x1160/0x1160 [ 181.059538][ T8310] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.064785][ T8310] sock_diag_rcv+0x2a/0x40 [ 181.069253][ T8310] netlink_unicast+0x7b1/0x930 [ 181.074228][ T8310] netlink_sendmsg+0x8d0/0xbf0 [ 181.079288][ T8310] ? netlink_getsockopt+0x590/0x590 [ 181.084538][ T8310] ? apparmor_socket_sendmsg+0x8e/0x330 [ 181.090205][ T8310] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 181.095530][ T8310] ? security_socket_sendmsg+0x80/0xa0 [ 181.101221][ T8310] ? netlink_getsockopt+0x590/0x590 [ 181.106551][ T8310] ____sys_sendmsg+0x61b/0x980 [ 181.111530][ T8310] ? __asan_memset+0x22/0x40 [ 181.116543][ T8310] ? __sys_sendmsg_sock+0x30/0x30 [ 181.121713][ T8310] ? __import_iovec+0x5f2/0x850 [ 181.126804][ T8310] ? import_iovec+0x73/0xa0 [ 181.131340][ T8310] ___sys_sendmsg+0x2a6/0x360 [ 181.136112][ T8310] ? __sys_sendmsg+0x2b0/0x2b0 [ 181.141014][ T8310] __se_sys_sendmsg+0x1d0/0x2c0 [ 181.146062][ T8310] ? __x64_sys_sendmsg+0x80/0x80 [ 181.151338][ T8310] ? syscall_enter_from_user_mode+0x2e/0x80 [ 181.157245][ T8310] do_syscall_64+0x55/0xb0 [ 181.161667][ T8310] ? clear_bhb_loop+0x40/0x90 [ 181.166705][ T8310] ? clear_bhb_loop+0x40/0x90 [ 181.171614][ T8310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.178305][ T8310] RIP: 0033:0x7fd93639e0d9 [ 181.183102][ T8310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.205457][ T8310] RSP: 002b:00007fd937198028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.214245][ T8310] RAX: ffffffffffffffda RBX: 00007fd936625fa0 RCX: 00007fd93639e0d9 [ 181.222505][ T8310] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000a [ 181.230490][ T8310] RBP: 00007fd937198090 R08: 0000000000000000 R09: 0000000000000000 [ 181.238554][ T8310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.247032][ T8310] R13: 00007fd936626038 R14: 00007fd936625fa0 R15: 00007ffcad9adaa8 [ 181.255278][ T8310] [ 181.691809][ T5087] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 181.700386][ T8326] syzkaller0: entered promiscuous mode [ 181.707082][ T8326] syzkaller0: entered allmulticast mode [ 181.972742][ T8334] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1006'. [ 182.010201][ T8334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.361439][ T8343] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 182.379270][ T8343] syzkaller1: linktype set to 773 [ 182.783501][ T8343] netlink: 'syz.1.1009': attribute type 10 has an invalid length. [ 182.894227][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1013'. [ 183.866115][ T5087] Bluetooth: hci3: Dropping invalid advertising data [ 183.873460][ T5087] Bluetooth: hci3: Malformed LE Event: 0x02 [ 184.637805][ T8394] FAULT_INJECTION: forcing a failure. [ 184.637805][ T8394] name failslab, interval 1, probability 0, space 0, times 0 [ 184.651829][ T8394] CPU: 0 PID: 8394 Comm: syz.3.1032 Not tainted syzkaller #0 [ 184.660052][ T8394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.670377][ T8394] Call Trace: [ 184.674043][ T8394] [ 184.677356][ T8394] dump_stack_lvl+0x18c/0x250 [ 184.682278][ T8394] ? show_regs_print_info+0x20/0x20 [ 184.688130][ T8394] ? load_image+0x420/0x420 [ 184.693888][ T8394] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 184.700195][ T8394] should_fail_ex+0x394/0x4c0 [ 184.705253][ T8394] should_failslab+0x9/0x20 [ 184.710419][ T8394] slab_pre_alloc_hook+0x59/0x300 [ 184.716189][ T8394] ? __mod_timer+0x9b0/0xd60 [ 184.720936][ T8394] kmem_cache_alloc+0x5a/0x2c0 [ 184.725919][ T8394] ? skb_clone+0x1eb/0x370 [ 184.730481][ T8394] skb_clone+0x1eb/0x370 [ 184.735167][ T8394] ? __neigh_event_send+0xe58/0x1480 [ 184.740611][ T8394] __neigh_event_send+0xe65/0x1480 [ 184.745884][ T8394] neigh_resolve_output+0x1a4/0x710 [ 184.751143][ T8394] ? ip_finish_output2+0x1260/0x1260 [ 184.756577][ T8394] ? ip_finish_output2+0x45a/0x1260 [ 184.762046][ T8394] ? ip_finish_output2+0x45a/0x1260 [ 184.767945][ T8394] ip_finish_output2+0xd97/0x1260 [ 184.773667][ T8394] ? nf_hook+0x314/0x390 [ 184.779259][ T8394] ? nf_hook+0xa2/0x390 [ 184.783636][ T8394] ? __ip_local_out+0x5f0/0x5f0 [ 184.788633][ T8394] ? ip_fragment+0x210/0x210 [ 184.793263][ T8394] ? ip_mc_finish_output+0x260/0x260 [ 184.798677][ T8394] ? __lock_acquire+0x7d80/0x7d80 [ 184.804378][ T8394] ? ip_skb_dst_mtu+0x586/0x9c0 [ 184.809444][ T8394] ? ip_finish_output+0x3ec/0x4c0 [ 184.815057][ T8394] ip_output+0x2a5/0x3a0 [ 184.819937][ T8394] ? ip_output+0x5a/0x3a0 [ 184.824994][ T8394] ? __ip_queue_xmit+0x5d/0x1960 [ 184.830447][ T8394] __ip_queue_xmit+0x1056/0x1960 [ 184.835477][ T8394] ? __ip_queue_xmit+0x5d/0x1960 [ 184.840544][ T8394] sctp_packet_transmit+0x23e4/0x2950 [ 184.845998][ T8394] sctp_packet_singleton+0x230/0x330 [ 184.851428][ T8394] ? sctp_outq_select_transport+0x590/0x590 [ 184.857556][ T8394] ? sctp_outq_select_transport+0x480/0x590 [ 184.863489][ T8394] ? sctp_transport_burst_limited+0x197/0x280 [ 184.869618][ T8394] sctp_outq_flush+0x4fc/0x3260 [ 184.874652][ T8394] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 184.880619][ T8394] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 184.886676][ T8394] ? rcu_is_watching+0x15/0xb0 [ 184.892188][ T8394] ? sctp_outq_tail+0x8a0/0x8a0 [ 184.897964][ T8394] ? sctp_outq_uncork+0x4d/0xa0 [ 184.903163][ T8394] sctp_do_sm+0x53c4/0x5af0 [ 184.908011][ T8394] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 184.914760][ T8394] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 184.922158][ T8394] ? __sk_mem_raise_allocated+0x97b/0x11e0 [ 184.928655][ T8394] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 184.934256][ T8394] sctp_sendmsg_to_asoc+0x1009/0x17f0 [ 184.939939][ T8394] ? __genradix_ptr+0x1cf/0x210 [ 184.944999][ T8394] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 184.951643][ T8394] ? __sctp_connect+0xd80/0xd80 [ 184.956966][ T8394] ? __local_bh_enable_ip+0x13a/0x1c0 [ 184.962479][ T8394] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 184.968157][ T8394] ? security_sctp_bind_connect+0x89/0xb0 [ 184.974021][ T8394] sctp_sendmsg+0x1afa/0x27b0 [ 184.978945][ T8394] ? sctp_getsockopt+0xb60/0xb60 [ 184.983949][ T8394] ? aa_af_perm+0x330/0x330 [ 184.988725][ T8394] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 184.995232][ T8394] ? sock_rps_record_flow+0x19/0x3f0 [ 185.000742][ T8394] ? inet_sendmsg+0xce/0x2a0 [ 185.005561][ T8394] ? inet_send_prepare+0x250/0x250 [ 185.011162][ T8394] ____sys_sendmsg+0x61b/0x980 [ 185.016151][ T8394] ? __sys_sendmsg_sock+0x30/0x30 [ 185.021381][ T8394] ? __import_iovec+0x5f2/0x850 [ 185.026581][ T8394] ? import_iovec+0x73/0xa0 [ 185.031148][ T8394] ___sys_sendmsg+0x2a6/0x360 [ 185.035946][ T8394] ? get_pid_task+0x20/0x1e0 [ 185.040974][ T8394] ? __sys_sendmsg+0x2b0/0x2b0 [ 185.046021][ T8394] ? __lock_acquire+0x7d80/0x7d80 [ 185.051814][ T8394] __se_sys_sendmsg+0x1d0/0x2c0 [ 185.056881][ T8394] ? perf_trace_preemptirq_template+0x269/0x330 [ 185.063174][ T8394] ? __x64_sys_sendmsg+0x80/0x80 [ 185.068359][ T8394] ? lockdep_hardirqs_on+0x98/0x150 [ 185.073780][ T8394] do_syscall_64+0x55/0xb0 [ 185.078580][ T8394] ? clear_bhb_loop+0x40/0x90 [ 185.083469][ T8394] ? clear_bhb_loop+0x40/0x90 [ 185.088421][ T8394] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.094617][ T8394] RIP: 0033:0x7f31dcf9e0d9 [ 185.099427][ T8394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.119402][ T8394] RSP: 002b:00007f31dde85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.128383][ T8394] RAX: ffffffffffffffda RBX: 00007f31dd225fa0 RCX: 00007f31dcf9e0d9 [ 185.136913][ T8394] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000004 [ 185.145462][ T8394] RBP: 00007f31dde85090 R08: 0000000000000000 R09: 0000000000000000 [ 185.153734][ T8394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.161832][ T8394] R13: 00007f31dd226038 R14: 00007f31dd225fa0 R15: 00007ffd122d8928 [ 185.169971][ T8394] [ 185.351697][ T8402] netlink: 'syz.0.1036': attribute type 10 has an invalid length. [ 185.440456][ T8409] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1038'. [ 185.462242][ T8408] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1038'. [ 185.587151][ T8414] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1039'. [ 185.832939][ T5087] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 186.027937][ T8427] netlink: 'syz.3.1045': attribute type 6 has an invalid length. [ 186.061237][ T8427] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1045'. [ 186.333224][ T8437] netlink: 'syz.0.1049': attribute type 9 has an invalid length. [ 186.341743][ T8437] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1049'. [ 186.623029][ T5087] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 187.344358][ T5087] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 187.814982][ T5087] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 187.851889][ T8504] netlink: 'syz.1.1076': attribute type 10 has an invalid length. [ 188.534822][ T8533] netlink: 'syz.3.1087': attribute type 29 has an invalid length. [ 188.558835][ T8533] netlink: 'syz.3.1087': attribute type 29 has an invalid length. [ 188.569233][ T8533] netlink: 'syz.3.1087': attribute type 29 has an invalid length. [ 188.592583][ T8533] netlink: 'syz.3.1087': attribute type 29 has an invalid length. [ 188.611999][ T8535] netlink: 'syz.0.1088': attribute type 12 has an invalid length. [ 188.629132][ T8535] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1088'. [ 188.965989][ T5087] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 189.046453][ T8550] netlink: 'syz.3.1092': attribute type 29 has an invalid length. [ 189.057951][ T8550] netlink: 'syz.3.1092': attribute type 3 has an invalid length. [ 189.072009][ T8550] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1092'. [ 189.459447][ T5087] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 192.261598][ T8583] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.269469][ T8583] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.292513][ T8583] bridge0: entered allmulticast mode [ 192.525188][ T8595] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1116'. [ 192.679985][ T5087] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 192.828499][ T8604] netlink: 'syz.2.1111': attribute type 9 has an invalid length. [ 192.846496][ T8604] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1111'. [ 192.918062][ T8605] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1112'. [ 193.653039][ T5087] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 193.871837][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.880230][ T8620] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.893113][ T8620] bridge0: entered allmulticast mode [ 194.033922][ T5087] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 194.480207][ T5087] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 194.748639][ T5087] Bluetooth: hci3: Malformed LE Event: 0x0b [ 194.764363][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.771164][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.047154][ T5087] Bluetooth: hci0: Malformed LE Event: 0x0b [ 195.184355][ T8655] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1128'. [ 195.196732][ T8657] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.204617][ T8657] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.213980][ T8657] bridge0: entered allmulticast mode [ 195.446476][ T8659] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1131'. [ 195.738195][ T8666] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1132'. [ 195.778623][ T8666] netlink: 'syz.2.1132': attribute type 28 has an invalid length. [ 195.802466][ T8666] netlink: 'syz.2.1132': attribute type 29 has an invalid length. [ 195.851580][ T8666] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1132'. [ 196.007412][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 196.910865][ T8694] FAULT_INJECTION: forcing a failure. [ 196.910865][ T8694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.960249][ T8694] CPU: 1 PID: 8694 Comm: syz.3.1147 Not tainted syzkaller #0 [ 196.967724][ T8694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.978381][ T8694] Call Trace: [ 196.981991][ T8694] [ 196.984989][ T8694] dump_stack_lvl+0x18c/0x250 [ 196.990018][ T8694] ? show_regs_print_info+0x20/0x20 [ 196.995388][ T8694] ? load_image+0x420/0x420 [ 196.999974][ T8694] ? __lock_acquire+0x7d80/0x7d80 [ 197.002236][ T5087] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 197.005325][ T8694] ? snprintf+0xe9/0x140 [ 197.017247][ T8694] should_fail_ex+0x394/0x4c0 [ 197.022159][ T8694] _copy_to_user+0x2f/0xa0 [ 197.026705][ T8694] simple_read_from_buffer+0xe7/0x150 [ 197.032253][ T8694] proc_fail_nth_read+0x1e8/0x260 [ 197.037493][ T8694] ? proc_fault_inject_write+0x360/0x360 [ 197.043599][ T8694] ? fsnotify_perm+0x271/0x5e0 [ 197.048393][ T8694] ? proc_fault_inject_write+0x360/0x360 [ 197.054121][ T8694] vfs_read+0x298/0x990 [ 197.058421][ T8694] ? kernel_read+0x1e0/0x1e0 [ 197.063221][ T8694] ? __fget_files+0x28/0x460 [ 197.068007][ T8694] ? __fget_files+0x3fc/0x460 [ 197.072722][ T8694] ? __fdget_pos+0x2a3/0x330 [ 197.077517][ T8694] ? ksys_read+0x74/0x260 [ 197.081876][ T8694] ksys_read+0x151/0x260 [ 197.086147][ T8694] ? vfs_write+0x9a0/0x9a0 [ 197.090589][ T8694] ? lockdep_hardirqs_on+0x98/0x150 [ 197.095849][ T8694] do_syscall_64+0x55/0xb0 [ 197.100378][ T8694] ? clear_bhb_loop+0x40/0x90 [ 197.105076][ T8694] ? clear_bhb_loop+0x40/0x90 [ 197.109878][ T8694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.115836][ T8694] RIP: 0033:0x7f31dcf5e90e [ 197.120536][ T8694] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 197.140960][ T8694] RSP: 002b:00007f31dde84fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.149491][ T8694] RAX: ffffffffffffffda RBX: 00007f31dde856c0 RCX: 00007f31dcf5e90e [ 197.157739][ T8694] RDX: 000000000000000f RSI: 00007f31dde850a0 RDI: 000000000000000b [ 197.165820][ T8694] RBP: 00007f31dde85090 R08: 0000000000000000 R09: 0000000000000000 [ 197.174099][ T8694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.182357][ T8694] R13: 00007f31dd226038 R14: 00007f31dd225fa0 R15: 00007ffd122d8928 [ 197.190479][ T8694] [ 197.626097][ T8710] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1152'. [ 197.651657][ T8712] netlink: 'syz.1.1154': attribute type 1 has an invalid length. [ 197.660505][ T8712] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1154'. [ 197.685021][ T8712] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 197.701137][ T8712] syzkaller1: linktype set to 769 [ 197.710016][ T8707] netlink: 'syz.3.1152': attribute type 28 has an invalid length. [ 197.726238][ T8712] syzkaller1: tun_chr_ioctl cmd 1074025698 [ 197.751097][ T8707] netlink: 'syz.3.1152': attribute type 29 has an invalid length. [ 197.770442][ T8707] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1152'. [ 198.202601][ T8728] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1160'. [ 198.252829][ T8733] sit0: entered promiscuous mode [ 198.656320][ T8743] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.1166'. [ 198.692223][ T8745] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1166'. [ 198.860835][ T8751] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1169'. [ 198.870071][ T8749] netlink: 'syz.1.1169': attribute type 28 has an invalid length. [ 198.897970][ T8749] netlink: 'syz.1.1169': attribute type 29 has an invalid length. [ 198.903530][ T8753] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1170'. [ 198.923626][ T8749] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1169'. [ 199.204318][ T8763] FAULT_INJECTION: forcing a failure. [ 199.204318][ T8763] name failslab, interval 1, probability 0, space 0, times 0 [ 199.289692][ T8763] CPU: 1 PID: 8763 Comm: syz.2.1173 Not tainted syzkaller #0 [ 199.297419][ T8763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.307690][ T8763] Call Trace: [ 199.310998][ T8763] [ 199.313990][ T8763] dump_stack_lvl+0x18c/0x250 [ 199.318895][ T8763] ? show_regs_print_info+0x20/0x20 [ 199.324308][ T8763] ? load_image+0x420/0x420 [ 199.328889][ T8763] should_fail_ex+0x394/0x4c0 [ 199.333614][ T8763] should_failslab+0x9/0x20 [ 199.338599][ T8763] slab_pre_alloc_hook+0x59/0x300 [ 199.343852][ T8763] ? sctp_bind_addrs_to_raw+0x10b/0x350 [ 199.349449][ T8763] ? sctp_bind_addrs_to_raw+0x10b/0x350 [ 199.355124][ T8763] __kmem_cache_alloc_node+0x53/0x250 [ 199.360662][ T8763] ? sctp_bind_addrs_to_raw+0x10b/0x350 [ 199.366336][ T8763] __kmalloc+0xa7/0x240 [ 199.370544][ T8763] sctp_bind_addrs_to_raw+0x10b/0x350 [ 199.376228][ T8763] ? sctp_del_bind_addr+0x190/0x190 [ 199.381565][ T8763] sctp_make_init+0x164/0xf80 [ 199.386350][ T8763] ? sctp_addto_chunk+0x220/0x220 [ 199.391456][ T8763] ? kernel_text_address+0xa0/0xd0 [ 199.396608][ T8763] ? __kernel_text_address+0xd/0x30 [ 199.402089][ T8763] ? unwind_get_return_address+0x91/0xc0 [ 199.408026][ T8763] ? stack_trace_save+0x100/0x100 [ 199.413406][ T8763] ? arch_stack_walk+0x160/0x190 [ 199.418481][ T8763] sctp_sf_do_prm_asoc+0xcf/0x3e0 [ 199.423549][ T8763] sctp_do_sm+0x23b/0x5af0 [ 199.428123][ T8763] ? sctp_cname+0x110/0x110 [ 199.432854][ T8763] ? kasan_set_track+0x4e/0x70 [ 199.437831][ T8763] ? __kasan_kmalloc+0x8f/0xa0 [ 199.442729][ T8763] ? sctp_stream_init_ext+0x57/0x170 [ 199.448658][ T8763] ? sctp_sendmsg_to_asoc+0x12cc/0x17f0 [ 199.454421][ T8763] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 199.460692][ T8763] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 199.465930][ T8763] ? do_syscall_64+0x55/0xb0 [ 199.470637][ T8763] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.476860][ T8763] ? __sk_mem_raise_allocated+0x97b/0x11e0 [ 199.483151][ T8763] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 199.488560][ T8763] sctp_sendmsg_to_asoc+0x1009/0x17f0 [ 199.494014][ T8763] ? __genradix_ptr+0x1cf/0x210 [ 199.498907][ T8763] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 199.504889][ T8763] ? __sctp_connect+0xd80/0xd80 [ 199.509774][ T8763] ? __local_bh_enable_ip+0x13a/0x1c0 [ 199.515186][ T8763] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 199.520764][ T8763] ? security_sctp_bind_connect+0x89/0xb0 [ 199.526618][ T8763] sctp_sendmsg+0x1afa/0x27b0 [ 199.531366][ T8763] ? sctp_getsockopt+0xb60/0xb60 [ 199.536435][ T8763] ? aa_af_perm+0x330/0x330 [ 199.541130][ T8763] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 199.547673][ T8763] ? sock_rps_record_flow+0x19/0x3f0 [ 199.553059][ T8763] ? inet_sendmsg+0xce/0x2a0 [ 199.557844][ T8763] ? inet_send_prepare+0x250/0x250 [ 199.562980][ T8763] ____sys_sendmsg+0x61b/0x980 [ 199.567855][ T8763] ? __sys_sendmsg_sock+0x30/0x30 [ 199.572903][ T8763] ? __import_iovec+0x5f2/0x850 [ 199.577925][ T8763] ? import_iovec+0x73/0xa0 [ 199.582780][ T8763] ___sys_sendmsg+0x2a6/0x360 [ 199.587649][ T8763] ? get_pid_task+0x20/0x1e0 [ 199.592246][ T8763] ? __sys_sendmsg+0x2b0/0x2b0 [ 199.597358][ T8763] ? __lock_acquire+0x7d80/0x7d80 [ 199.602488][ T8763] __se_sys_sendmsg+0x1d0/0x2c0 [ 199.607346][ T8763] ? perf_trace_preemptirq_template+0x269/0x330 [ 199.613937][ T8763] ? __x64_sys_sendmsg+0x80/0x80 [ 199.618987][ T8763] ? lockdep_hardirqs_on+0x98/0x150 [ 199.624192][ T8763] do_syscall_64+0x55/0xb0 [ 199.628612][ T8763] ? clear_bhb_loop+0x40/0x90 [ 199.633502][ T8763] ? clear_bhb_loop+0x40/0x90 [ 199.638440][ T8763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.644517][ T8763] RIP: 0033:0x7f065df9e0d9 [ 199.649107][ T8763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.669429][ T8763] RSP: 002b:00007f065ee78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.680134][ T8763] RAX: ffffffffffffffda RBX: 00007f065e225fa0 RCX: 00007f065df9e0d9 [ 199.688302][ T8763] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000004 [ 199.697536][ T8763] RBP: 00007f065ee78090 R08: 0000000000000000 R09: 0000000000000000 [ 199.706143][ T8763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.714658][ T8763] R13: 00007f065e226038 R14: 00007f065e225fa0 R15: 00007ffefb0d2668 [ 199.722858][ T8763] [ 199.936700][ T8777] netlink: 'syz.1.1180': attribute type 28 has an invalid length. [ 199.952435][ T8777] netlink: 'syz.1.1180': attribute type 29 has an invalid length. [ 199.960580][ T8777] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1180'. [ 200.679322][ T8803] sit0: left promiscuous mode [ 200.831404][ T8809] sit0: entered promiscuous mode [ 201.706611][ T8830] netlink: 'syz.0.1201': attribute type 21 has an invalid length. [ 201.724229][ T8830] netlink: 'syz.0.1201': attribute type 4 has an invalid length. [ 201.745692][ T8830] netlink: 'syz.0.1201': attribute type 3 has an invalid length. [ 201.848358][ T8830] openvswitch: netlink: Key type 29 is not supported [ 201.959182][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 201.960429][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 201.966198][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 201.973579][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 202.148833][ T8848] netlink: 'syz.3.1211': attribute type 10 has an invalid length. [ 202.542358][ C0] ================================================================== [ 202.550574][ C0] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 202.558573][ C0] Write of size 104 at addr ffff8880793dc610 by task syz.2.1216/8859 [ 202.566804][ C0] [ 202.569118][ C0] CPU: 0 PID: 8859 Comm: syz.2.1216 Not tainted syzkaller #0 [ 202.577450][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.587615][ C0] Call Trace: [ 202.591108][ C0] [ 202.593950][ C0] dump_stack_lvl+0x18c/0x250 [ 202.598667][ C0] ? read_lock_is_recursive+0x20/0x20 [ 202.604243][ C0] ? show_regs_print_info+0x20/0x20 [ 202.609448][ C0] ? load_image+0x420/0x420 [ 202.613952][ C0] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 202.619497][ C0] ? __virt_addr_valid+0x10c/0x380 [ 202.624602][ C0] ? __virt_addr_valid+0x10c/0x380 [ 202.629801][ C0] ? __virt_addr_valid+0x10c/0x380 [ 202.635348][ C0] print_report+0xa8/0x210 [ 202.639972][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 202.645282][ C0] kasan_report+0x117/0x150 [ 202.649883][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 202.655116][ C0] kasan_check_range+0x241/0x290 [ 202.660154][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 202.665470][ C0] __asan_memcpy+0x40/0x70 [ 202.670470][ C0] __bpf_get_stackid+0x6c7/0x900 [ 202.675432][ C0] bpf_get_stackid_pe+0x343/0x410 [ 202.680708][ C0] bpf_prog_b14f7977a0544f6b+0x30/0x45 [ 202.686273][ C0] bpf_overflow_handler+0x1fc/0x510 [ 202.691648][ C0] ? bpf_overflow_handler+0xde/0x510 [ 202.697227][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 202.702894][ C0] ? __lock_acquire+0x1336/0x7d80 [ 202.708462][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 202.715075][ C0] __perf_event_overflow+0x461/0x660 [ 202.720567][ C0] perf_swevent_hrtimer+0x437/0x610 [ 202.725785][ C0] ? cpu_clock_event_read+0x40/0x40 [ 202.730994][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 202.736449][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 202.742646][ C0] ? _raw_spin_unlock+0x40/0x40 [ 202.747549][ C0] ? cpu_clock_event_read+0x40/0x40 [ 202.752884][ C0] __hrtimer_run_queues+0x4e8/0xc10 [ 202.758156][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 202.766375][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 202.772983][ C0] ? hrtimer_interrupt+0x980/0x980 [ 202.778828][ C0] ? read_tsc+0x9/0x20 [ 202.783252][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 202.789496][ C0] hrtimer_interrupt+0x39d/0x980 [ 202.794462][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 202.800388][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 202.806161][ C0] [ 202.809117][ C0] [ 202.812054][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 202.818236][ C0] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 202.824081][ C0] Code: 31 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 23 f7 3a 09 e8 be 19 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 202.843966][ C0] RSP: 0018:ffffc9000b5cf800 EFLAGS: 00000286 [ 202.850095][ C0] RAX: 64effe686c6bd700 RBX: 0000000000000000 RCX: 64effe686c6bd700 [ 202.858189][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 202.866548][ C0] RBP: ffffc9000b5cf850 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 202.874990][ C0] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: ffff88801dfe5a00 [ 202.883164][ C0] R13: 1ffff110171c79a9 R14: dffffc0000000000 R15: ffff8880b8e3cd48 [ 202.891327][ C0] __schedule+0x15b6/0x4660 [ 202.896082][ C0] ? sched_core_dequeue+0x1c0/0x1c0 [ 202.901323][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 202.907631][ C0] ? asan.module_dtor+0x20/0x20 [ 202.912676][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 202.918243][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 202.924409][ C0] ? preempt_schedule+0xc0/0xd0 [ 202.929459][ C0] preempt_schedule_common+0x82/0xc0 [ 202.934765][ C0] preempt_schedule+0xc0/0xd0 [ 202.939743][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 202.945511][ C0] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 202.951832][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 202.957760][ C0] ? _raw_spin_unlock+0x40/0x40 [ 202.962719][ C0] preempt_schedule_thunk+0x1a/0x30 [ 202.968295][ C0] try_to_wake_up+0x6f5/0x10e0 [ 202.973442][ C0] wake_up_q+0xb6/0x100 [ 202.977609][ C0] futex_wake+0x42a/0x4f0 [ 202.981955][ C0] ? futex_wake_mark+0x150/0x150 [ 202.986906][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 202.993676][ C0] ? ktime_get+0x7f/0x280 [ 202.998118][ C0] ? ktime_get+0x7f/0x280 [ 203.002459][ C0] ? lock_chain_count+0x20/0x20 [ 203.007407][ C0] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 203.013743][ C0] do_futex+0x35d/0x3e0 [ 203.018439][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 203.024290][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 203.030189][ C0] ? __se_sys_futex+0x282/0x440 [ 203.035144][ C0] __se_sys_futex+0x3a9/0x440 [ 203.039829][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 203.046010][ C0] ? __x64_sys_futex+0xf0/0xf0 [ 203.051324][ C0] ? __x64_sys_futex+0x21/0xf0 [ 203.056376][ C0] do_syscall_64+0x55/0xb0 [ 203.060831][ C0] ? clear_bhb_loop+0x40/0x90 [ 203.065532][ C0] ? clear_bhb_loop+0x40/0x90 [ 203.070329][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.076257][ C0] RIP: 0033:0x7f065df9e0d9 [ 203.080690][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.100593][ C0] RSP: 002b:00007f065ee780e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 203.109034][ C0] RAX: ffffffffffffffda RBX: 00007f065e225fa8 RCX: 00007f065df9e0d9 [ 203.117445][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f065e225fac [ 203.125411][ C0] RBP: 00007f065e225fa0 R08: 0000000000745a54 R09: 0000000000000000 [ 203.133395][ C0] R10: 00000000000002f0 R11: 0000000000000246 R12: 0000000000000000 [ 203.141374][ C0] R13: 00007f065e226038 R14: 00007ffefb0d2580 R15: 00007ffefb0d2668 [ 203.149452][ C0] [ 203.152493][ C0] [ 203.154807][ C0] Allocated by task 8859: [ 203.159121][ C0] kasan_set_track+0x4e/0x70 [ 203.163755][ C0] __kasan_kmalloc+0x8f/0xa0 [ 203.168450][ C0] __kmalloc_node+0xb6/0x240 [ 203.173060][ C0] bpf_map_area_alloc+0x5e/0x110 [ 203.178343][ C0] prealloc_elems_and_freelist+0x86/0x1c0 [ 203.184196][ C0] stack_map_alloc+0x32b/0x4b0 [ 203.188967][ C0] map_create+0x877/0x12f0 [ 203.193393][ C0] __sys_bpf+0x651/0x890 [ 203.197929][ C0] __x64_sys_bpf+0x7c/0x90 [ 203.202454][ C0] do_syscall_64+0x55/0xb0 [ 203.207214][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.213116][ C0] [ 203.215521][ C0] The buggy address belongs to the object at ffff8880793dc600 [ 203.215521][ C0] which belongs to the cache kmalloc-cg-64 of size 64 [ 203.229935][ C0] The buggy address is located 16 bytes inside of [ 203.229935][ C0] allocated 40-byte region [ffff8880793dc600, ffff8880793dc628) [ 203.244603][ C0] [ 203.246930][ C0] The buggy address belongs to the physical page: [ 203.253714][ C0] page:ffffea0001e4f700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x793dc [ 203.264440][ C0] memcg:ffff888030677201 [ 203.268728][ C0] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 203.276721][ C0] page_type: 0xffffffff() [ 203.281234][ C0] raw: 00fff00000000800 ffff888017c4da00 ffffea0000b466c0 0000000000000007 [ 203.289901][ C0] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888030677201 [ 203.298467][ C0] page dumped because: kasan: bad access detected [ 203.305424][ C0] page_owner tracks the page as allocated [ 203.311308][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5775, tgid 5775 (syz-executor), ts 85634290892, free_ts 85633855766 [ 203.329923][ C0] post_alloc_hook+0x1c1/0x200 [ 203.334895][ C0] get_page_from_freelist+0x2181/0x22a0 [ 203.340432][ C0] __alloc_pages+0x1f0/0x460 [ 203.345642][ C0] alloc_slab_page+0x5d/0x180 [ 203.350407][ C0] new_slab+0x87/0x2d0 [ 203.354495][ C0] ___slab_alloc+0xc5c/0x12f0 [ 203.359784][ C0] __kmem_cache_alloc_node+0x11f/0x250 [ 203.365447][ C0] kmalloc_trace+0x2a/0xe0 [ 203.369903][ C0] alloc_fdtable+0xca/0x2c0 [ 203.374713][ C0] dup_fd+0x747/0xa20 [ 203.378689][ C0] copy_files+0xaf/0x110 [ 203.382928][ C0] copy_process+0x157d/0x3da0 [ 203.387598][ C0] kernel_clone+0x24b/0x8a0 [ 203.392094][ C0] __x64_sys_clone+0x1b7/0x230 [ 203.396887][ C0] do_syscall_64+0x55/0xb0 [ 203.401447][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.407376][ C0] page last free stack trace: [ 203.412142][ C0] free_unref_page_prepare+0x7d7/0x8f0 [ 203.417726][ C0] free_unref_page+0x32/0x2e0 [ 203.422531][ C0] vfree+0x1a7/0x340 [ 203.426859][ C0] __do_replace+0x878/0x9b0 [ 203.431699][ C0] do_ip6t_set_ctl+0xb41/0xe10 [ 203.436626][ C0] nf_setsockopt+0x263/0x280 [ 203.442047][ C0] do_sock_setsockopt+0x175/0x1a0 [ 203.447082][ C0] __x64_sys_setsockopt+0x182/0x200 [ 203.452493][ C0] do_syscall_64+0x55/0xb0 [ 203.457799][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.463884][ C0] [ 203.466204][ C0] Memory state around the buggy address: [ 203.471906][ C0] ffff8880793dc500: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 203.480131][ C0] ffff8880793dc580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 203.488723][ C0] >ffff8880793dc600: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 203.496962][ C0] ^ [ 203.502342][ C0] ffff8880793dc680: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 203.510425][ C0] ffff8880793dc700: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 203.518499][ C0] ================================================================== [ 203.526689][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 203.534447][ C0] CPU: 0 PID: 8859 Comm: syz.2.1216 Not tainted syzkaller #0 [ 203.542244][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.552686][ C0] Call Trace: [ 203.555968][ C0] [ 203.558805][ C0] dump_stack_lvl+0x18c/0x250 [ 203.563481][ C0] ? show_regs_print_info+0x20/0x20 [ 203.568774][ C0] ? load_image+0x420/0x420 [ 203.573281][ C0] panic+0x2ca/0x720 [ 203.577177][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 203.582191][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 203.586806][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 203.593646][ C0] ? _raw_spin_unlock+0x40/0x40 [ 203.598621][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 203.603887][ C0] check_panic_on_warn+0x84/0xa0 [ 203.609365][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 203.614656][ C0] end_report+0x6f/0x130 [ 203.619074][ C0] kasan_report+0x128/0x150 [ 203.623575][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 203.628686][ C0] kasan_check_range+0x241/0x290 [ 203.633641][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 203.638979][ C0] __asan_memcpy+0x40/0x70 [ 203.643518][ C0] __bpf_get_stackid+0x6c7/0x900 [ 203.648553][ C0] bpf_get_stackid_pe+0x343/0x410 [ 203.653589][ C0] bpf_prog_b14f7977a0544f6b+0x30/0x45 [ 203.659040][ C0] bpf_overflow_handler+0x1fc/0x510 [ 203.664241][ C0] ? bpf_overflow_handler+0xde/0x510 [ 203.669666][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 203.675045][ C0] ? __lock_acquire+0x1336/0x7d80 [ 203.680778][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 203.687665][ C0] __perf_event_overflow+0x461/0x660 [ 203.693121][ C0] perf_swevent_hrtimer+0x437/0x610 [ 203.698872][ C0] ? cpu_clock_event_read+0x40/0x40 [ 203.704166][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 203.709543][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 203.715656][ C0] ? _raw_spin_unlock+0x40/0x40 [ 203.720561][ C0] ? cpu_clock_event_read+0x40/0x40 [ 203.725869][ C0] __hrtimer_run_queues+0x4e8/0xc10 [ 203.731144][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 203.737463][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 203.743612][ C0] ? hrtimer_interrupt+0x980/0x980 [ 203.748744][ C0] ? read_tsc+0x9/0x20 [ 203.753011][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 203.759364][ C0] hrtimer_interrupt+0x39d/0x980 [ 203.764516][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 203.770538][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 203.776376][ C0] [ 203.779343][ C0] [ 203.782275][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 203.788277][ C0] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 203.794177][ C0] Code: 31 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 23 f7 3a 09 e8 be 19 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 203.814525][ C0] RSP: 0018:ffffc9000b5cf800 EFLAGS: 00000286 [ 203.820866][ C0] RAX: 64effe686c6bd700 RBX: 0000000000000000 RCX: 64effe686c6bd700 [ 203.828842][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 203.836984][ C0] RBP: ffffc9000b5cf850 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 203.845046][ C0] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: ffff88801dfe5a00 [ 203.853012][ C0] R13: 1ffff110171c79a9 R14: dffffc0000000000 R15: ffff8880b8e3cd48 [ 203.860985][ C0] __schedule+0x15b6/0x4660 [ 203.865496][ C0] ? sched_core_dequeue+0x1c0/0x1c0 [ 203.870697][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 203.876676][ C0] ? asan.module_dtor+0x20/0x20 [ 203.881611][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 203.886924][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 203.893153][ C0] ? preempt_schedule+0xc0/0xd0 [ 203.898182][ C0] preempt_schedule_common+0x82/0xc0 [ 203.903561][ C0] preempt_schedule+0xc0/0xd0 [ 203.908313][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 203.913935][ C0] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 203.919823][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 203.925798][ C0] ? _raw_spin_unlock+0x40/0x40 [ 203.930674][ C0] preempt_schedule_thunk+0x1a/0x30 [ 203.935913][ C0] try_to_wake_up+0x6f5/0x10e0 [ 203.940999][ C0] wake_up_q+0xb6/0x100 [ 203.945359][ C0] futex_wake+0x42a/0x4f0 [ 203.949729][ C0] ? futex_wake_mark+0x150/0x150 [ 203.954680][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 203.960705][ C0] ? ktime_get+0x7f/0x280 [ 203.965165][ C0] ? ktime_get+0x7f/0x280 [ 203.969588][ C0] ? lock_chain_count+0x20/0x20 [ 203.974448][ C0] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 203.980722][ C0] do_futex+0x35d/0x3e0 [ 203.984918][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 203.990148][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 203.996079][ C0] ? __se_sys_futex+0x282/0x440 [ 204.001121][ C0] __se_sys_futex+0x3a9/0x440 [ 204.005811][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 204.012110][ C0] ? __x64_sys_futex+0xf0/0xf0 [ 204.016970][ C0] ? __x64_sys_futex+0x21/0xf0 [ 204.021734][ C0] do_syscall_64+0x55/0xb0 [ 204.026325][ C0] ? clear_bhb_loop+0x40/0x90 [ 204.031014][ C0] ? clear_bhb_loop+0x40/0x90 [ 204.035920][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.041919][ C0] RIP: 0033:0x7f065df9e0d9 [ 204.046699][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.066922][ C0] RSP: 002b:00007f065ee780e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 204.075606][ C0] RAX: ffffffffffffffda RBX: 00007f065e225fa8 RCX: 00007f065df9e0d9 [ 204.083776][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f065e225fac [ 204.091835][ C0] RBP: 00007f065e225fa0 R08: 0000000000745a54 R09: 0000000000000000 [ 204.099807][ C0] R10: 00000000000002f0 R11: 0000000000000246 R12: 0000000000000000 [ 204.107861][ C0] R13: 00007f065e226038 R14: 00007ffefb0d2580 R15: 00007ffefb0d2668 [ 204.115931][ C0] [ 204.119407][ C0] Kernel Offset: disabled [ 204.123855][ C0] Rebooting in 86400 seconds..