last executing test programs: 25m2.375372589s ago: executing program 3 (id=778): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000102880)={0x1f, 0x11, &(0x7f0000102940)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000102a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000102cc0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2d) 25m2.115581156s ago: executing program 3 (id=781): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x3, &(0x7f00000008c0)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x2, 0x0) sendmsg$unix(r2, 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffd6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="450a0000000000006111740900000000180000000000000000000000000000009500000000110000"], &(0x7f00000005c0)='GPL\x00'}, 0x80) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x6, 0x6, &(0x7f0000000600)=r4, 0x4) sendmsg$kcm(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x20000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000ec0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000001000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(r3, 0x84, 0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 25m1.306425476s ago: executing program 3 (id=784): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x2) close(r2) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000600)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1}}}], 0x20}, 0x48000) (async) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f00000006c0)={0x2, 0x0, @multicast2=0xac141410}, 0x10, 0x0}, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) (async) r4 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x15, 0x2000000000000216, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x7, 0xc, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000f40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0001000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x48) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r7, @ANYBLOB="00000300"/18, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x18, 0x1c, &(0x7f0000000840)=ANY=[@ANYBLOB="1808000000000000000000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r8, @ANYBLOB="0000090000000000b7050000080000004608f0bf760000005e920000000000005608000001000000850000006c5707000000b740000000000000950000008a220d9a00005054c39de8e8370514c5b4acd5a82adcfdfe43506047777640c1c22c16bb14ac079624663e2700010d423126c8261c4606f286a0f31e39b01bb5f44df22c3e8dda70df4065a428e8eb37667abdd035c35fd3734a5e"], &(0x7f0000001280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff0f000020000080) (async) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="14000000180081054e81f783db4cb9040a1d0800", 0x14}], 0x1}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup, 0x13, 0x1, 0x58, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0), 0x0}, 0x40) (async) r12 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r12, 0x0, 0x0) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000400)={0x6, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r12, @ANYRES32=r9, @ANYBLOB="a512a79eabbd11085bf79e42f69f16d0430bc6ac1547a49bcd89bdf1ccf90b425bf42b87735efe86ed3138988c0d7b7bbaa27ae5fb36031dc2e8b890b31f3ab5e8ff80605265bfaf77f852359930ad477150c5862b0e424af4a338541777f7dda336676ee2d38ab93a75fe069dae28853164707aafdb98f7bc8c0bad17282aabbce6a012246e0bdd691f84532ea1c5c54419a418b19d99b916e7ce9e0e71b7e81b0af4299b6d6f0a543ef18e8b47992f7a4e39", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r13, @ANYRES64=r11], 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x107, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0xd, 0x30, 0x0, @void, @void, @void, @value=r14, r11}, 0x20) (async) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000003000000080000000000000000000100", @ANYRES32, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32=r3, @ANYBLOB="39c359c0bf15665b0c5d0f4aaf8b28377b3f63"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r15}, &(0x7f0000000780), &(0x7f0000000700)=r0}, 0x20) (async) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 25m0.619942883s ago: executing program 3 (id=786): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="28000000000000ffff000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRESOCT], 0x48}, 0x0) 25m0.451796796s ago: executing program 3 (id=788): perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x0, 0xe, 0x0, &(0x7f0000000940)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 25m0.143105174s ago: executing program 3 (id=790): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0xffff, 0x1b54aca6, 0x2}, 0x50) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x22, 0x80000, 0xfffffffe, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000240)={r4, r3}) r5 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x10e, 0xb, &(0x7f0000000100), 0x4) sendmsg$kcm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="d8000000180081064e81f782db4cb904021d080006f6090000000000000015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d366bf196d6931e7cad55c86102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc0000", 0xd8}], 0x1}, 0x4080) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x20, &(0x7f0000000400)=ANY=[@ANYBLOB="8759b634000000", @ANYRES32, @ANYBLOB="0000000000000000b70800008f0500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095000000000000001833000001000000000000000000000085100000fdffffff950000000000000018170000", @ANYRES32=r6, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000270500008500000006000000"], &(0x7f0000000540)='syzkaller\x00', 0x5, 0x97, &(0x7f0000000580)=""/151, 0x41000, 0x48, '\x00', r7, @cgroup_sysctl=0x12, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x4, 0x6, 0x3, 0x6}, 0x10, 0x0, r3, 0x8, 0x0, &(0x7f0000000680)=[{0x0, 0x5, 0x6, 0x7}, {0x1, 0x5, 0x1, 0x1}, {0x2, 0x3, 0x5, 0x4}, {0x4, 0x3, 0xb}, {0x1, 0x2, 0xd, 0x9}, {0x1, 0x2, 0x3, 0xa}, {0x2, 0x4, 0x8, 0x1}, {0x1, 0x3, 0xc, 0x5}], 0x10, 0x7fff}, 0x94) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x10001, 0x0, 0x10, 0xe01, r1, 0x4, '\x00', r7, r8, 0x2, 0x0, 0x4, 0xb}, 0x50) socket$kcm(0x2c, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x2, &(0x7f0000000a80)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40), &(0x7f0000000c80), 0xffffffff, r10}, 0x38) sendmsg$tipc(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="85604c1bfa74ce5e9eaa6777b216c632", 0x10, 0x4000800}, 0x800) r11 = socket$kcm(0x2, 0x7, 0x106) sendmsg$inet(r11, &(0x7f0000000000)={&(0x7f0000000140)={0x2d, 0x4101, @rand_addr=0x64010101}, 0xfe17, 0x0}, 0x300060c1) 24m44.857305484s ago: executing program 32 (id=790): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0xffff, 0x1b54aca6, 0x2}, 0x50) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x22, 0x80000, 0xfffffffe, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000240)={r4, r3}) r5 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x10e, 0xb, &(0x7f0000000100), 0x4) sendmsg$kcm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="d8000000180081064e81f782db4cb904021d080006f6090000000000000015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d366bf196d6931e7cad55c86102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc0000", 0xd8}], 0x1}, 0x4080) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x20, &(0x7f0000000400)=ANY=[@ANYBLOB="8759b634000000", @ANYRES32, @ANYBLOB="0000000000000000b70800008f0500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095000000000000001833000001000000000000000000000085100000fdffffff950000000000000018170000", @ANYRES32=r6, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000270500008500000006000000"], &(0x7f0000000540)='syzkaller\x00', 0x5, 0x97, &(0x7f0000000580)=""/151, 0x41000, 0x48, '\x00', r7, @cgroup_sysctl=0x12, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x4, 0x6, 0x3, 0x6}, 0x10, 0x0, r3, 0x8, 0x0, &(0x7f0000000680)=[{0x0, 0x5, 0x6, 0x7}, {0x1, 0x5, 0x1, 0x1}, {0x2, 0x3, 0x5, 0x4}, {0x4, 0x3, 0xb}, {0x1, 0x2, 0xd, 0x9}, {0x1, 0x2, 0x3, 0xa}, {0x2, 0x4, 0x8, 0x1}, {0x1, 0x3, 0xc, 0x5}], 0x10, 0x7fff}, 0x94) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x10001, 0x0, 0x10, 0xe01, r1, 0x4, '\x00', r7, r8, 0x2, 0x0, 0x4, 0xb}, 0x50) socket$kcm(0x2c, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x2, &(0x7f0000000a80)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40), &(0x7f0000000c80), 0xffffffff, r10}, 0x38) sendmsg$tipc(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="85604c1bfa74ce5e9eaa6777b216c632", 0x10, 0x4000800}, 0x800) r11 = socket$kcm(0x2, 0x7, 0x106) sendmsg$inet(r11, &(0x7f0000000000)={&(0x7f0000000140)={0x2d, 0x4101, @rand_addr=0x64010101}, 0xfe17, 0x0}, 0x300060c1) 4.777254995s ago: executing program 1 (id=6828): openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000}, 0x0, 0x0, 0x33e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003900)={0x5, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000003a00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000003a40)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x15, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.356420974s ago: executing program 1 (id=6840): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x41a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x200000000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x1, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/cgroup\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0x400000f, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0xb) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xc1842, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x801}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES32=r2], 0x9a) 3.987768054s ago: executing program 1 (id=6836): socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3a}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r4}, 0xc) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r6 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={r0, 0xe0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd4, &(0x7f00000013c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001400), &(0x7f0000001440), 0x8, 0x90, 0x8, 0x8, &(0x7f0000001480)}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001600), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRESOCT=r4, @ANYRESHEX=r5, @ANYRES32=r7, @ANYRES32=r2, @ANYBLOB="050000000100"/28, @ANYRESDEC=r7, @ANYRES32, @ANYRES64=r3], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001100)='GPL\x00'}, 0x48) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000001140)={&(0x7f0000001180)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f00000011c0)={r9, r8}) perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001300)="1a", 0x100000}], 0x1}, 0x0) sendmsg$kcm(r9, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x20010) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8051) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080)) 2.294881965s ago: executing program 4 (id=6848): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x10, &(0x7f0000000640)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.079303s ago: executing program 2 (id=6849): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000000240)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000001140)="e0b954126387c89b6f5bec000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$tipc(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)=""/203, 0xcb}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x5000000, &(0x7f0000000080)=[{&(0x7f00000000c0)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.04219514s ago: executing program 4 (id=6850): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000180)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x59}, [@ldst={0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x8, 0xb579, &(0x7f0000000200)=""/195}, 0x23) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000004) socketpair(0x1, 0x801, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000680)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000700)=[{&(0x7f00000007c0)="27050200340f3c0006000b2fb96dbcf706060000170000005f45f491bdd520c49d2f44ee162fd4b8bf7256da82f600102c21880b000000000100407400000006000000000000fdf6899500805db1", 0x4e}, {&(0x7f00000008c0)="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", 0xf35}], 0x2}, 0x9cdc2384056f4939) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80054) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40) 1.980133882s ago: executing program 0 (id=6851): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000440)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1.750635397s ago: executing program 0 (id=6852): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000180)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x59}, [@ldst={0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x8, 0xb579, &(0x7f0000000200)=""/195}, 0x23) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000004) socketpair(0x1, 0x801, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000680)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000700)=[{&(0x7f00000007c0)="27050200340f3c0006000b2fb96dbcf706060000170000005f45f491bdd520c49d2f44ee162fd4b8bf7256da82f600102c21880b000000000100407400000006000000000000fdf6899500805db1", 0x4e}, {&(0x7f00000008c0)="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", 0xf35}], 0x2}, 0x9cdc2384056f4939) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80054) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000a000000000000000100000d0a00000004000000000000000600000003000013080000000000000108000000b602000006000000050000004e0000000300000008000000830d000000005f00002e61"], 0x0, 0x66, 0x0, 0x8, 0x10}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40) 1.681328079s ago: executing program 2 (id=6853): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000f00)={0x0, 0xfd63, &(0x7f0000000140)=[{&(0x7f0000000000)="47f13f80585a160e4584a20b1f93cfb2c46e50bd5b240651dca27b546703a7dbf1e9f90b55a3fee78e636f5990092639f95da1fd6eb490197ab0ab40b7db93827ea124ba97dc835b1da4bfead1e4d5e29ea42568ad5fc7d4dd7de2cab39b52bcf6541ace413a4bf0bdfbeebaed28dd3c7764f2674a67062ecadd915b6771e2ef4a7929fdb20c1a9a331fff5127ace9a78ef679b6279b2e9fb98b7d99d2a8584f63f7ec988606143dfbcdf68e70"}, {&(0x7f00000000c0)="695d427dd38522c4623e270020b4784df0d5f2a1f120d4c358473d8da3a7aa195cbe48bd63389a7514b94f3d36110fda1a92b6a77648d581b7cceb5367b77122add017793fee07978c3c631e13196797111880c580cf1d9c3c"}]}, 0x4) 1.530444393s ago: executing program 4 (id=6854): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000100100200200000001000000001b000014000000000000001001000002"], 0x30}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000fc0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000001000)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000001040), 0x12) 1.372065806s ago: executing program 2 (id=6855): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x3, [@union={0x5, 0x4, 0x0, 0x5, 0x1, 0x81, [{0xa, 0x5, 0x1}, {0x3, 0x3, 0x1}, {0x7, 0x3, 0x8}, {0xa, 0x4, 0x3}]}, @restrict={0xb92, 0x0, 0x0, 0xb, 0x4}, @int={0x5, 0x0, 0x0, 0x1, 0x1, 0x23, 0x0, 0x7}, @volatile={0x9, 0x0, 0x0, 0x9, 0x4}, @restrict={0xd, 0x0, 0x0, 0xb, 0x1}, @var={0x9, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x61]}}, &(0x7f00000000c0)=""/242, 0x9b, 0xf2, 0x1, 0x54, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x4, &(0x7f00000008c0)=@framed={{}, [@generic={0x3f, 0x0, 0xd, 0x1}]}, &(0x7f0000000940)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x0, r0}, 0x94) 1.371135277s ago: executing program 0 (id=6856): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x2, &(0x7f00000001c0)={0x3, 0x2, &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r2}, 0xc) r3 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0xe, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="879e306e90b0db66d446648c4ac58a2c78869637894b07fe03c8de995dd2f1f8994bce4b926e60d8530cc27c47e97c4d625aeb200d84c9f334fe9b78320285203f222b2cc1ff8a561f8e695695e5f703c3d7ae21c860daede735f37daa4de75441ba7c958d4a18ae91d6c503c5ca19f86b2c4cd12adecf"], &(0x7f0000000800)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f0000000480), 0x4) 1.301272759s ago: executing program 2 (id=6857): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000001100)="89fe0000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4) 1.093743623s ago: executing program 2 (id=6858): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x11c044, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000700)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x27, 0xe, 0x0, &(0x7f00000007c0)="f8ad48e50fc46bdcc8ffffffff00", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000bc0)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x2000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x83fff8000}, 0x0, 0x32, 0x4, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x7, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800180001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) close(r1) 1.052221814s ago: executing program 4 (id=6859): openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000}, 0x0, 0x0, 0x33e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003900)={0x5, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000003a00)='GPL\x00'}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x15, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 979.673086ms ago: executing program 0 (id=6860): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x10, &(0x7f0000000640)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 714.685513ms ago: executing program 4 (id=6861): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000000240)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000001140)="e0b954126387c89b6f5bec000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$tipc(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)=""/203, 0xcb}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x5000000, &(0x7f0000000080)=[{&(0x7f00000000c0)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 509.761887ms ago: executing program 1 (id=6862): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000440)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 400.01781ms ago: executing program 2 (id=6863): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000180)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x59}, [@ldst={0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x8, 0xb579, &(0x7f0000000200)=""/195}, 0x23) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000004) socketpair(0x1, 0x801, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000680)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000700)=[{&(0x7f00000007c0)="27050200340f3c0006000b2fb96dbcf706060000170000005f45f491bdd520c49d2f44ee162fd4b8bf7256da82f600102c21880b000000000100407400000006000000000000fdf6899500805db1", 0x4e}, {&(0x7f00000008c0)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff88580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8cf811eee6448a7c2db438b06b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6b1082608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e30f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78877a072d12d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46889df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c618aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce25a36300ce07f304e75d285e914b3aec703969df969b2736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacafa4c8efafb73a2ab89bb58b0c20364a6ad9c7c3dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4d27b219628be8cdba7004d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c6a56b8b34b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac1f15471c5a2b8efe67bd4bea33c0ca36e2c4209026849de21c1da1057f353cc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e3ec902f3717cca0eca05e791c2b8c2b8988645afa2446d5218abce136c0dbbafb95e4f4727a29cc567b3f73d5dbc1aeee746653a7f5c445add24a9c1b67d1bfeec85d2a6478e80c3acdb9439aa46c8cf14a98ffa89790ef7a94b3146088566812e28ccbafb466772b7fbb98dcf1e792eb6d0de0829c3c49c5ecdeea3e80017324a0fe724565c4e7a242764e9012442cae44b57c7121889c044be05b5eca70efb649bb528e751f072af93ae2c5053fdce196cce158136f904cf64f2cb8becc2d024f5ec32a38d78b87a4dfe7c53769dadef890efd160eb662cedb18a756aed83edfb9efbbb3648eb399e61f80077e64b95eae9d17083aed05cfc2e148621e36be1f41d373c721a11804fce269c688b0c647d6e1083e336d1f7f90a7a080a83397773cc351531070af5c1a1418f28dce95c01052a314a9ebe39cb9cddb8e7855e58c4a636b7f6250ecad312ede18668130ab897dfc9adda67502444c03d92e330935295a35ea3e0306f25ca971300f782ae2f6e79a513732d22ef9b9bc41d17df3352a855cdd19b18f5abd6e6420f4f42f01750a64f6acdb6b46622fafebe3e913c64a1a6a59f980e97deae0dc83c126533f0630d7a28f21c3e0e38b32f3d5f1d44927fc34ed5c9ddb5be8eb936dbdcd327b63ea69d86c2da15cb834a18ee51a44f2da7b11d79486942fd04eade92fe5d93342970ca4cc73861b15facf97e9c53c15488c5630b17b9364c58652cfa6de0918327498ba8d6120d3be9139c51a6e9017525772397529ddd4fd1905614fd1cc7f1370a577ad10ec9ea742f9aedc9fee42c3df38f4b35ccb1cf8590eaf770b3f74af21f5119ac238e82e92c83321b06f106530abbbd321c3e1dc948accdc21a586ff37253ad1d0c5bfb51541f876be1b6e4f490046204b9edfe9a9721b9019a495d1efed10d4570f4c75ac56aa862f738b46cfe8899f6d92e862611b35be8931a2460dc646ed332b3046baf48613bbb543f4abda22d3d62a484665ba5bbf8fec1bb199b430a6e96cfad417a1644cc5f7f640004836c60f15a174eb7eb1750a71a141549f393c7d88b8729a33f841f7f8f2bd03dccaaa825f2e29105f6b4c11ac8e06bb3be9dfdecce66294a0be9dbc5f40123644fcac59ed0c968eb62fb14d111e900ad1c038f17d5471ab088f704de7db35753f818f55669a76e621b29d975253d177791e1434644a81b2b8bc4c8e147961b4f1b7f3e225571fecb10906957791b27d35a89e3ce84c91a2dc60aee460d8f41eb7b5e171516ef34d8c7dbbc8122cdeffa51b5a393d2cae7f69826d342d4d81b58ca7ddb0e688a15b39a00ef1aed5db337d1ab87e86f835663a4968c8bf5afd7cf80549a33b4025b8ea04ff3d9eac2b8ffd1155a504230103a68bd8b3c416a10d76cee236442a68393896587bc66c01a5f7f411000000000000000089d0bcbbacae99b925fb72994e1ef4240cddad2294a56bec6d6243b95b04345c215bd48a3aa89786ba39b4d2f5015d8bd038c32a7b0eb02a4eb5a640371d9b4af540eb99a1e26547cc214da21e9538754a802972411a0bf416707b95457d0b77daac9bdf27a82b9aa7992ad1d3815f9a56a746eefa6f7e1913b6e3e859b2cc7797adcae825b7aad17c11e66597042c327a6473489a9664c5ce0ff8b1ecfb691daa0bd50c17f4597826553686bc2ee08eaca8dd6f77c626691699141a698e5b517e02130587ee503c7b5f638cbf32166b0d4ebe9222b6c9d50fb3db9d1ab060c31aabeef52cd51e5cf485eecc741e37a47c4996068f1d4b25f182b9d7bee4bec5cb070d3cea2f9762a41bb8d9ec5896ebcb2b17ca82f29bcce456412d8ed531afda50d259fcb7794216b6a9a873b6c3c4493c0c6d3e6a4f81f3b40dcc745a4e2383c678c472b1d5bf02002992bfe893a5bc96824039da1ee3cf8593e7d616d62f6e3c3e2c4e0cc58d5445998cf5b1c91c2468b2571b118709668efbbe72911f1bfa96b97c32f71cd7071f4c729e88631a89b53dd4bae6ef9c4ed082916e267479195599e9871b26b92c6885ded29f990070fddc4d8535088ddc70d6e83f797b6fa2260a92602eb90800000001cb7394f0c90fb5913b2f8d8d24c8f1056920e1facbe643dd49d8983b277da7282a986c28d5468aed9a4730579a20346d35f78b6bd2cacb4b9237fbfb0b7a2314105ff3b074a0e340b904e715e99c501e1435c15eaa262893c2883c90f26d2ff91792d46e4d867b62570e0c1e4739b8ac4fff8f778960de1ae40d4c85c51e1c47040bb2caeaf0c71dbb67c30715b8c14d6921831d7678522eeed29444df421ee206ca3be20d1b5fd2d2baf832f08efef590290eea77f8f3ed00b39841421b61f1c0d01def54bec0348be2216a8dad60838f3ad3595a744edeb6202dbcbd9c73a126a79cbefa43c7db0493103c2aa8fecb5cde1773ad0cdd03f5b0cfb0270642a96a9e14d116e9140501df48cdbf725611b398eb2b9e93f8da49e601099e0b2e880a955205000000dd74ae9d664a1f2e932493b61634ab53a1e2f3bf56add0a7f09c16853814b03a4212b9a0119420948da26bb171b288a66a2f0a4063754c2910512aa1cead69b94b498b5d4c44ce0a4aaa7855ee1a3b7ca738756a00a435062ccb86a40cc01f666d372f323e087ef5db2bc2d17ed1f72db14c52ca6723ce92ada6ff0c4f498d42d4218a9f799a216facb7377a1532e0755b894bfc0ee99a4072ac54ee5727846631574f348bf650e7d54b0ef3a1b5cc8233e660a2615bb7401f6c23e08ff0ddb488b9d504fc42508449b8fdd70afb387016e8c9206482c334f37d26fa3bdb6063f8147db9363e22c4b43b89ba0f68d06646fc1eb74fec0be4f59a17b274e0db67b2c0398250da219c9caf7e0f6cb1f828b6f89a67cacfd0fe0132bd94261410f8d8d7eb819bc783b8e66a1786285e1e429b71ccc22f7f4c216001375c7a816719e29abc9865bcbd6f3c3132256cb5f0470223e2c685c9ebf635e316a12b35a429160d1c7688dbc3edcb1af64032177e41def01696e7100bbe", 0xf35}], 0x2}, 0x9cdc2384056f4939) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80054) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40) 344.621962ms ago: executing program 0 (id=6864): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000180)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x59}, [@ldst={0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x8, 0xb579, &(0x7f0000000200)=""/195}, 0x23) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000004) socketpair(0x1, 0x801, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000680)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000700)=[{&(0x7f00000007c0)="27050200340f3c0006000b2fb96dbcf706060000170000005f45f491bdd520c49d2f44ee162fd4b8bf7256da82f600102c21880b000000000100407400000006000000000000fdf6899500805db1", 0x4e}, {&(0x7f00000008c0)="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", 0xf35}], 0x2}, 0x9cdc2384056f4939) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80054) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000a000000000000000100000d0a00000004000000000000000600000003000013080000000000000108000000b602000006000000050000004e0000000300000008000000830d000000005f00002e61"], 0x0, 0x66, 0x0, 0x8, 0x10}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40) 289.704192ms ago: executing program 1 (id=6865): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcfe1eff00000000000000008500000041000000850000009e00000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x212c8611}, 0x50) 3.989059ms ago: executing program 1 (id=6866): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000100100200200000001000000001b000014000000000000001001000002"], 0x30}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@ifindex, 0xffffffffffffffff, 0xb, 0x2}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000140)='cpu<00||!') r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000fc0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000001000)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000001040), 0x12) 3.85221ms ago: executing program 4 (id=6867): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000100100200200000001000000001b000014000000000000001001000002"], 0x30}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000fc0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000001000)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000001040), 0x12) 0s ago: executing program 0 (id=6868): openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000}, 0x0, 0x0, 0x33e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003900)={0x5, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000003a00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000003a40)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x15, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): [ 1399.862270][T22634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.928822][T22634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1400.359085][T22634] hsr_slave_0: entered promiscuous mode [ 1400.437197][T22634] hsr_slave_1: entered promiscuous mode [ 1400.970238][T19262] Bluetooth: hci2: command tx timeout [ 1401.533685][T22724] netlink: 'syz.4.4788': attribute type 4 has an invalid length. [ 1401.605664][T22724] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4788'. [ 1401.620123][T22724] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1401.744584][ T9880] hsr_slave_0: left promiscuous mode [ 1401.793500][ T9880] hsr_slave_1: left promiscuous mode [ 1401.869829][ T9880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1401.889837][ T9880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1401.945779][ T9880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1401.954741][ T9880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1402.442015][ T9880] team0 (unregistering): Port device geneve1 removed [ 1403.000336][T19262] Bluetooth: hci2: command tx timeout [ 1403.435131][ T9880] team0 (unregistering): Port device team_slave_1 removed [ 1404.538918][ T9880] team0 (unregistering): Port device batadv0 removed [ 1406.232938][T22773] netlink: 'syz.2.4797': attribute type 4 has an invalid length. [ 1406.256795][T22772] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4796'. [ 1406.257842][T22773] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4797'. [ 1406.304319][T22772] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1406.312777][T22773] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1406.360289][T22634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1406.390252][T22634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1406.441016][T22634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1406.460986][T22634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1407.063887][T22634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1407.145636][T22634] 8021q: adding VLAN 0 to HW filter on device team0 [ 1407.184053][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.191307][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1407.279920][ T9880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.287766][ T9880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1408.358106][T22634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1408.677079][T22634] veth0_vlan: entered promiscuous mode [ 1408.748229][T22634] veth1_vlan: entered promiscuous mode [ 1408.941238][T22634] veth0_macvtap: entered promiscuous mode [ 1408.954550][T22818] netlink: 'syz.4.4807': attribute type 4 has an invalid length. [ 1408.984147][T22818] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4807'. [ 1409.029665][T22818] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1409.208238][T22634] veth1_macvtap: entered promiscuous mode [ 1409.314911][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.370096][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.390211][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.412904][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.433450][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.462095][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.530200][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.572531][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.624244][T22634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1409.674391][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1409.724954][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.760645][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1409.793203][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.820385][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1409.842034][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.873943][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1409.905889][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.938967][T22634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1410.016605][T22634] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.051902][T22634] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.083532][T22634] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.120956][T22634] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.356980][T22830] netlink: 'syz.4.4810': attribute type 5 has an invalid length. [ 1410.708022][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.760257][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.969106][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1411.007068][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1411.356819][T19262] Bluetooth: hci1: unexpected event 0x16 length: 151 > 6 [ 1412.070715][T22866] netlink: 'syz.4.4817': attribute type 4 has an invalid length. [ 1412.200761][T22866] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4817'. [ 1412.230375][T22866] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1413.019496][ T9359] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1413.030890][ T9359] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1413.039558][ T9359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1413.137927][ T9359] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1413.151007][ T9359] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1413.158398][ T9359] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1413.534731][ T1141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.667823][T22879] rxe_eth0 speed is unknown, defaulting to 1000 [ 1413.866892][ T1141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.985569][T22882] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4820'. [ 1414.029078][T22882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1414.368343][ T1141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.705208][ T1141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.242134][T19262] Bluetooth: hci0: command tx timeout [ 1416.572666][T22908] netlink: 'syz.4.4826': attribute type 4 has an invalid length. [ 1416.601648][T22908] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4826'. [ 1416.650732][T22908] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1416.709745][T22879] chnl_net:caif_netlink_parms(): no params data found [ 1417.272631][T22933] netlink: 'syz.0.4830': attribute type 5 has an invalid length. [ 1417.320601][T19262] Bluetooth: hci0: command tx timeout [ 1417.899160][T22879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.914069][T22879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.984304][T22879] bridge_slave_0: entered allmulticast mode [ 1418.011642][T22879] bridge_slave_0: entered promiscuous mode [ 1418.161527][T22879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.168771][T22879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.202781][T22879] bridge_slave_1: entered allmulticast mode [ 1418.239342][T22879] bridge_slave_1: entered promiscuous mode [ 1418.502572][T22879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.523488][T22879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.001109][T22879] team0: Port device team_slave_0 added [ 1419.034660][T22879] team0: Port device team_slave_1 added [ 1419.096612][T22947] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4831'. [ 1419.171511][T22947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1419.408643][T19262] Bluetooth: hci0: command tx timeout [ 1419.871544][T22879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.878607][T22879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.968562][T22879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1420.014883][T22879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1420.042521][T22879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1420.130625][T22879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.366841][T22972] netlink: 'syz.0.4837': attribute type 4 has an invalid length. [ 1420.421155][T22972] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4837'. [ 1420.654657][T22972] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1421.523655][T19262] Bluetooth: hci0: command tx timeout [ 1421.939200][T22879] hsr_slave_0: entered promiscuous mode [ 1422.055378][T22879] hsr_slave_1: entered promiscuous mode [ 1422.074770][ T9359] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1422.090463][T22879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1422.120523][T22879] Cannot create hsr debugfs directory [ 1422.491504][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1422.499018][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1422.578660][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1422.589694][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1422.623106][ T1141] bridge0: port 3(dummy0) entered disabled state [ 1422.633991][ T1141] bridge_slave_1: left allmulticast mode [ 1422.647142][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.732553][ T1141] bridge_slave_0: left promiscuous mode [ 1422.738492][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.326253][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.332738][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.391532][ T1141] team0 (unregistering): Port device geneve1 removed [ 1423.767615][ T1141] team0 (unregistering): Port device hsr_slave_0 removed [ 1424.165024][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 1424.972938][ T1141] team0 (unregistering): Port device batadv0 removed [ 1425.299215][T23009] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4843'. [ 1425.566206][T23018] netlink: 'syz.4.4846': attribute type 4 has an invalid length. [ 1425.592774][T23018] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4846'. [ 1425.603677][T23018] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1426.910347][T22879] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1426.933283][T22879] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1426.946908][T22879] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1426.970002][T22879] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1427.153982][T22879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.204255][T22879] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.220966][T14483] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.228175][T14483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.248496][T14483] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.255731][T14483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.447684][ T9359] Bluetooth: hci4: unexpected event 0x14 length: 151 > 6 [ 1427.681357][T23059] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4853'. [ 1427.941596][T23071] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4855'. [ 1427.997925][T23071] bridge_slave_1: default FDB implementation only supports local addresses [ 1428.039883][T23075] syzkaller0: entered promiscuous mode [ 1428.049778][T23075] syzkaller0: entered allmulticast mode [ 1428.201963][T22879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1428.350902][T22879] veth0_vlan: entered promiscuous mode [ 1428.386462][T22879] veth1_vlan: entered promiscuous mode [ 1428.483368][T22879] veth0_macvtap: entered promiscuous mode [ 1428.509366][T23088] FAULT_INJECTION: forcing a failure. [ 1428.509366][T23088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1428.554062][T22879] veth1_macvtap: entered promiscuous mode [ 1428.554816][T23088] CPU: 1 PID: 23088 Comm: syz.0.4859 Not tainted syzkaller #0 [ 1428.567549][T23088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1428.577666][T23088] Call Trace: [ 1428.580987][T23088] [ 1428.583949][T23088] dump_stack_lvl+0x18c/0x250 [ 1428.588685][T23088] ? show_regs_print_info+0x20/0x20 [ 1428.593936][T23088] ? load_image+0x420/0x420 [ 1428.598498][T23088] ? __might_fault+0xaa/0x120 [ 1428.603202][T23088] ? __lock_acquire+0x7eb0/0x7eb0 [ 1428.608272][T23088] should_fail_ex+0x394/0x4c0 [ 1428.613012][T23088] _copy_from_user+0x2f/0xe0 [ 1428.617649][T23088] ___sys_sendmsg+0x1c7/0x360 [ 1428.622398][T23088] ? get_pid_task+0x20/0x1e0 [ 1428.627046][T23088] ? __sys_sendmsg+0x2b0/0x2b0 [ 1428.631972][T23088] ? __lock_acquire+0x7eb0/0x7eb0 [ 1428.637051][T23088] __se_sys_sendmsg+0x1d0/0x2c0 [ 1428.641941][T23088] ? __x64_sys_sendmsg+0x80/0x80 [ 1428.646939][T23088] ? lockdep_hardirqs_on+0x98/0x150 [ 1428.652182][T23088] do_syscall_64+0x55/0xb0 [ 1428.656642][T23088] ? clear_bhb_loop+0x40/0x90 [ 1428.661351][T23088] ? clear_bhb_loop+0x40/0x90 [ 1428.666160][T23088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1428.672108][T23088] RIP: 0033:0x7f28aa19e559 [ 1428.676566][T23088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1428.696218][T23088] RSP: 002b:00007f28a83f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1428.704666][T23088] RAX: ffffffffffffffda RBX: 00007f28aa425fa0 RCX: 00007f28aa19e559 [ 1428.712676][T23088] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 1428.720698][T23088] RBP: 00007f28a83f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1428.728717][T23088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1428.736720][T23088] R13: 00007f28aa426038 R14: 00007f28aa425fa0 R15: 00007ffc0a34b448 [ 1428.744752][T23088] [ 1428.784441][T22879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1428.797503][T22879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.807731][T22879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1428.818484][T22879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.831949][T22879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1428.852752][ T9359] Bluetooth: hci1: unexpected event 0x12 length: 151 > 8 [ 1428.853961][T22879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.893307][T22879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1428.918201][T22879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.954599][T22879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1429.007839][T22879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1429.039149][T22879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.054624][T22879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1429.077710][T22879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.098309][T22879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1429.119411][T22879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.144596][T22879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1429.160214][T22879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.226711][T22879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1429.257991][T22879] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.289158][T22879] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.314478][T22879] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.336231][T22879] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.497676][T23103] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4864'. [ 1429.596510][ T9880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.630653][ T9880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.698699][ T9879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.727908][ T9879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.225027][T23128] netlink: 'syz.4.4869': attribute type 2 has an invalid length. [ 1430.242133][ T9359] Bluetooth: hci2: unexpected event 0x12 length: 151 > 8 [ 1430.267280][T23128] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4869'. [ 1431.122517][T23153] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4871'. [ 1431.177024][T23153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1431.228236][T23154] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4874'. [ 1431.804955][T23169] netlink: 'syz.0.4879': attribute type 21 has an invalid length. [ 1431.863482][T23169] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4879'. [ 1432.096078][ T9359] Bluetooth: hci0: unexpected event 0x12 length: 151 > 8 [ 1432.866965][T23200] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4886'. [ 1433.378775][T23214] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4888'. [ 1433.454541][T23214] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4888'. [ 1433.464965][T23211] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4888'. [ 1433.599818][T23203] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4884'. [ 1433.647913][T23203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1434.396340][T23243] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4897'. [ 1434.841185][T23253] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4900'. [ 1435.882282][T23268] netlink: 'syz.4.4903': attribute type 4 has an invalid length. [ 1435.910744][T23268] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1436.544716][T23277] __nla_validate_parse: 3 callbacks suppressed [ 1436.544738][T23277] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4901'. [ 1436.704137][T23277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1437.720677][T23287] netlink: 'syz.4.4907': attribute type 4 has an invalid length. [ 1437.754787][T23287] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4907'. [ 1437.794120][T23287] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1437.862269][T23295] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4909'. [ 1438.179430][T23303] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4910'. [ 1438.210372][T23303] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4910'. [ 1438.254233][T23301] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4910'. [ 1438.531789][T23313] netlink: 'syz.0.4913': attribute type 4 has an invalid length. [ 1438.539696][T23313] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4913'. [ 1438.593520][T23313] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1440.511772][T23321] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4914'. [ 1440.579651][T23321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1440.935529][ T9359] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1441.068065][T23353] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4921'. [ 1441.142777][T23353] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4921'. [ 1441.216658][T23355] netlink: 'syz.1.4923': attribute type 4 has an invalid length. [ 1441.305530][T23355] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1441.781412][T23368] __nla_validate_parse: 2 callbacks suppressed [ 1441.781429][T23368] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4927'. [ 1445.036230][T23383] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4931'. [ 1445.233790][T23383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1445.505739][ T9359] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1446.449549][T23404] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4936'. [ 1446.590326][T23410] netlink: 'syz.4.4937': attribute type 4 has an invalid length. [ 1446.598351][T23410] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4937'. [ 1446.670488][T23410] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1448.741119][T23431] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4945'. [ 1448.780671][T23431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1449.811097][T23441] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4947'. [ 1451.004314][T23453] netlink: 'syz.2.4951': attribute type 4 has an invalid length. [ 1451.040610][T23453] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4951'. [ 1451.181146][T23453] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1452.093199][T23475] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4960'. [ 1452.586262][T23470] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4957'. [ 1452.652013][T23470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1454.166691][T23492] netlink: 'syz.4.4964': attribute type 4 has an invalid length. [ 1454.230539][T23492] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4964'. [ 1454.239706][T23492] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1454.972494][T23500] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4966'. [ 1455.016389][T23500] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4966'. [ 1455.090477][T23501] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4966'. [ 1455.181482][T23502] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4966'. [ 1456.126090][T23511] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4969'. [ 1456.968528][T23528] netlink: 'syz.1.4975': attribute type 4 has an invalid length. [ 1457.000486][T23528] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4975'. [ 1457.009656][T23528] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1457.788656][T23547] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4980'. [ 1458.527303][T23536] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4984'. [ 1458.580527][T23536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1459.081793][T23563] netlink: 'syz.2.4988': attribute type 4 has an invalid length. [ 1459.116980][T23563] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4988'. [ 1459.137893][T23563] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1459.789818][T23570] FAULT_INJECTION: forcing a failure. [ 1459.789818][T23570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1459.865932][T23570] CPU: 0 PID: 23570 Comm: syz.4.4990 Not tainted syzkaller #0 [ 1459.873492][T23570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1459.883610][T23570] Call Trace: [ 1459.886941][T23570] [ 1459.890463][T23570] dump_stack_lvl+0x18c/0x250 [ 1459.895197][T23570] ? show_regs_print_info+0x20/0x20 [ 1459.900446][T23570] ? load_image+0x420/0x420 [ 1459.905020][T23570] ? __might_fault+0xaa/0x120 [ 1459.909925][T23570] ? __lock_acquire+0x7eb0/0x7eb0 [ 1459.915009][T23570] should_fail_ex+0x394/0x4c0 [ 1459.919781][T23570] _copy_from_user+0x2f/0xe0 [ 1459.924425][T23570] ___sys_sendmsg+0x1c7/0x360 [ 1459.929183][T23570] ? __sys_sendmsg+0x2b0/0x2b0 [ 1459.934031][T23570] __se_sys_sendmsg+0x1d0/0x2c0 [ 1459.938941][T23570] ? __mutex_lock+0x988/0xc80 [ 1459.943652][T23570] ? __x64_sys_sendmsg+0x80/0x80 [ 1459.948641][T23570] ? lockdep_hardirqs_on+0x98/0x150 [ 1459.953907][T23570] do_syscall_64+0x55/0xb0 [ 1459.958353][T23570] ? clear_bhb_loop+0x40/0x90 [ 1459.963059][T23570] ? clear_bhb_loop+0x40/0x90 [ 1459.967769][T23570] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1459.973702][T23570] RIP: 0033:0x7f5e0d59e559 [ 1459.978138][T23570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1459.997769][T23570] RSP: 002b:00007f5e0e440028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1460.006215][T23570] RAX: ffffffffffffffda RBX: 00007f5e0d825fa0 RCX: 00007f5e0d59e559 [ 1460.014217][T23570] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 000000000000000a [ 1460.022221][T23570] RBP: 00007f5e0e440090 R08: 0000000000000000 R09: 0000000000000000 [ 1460.030246][T23570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1460.038252][T23570] R13: 00007f5e0d826038 R14: 00007f5e0d825fa0 R15: 00007ffc97acf0c8 [ 1460.046267][T23570] [ 1460.138792][T23578] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4993'. [ 1460.148277][T23578] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4993'. [ 1460.159333][T23576] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4993'. [ 1461.700514][T23582] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4995'. [ 1461.750301][T23582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1461.938509][T23601] netlink: 'syz.2.5000': attribute type 4 has an invalid length. [ 1461.957193][T23601] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5000'. [ 1461.988112][T23601] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1462.025169][T23607] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5002'. [ 1462.142298][T23607] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5002'. [ 1462.219341][T23605] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5002'. [ 1464.746378][T23635] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5011'. [ 1464.801222][T23635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1464.857066][T23647] netlink: 'syz.2.5013': attribute type 4 has an invalid length. [ 1464.898335][T23647] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5013'. [ 1464.925419][T23647] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1467.213935][T23678] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5022'. [ 1467.366910][T23678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1468.131325][T23697] netlink: 'syz.4.5026': attribute type 4 has an invalid length. [ 1468.306490][T23697] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5026'. [ 1468.399695][T23697] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1468.520563][T23687] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5023'. [ 1468.594258][T23687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1468.750659][T23704] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5027'. [ 1468.811809][T23704] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5027'. [ 1468.829690][T23702] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5027'. [ 1469.112425][T23695] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5025'. [ 1469.248959][T23695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1470.913980][T23714] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5040'. [ 1470.962246][T23714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1471.394829][ T9359] Bluetooth: hci1: unexpected event 0x16 length: 151 > 6 [ 1471.671123][T23727] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5034'. [ 1471.810272][T23727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1471.943410][T23742] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5038'. [ 1472.107743][T23744] netlink: 'syz.4.5039': attribute type 4 has an invalid length. [ 1472.141388][T23744] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1473.432794][T23753] syzkaller0: entered promiscuous mode [ 1473.438371][T23753] syzkaller0: entered allmulticast mode [ 1473.818699][ T9359] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1475.216435][T23778] __nla_validate_parse: 3 callbacks suppressed [ 1475.216453][T23778] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5050'. [ 1480.280560][T23778] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5050'. [ 1481.449758][T23805] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.5056'. [ 1482.219584][ T9359] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1482.230354][T23822] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5062'. [ 1482.264139][T23822] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5062'. [ 1482.297915][T23819] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5062'. [ 1482.386900][T23823] netlink: 'syz.1.5064': attribute type 4 has an invalid length. [ 1482.443942][T23823] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5064'. [ 1482.506597][T23823] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1482.926120][T23813] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5059'. [ 1482.949020][T23813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1483.731912][T23837] FAULT_INJECTION: forcing a failure. [ 1483.731912][T23837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1483.840417][T23837] CPU: 0 PID: 23837 Comm: syz.0.5068 Not tainted syzkaller #0 [ 1483.848010][T23837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1483.858583][T23837] Call Trace: [ 1483.861939][T23837] [ 1483.865030][T23837] dump_stack_lvl+0x18c/0x250 [ 1483.869798][T23837] ? show_regs_print_info+0x20/0x20 [ 1483.875081][T23837] ? load_image+0x420/0x420 [ 1483.879683][T23837] ? __might_fault+0xaa/0x120 [ 1483.884453][T23837] ? __lock_acquire+0x7eb0/0x7eb0 [ 1483.889585][T23837] should_fail_ex+0x394/0x4c0 [ 1483.894387][T23837] _copy_from_iter+0x1cd/0x1290 [ 1483.899350][T23837] ? rcu_is_watching+0x15/0xb0 [ 1483.904416][T23837] ? copyout_mc+0x70/0x70 [ 1483.909045][T23837] ? __virt_addr_valid+0x10c/0x380 [ 1483.914263][T23837] ? __virt_addr_valid+0x10c/0x380 [ 1483.919466][T23837] ? __virt_addr_valid+0x10c/0x380 [ 1483.924710][T23837] ? __check_object_size+0x4fc/0xa40 [ 1483.930098][T23837] netlink_sendmsg+0x76b/0xbf0 [ 1483.935045][T23837] ? netlink_getsockopt+0x590/0x590 [ 1483.940342][T23837] ? apparmor_socket_sendmsg+0x170/0x330 [ 1483.946076][T23837] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1483.951463][T23837] ? security_socket_sendmsg+0x80/0xa0 [ 1483.957020][T23837] ? netlink_getsockopt+0x590/0x590 [ 1483.962331][T23837] ____sys_sendmsg+0x61b/0x980 [ 1483.967216][T23837] ? __asan_memset+0x22/0x40 [ 1483.971904][T23837] ? __sys_sendmsg_sock+0x30/0x30 [ 1483.977009][T23837] ? __import_iovec+0x5f2/0x850 [ 1483.981979][T23837] ? import_iovec+0x73/0xa0 [ 1483.986629][T23837] ___sys_sendmsg+0x2a6/0x360 [ 1483.991423][T23837] ? __sys_sendmsg+0x2b0/0x2b0 [ 1483.996784][T23837] ? __lock_acquire+0x7eb0/0x7eb0 [ 1484.002071][T23837] __se_sys_sendmsg+0x1d0/0x2c0 [ 1484.007116][T23837] ? __x64_sys_sendmsg+0x80/0x80 [ 1484.012312][T23837] ? lockdep_hardirqs_on+0x98/0x150 [ 1484.017617][T23837] do_syscall_64+0x55/0xb0 [ 1484.022204][T23837] ? clear_bhb_loop+0x40/0x90 [ 1484.026972][T23837] ? clear_bhb_loop+0x40/0x90 [ 1484.032400][T23837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1484.038458][T23837] RIP: 0033:0x7f28aa19e559 [ 1484.042968][T23837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1484.063279][T23837] RSP: 002b:00007f28a83f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1484.073184][T23837] RAX: ffffffffffffffda RBX: 00007f28aa425fa0 RCX: 00007f28aa19e559 [ 1484.081958][T23837] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 000000000000000d [ 1484.091349][T23837] RBP: 00007f28a83f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1484.099837][T23837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1484.108638][T23837] R13: 00007f28aa426038 R14: 00007f28aa425fa0 R15: 00007ffc0a34b448 [ 1484.118142][T23837] [ 1484.376165][T23830] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5066'. [ 1484.392555][T23830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1484.764542][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.771079][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.190616][T23855] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5076'. [ 1486.478642][T23855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1486.856686][T23879] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5083'. [ 1491.005301][T23908] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5092'. [ 1491.071531][T23908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1491.960365][T23913] Bluetooth: hci4: command 0x0406 tx timeout [ 1494.334792][ T9359] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1495.347204][ T9359] Bluetooth: hci4: unexpected event 0x14 length: 151 > 6 [ 1495.810395][T23983] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5107'. [ 1495.984869][T23983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1496.080260][T23969] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5111'. [ 1496.130434][T23969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1497.042374][ T9359] Bluetooth: hci1: unexpected event 0x16 length: 151 > 6 [ 1497.394324][T24009] netlink: 'syz.1.5124': attribute type 9 has an invalid length. [ 1497.416769][T24008] netlink: 'syz.1.5124': attribute type 2 has an invalid length. [ 1497.451149][T24009] netlink: 463 bytes leftover after parsing attributes in process `syz.1.5124'. [ 1497.480484][T24008] netlink: 119 bytes leftover after parsing attributes in process `syz.1.5124'. [ 1497.571703][T24011] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5125'. [ 1498.561467][T24024] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5129'. [ 1498.580434][T24024] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5129'. [ 1498.600851][T24023] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5129'. [ 1499.154695][T24017] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5127'. [ 1499.217969][T24017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1499.753693][ T9359] Bluetooth: hci1: unexpected event 0x16 length: 151 > 6 [ 1499.939613][T24047] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5135'. [ 1502.135689][T24061] __nla_validate_parse: 3 callbacks suppressed [ 1502.135711][T24061] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5142'. [ 1502.169047][T24061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1502.928543][ T9359] Bluetooth: hci1: unexpected event 0x16 length: 151 > 6 [ 1503.775186][T24087] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5148'. [ 1504.147540][T24072] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5144'. [ 1504.189298][T24072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1504.511890][T24094] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5150'. [ 1504.567144][T24094] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5150'. [ 1504.607958][T24093] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5150'. [ 1504.964460][T24098] netlink: 'syz.2.5151': attribute type 2 has an invalid length. [ 1505.030646][T24098] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5151'. [ 1506.290156][T24102] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5154'. [ 1506.400076][T24102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1506.749660][ T9359] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1507.848115][T24136] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5161'. [ 1507.900596][T24136] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5161'. [ 1507.929997][T24135] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5161'. [ 1508.279179][T24142] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5171'. [ 1508.314311][T24142] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5171'. [ 1508.344401][T24141] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5171'. [ 1508.743610][T24144] netlink: 'syz.0.5164': attribute type 2 has an invalid length. [ 1508.768920][T24144] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5164'. [ 1509.146596][ T9359] Bluetooth: hci2: unexpected event 0x14 length: 151 > 6 [ 1509.237966][T24139] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5162'. [ 1509.302020][T24139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1509.822088][ T9359] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1510.709020][T24160] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5167'. [ 1510.918274][T24160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1511.050439][T24175] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5175'. [ 1511.655361][T24183] netlink: 'syz.4.5177': attribute type 2 has an invalid length. [ 1512.523470][ T9359] Bluetooth: hci1: unexpected event 0x14 length: 151 > 6 [ 1512.529523][ T9359] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1513.609504][T24203] syzkaller0: entered promiscuous mode [ 1513.753579][T24203] syzkaller0: entered allmulticast mode [ 1515.791148][T24209] __nla_validate_parse: 2 callbacks suppressed [ 1515.791167][T24209] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5185'. [ 1517.560411][T23913] Bluetooth: hci2: command 0x0406 tx timeout [ 1518.559330][T24200] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5184'. [ 1518.568575][T24200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1518.585614][T24209] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5185'. [ 1518.840392][T24215] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5188'. [ 1519.487229][ T9359] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1519.938044][T24257] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5196'. [ 1519.987936][T24257] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5196'. [ 1520.033222][T24253] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5196'. [ 1520.634320][T24262] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5197'. [ 1520.715904][T24262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1521.837928][ T9359] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1521.981507][T24288] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5207'. [ 1522.009186][T24288] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5207'. [ 1522.025212][T24287] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5207'. [ 1523.533482][T24301] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5211'. [ 1523.582895][T24301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1524.425264][T24315] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1524.434645][T24315] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1524.443876][T24315] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1524.453232][T24315] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1524.462494][T24315] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1525.130638][T24325] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5217'. [ 1525.180489][T24325] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5217'. [ 1525.234683][T24324] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5217'. [ 1528.481468][T24337] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5221'. [ 1530.291739][T24359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5226'. [ 1530.320266][T24359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5226'. [ 1530.340558][T24358] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5226'. [ 1530.421283][T24355] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5222'. [ 1530.432312][T24355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1530.756179][T24365] netlink: 'syz.0.5227': attribute type 21 has an invalid length. [ 1530.845391][T24365] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5227'. [ 1531.338288][T24373] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5231'. [ 1531.525234][T24368] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5237'. [ 1531.537274][T24368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1532.364064][T24382] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1532.373378][T24382] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1532.382711][T24382] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1532.391949][T24382] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1532.401268][T24382] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1532.410525][T24382] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1532.419707][T24382] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1532.428980][T24382] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1532.969332][ T9359] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1533.328287][T24405] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5242'. [ 1534.784184][T24413] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5243'. [ 1535.301352][ T9359] Bluetooth: hci1: unexpected event 0x16 length: 151 > 6 [ 1535.702086][T24436] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5252'. [ 1538.040557][T23913] Bluetooth: hci0: command 0x0406 tx timeout [ 1538.314484][T24463] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5258'. [ 1538.377393][T24463] net_ratelimit: 1785 callbacks suppressed [ 1538.377413][T24463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1538.477320][ T9359] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1538.928601][T24486] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5264'. [ 1538.995779][T24482] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5263'. [ 1539.034999][T24486] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5264'. [ 1539.052362][T24484] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5264'. [ 1539.310016][T24490] netlink: 'syz.4.5266': attribute type 21 has an invalid length. [ 1539.360653][T24490] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5266'. [ 1540.826523][ T9359] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1541.286442][T24527] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5276'. [ 1541.405873][T24527] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5276'. [ 1541.427750][T24515] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5274'. [ 1541.446760][T24515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1541.472763][T24526] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5276'. [ 1541.855461][T24533] netlink: 'syz.4.5279': attribute type 21 has an invalid length. [ 1541.886941][T24533] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5279'. [ 1541.920382][T24531] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5278'. [ 1543.226364][T24559] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5286'. [ 1543.276254][T24559] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5286'. [ 1543.331538][T24558] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5286'. [ 1543.401934][ T9359] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1543.483830][T24562] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5287'. [ 1545.003543][T24564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1546.031764][ T9359] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1546.209700][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.223714][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.990197][T24615] __nla_validate_parse: 5 callbacks suppressed [ 1546.990218][T24615] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5304'. [ 1548.201668][T24635] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5309'. [ 1548.250450][T24635] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5309'. [ 1548.270037][T24631] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5309'. [ 1548.653669][T24622] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5306'. [ 1548.750808][T24622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1548.865113][T24640] netlink: 'syz.4.5310': attribute type 10 has an invalid length. [ 1549.511487][ T9359] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1550.481295][T24655] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5315'. [ 1551.029137][T24665] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5318'. [ 1551.076413][T24665] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5318'. [ 1551.112297][T24664] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5318'. [ 1551.529589][T24671] netlink: 'syz.4.5320': attribute type 21 has an invalid length. [ 1551.573186][T24671] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5320'. [ 1552.692138][ T9359] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1553.378509][T24679] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5321'. [ 1553.523426][T24679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1554.688633][T24698] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5327'. [ 1554.930555][T24701] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5328'. [ 1554.939658][T24701] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5328'. [ 1555.000847][T24700] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5328'. [ 1556.017075][T24718] netlink: 'syz.4.5334': attribute type 21 has an invalid length. [ 1556.071033][T24718] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5334'. [ 1556.333964][ T9359] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1557.304895][T24707] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5330'. [ 1557.555918][T24707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1557.696206][T24736] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5338'. [ 1557.753337][T24736] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5338'. [ 1557.785143][T24724] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5335'. [ 1557.817549][T24724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1558.496521][T24747] __nla_validate_parse: 4 callbacks suppressed [ 1558.496545][T24747] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5339'. [ 1559.244001][ T9359] Bluetooth: hci1: unexpected event 0x16 length: 151 > 6 [ 1560.845596][T24781] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5350'. [ 1560.958081][T24764] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5347'. [ 1561.028639][T24764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1561.089385][T24781] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5350'. [ 1561.130721][T24780] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5350'. [ 1561.170247][T24771] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5349'. [ 1561.231222][T24771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1562.326119][T24794] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5355'. [ 1563.228995][ T9359] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1567.625241][T24816] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5359'. [ 1567.664884][T24816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1568.277340][T24840] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5366'. [ 1569.130571][T24854] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5370'. [ 1569.206390][T24854] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5370'. [ 1569.274950][T24849] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5370'. [ 1572.536615][T24860] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5373'. [ 1572.620786][T24860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1575.844979][T24913] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5388'. [ 1577.502414][T24924] netlink: 212912 bytes leftover after parsing attributes in process `syz.4.5392'. [ 1577.539837][T24924] openvswitch: netlink: IP tunnel dst address not specified [ 1577.718616][T24919] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5389'. [ 1577.784623][T24919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1578.194527][T24941] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5399'. [ 1581.144579][ T9359] Bluetooth: hci2: unexpected event 0x14 length: 151 > 6 [ 1581.500539][T24962] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5406'. [ 1581.598300][T24962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1581.999955][T24979] netlink: 'syz.0.5412': attribute type 21 has an invalid length. [ 1582.074702][T24979] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5412'. [ 1583.331846][T24996] netlink: 'syz.4.5419': attribute type 10 has an invalid length. [ 1583.528279][ T9359] Bluetooth: hci4: unexpected event 0x14 length: 151 > 6 [ 1584.802815][T25017] netlink: 'syz.4.5426': attribute type 21 has an invalid length. [ 1584.920684][T25017] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5426'. [ 1585.144502][T25018] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5423'. [ 1585.172123][T25018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1585.843173][T25029] netlink: 'syz.2.5430': attribute type 10 has an invalid length. [ 1585.919716][T25029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.941954][T25029] bridge_slave_1: left allmulticast mode [ 1585.947892][T25029] bridge_slave_1: left promiscuous mode [ 1585.963950][T25029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.176135][T25029] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1586.251514][T25031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1586.259220][T25031] IPv6: NLM_F_CREATE should be set when creating new route [ 1586.268069][T25031] IPv6: NLM_F_CREATE should be set when creating new route [ 1586.276134][T25031] IPv6: NLM_F_CREATE should be set when creating new route [ 1586.862609][T25040] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5433'. [ 1586.907837][T25040] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5433'. [ 1587.006336][T25039] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5433'. [ 1589.083316][T25047] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5436'. [ 1589.106621][T25047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1589.326550][T25062] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5441'. [ 1589.568848][T25064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1589.577363][T25064] IPv6: NLM_F_CREATE should be set when creating new route [ 1589.586760][T25064] IPv6: NLM_F_CREATE should be set when creating new route [ 1589.594658][T25064] IPv6: NLM_F_CREATE should be set when creating new route [ 1589.634905][T25068] netlink: 'syz.2.5442': attribute type 9 has an invalid length. [ 1589.697651][T25068] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5442'. [ 1589.879371][T25072] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5444'. [ 1589.938729][T25072] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5444'. [ 1589.982509][T25070] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5444'. [ 1590.219983][T25076] netlink: 'syz.0.5446': attribute type 10 has an invalid length. [ 1590.253558][T25076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.376891][T25076] bridge_slave_1: left allmulticast mode [ 1590.385918][T25076] bridge_slave_1: left promiscuous mode [ 1590.416028][T25076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.480561][T25076] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1591.121664][T25092] netlink: 'syz.4.5452': attribute type 1 has an invalid length. [ 1591.334680][T25097] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5453'. [ 1592.270576][T25106] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5456'. [ 1592.355821][T25106] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5456'. [ 1592.407502][T25105] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5456'. [ 1592.781676][T25093] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5450'. [ 1592.917358][T25093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1593.027187][T25122] netlink: 'syz.1.5459': attribute type 9 has an invalid length. [ 1593.071260][T25115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1593.078984][T25115] IPv6: NLM_F_CREATE should be set when creating new route [ 1593.087194][T25115] IPv6: NLM_F_CREATE should be set when creating new route [ 1593.095376][T25115] IPv6: NLM_F_CREATE should be set when creating new route [ 1593.130265][T25122] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5459'. [ 1593.180677][T25124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5463'. [ 1594.786210][T25153] FAULT_INJECTION: forcing a failure. [ 1594.786210][T25153] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.809489][T25153] CPU: 1 PID: 25153 Comm: syz.1.5472 Not tainted syzkaller #0 [ 1594.817049][T25153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1594.827147][T25153] Call Trace: [ 1594.830463][T25153] [ 1594.833431][T25153] dump_stack_lvl+0x18c/0x250 [ 1594.838177][T25153] ? show_regs_print_info+0x20/0x20 [ 1594.843427][T25153] ? load_image+0x420/0x420 [ 1594.847991][T25153] ? __might_sleep+0xe0/0xe0 [ 1594.852631][T25153] ? __lock_acquire+0x7eb0/0x7eb0 [ 1594.857701][T25153] should_fail_ex+0x394/0x4c0 [ 1594.862435][T25153] should_failslab+0x9/0x20 [ 1594.866972][T25153] slab_pre_alloc_hook+0x59/0x300 [ 1594.872026][T25153] ? sock_kmalloc+0x96/0xf0 [ 1594.876555][T25153] ? sock_kmalloc+0x96/0xf0 [ 1594.881082][T25153] __kmem_cache_alloc_node+0x53/0x250 [ 1594.886500][T25153] ? sock_kmalloc+0x96/0xf0 [ 1594.891041][T25153] __kmalloc+0xa7/0x240 [ 1594.895235][T25153] sock_kmalloc+0x96/0xf0 [ 1594.899591][T25153] ____sys_sendmsg+0x1d4/0x980 [ 1594.904411][T25153] ? __asan_memset+0x22/0x40 [ 1594.909048][T25153] ? __sys_sendmsg_sock+0x30/0x30 [ 1594.914116][T25153] ? __import_iovec+0x3fa/0x850 [ 1594.919017][T25153] ? import_iovec+0x73/0xa0 [ 1594.923562][T25153] ___sys_sendmsg+0x2a6/0x360 [ 1594.928284][T25153] ? get_pid_task+0x20/0x1e0 [ 1594.932908][T25153] ? __sys_sendmsg+0x2b0/0x2b0 [ 1594.937716][T25153] ? __lock_acquire+0x7eb0/0x7eb0 [ 1594.942786][T25153] __se_sys_sendmsg+0x1d0/0x2c0 [ 1594.947801][T25153] ? __x64_sys_sendmsg+0x80/0x80 [ 1594.952818][T25153] ? lockdep_hardirqs_on+0x98/0x150 [ 1594.958074][T25153] do_syscall_64+0x55/0xb0 [ 1594.962529][T25153] ? clear_bhb_loop+0x40/0x90 [ 1594.967237][T25153] ? clear_bhb_loop+0x40/0x90 [ 1594.971949][T25153] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1594.977889][T25153] RIP: 0033:0x7ff25539e559 [ 1594.982337][T25153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1595.001979][T25153] RSP: 002b:00007ff2561eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1595.010441][T25153] RAX: ffffffffffffffda RBX: 00007ff255625fa0 RCX: 00007ff25539e559 [ 1595.018439][T25153] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 1595.026440][T25153] RBP: 00007ff2561eb090 R08: 0000000000000000 R09: 0000000000000000 [ 1595.034456][T25153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1595.042450][T25153] R13: 00007ff255626038 R14: 00007ff255625fa0 R15: 00007ffda9e80bc8 [ 1595.050455][T25153] [ 1595.849533][T25167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1595.857334][T25167] IPv6: NLM_F_CREATE should be set when creating new route [ 1595.865541][T25167] IPv6: NLM_F_CREATE should be set when creating new route [ 1595.873292][T25167] IPv6: NLM_F_CREATE should be set when creating new route [ 1596.696162][T25160] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5474'. [ 1596.732900][T25160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1597.097455][T25185] netlink: 'syz.1.5482': attribute type 4 has an invalid length. [ 1597.105706][T25185] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5482'. [ 1597.122641][T25185] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1597.725911][T25197] netlink: 'syz.1.5486': attribute type 3 has an invalid length. [ 1597.810394][T25197] netlink: 'syz.1.5486': attribute type 1 has an invalid length. [ 1597.869734][T25197] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5486'. [ 1598.442563][T25205] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5490'. [ 1599.426536][T25207] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5491'. [ 1599.470914][T25207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1599.593402][T25220] netlink: 'syz.4.5493': attribute type 4 has an invalid length. [ 1599.630419][T25220] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5493'. [ 1599.639652][T25220] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1601.790816][T25241] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5502'. [ 1601.854213][T25241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1602.085167][T25252] netlink: 'syz.1.5504': attribute type 4 has an invalid length. [ 1602.120622][T25252] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5504'. [ 1602.129768][T25252] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1604.207174][T25287] netlink: 'syz.4.5518': attribute type 4 has an invalid length. [ 1604.261325][T25287] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5518'. [ 1604.350324][T25287] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1604.821192][T25280] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5515'. [ 1604.863807][T25280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1606.738021][T25319] netlink: 'syz.2.5529': attribute type 4 has an invalid length. [ 1606.770460][T25319] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5529'. [ 1606.779667][T25319] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1607.810775][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.817492][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.426396][T25321] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5530'. [ 1608.466869][T25321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1609.560524][T25358] netlink: 'syz.0.5543': attribute type 4 has an invalid length. [ 1609.583610][T25358] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5543'. [ 1609.607451][T25358] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1610.346541][ T9359] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1611.191883][T25369] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5548'. [ 1611.277848][T25369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1611.854627][T25385] netlink: 'syz.4.5552': attribute type 1 has an invalid length. [ 1611.900373][T25385] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.5552'. [ 1612.018832][T25388] netlink: 'syz.1.5555': attribute type 4 has an invalid length. [ 1612.062094][T25388] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5555'. [ 1612.146808][T25388] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1613.016622][ T9359] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1613.763207][T25401] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5560'. [ 1613.833841][T25401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1614.153864][T25418] netlink: 'syz.2.5565': attribute type 4 has an invalid length. [ 1614.171536][T25418] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5565'. [ 1614.190978][T25418] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1615.322401][ T9359] Bluetooth: hci1: unexpected event 0x16 length: 151 > 6 [ 1615.538750][T25439] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5572'. [ 1615.985331][T25445] netlink: 'syz.2.5575': attribute type 4 has an invalid length. [ 1616.000816][T25445] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5575'. [ 1616.020542][T25445] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1617.404907][ T9359] Bluetooth: hci1: unexpected event 0x16 length: 151 > 6 [ 1617.970587][T25466] netlink: 'syz.2.5585': attribute type 4 has an invalid length. [ 1618.030296][T25466] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5585'. [ 1618.070296][T25466] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1618.704078][T23913] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1618.713669][T23913] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1618.722612][T23913] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1618.740218][T23913] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1618.751729][T23913] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1618.759502][T23913] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1619.226095][T24234] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.297592][T25475] rxe_eth0 speed is unknown, defaulting to 1000 [ 1619.530458][T24234] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.751558][T24234] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.882825][T24234] batman_adv: batadv0: Removing interface: netdevsim0 [ 1619.904545][T24234] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.840400][T23913] Bluetooth: hci1: command tx timeout [ 1621.066575][T25475] chnl_net:caif_netlink_parms(): no params data found [ 1621.356983][T25501] netlink: 'syz.2.5594': attribute type 4 has an invalid length. [ 1621.365461][T25501] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5594'. [ 1621.385899][T25501] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1622.093564][T25516] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5595'. [ 1622.894370][T25475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.920251][T23913] Bluetooth: hci1: command tx timeout [ 1622.940356][T25475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.948577][T25475] bridge_slave_0: entered allmulticast mode [ 1622.990940][T25475] bridge_slave_0: entered promiscuous mode [ 1623.022300][T25475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1623.050532][T25475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.057851][T25475] bridge_slave_1: entered allmulticast mode [ 1623.094818][T25475] bridge_slave_1: entered promiscuous mode [ 1623.473555][T25475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1623.525805][T25475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1623.805015][T25543] netlink: 'syz.2.5602': attribute type 4 has an invalid length. [ 1623.832635][T25543] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5602'. [ 1623.873710][T25543] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1624.008663][T25475] team0: Port device team_slave_0 added [ 1624.074933][T25475] team0: Port device team_slave_1 added [ 1624.381569][T25475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1624.388615][T25475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1624.485599][T25475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1624.731154][T25475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1624.738587][T25475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1624.830206][T25475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1625.000494][T23913] Bluetooth: hci1: command tx timeout [ 1625.715463][T25475] hsr_slave_0: entered promiscuous mode [ 1625.759600][T25475] hsr_slave_1: entered promiscuous mode [ 1625.807297][T25475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1625.836231][T25475] Cannot create hsr debugfs directory [ 1625.851960][T25569] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5606'. [ 1626.890477][T24234] hsr_slave_0: left promiscuous mode [ 1626.942669][T24234] hsr_slave_1: left promiscuous mode [ 1626.974363][T24234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1626.992990][T24234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1627.054899][T24234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1627.062724][T24234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1627.080893][T23913] Bluetooth: hci1: command tx timeout [ 1627.103954][T24234] veth1_vlan: left promiscuous mode [ 1627.109625][T24234] veth0_vlan: left promiscuous mode [ 1628.610927][T24234] team0 (unregistering): Port device 7Ã2®| removed [ 1628.672270][T24234] team0 (unregistering): Port device team_slave_0 removed [ 1629.107744][T24234] team0 (unregistering): Port device batadv0 removed [ 1629.289024][T25596] netlink: 'syz.0.5612': attribute type 4 has an invalid length. [ 1629.315766][T25596] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5612'. [ 1629.339180][T25596] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1630.015140][T23913] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1630.697841][T25603] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5614'. [ 1630.740334][T25603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1631.410787][T25606] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5616'. [ 1631.472595][T25606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1631.999907][T25475] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1632.104432][T25475] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1632.275431][T25475] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1632.400398][T25475] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1632.898954][T25475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1632.976708][T25475] 8021q: adding VLAN 0 to HW filter on device team0 [ 1633.013032][T25646] netlink: 'syz.2.5622': attribute type 4 has an invalid length. [ 1633.048857][T25646] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5622'. [ 1633.059601][T25646] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1633.094581][T24221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.101900][T24221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1633.144338][T24221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.151615][T24221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1633.833163][T23913] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1633.985402][T25475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1635.145701][T25475] veth0_vlan: entered promiscuous mode [ 1635.260528][T25475] veth1_vlan: entered promiscuous mode [ 1635.461184][T25475] veth0_macvtap: entered promiscuous mode [ 1635.498433][T25475] veth1_macvtap: entered promiscuous mode [ 1635.582716][T25475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1635.620666][T25475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1635.651064][T25475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1635.690164][T25475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1635.720380][T25475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1635.760283][T25475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1635.800506][T25475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1635.830158][T25475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1635.865596][T25475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1635.913908][T25475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1635.960929][T25475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1635.990111][T25475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1636.040286][T25475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1636.081701][T25475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1636.110201][T25475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1636.145558][T25475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1636.177457][T25475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1636.209993][T25475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1636.291870][T25475] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.335147][T25475] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.380149][T25475] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.388943][T25475] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.710294][T24221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.718192][T24221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.853047][T24234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.898923][T24234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1637.063367][T25707] netlink: 'syz.1.5631': attribute type 4 has an invalid length. [ 1637.101074][T25707] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5631'. [ 1637.176826][T25707] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1637.444187][T25697] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5630'. [ 1637.505976][T25697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1640.145128][T25756] netlink: 'syz.4.5641': attribute type 4 has an invalid length. [ 1640.260777][T25756] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5641'. [ 1640.415737][T25756] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1640.581568][T23913] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1642.161123][T25779] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5644'. [ 1642.276155][T25779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1644.312766][T25822] netlink: 'syz.4.5654': attribute type 4 has an invalid length. [ 1644.400363][T25822] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5654'. [ 1644.409545][T25822] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1644.593670][T23913] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1647.273254][T25863] netlink: 'syz.4.5667': attribute type 4 has an invalid length. [ 1647.314619][T25863] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5667'. [ 1647.350246][T23913] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1647.371763][T25863] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1648.772548][T25880] netlink: 'syz.0.5682': attribute type 21 has an invalid length. [ 1648.790370][T25880] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5682'. [ 1650.654911][T23913] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1650.982059][T25904] netlink: 'syz.0.5684': attribute type 21 has an invalid length. [ 1651.013628][T25904] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5684'. [ 1651.345435][T25909] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5686'. [ 1651.371469][T25908] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5686'. [ 1651.546576][T23913] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1652.741570][T23913] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1653.149400][T25933] netlink: 'syz.1.5695': attribute type 21 has an invalid length. [ 1653.189355][T25933] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5695'. [ 1653.320549][T25938] netlink: 'syz.2.5697': attribute type 10 has an invalid length. [ 1653.328481][T25938] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5697'. [ 1653.391206][T25938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1654.383397][T23913] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1654.792781][T25958] netlink: 'syz.0.5707': attribute type 21 has an invalid length. [ 1654.860390][T25958] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5707'. [ 1655.351235][T25969] netlink: 'syz.0.5709': attribute type 4 has an invalid length. [ 1655.360997][T25969] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5709'. [ 1655.370878][T25969] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1655.412283][T25956] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5705'. [ 1655.430997][T25956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1656.095666][T25984] netlink: 'syz.4.5716': attribute type 21 has an invalid length. [ 1656.111808][T25984] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5716'. [ 1656.167780][T23913] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1656.228276][T23913] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1656.321263][T25986] FAULT_INJECTION: forcing a failure. [ 1656.321263][T25986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1656.374220][T25986] CPU: 0 PID: 25986 Comm: syz.4.5717 Not tainted syzkaller #0 [ 1656.381783][T25986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1656.391888][T25986] Call Trace: [ 1656.395233][T25986] [ 1656.398204][T25986] dump_stack_lvl+0x18c/0x250 [ 1656.402936][T25986] ? show_regs_print_info+0x20/0x20 [ 1656.408625][T25986] ? load_image+0x420/0x420 [ 1656.413193][T25986] ? __lock_acquire+0x7eb0/0x7eb0 [ 1656.418283][T25986] ? snprintf+0xe9/0x140 [ 1656.422592][T25986] should_fail_ex+0x394/0x4c0 [ 1656.427339][T25986] _copy_to_user+0x2f/0xa0 [ 1656.431814][T25986] simple_read_from_buffer+0xe7/0x150 [ 1656.437278][T25986] proc_fail_nth_read+0x1e8/0x260 [ 1656.442374][T25986] ? proc_fault_inject_write+0x360/0x360 [ 1656.448082][T25986] ? fsnotify_perm+0x271/0x5e0 [ 1656.452918][T25986] ? proc_fault_inject_write+0x360/0x360 [ 1656.458630][T25986] vfs_read+0x298/0x990 [ 1656.462861][T25986] ? kernel_read+0x1e0/0x1e0 [ 1656.467518][T25986] ? __fget_files+0x28/0x460 [ 1656.472171][T25986] ? __fget_files+0x3fc/0x460 [ 1656.476924][T25986] ? __fdget_pos+0x2a3/0x330 [ 1656.481594][T25986] ? ksys_read+0x74/0x260 [ 1656.485994][T25986] ksys_read+0x151/0x260 [ 1656.490309][T25986] ? vfs_write+0x9a0/0x9a0 [ 1656.494793][T25986] ? trace_sys_enter+0x1f/0x80 [ 1656.499630][T25986] do_syscall_64+0x55/0xb0 [ 1656.504097][T25986] ? clear_bhb_loop+0x40/0x90 [ 1656.508827][T25986] ? clear_bhb_loop+0x40/0x90 [ 1656.513563][T25986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1656.519527][T25986] RIP: 0033:0x7f6bff55ed8e [ 1656.523994][T25986] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1656.543742][T25986] RSP: 002b:00007f6c003defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1656.552191][T25986] RAX: ffffffffffffffda RBX: 00007f6c003df6c0 RCX: 00007f6bff55ed8e [ 1656.560291][T25986] RDX: 000000000000000f RSI: 00007f6c003df0a0 RDI: 0000000000000008 [ 1656.568287][T25986] RBP: 00007f6c003df090 R08: 0000000000000000 R09: 0000000000000000 [ 1656.576282][T25986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1656.584281][T25986] R13: 00007f6bff826038 R14: 00007f6bff825fa0 R15: 00007ffeeffc5b88 [ 1656.592315][T25986] [ 1656.783697][T23913] Bluetooth: hci2: unexpected event 0x14 length: 151 > 6 [ 1657.020324][T25995] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.5721'. [ 1657.423834][T25999] netlink: 'syz.2.5723': attribute type 4 has an invalid length. [ 1657.589405][T25999] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5723'. [ 1657.700472][T25999] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1658.310988][T23913] Bluetooth: hci1: unexpected event 0x16 length: 151 > 6 [ 1658.490690][T26001] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5724'. [ 1658.564639][T26001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1658.619665][T23913] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1658.965756][T23913] Bluetooth: hci1: unexpected event 0x14 length: 151 > 6 [ 1659.651579][T26027] netlink: 'syz.0.5735': attribute type 4 has an invalid length. [ 1659.748697][T26028] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5734'. [ 1659.780713][T26027] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5735'. [ 1659.843531][T26027] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1660.450398][T23913] Bluetooth: hci1: unexpected event 0x16 length: 151 > 6 [ 1661.277466][T26048] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5738'. [ 1661.380937][T26048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1662.146866][T26047] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5741'. [ 1662.158069][T23913] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1662.158454][T26047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1662.717288][T26069] netlink: 'syz.1.5748': attribute type 4 has an invalid length. [ 1662.745800][T26069] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5748'. [ 1662.790252][T26069] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1663.053155][T23913] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1664.221284][T23913] Bluetooth: hci1: unexpected event 0x16 length: 151 > 6 [ 1664.676519][T23913] Bluetooth: hci0: unexpected event 0x14 length: 151 > 6 [ 1665.256700][T23913] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1665.654630][T26111] netlink: 'syz.2.5763': attribute type 4 has an invalid length. [ 1665.687927][T26111] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5763'. [ 1665.711279][T26111] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1666.662767][T23913] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1667.408021][T23913] Bluetooth: hci2: unexpected event 0x14 length: 151 > 6 [ 1668.156672][T26154] netlink: 'syz.2.5774': attribute type 4 has an invalid length. [ 1668.200686][T26154] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5774'. [ 1668.230168][T26154] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1669.150731][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.163025][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.275311][T26157] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5776'. [ 1669.333132][T26157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1671.439722][T26204] FAULT_INJECTION: forcing a failure. [ 1671.439722][T26204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1671.529437][T26204] CPU: 1 PID: 26204 Comm: syz.0.5787 Not tainted syzkaller #0 [ 1671.536982][T26204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1671.547079][T26204] Call Trace: [ 1671.550395][T26204] [ 1671.553363][T26204] dump_stack_lvl+0x18c/0x250 [ 1671.558081][T26204] ? show_regs_print_info+0x20/0x20 [ 1671.563315][T26204] ? load_image+0x420/0x420 [ 1671.567877][T26204] ? __might_fault+0xaa/0x120 [ 1671.572599][T26204] ? __lock_acquire+0x7eb0/0x7eb0 [ 1671.577678][T26204] should_fail_ex+0x394/0x4c0 [ 1671.582431][T26204] _copy_from_user+0x2f/0xe0 [ 1671.587080][T26204] __sys_bpf+0x23e/0x890 [ 1671.591381][T26204] ? bpf_link_show_fdinfo+0x560/0x560 [ 1671.596827][T26204] ? lock_chain_count+0x20/0x20 [ 1671.601733][T26204] __x64_sys_bpf+0x7c/0x90 [ 1671.606195][T26204] do_syscall_64+0x55/0xb0 [ 1671.610655][T26204] ? clear_bhb_loop+0x40/0x90 [ 1671.615384][T26204] ? clear_bhb_loop+0x40/0x90 [ 1671.620208][T26204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1671.626166][T26204] RIP: 0033:0x7f28aa19e559 [ 1671.630619][T26204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1671.650260][T26204] RSP: 002b:00007f28a83d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1671.658714][T26204] RAX: ffffffffffffffda RBX: 00007f28aa426090 RCX: 00007f28aa19e559 [ 1671.666800][T26204] RDX: 0000000000000050 RSI: 00002000000009c0 RDI: 000000000000000a [ 1671.674819][T26204] RBP: 00007f28a83d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1671.682822][T26204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1671.690825][T26204] R13: 00007f28aa426128 R14: 00007f28aa426090 R15: 00007ffc0a34b448 [ 1671.698838][T26204] [ 1671.757010][T23913] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1673.844829][T23913] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1675.184507][T26240] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5802'. [ 1675.250853][T26240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1676.712664][T23913] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1676.798741][T26273] netlink: 'syz.4.5812': attribute type 27 has an invalid length. [ 1678.572531][T23913] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1679.778959][T26321] FAULT_INJECTION: forcing a failure. [ 1679.778959][T26321] name failslab, interval 1, probability 0, space 0, times 0 [ 1679.871237][T26321] CPU: 1 PID: 26321 Comm: syz.2.5830 Not tainted syzkaller #0 [ 1679.878766][T26321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1679.888854][T26321] Call Trace: [ 1679.892171][T26321] [ 1679.895146][T26321] dump_stack_lvl+0x18c/0x250 [ 1679.899875][T26321] ? verify_lock_unused+0x140/0x140 [ 1679.905114][T26321] ? show_regs_print_info+0x20/0x20 [ 1679.910338][T26321] ? load_image+0x420/0x420 [ 1679.914893][T26321] should_fail_ex+0x394/0x4c0 [ 1679.919618][T26321] should_failslab+0x9/0x20 [ 1679.924188][T26321] slab_pre_alloc_hook+0x59/0x300 [ 1679.929262][T26321] kmem_cache_alloc+0x5a/0x2c0 [ 1679.934083][T26321] ? skb_clone+0x1eb/0x370 [ 1679.938552][T26321] skb_clone+0x1eb/0x370 [ 1679.942837][T26321] ? pfkey_broadcast_one+0x7d/0x340 [ 1679.948084][T26321] pfkey_broadcast_one+0x9b/0x340 [ 1679.953153][T26321] ? pfkey_broadcast+0x39b/0x3e0 [ 1679.958152][T26321] pfkey_broadcast+0x3a8/0x3e0 [ 1679.962952][T26321] ? pfkey_broadcast+0x48/0x3e0 [ 1679.967838][T26321] pfkey_flush+0x15c/0x360 [ 1679.972388][T26321] ? pfkey_register+0x890/0x890 [ 1679.977282][T26321] ? kmem_cache_free+0xf8/0x290 [ 1679.982216][T26321] pfkey_sendmsg+0xcdc/0x11a0 [ 1679.986972][T26321] ? pfkey_release+0x340/0x340 [ 1679.991772][T26321] ? aa_sk_perm+0x83c/0x970 [ 1679.996355][T26321] ? aa_sock_msg_perm+0x94/0x150 [ 1680.001344][T26321] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1680.006944][T26321] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1680.012274][T26321] ? security_socket_sendmsg+0x80/0xa0 [ 1680.017779][T26321] ? pfkey_release+0x340/0x340 [ 1680.022582][T26321] ____sys_sendmsg+0x61b/0x980 [ 1680.027400][T26321] ? __asan_memset+0x22/0x40 [ 1680.032039][T26321] ? __sys_sendmsg_sock+0x30/0x30 [ 1680.037121][T26321] ? __import_iovec+0x5f2/0x850 [ 1680.042040][T26321] ? import_iovec+0x73/0xa0 [ 1680.046620][T26321] ___sys_sendmsg+0x2a6/0x360 [ 1680.051350][T26321] ? get_pid_task+0x20/0x1e0 [ 1680.055992][T26321] ? __sys_sendmsg+0x2b0/0x2b0 [ 1680.060842][T26321] ? __lock_acquire+0x7eb0/0x7eb0 [ 1680.065939][T26321] __se_sys_sendmsg+0x1d0/0x2c0 [ 1680.070829][T26321] ? perf_trace_preemptirq_template+0x269/0x330 [ 1680.077123][T26321] ? __x64_sys_sendmsg+0x80/0x80 [ 1680.082136][T26321] ? lockdep_hardirqs_on+0x98/0x150 [ 1680.087392][T26321] do_syscall_64+0x55/0xb0 [ 1680.091942][T26321] ? clear_bhb_loop+0x40/0x90 [ 1680.096684][T26321] ? clear_bhb_loop+0x40/0x90 [ 1680.101410][T26321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1680.107366][T26321] RIP: 0033:0x7f1d3a79e559 [ 1680.111943][T26321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1680.131594][T26321] RSP: 002b:00007f1d3b63a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1680.140051][T26321] RAX: ffffffffffffffda RBX: 00007f1d3aa25fa0 RCX: 00007f1d3a79e559 [ 1680.148069][T26321] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 1680.156092][T26321] RBP: 00007f1d3b63a090 R08: 0000000000000000 R09: 0000000000000000 [ 1680.164115][T26321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1680.172123][T26321] R13: 00007f1d3aa26038 R14: 00007f1d3aa25fa0 R15: 00007fffb181de58 [ 1680.180143][T26321] [ 1680.899531][T23913] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1682.047188][T26355] FAULT_INJECTION: forcing a failure. [ 1682.047188][T26355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1682.172404][T26355] CPU: 0 PID: 26355 Comm: syz.4.5842 Not tainted syzkaller #0 [ 1682.179966][T26355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1682.190067][T26355] Call Trace: [ 1682.193394][T26355] [ 1682.196365][T26355] dump_stack_lvl+0x18c/0x250 [ 1682.201126][T26355] ? show_regs_print_info+0x20/0x20 [ 1682.206384][T26355] ? load_image+0x420/0x420 [ 1682.210950][T26355] ? __might_fault+0xaa/0x120 [ 1682.215694][T26355] ? __lock_acquire+0x7eb0/0x7eb0 [ 1682.220805][T26355] should_fail_ex+0x394/0x4c0 [ 1682.225568][T26355] _copy_from_user+0x2f/0xe0 [ 1682.230216][T26355] ____sys_sendmsg+0x329/0x980 [ 1682.235048][T26355] ? __sys_sendmsg_sock+0x30/0x30 [ 1682.240124][T26355] ? __import_iovec+0x3fa/0x850 [ 1682.245045][T26355] ? import_iovec+0x73/0xa0 [ 1682.249613][T26355] ___sys_sendmsg+0x2a6/0x360 [ 1682.254343][T26355] ? get_pid_task+0x20/0x1e0 [ 1682.258988][T26355] ? __sys_sendmsg+0x2b0/0x2b0 [ 1682.263832][T26355] ? __lock_acquire+0x7eb0/0x7eb0 [ 1682.268953][T26355] __se_sys_sendmsg+0x1d0/0x2c0 [ 1682.273861][T26355] ? __x64_sys_sendmsg+0x80/0x80 [ 1682.278876][T26355] ? lockdep_hardirqs_on+0x98/0x150 [ 1682.284129][T26355] do_syscall_64+0x55/0xb0 [ 1682.288618][T26355] ? clear_bhb_loop+0x40/0x90 [ 1682.293337][T26355] ? clear_bhb_loop+0x40/0x90 [ 1682.298156][T26355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1682.304114][T26355] RIP: 0033:0x7f6bff59e559 [ 1682.308575][T26355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1682.328229][T26355] RSP: 002b:00007f6c003df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1682.336692][T26355] RAX: ffffffffffffffda RBX: 00007f6bff825fa0 RCX: 00007f6bff59e559 [ 1682.344721][T26355] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 1682.352730][T26355] RBP: 00007f6c003df090 R08: 0000000000000000 R09: 0000000000000000 [ 1682.361189][T26355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1682.369211][T26355] R13: 00007f6bff826038 R14: 00007f6bff825fa0 R15: 00007ffeeffc5b88 [ 1682.377252][T26355] [ 1683.104109][T26351] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5841'. [ 1683.233589][T26351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1685.048013][T23913] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1685.374310][T26391] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5855'. [ 1685.433817][T26391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1685.955115][T26417] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.5864'. [ 1687.729397][T26456] FAULT_INJECTION: forcing a failure. [ 1687.729397][T26456] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.830078][T26456] CPU: 1 PID: 26456 Comm: syz.4.5881 Not tainted syzkaller #0 [ 1687.837713][T26456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1687.847815][T26456] Call Trace: [ 1687.851139][T26456] [ 1687.854106][T26456] dump_stack_lvl+0x18c/0x250 [ 1687.858839][T26456] ? show_regs_print_info+0x20/0x20 [ 1687.864108][T26456] ? load_image+0x420/0x420 [ 1687.868686][T26456] ? __might_sleep+0xe0/0xe0 [ 1687.873328][T26456] ? __lock_acquire+0x7eb0/0x7eb0 [ 1687.878401][T26456] ? __lock_acquire+0x135d/0x7eb0 [ 1687.883476][T26456] should_fail_ex+0x394/0x4c0 [ 1687.888214][T26456] should_failslab+0x9/0x20 [ 1687.892771][T26456] slab_pre_alloc_hook+0x59/0x300 [ 1687.897848][T26456] kmem_cache_alloc_node+0x5e/0x310 [ 1687.903102][T26456] ? __alloc_skb+0x103/0x2c0 [ 1687.907758][T26456] __alloc_skb+0x103/0x2c0 [ 1687.912224][T26456] alloc_skb_with_frags+0xcd/0x7a0 [ 1687.917402][T26456] ? mark_lock+0x94/0x320 [ 1687.921804][T26456] ? mark_lock+0x94/0x320 [ 1687.926187][T26456] sock_alloc_send_pskb+0x883/0x9a0 [ 1687.931451][T26456] ? sock_kzfree_s+0x50/0x50 [ 1687.936091][T26456] ? verify_lock_unused+0x140/0x140 [ 1687.941340][T26456] ? dev_get_by_index+0x22/0x2d0 [ 1687.946320][T26456] ? dev_get_by_index+0x22/0x2d0 [ 1687.951335][T26456] packet_sendmsg+0x2f9c/0x4a30 [ 1687.956251][T26456] ? aa_sk_perm+0x970/0x970 [ 1687.960836][T26456] ? __might_sleep+0xe0/0xe0 [ 1687.965506][T26456] ? verify_lock_unused+0x140/0x140 [ 1687.970766][T26456] ? aa_sk_perm+0x83c/0x970 [ 1687.975335][T26456] ? packet_getsockopt+0xad0/0xad0 [ 1687.980508][T26456] ? tomoyo_del_acl+0x2a0/0x2f0 [ 1687.985411][T26456] ? aa_sock_msg_perm+0x94/0x150 [ 1687.990420][T26456] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1687.996109][T26456] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1688.001443][T26456] ? security_socket_sendmsg+0x80/0xa0 [ 1688.007039][T26456] ? packet_getsockopt+0xad0/0xad0 [ 1688.012210][T26456] ____sys_sendmsg+0x61b/0x980 [ 1688.017059][T26456] ? __asan_memset+0x22/0x40 [ 1688.021703][T26456] ? __sys_sendmsg_sock+0x30/0x30 [ 1688.026778][T26456] ? __import_iovec+0x5f2/0x850 [ 1688.031700][T26456] ? import_iovec+0x73/0xa0 [ 1688.036277][T26456] ___sys_sendmsg+0x2a6/0x360 [ 1688.041002][T26456] ? get_pid_task+0x20/0x1e0 [ 1688.045655][T26456] ? __sys_sendmsg+0x2b0/0x2b0 [ 1688.050523][T26456] ? __lock_acquire+0x7eb0/0x7eb0 [ 1688.055621][T26456] __se_sys_sendmsg+0x1d0/0x2c0 [ 1688.060522][T26456] ? __x64_sys_sendmsg+0x80/0x80 [ 1688.065533][T26456] ? lockdep_hardirqs_on+0x98/0x150 [ 1688.070782][T26456] do_syscall_64+0x55/0xb0 [ 1688.075241][T26456] ? clear_bhb_loop+0x40/0x90 [ 1688.079957][T26456] ? clear_bhb_loop+0x40/0x90 [ 1688.084662][T26456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1688.090603][T26456] RIP: 0033:0x7f6bff59e559 [ 1688.095061][T26456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1688.114727][T26456] RSP: 002b:00007f6c003df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1688.123196][T26456] RAX: ffffffffffffffda RBX: 00007f6bff825fa0 RCX: 00007f6bff59e559 [ 1688.131341][T26456] RDX: 00000000000480c0 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1688.139369][T26456] RBP: 00007f6c003df090 R08: 0000000000000000 R09: 0000000000000000 [ 1688.147396][T26456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1688.155428][T26456] R13: 00007f6bff826038 R14: 00007f6bff825fa0 R15: 00007ffeeffc5b88 [ 1688.163464][T26456] [ 1688.458671][T26440] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5875'. [ 1688.501581][T26440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1688.868508][T23913] Bluetooth: hci1: unexpected event 0x10 length: 151 > 1 [ 1688.870324][T23913] Bluetooth: hci1: hardware error 0x00 [ 1690.577729][T26496] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.5895'. [ 1690.963711][T26504] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5896'. [ 1691.208183][T26504] team0: Port device team_slave_0 removed [ 1691.226273][T26504] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1691.400331][T23913] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1692.486167][T23913] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1693.065647][T26542] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5907'. [ 1693.376235][T26542] team0: Port device team_slave_0 removed [ 1693.414995][T26542] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1694.091894][T23913] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1694.505079][T23913] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1694.557183][T26573] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5921'. [ 1695.838220][T23913] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1696.208911][T26601] wg2: entered promiscuous mode [ 1696.224349][T26601] wg2: entered allmulticast mode [ 1697.169556][T26636] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5946'. [ 1697.192700][T26636] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1697.737868][T23913] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1698.131081][T26663] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5957'. [ 1698.281349][T26663] team0: Port device team_slave_0 removed [ 1698.297139][T26663] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1698.930442][T23913] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1699.074700][T26682] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5964'. [ 1699.251915][T26682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1699.760668][T23913] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1700.395660][T23913] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1702.651261][T26746] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5985'. [ 1702.765254][T26746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1703.797210][T23913] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1706.949264][T26796] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6004'. [ 1706.984895][T26796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1707.998658][T26822] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6012'. [ 1708.091491][T26822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1708.792475][T26844] FAULT_INJECTION: forcing a failure. [ 1708.792475][T26844] name failslab, interval 1, probability 0, space 0, times 0 [ 1708.904282][T26844] CPU: 1 PID: 26844 Comm: syz.2.6019 Not tainted syzkaller #0 [ 1708.911862][T26844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1708.921973][T26844] Call Trace: [ 1708.925286][T26844] [ 1708.928256][T26844] dump_stack_lvl+0x18c/0x250 [ 1708.932980][T26844] ? show_regs_print_info+0x20/0x20 [ 1708.938208][T26844] ? load_image+0x420/0x420 [ 1708.942759][T26844] ? __might_sleep+0xe0/0xe0 [ 1708.947391][T26844] ? __lock_acquire+0x7eb0/0x7eb0 [ 1708.952483][T26844] should_fail_ex+0x394/0x4c0 [ 1708.957234][T26844] should_failslab+0x9/0x20 [ 1708.961814][T26844] slab_pre_alloc_hook+0x59/0x300 [ 1708.966875][T26844] ? __lock_acquire+0x7eb0/0x7eb0 [ 1708.971947][T26844] ? kvmalloc_node+0x70/0x180 [ 1708.976678][T26844] ? kvmalloc_node+0x70/0x180 [ 1708.981407][T26844] __kmem_cache_alloc_node+0x53/0x250 [ 1708.986843][T26844] ? __schedule_delayed_monitor_work+0x200/0x200 [ 1708.993231][T26844] ? kvmalloc_node+0x70/0x180 [ 1708.997982][T26844] __kmalloc_node+0xa6/0x240 [ 1709.002720][T26844] kvmalloc_node+0x70/0x180 [ 1709.007285][T26844] bpf_test_run_xdp_live+0x1c2/0x1b30 [ 1709.012695][T26844] ? 0xffffffffa00052c0 [ 1709.016886][T26844] ? 0xffffffffa00052c0 [ 1709.021169][T26844] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 1709.027108][T26844] ? xdp_convert_md_to_buff+0x330/0x330 [ 1709.032725][T26844] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1709.039004][T26844] ? _copy_from_user+0xa5/0xe0 [ 1709.043819][T26844] ? bpf_test_init+0x119/0x140 [ 1709.048652][T26844] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1709.054146][T26844] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 1709.059570][T26844] ? __lock_acquire+0x7eb0/0x7eb0 [ 1709.064640][T26844] ? dev_put+0x80/0x80 [ 1709.068763][T26844] ? dev_put+0x80/0x80 [ 1709.072880][T26844] bpf_prog_test_run+0x31f/0x390 [ 1709.077877][T26844] __sys_bpf+0x49d/0x890 [ 1709.082168][T26844] ? bpf_link_show_fdinfo+0x560/0x560 [ 1709.087596][T26844] ? lock_chain_count+0x20/0x20 [ 1709.092532][T26844] __x64_sys_bpf+0x7c/0x90 [ 1709.097001][T26844] do_syscall_64+0x55/0xb0 [ 1709.101456][T26844] ? clear_bhb_loop+0x40/0x90 [ 1709.106176][T26844] ? clear_bhb_loop+0x40/0x90 [ 1709.110900][T26844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1709.116836][T26844] RIP: 0033:0x7f1d3a79e559 [ 1709.121296][T26844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1709.140947][T26844] RSP: 002b:00007f1d3b63a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1709.149412][T26844] RAX: ffffffffffffffda RBX: 00007f1d3aa25fa0 RCX: 00007f1d3a79e559 [ 1709.157433][T26844] RDX: 0000000000000050 RSI: 0000200000000800 RDI: 000000000000000a [ 1709.165444][T26844] RBP: 00007f1d3b63a090 R08: 0000000000000000 R09: 0000000000000000 [ 1709.173453][T26844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1709.181463][T26844] R13: 00007f1d3aa26038 R14: 00007f1d3aa25fa0 R15: 00007fffb181de58 [ 1709.189489][T26844] [ 1709.219700][T26853] netlink: 'syz.0.6023': attribute type 9 has an invalid length. [ 1709.264739][T26853] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6023'. [ 1709.504333][T26856] netlink: 'syz.0.6023': attribute type 10 has an invalid length. [ 1709.718283][T26856] team0: Device hsr_slave_0 failed to register rx_handler [ 1710.618543][T26874] FAULT_INJECTION: forcing a failure. [ 1710.618543][T26874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1710.657011][T26874] CPU: 0 PID: 26874 Comm: syz.4.6030 Not tainted syzkaller #0 [ 1710.664545][T26874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1710.674640][T26874] Call Trace: [ 1710.677950][T26874] [ 1710.680921][T26874] dump_stack_lvl+0x18c/0x250 [ 1710.685643][T26874] ? show_regs_print_info+0x20/0x20 [ 1710.690873][T26874] ? load_image+0x420/0x420 [ 1710.695428][T26874] ? __lock_acquire+0x7eb0/0x7eb0 [ 1710.700499][T26874] ? snprintf+0xe9/0x140 [ 1710.704788][T26874] should_fail_ex+0x394/0x4c0 [ 1710.709527][T26874] _copy_to_user+0x2f/0xa0 [ 1710.713999][T26874] simple_read_from_buffer+0xe7/0x150 [ 1710.719422][T26874] proc_fail_nth_read+0x1e8/0x260 [ 1710.724507][T26874] ? proc_fault_inject_write+0x360/0x360 [ 1710.730200][T26874] ? fsnotify_perm+0x271/0x5e0 [ 1710.735022][T26874] ? proc_fault_inject_write+0x360/0x360 [ 1710.740712][T26874] vfs_read+0x298/0x990 [ 1710.744932][T26874] ? kernel_read+0x1e0/0x1e0 [ 1710.749604][T26874] ? __fget_files+0x28/0x460 [ 1710.754245][T26874] ? __fget_files+0x3fc/0x460 [ 1710.758978][T26874] ? __fdget_pos+0x2a3/0x330 [ 1710.763630][T26874] ? ksys_read+0x74/0x260 [ 1710.768028][T26874] ksys_read+0x151/0x260 [ 1710.772352][T26874] ? vfs_write+0x9a0/0x9a0 [ 1710.776835][T26874] ? lockdep_hardirqs_on+0x98/0x150 [ 1710.782089][T26874] do_syscall_64+0x55/0xb0 [ 1710.786576][T26874] ? clear_bhb_loop+0x40/0x90 [ 1710.791305][T26874] ? clear_bhb_loop+0x40/0x90 [ 1710.796034][T26874] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1710.801984][T26874] RIP: 0033:0x7f6bff55ed8e [ 1710.806452][T26874] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1710.826369][T26874] RSP: 002b:00007f6c003defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1710.834867][T26874] RAX: ffffffffffffffda RBX: 00007f6c003df6c0 RCX: 00007f6bff55ed8e [ 1710.842904][T26874] RDX: 000000000000000f RSI: 00007f6c003df0a0 RDI: 0000000000000003 [ 1710.850956][T26874] RBP: 00007f6c003df090 R08: 0000000000000000 R09: 0000000000000000 [ 1710.858990][T26874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1710.867010][T26874] R13: 00007f6bff826038 R14: 00007f6bff825fa0 R15: 00007ffeeffc5b88 [ 1710.875040][T26874] [ 1711.259117][T26865] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6027'. [ 1711.301538][T26865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1711.734599][T26887] tap0: tun_chr_ioctl cmd 1074025675 [ 1711.760140][T26887] tap0: persist enabled [ 1711.767664][T26887] tap0: tun_chr_ioctl cmd 1074025675 [ 1711.785186][T26887] tap0: persist enabled [ 1714.494593][T26914] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6044'. [ 1714.605104][T26914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1717.927062][T26950] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6057'. [ 1718.008536][T26950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1720.374338][T26999] tap0: tun_chr_ioctl cmd 1074025675 [ 1720.379713][T26999] tap0: persist enabled [ 1720.424020][T26999] tap0: tun_chr_ioctl cmd 1074025675 [ 1720.429872][T26999] tap0: persist enabled [ 1721.774086][T27001] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6076'. [ 1721.821542][T27001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1722.462319][T23913] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1722.985170][T27015] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6080'. [ 1723.037737][T27015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1724.799344][T27046] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6090'. [ 1724.820164][T27046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1726.397485][T27074] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6097'. [ 1727.165247][T27084] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6103'. [ 1727.206590][T27084] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6103'. [ 1727.263010][T27087] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6103'. [ 1727.377393][T23913] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1728.181923][T27092] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6105'. [ 1728.230500][T27092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1729.820981][T23913] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1730.550571][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.564514][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.613219][T27138] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6119'. [ 1730.657723][T27138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1732.168794][T23913] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1734.554736][T23913] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1734.915251][T27183] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6133'. [ 1734.995421][T27183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1735.357959][T27194] netlink: 'syz.1.6135': attribute type 29 has an invalid length. [ 1735.418294][T27194] netlink: 'syz.1.6135': attribute type 29 has an invalid length. [ 1735.475168][T27197] netlink: 'syz.1.6135': attribute type 29 has an invalid length. [ 1735.532904][T27194] netlink: 'syz.1.6135': attribute type 29 has an invalid length. [ 1735.702192][T27201] netlink: 'syz.1.6135': attribute type 29 has an invalid length. [ 1739.579218][T23913] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1740.242415][T27241] netlink: 'syz.1.6149': attribute type 3 has an invalid length. [ 1740.340417][T27241] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6149'. [ 1742.242245][T27272] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6159'. [ 1742.265055][T27272] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6159'. [ 1742.282621][T27272] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6159'. [ 1742.360350][T23913] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1743.406672][T27271] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6158'. [ 1743.445993][T27271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1746.892289][T23913] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1748.207501][T27307] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6179'. [ 1748.230091][T27307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1748.651183][T27334] FAULT_INJECTION: forcing a failure. [ 1748.651183][T27334] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.671689][T27334] CPU: 1 PID: 27334 Comm: syz.0.6178 Not tainted syzkaller #0 [ 1748.679235][T27334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1748.689341][T27334] Call Trace: [ 1748.692660][T27334] [ 1748.695635][T27334] dump_stack_lvl+0x18c/0x250 [ 1748.700362][T27334] ? sctp_sendmsg+0x1519/0x27b0 [ 1748.705264][T27334] ? ___sys_sendmsg+0x2a6/0x360 [ 1748.710202][T27334] ? show_regs_print_info+0x20/0x20 [ 1748.715454][T27334] ? load_image+0x420/0x420 [ 1748.720049][T27334] should_fail_ex+0x394/0x4c0 [ 1748.724839][T27334] should_failslab+0x9/0x20 [ 1748.729409][T27334] slab_pre_alloc_hook+0x59/0x300 [ 1748.734501][T27334] ? sctp_add_bind_addr+0x8c/0x360 [ 1748.739655][T27334] __kmem_cache_alloc_node+0x53/0x250 [ 1748.745082][T27334] ? sctp_add_bind_addr+0x8c/0x360 [ 1748.750236][T27334] kmalloc_trace+0x2a/0xe0 [ 1748.754715][T27334] sctp_add_bind_addr+0x8c/0x360 [ 1748.759726][T27334] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1748.765422][T27334] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1748.771197][T27334] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1748.777324][T27334] ? sctp_v4_is_any+0x35/0x60 [ 1748.782043][T27334] ? sctp_copy_one_addr+0x8c/0x350 [ 1748.787207][T27334] sctp_bind_addr_copy+0xb3/0x3c0 [ 1748.792374][T27334] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1748.798758][T27334] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1748.804100][T27334] ? __sctp_connect+0xd80/0xd80 [ 1748.809001][T27334] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1748.814419][T27334] ? _local_bh_enable+0xa0/0xa0 [ 1748.819321][T27334] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1748.825181][T27334] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1748.831038][T27334] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1748.836637][T27334] ? security_sctp_bind_connect+0x89/0xb0 [ 1748.842413][T27334] sctp_sendmsg+0x1519/0x27b0 [ 1748.847181][T27334] ? sctp_getsockopt+0xb60/0xb60 [ 1748.852209][T27334] ? aa_af_perm+0x330/0x330 [ 1748.856780][T27334] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1748.863256][T27334] ? sock_rps_record_flow+0x19/0x3f0 [ 1748.868595][T27334] ? inet_sendmsg+0x7e/0x2a0 [ 1748.873321][T27334] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1748.878672][T27334] ? inet_send_prepare+0x250/0x250 [ 1748.883841][T27334] ____sys_sendmsg+0x61b/0x980 [ 1748.888702][T27334] ? __asan_memset+0x22/0x40 [ 1748.893348][T27334] ? __sys_sendmsg_sock+0x30/0x30 [ 1748.898452][T27334] ? __import_iovec+0x5f2/0x850 [ 1748.903390][T27334] ? import_iovec+0x73/0xa0 [ 1748.907964][T27334] ___sys_sendmsg+0x2a6/0x360 [ 1748.912710][T27334] ? get_pid_task+0x20/0x1e0 [ 1748.917396][T27334] ? __sys_sendmsg+0x2b0/0x2b0 [ 1748.922240][T27334] ? __lock_acquire+0x7eb0/0x7eb0 [ 1748.927367][T27334] __se_sys_sendmsg+0x1d0/0x2c0 [ 1748.932283][T27334] ? __x64_sys_sendmsg+0x80/0x80 [ 1748.937299][T27334] ? lockdep_hardirqs_on+0x98/0x150 [ 1748.942554][T27334] do_syscall_64+0x55/0xb0 [ 1748.947020][T27334] ? clear_bhb_loop+0x40/0x90 [ 1748.951749][T27334] ? clear_bhb_loop+0x40/0x90 [ 1748.956525][T27334] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1748.962510][T27334] RIP: 0033:0x7f28aa19e559 [ 1748.966973][T27334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1748.986636][T27334] RSP: 002b:00007f28a83d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1748.995128][T27334] RAX: ffffffffffffffda RBX: 00007f28aa426090 RCX: 00007f28aa19e559 [ 1749.003150][T27334] RDX: 0000000000000080 RSI: 0000200000000640 RDI: 0000000000000003 [ 1749.011169][T27334] RBP: 00007f28a83d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1749.019186][T27334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1749.027203][T27334] R13: 00007f28aa426128 R14: 00007f28aa426090 R15: 00007ffc0a34b448 [ 1749.035393][T27334] [ 1749.431823][T23913] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1751.137825][T27377] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.6192'. [ 1751.371155][T23913] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1751.526602][T27371] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6189'. [ 1751.590224][T27371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1752.048652][T27394] netlink: 'syz.2.6197': attribute type 15 has an invalid length. [ 1752.063857][T27394] netlink: 'syz.2.6197': attribute type 7 has an invalid length. [ 1752.080824][T27394] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6197'. [ 1752.519322][T27400] netlink: 'syz.1.6200': attribute type 1 has an invalid length. [ 1752.646910][T27400] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.6200'. [ 1752.698296][T27405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1752.735557][T27405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1752.844343][T27405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1752.887129][T27405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1753.961913][T23913] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1755.999741][T27452] netlink: 'syz.1.6216': attribute type 10 has an invalid length. [ 1756.298812][T27452] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6216'. [ 1756.309923][T27452] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1756.384912][T27452] netlink: 'syz.1.6216': attribute type 10 has an invalid length. [ 1756.485134][T27452] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6216'. [ 1756.593460][T27452] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1756.833268][T23913] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1757.230124][T27481] netlink: 'syz.2.6226': attribute type 21 has an invalid length. [ 1757.284503][T27481] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6226'. [ 1758.890738][T23913] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1759.469188][T27523] FAULT_INJECTION: forcing a failure. [ 1759.469188][T27523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1759.543255][T27523] CPU: 1 PID: 27523 Comm: syz.0.6242 Not tainted syzkaller #0 [ 1759.550829][T27523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1759.561127][T27523] Call Trace: [ 1759.565007][T27523] [ 1759.567982][T27523] dump_stack_lvl+0x18c/0x250 [ 1759.572724][T27523] ? show_regs_print_info+0x20/0x20 [ 1759.577978][T27523] ? load_image+0x420/0x420 [ 1759.582573][T27523] ? __might_fault+0xaa/0x120 [ 1759.587316][T27523] ? __lock_acquire+0x7eb0/0x7eb0 [ 1759.592403][T27523] should_fail_ex+0x394/0x4c0 [ 1759.597151][T27523] _copy_from_iter+0x1cd/0x1290 [ 1759.602083][T27523] ? copyout_mc+0x70/0x70 [ 1759.606485][T27523] ? __virt_addr_valid+0x10c/0x380 [ 1759.611692][T27523] ? __virt_addr_valid+0x10c/0x380 [ 1759.616860][T27523] ? __virt_addr_valid+0x10c/0x380 [ 1759.622023][T27523] ? __check_object_size+0x4fc/0xa40 [ 1759.627351][T27523] tipc_msg_build+0x87a/0xe60 [ 1759.632193][T27523] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 1759.638356][T27523] ? net_generic+0x1e/0x240 [ 1759.642934][T27523] ? tipc_group_bc_cong+0x15c/0x210 [ 1759.648198][T27523] tipc_send_group_bcast+0x7d8/0xad0 [ 1759.653564][T27523] ? tipc_wait_for_connect+0x650/0x650 [ 1759.659087][T27523] ? wait_woken+0x180/0x180 [ 1759.663634][T27523] ? tomoyo_check_open_permission+0x1cf/0x460 [ 1759.669769][T27523] __tipc_sendmsg+0x314/0x2b20 [ 1759.674614][T27523] ? __lock_acquire+0x1431/0x7eb0 [ 1759.679711][T27523] ? rht_unlock+0x1d0/0x1d0 [ 1759.684285][T27523] ? verify_lock_unused+0x140/0x140 [ 1759.689548][T27523] ? verify_lock_unused+0x140/0x140 [ 1759.694808][T27523] ? kernel_text_address+0xa0/0xd0 [ 1759.699989][T27523] ? __might_sleep+0xe0/0xe0 [ 1759.704653][T27523] ? mark_lock+0x94/0x320 [ 1759.709049][T27523] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1759.715103][T27523] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1759.720540][T27523] ? lockdep_hardirqs_on+0x98/0x150 [ 1759.725792][T27523] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1759.731224][T27523] ? _local_bh_enable+0xa0/0xa0 [ 1759.736147][T27523] tipc_sendmsg+0x55/0x70 [ 1759.740551][T27523] sock_write_iter+0x2dc/0x420 [ 1759.745393][T27523] ? sock_read_iter+0x3f0/0x3f0 [ 1759.750364][T27523] ? common_file_perm+0x198/0x1f0 [ 1759.755487][T27523] vfs_write+0x474/0x9a0 [ 1759.759816][T27523] ? file_end_write+0x250/0x250 [ 1759.764761][T27523] ? __fget_files+0x3fc/0x460 [ 1759.769517][T27523] ? __fdget_pos+0x1d8/0x330 [ 1759.774163][T27523] ? ksys_write+0x74/0x260 [ 1759.778659][T27523] ksys_write+0x151/0x260 [ 1759.783073][T27523] ? __ia32_sys_read+0x90/0x90 [ 1759.787891][T27523] ? lockdep_hardirqs_on+0x98/0x150 [ 1759.793186][T27523] do_syscall_64+0x55/0xb0 [ 1759.797679][T27523] ? clear_bhb_loop+0x40/0x90 [ 1759.802428][T27523] ? clear_bhb_loop+0x40/0x90 [ 1759.807182][T27523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1759.813161][T27523] RIP: 0033:0x7f28aa19e559 [ 1759.817725][T27523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1759.837396][T27523] RSP: 002b:00007f28a83f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1759.845886][T27523] RAX: ffffffffffffffda RBX: 00007f28aa425fa0 RCX: 00007f28aa19e559 [ 1759.853910][T27523] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000004 [ 1759.861925][T27523] RBP: 00007f28a83f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1759.869925][T27523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1759.877941][T27523] R13: 00007f28aa426038 R14: 00007f28aa425fa0 R15: 00007ffc0a34b448 [ 1759.885979][T27523] [ 1761.363854][T23913] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1762.333518][T27563] netlink: 'syz.4.6258': attribute type 4 has an invalid length. [ 1762.508853][T23913] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1762.856580][T27576] netlink: 'syz.2.6264': attribute type 10 has an invalid length. [ 1762.880386][T27576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6264'. [ 1762.914543][T27576] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1762.926372][T27576] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1763.033178][T27576] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1766.557639][T23913] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1767.693015][T27666] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6306'. [ 1767.892345][T23913] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1768.306296][T27683] netlink: 'syz.0.6315': attribute type 2 has an invalid length. [ 1768.816939][T23913] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1769.622956][T27715] FAULT_INJECTION: forcing a failure. [ 1769.622956][T27715] name failslab, interval 1, probability 0, space 0, times 0 [ 1769.775012][T27715] CPU: 1 PID: 27715 Comm: syz.2.6329 Not tainted syzkaller #0 [ 1769.782600][T27715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1769.792726][T27715] Call Trace: [ 1769.796062][T27715] [ 1769.799059][T27715] dump_stack_lvl+0x18c/0x250 [ 1769.803818][T27715] ? sctp_sendmsg+0x1519/0x27b0 [ 1769.808761][T27715] ? ___sys_sendmsg+0x2a6/0x360 [ 1769.814582][T27715] ? show_regs_print_info+0x20/0x20 [ 1769.819892][T27715] ? load_image+0x420/0x420 [ 1769.824544][T27715] should_fail_ex+0x394/0x4c0 [ 1769.829348][T27715] should_failslab+0x9/0x20 [ 1769.833949][T27715] slab_pre_alloc_hook+0x59/0x300 [ 1769.839085][T27715] ? sctp_add_bind_addr+0x8c/0x360 [ 1769.844278][T27715] __kmem_cache_alloc_node+0x53/0x250 [ 1769.849873][T27715] ? sctp_add_bind_addr+0x8c/0x360 [ 1769.855069][T27715] kmalloc_trace+0x2a/0xe0 [ 1769.859588][T27715] sctp_add_bind_addr+0x8c/0x360 [ 1769.864658][T27715] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1769.870380][T27715] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1769.876223][T27715] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1769.882407][T27715] ? sctp_v4_is_any+0x35/0x60 [ 1769.887163][T27715] ? sctp_copy_one_addr+0x8c/0x350 [ 1769.892383][T27715] sctp_bind_addr_copy+0xb3/0x3c0 [ 1769.897498][T27715] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1769.904198][T27715] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1769.909592][T27715] ? __sctp_connect+0xd80/0xd80 [ 1769.914531][T27715] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1769.920004][T27715] ? _local_bh_enable+0xa0/0xa0 [ 1769.924945][T27715] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1769.930844][T27715] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1769.936749][T27715] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1769.942376][T27715] ? security_sctp_bind_connect+0x89/0xb0 [ 1769.948186][T27715] sctp_sendmsg+0x1519/0x27b0 [ 1769.953027][T27715] ? sctp_getsockopt+0xb60/0xb60 [ 1769.958066][T27715] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1769.963990][T27715] ? aa_af_perm+0x330/0x330 [ 1769.968605][T27715] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1769.975136][T27715] ? sock_rps_record_flow+0x19/0x3f0 [ 1769.980525][T27715] ? inet_sendmsg+0x7e/0x2a0 [ 1769.985196][T27715] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1769.990593][T27715] ? inet_send_prepare+0x250/0x250 [ 1769.995805][T27715] ____sys_sendmsg+0x61b/0x980 [ 1770.000696][T27715] ? __asan_memset+0x22/0x40 [ 1770.005400][T27715] ? __sys_sendmsg_sock+0x30/0x30 [ 1770.010512][T27715] ? __import_iovec+0x5f2/0x850 [ 1770.015508][T27715] ? import_iovec+0x73/0xa0 [ 1770.020145][T27715] ___sys_sendmsg+0x2a6/0x360 [ 1770.024942][T27715] ? __sys_sendmsg+0x2b0/0x2b0 [ 1770.029885][T27715] ? __lock_acquire+0x7eb0/0x7eb0 [ 1770.035138][T27715] __se_sys_sendmsg+0x1d0/0x2c0 [ 1770.040092][T27715] ? __x64_sys_sendmsg+0x80/0x80 [ 1770.045188][T27715] ? lockdep_hardirqs_on+0x98/0x150 [ 1770.050839][T27715] do_syscall_64+0x55/0xb0 [ 1770.055340][T27715] ? clear_bhb_loop+0x40/0x90 [ 1770.060187][T27715] ? clear_bhb_loop+0x40/0x90 [ 1770.064962][T27715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1770.070946][T27715] RIP: 0033:0x7f1d3a79e559 [ 1770.075439][T27715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1770.095205][T27715] RSP: 002b:00007f1d3b619028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1770.103796][T27715] RAX: ffffffffffffffda RBX: 00007f1d3aa26090 RCX: 00007f1d3a79e559 [ 1770.111827][T27715] RDX: 0000000000000080 RSI: 0000200000000640 RDI: 0000000000000003 [ 1770.119869][T27715] RBP: 00007f1d3b619090 R08: 0000000000000000 R09: 0000000000000000 [ 1770.128023][T27715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1770.136069][T27715] R13: 00007f1d3aa26128 R14: 00007f1d3aa26090 R15: 00007fffb181de58 [ 1770.144801][T27715] [ 1770.286120][T23913] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1771.701568][T27741] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6340'. [ 1772.305900][T27754] netlink: 'syz.2.6345': attribute type 25 has an invalid length. [ 1772.349413][T27754] netlink: 'syz.2.6345': attribute type 10 has an invalid length. [ 1772.823030][T27770] netlink: 'syz.2.6351': attribute type 1 has an invalid length. [ 1772.839821][T27770] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.6351'. [ 1773.203809][T27780] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6356'. [ 1773.414428][T27780] hsr_slave_0: left promiscuous mode [ 1773.730646][T27780] hsr_slave_1: left promiscuous mode [ 1774.739858][T27805] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 1774.758489][T27805] dvmrp1: persist disabled [ 1775.285910][T27816] netlink: 'syz.2.6371': attribute type 10 has an invalid length. [ 1776.731576][T27838] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6381'. [ 1776.894310][T27838] syzkaller0: entered promiscuous mode [ 1776.914010][T27838] syzkaller0: entered allmulticast mode [ 1777.682090][T27859] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6391'. [ 1777.745805][T27859] hsr_slave_0: left promiscuous mode [ 1777.779301][T27859] hsr_slave_1: left promiscuous mode [ 1778.383280][T27877] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.6399'. [ 1779.033338][T27891] netlink: 'syz.2.6407': attribute type 4 has an invalid length. [ 1779.226654][T27898] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6409'. [ 1779.275652][T27898] hsr_slave_0: left promiscuous mode [ 1779.325206][T27898] hsr_slave_1: left promiscuous mode [ 1779.496532][T27902] netlink: 'syz.2.6412': attribute type 25 has an invalid length. [ 1779.511882][T27902] netlink: 'syz.2.6412': attribute type 10 has an invalid length. [ 1780.299682][T27927] netlink: 'syz.1.6423': attribute type 3 has an invalid length. [ 1780.315211][T27927] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6423'. [ 1780.381170][T27923] netlink: 'syz.4.6421': attribute type 4 has an invalid length. [ 1780.793707][T23913] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1781.335392][T27960] netlink: 'syz.4.6438': attribute type 21 has an invalid length. [ 1781.383879][T27960] netlink: 'syz.4.6438': attribute type 6 has an invalid length. [ 1781.430351][T27960] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6438'. [ 1781.482525][T27959] netlink: 'syz.0.6437': attribute type 4 has an invalid length. [ 1781.989180][T27972] FAULT_INJECTION: forcing a failure. [ 1781.989180][T27972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1782.003427][T23913] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1782.031141][T27972] CPU: 0 PID: 27972 Comm: syz.1.6443 Not tainted syzkaller #0 [ 1782.045921][T27972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1782.056127][T27972] Call Trace: [ 1782.059543][T27972] [ 1782.062653][T27972] dump_stack_lvl+0x18c/0x250 [ 1782.067516][T27972] ? show_regs_print_info+0x20/0x20 [ 1782.072891][T27972] ? load_image+0x420/0x420 [ 1782.077598][T27972] ? __might_fault+0xaa/0x120 [ 1782.082447][T27972] ? __lock_acquire+0x7eb0/0x7eb0 [ 1782.087700][T27972] should_fail_ex+0x394/0x4c0 [ 1782.092606][T27972] _copy_from_user+0x2f/0xe0 [ 1782.097366][T27972] ___sys_sendmsg+0x1c7/0x360 [ 1782.102204][T27972] ? get_pid_task+0x20/0x1e0 [ 1782.107004][T27972] ? __sys_sendmsg+0x2b0/0x2b0 [ 1782.112148][T27972] ? __lock_acquire+0x7eb0/0x7eb0 [ 1782.117587][T27972] __se_sys_sendmsg+0x1d0/0x2c0 [ 1782.122672][T27972] ? __x64_sys_sendmsg+0x80/0x80 [ 1782.127941][T27972] ? lockdep_hardirqs_on+0x98/0x150 [ 1782.133330][T27972] do_syscall_64+0x55/0xb0 [ 1782.137902][T27972] ? clear_bhb_loop+0x40/0x90 [ 1782.142695][T27972] ? clear_bhb_loop+0x40/0x90 [ 1782.147536][T27972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1782.153573][T27972] RIP: 0033:0x7ff25539e559 [ 1782.158131][T27972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1782.177870][T27972] RSP: 002b:00007ff2561eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1782.186468][T27972] RAX: ffffffffffffffda RBX: 00007ff255625fa0 RCX: 00007ff25539e559 [ 1782.194612][T27972] RDX: 0000000000000000 RSI: 0000200000000ec0 RDI: 0000000000000004 [ 1782.202718][T27972] RBP: 00007ff2561eb090 R08: 0000000000000000 R09: 0000000000000000 [ 1782.210844][T27972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1782.219025][T27972] R13: 00007ff255626038 R14: 00007ff255625fa0 R15: 00007ffda9e80bc8 [ 1782.227162][T27972] [ 1782.586760][T27984] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6449'. [ 1782.624848][T27984] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6449'. [ 1782.648770][T27984] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6449'. [ 1782.887848][T27986] netlink: 'syz.1.6450': attribute type 4 has an invalid length. [ 1783.011130][T27995] netlink: 'syz.2.6454': attribute type 10 has an invalid length. [ 1783.475537][T28010] FAULT_INJECTION: forcing a failure. [ 1783.475537][T28010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1783.535504][T28010] CPU: 1 PID: 28010 Comm: syz.4.6461 Not tainted syzkaller #0 [ 1783.543397][T28010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1783.553493][T28010] Call Trace: [ 1783.556837][T28010] [ 1783.559811][T28010] dump_stack_lvl+0x18c/0x250 [ 1783.564554][T28010] ? show_regs_print_info+0x20/0x20 [ 1783.569800][T28010] ? load_image+0x420/0x420 [ 1783.574389][T28010] ? __lock_acquire+0x7eb0/0x7eb0 [ 1783.579479][T28010] ? snprintf+0xe9/0x140 [ 1783.583775][T28010] should_fail_ex+0x394/0x4c0 [ 1783.588535][T28010] _copy_to_user+0x2f/0xa0 [ 1783.593006][T28010] simple_read_from_buffer+0xe7/0x150 [ 1783.598527][T28010] proc_fail_nth_read+0x1e8/0x260 [ 1783.603621][T28010] ? proc_fault_inject_write+0x360/0x360 [ 1783.609317][T28010] ? fsnotify_perm+0x271/0x5e0 [ 1783.614152][T28010] ? proc_fault_inject_write+0x360/0x360 [ 1783.619847][T28010] vfs_read+0x298/0x990 [ 1783.624074][T28010] ? kernel_read+0x1e0/0x1e0 [ 1783.628718][T28010] ? __fget_files+0x28/0x460 [ 1783.633474][T28010] ? __fget_files+0x3fc/0x460 [ 1783.638251][T28010] ? __fdget_pos+0x2a3/0x330 [ 1783.642903][T28010] ? ksys_read+0x74/0x260 [ 1783.647298][T28010] ksys_read+0x151/0x260 [ 1783.651639][T28010] ? vfs_write+0x9a0/0x9a0 [ 1783.656137][T28010] ? lockdep_hardirqs_on+0x98/0x150 [ 1783.661393][T28010] do_syscall_64+0x55/0xb0 [ 1783.665862][T28010] ? clear_bhb_loop+0x40/0x90 [ 1783.670598][T28010] ? clear_bhb_loop+0x40/0x90 [ 1783.675324][T28010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1783.681292][T28010] RIP: 0033:0x7f6bff55ed8e [ 1783.685762][T28010] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1783.705428][T28010] RSP: 002b:00007f6c003defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1783.713898][T28010] RAX: ffffffffffffffda RBX: 00007f6c003df6c0 RCX: 00007f6bff55ed8e [ 1783.721951][T28010] RDX: 000000000000000f RSI: 00007f6c003df0a0 RDI: 0000000000000004 [ 1783.729974][T28010] RBP: 00007f6c003df090 R08: 0000000000000000 R09: 0000000000000000 [ 1783.737999][T28010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1783.746043][T28010] R13: 00007f6bff826038 R14: 00007f6bff825fa0 R15: 00007ffeeffc5b88 [ 1783.754181][T28010] [ 1783.878743][T28015] netlink: 'syz.2.6463': attribute type 21 has an invalid length. [ 1783.910446][T28015] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6463'. [ 1784.102110][T23913] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1784.721536][T28039] FAULT_INJECTION: forcing a failure. [ 1784.721536][T28039] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.757264][T28039] CPU: 1 PID: 28039 Comm: syz.0.6474 Not tainted syzkaller #0 [ 1784.764918][T28039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1784.775049][T28039] Call Trace: [ 1784.778407][T28039] [ 1784.781386][T28039] dump_stack_lvl+0x18c/0x250 [ 1784.786122][T28039] ? sctp_sendmsg+0x1519/0x27b0 [ 1784.791054][T28039] ? ___sys_sendmsg+0x2a6/0x360 [ 1784.796040][T28039] ? show_regs_print_info+0x20/0x20 [ 1784.801271][T28039] ? load_image+0x420/0x420 [ 1784.805826][T28039] should_fail_ex+0x394/0x4c0 [ 1784.810546][T28039] should_failslab+0x9/0x20 [ 1784.815101][T28039] slab_pre_alloc_hook+0x59/0x300 [ 1784.820254][T28039] ? sctp_add_bind_addr+0x8c/0x360 [ 1784.825396][T28039] __kmem_cache_alloc_node+0x53/0x250 [ 1784.830810][T28039] ? sctp_add_bind_addr+0x8c/0x360 [ 1784.835947][T28039] kmalloc_trace+0x2a/0xe0 [ 1784.840410][T28039] sctp_add_bind_addr+0x8c/0x360 [ 1784.845383][T28039] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1784.851055][T28039] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1784.856804][T28039] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1784.862989][T28039] ? sctp_v4_is_any+0x35/0x60 [ 1784.867693][T28039] ? sctp_copy_one_addr+0x8c/0x350 [ 1784.872845][T28039] sctp_bind_addr_copy+0xb3/0x3c0 [ 1784.877899][T28039] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1784.884263][T28039] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1784.889586][T28039] ? __sctp_connect+0xd80/0xd80 [ 1784.894462][T28039] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1784.899869][T28039] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1784.905452][T28039] ? security_sctp_bind_connect+0x89/0xb0 [ 1784.911209][T28039] sctp_sendmsg+0x1519/0x27b0 [ 1784.915932][T28039] ? sctp_getsockopt+0xb60/0xb60 [ 1784.920903][T28039] ? aa_af_perm+0x330/0x330 [ 1784.925448][T28039] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1784.931902][T28039] ? sock_rps_record_flow+0x19/0x3f0 [ 1784.937218][T28039] ? inet_sendmsg+0xce/0x2a0 [ 1784.941846][T28039] ? inet_send_prepare+0x250/0x250 [ 1784.947018][T28039] ____sys_sendmsg+0x61b/0x980 [ 1784.951830][T28039] ? __asan_memset+0x22/0x40 [ 1784.956454][T28039] ? __sys_sendmsg_sock+0x30/0x30 [ 1784.961508][T28039] ? __import_iovec+0x5f2/0x850 [ 1784.966402][T28039] ? import_iovec+0x73/0xa0 [ 1784.970964][T28039] ___sys_sendmsg+0x2a6/0x360 [ 1784.975693][T28039] ? get_pid_task+0x20/0x1e0 [ 1784.980333][T28039] ? __sys_sendmsg+0x2b0/0x2b0 [ 1784.985164][T28039] ? __lock_acquire+0x7eb0/0x7eb0 [ 1784.990255][T28039] __se_sys_sendmsg+0x1d0/0x2c0 [ 1784.995156][T28039] ? __x64_sys_sendmsg+0x80/0x80 [ 1785.000151][T28039] ? lockdep_hardirqs_on+0x98/0x150 [ 1785.005406][T28039] do_syscall_64+0x55/0xb0 [ 1785.009860][T28039] ? clear_bhb_loop+0x40/0x90 [ 1785.014573][T28039] ? clear_bhb_loop+0x40/0x90 [ 1785.019320][T28039] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1785.025264][T28039] RIP: 0033:0x7f28aa19e559 [ 1785.029716][T28039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1785.049366][T28039] RSP: 002b:00007f28a83f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1785.057830][T28039] RAX: ffffffffffffffda RBX: 00007f28aa425fa0 RCX: 00007f28aa19e559 [ 1785.065851][T28039] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1785.073858][T28039] RBP: 00007f28a83f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1785.081853][T28039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1785.089857][T28039] R13: 00007f28aa426038 R14: 00007f28aa425fa0 R15: 00007ffc0a34b448 [ 1785.097872][T28039] [ 1785.482199][T28051] netlink: 'syz.0.6479': attribute type 11 has an invalid length. [ 1785.500247][T28051] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6479'. [ 1786.623806][T28072] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6486'. [ 1786.660266][T28072] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6486'. [ 1786.730883][T28072] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6486'. [ 1789.001388][T28093] FAULT_INJECTION: forcing a failure. [ 1789.001388][T28093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1789.044307][T28093] CPU: 0 PID: 28093 Comm: syz.0.6493 Not tainted syzkaller #0 [ 1789.051865][T28093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1789.061966][T28093] Call Trace: [ 1789.065293][T28093] [ 1789.068266][T28093] dump_stack_lvl+0x18c/0x250 [ 1789.073002][T28093] ? show_regs_print_info+0x20/0x20 [ 1789.078271][T28093] ? load_image+0x420/0x420 [ 1789.082869][T28093] ? __might_fault+0xaa/0x120 [ 1789.087602][T28093] ? __lock_acquire+0x7eb0/0x7eb0 [ 1789.092690][T28093] should_fail_ex+0x394/0x4c0 [ 1789.097441][T28093] _copy_from_iter+0x1cd/0x1290 [ 1789.102348][T28093] ? __might_fault+0xaa/0x120 [ 1789.107094][T28093] ? copyout_mc+0x70/0x70 [ 1789.111495][T28093] ? copyout_mc+0x70/0x70 [ 1789.115895][T28093] ? __virt_addr_valid+0x10c/0x380 [ 1789.121093][T28093] ? page_copy_sane+0x16a/0x270 [ 1789.125992][T28093] copy_page_from_iter+0x7b/0x100 [ 1789.131041][T28093] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 1789.136870][T28093] tun_get_user+0xc99/0x3d30 [ 1789.141531][T28093] ? aa_file_perm+0x3e3/0xee0 [ 1789.146269][T28093] ? rcu_read_unlock+0xa0/0xa0 [ 1789.151101][T28093] ? tun_get+0x1c/0x2e0 [ 1789.155293][T28093] ? __lock_acquire+0x7eb0/0x7eb0 [ 1789.160335][T28093] ? tun_get+0x1c/0x2e0 [ 1789.164518][T28093] tun_chr_write_iter+0x119/0x200 [ 1789.169564][T28093] vfs_write+0x474/0x9a0 [ 1789.173849][T28093] ? file_end_write+0x250/0x250 [ 1789.178851][T28093] ? __fget_files+0x3fc/0x460 [ 1789.183597][T28093] ? __fdget_pos+0x1d8/0x330 [ 1789.188241][T28093] ? ksys_write+0x74/0x260 [ 1789.192732][T28093] ksys_write+0x151/0x260 [ 1789.197122][T28093] ? __ia32_sys_read+0x90/0x90 [ 1789.201947][T28093] ? lockdep_hardirqs_on+0x98/0x150 [ 1789.207163][T28093] do_syscall_64+0x55/0xb0 [ 1789.211596][T28093] ? clear_bhb_loop+0x40/0x90 [ 1789.216291][T28093] ? clear_bhb_loop+0x40/0x90 [ 1789.220996][T28093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1789.226916][T28093] RIP: 0033:0x7f28aa19e559 [ 1789.231382][T28093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1789.251031][T28093] RSP: 002b:00007f28a83f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1789.259486][T28093] RAX: ffffffffffffffda RBX: 00007f28aa425fa0 RCX: 00007f28aa19e559 [ 1789.267480][T28093] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 1789.275472][T28093] RBP: 00007f28a83f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1789.283511][T28093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1789.291507][T28093] R13: 00007f28aa426038 R14: 00007f28aa425fa0 R15: 00007ffc0a34b448 [ 1789.299532][T28093] [ 1789.793650][T28113] FAULT_INJECTION: forcing a failure. [ 1789.793650][T28113] name failslab, interval 1, probability 0, space 0, times 0 [ 1789.815309][T23913] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 1789.830499][T28113] CPU: 1 PID: 28113 Comm: syz.1.6501 Not tainted syzkaller #0 [ 1789.845088][T28113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1789.855167][T28113] Call Trace: [ 1789.858468][T28113] [ 1789.861537][T28113] dump_stack_lvl+0x18c/0x250 [ 1789.866246][T28113] ? show_regs_print_info+0x20/0x20 [ 1789.871471][T28113] ? load_image+0x420/0x420 [ 1789.876003][T28113] ? __might_sleep+0xe0/0xe0 [ 1789.880626][T28113] ? __lock_acquire+0x7eb0/0x7eb0 [ 1789.885696][T28113] should_fail_ex+0x394/0x4c0 [ 1789.890456][T28113] should_failslab+0x9/0x20 [ 1789.894994][T28113] slab_pre_alloc_hook+0x59/0x300 [ 1789.900046][T28113] ? bpf_sk_storage_diag_alloc+0x221/0x690 [ 1789.905883][T28113] ? bpf_sk_storage_diag_alloc+0x221/0x690 [ 1789.911724][T28113] __kmem_cache_alloc_node+0x53/0x250 [ 1789.917132][T28113] ? bpf_sk_storage_diag_alloc+0x221/0x690 [ 1789.923070][T28113] __kmalloc+0xa7/0x240 [ 1789.927303][T28113] bpf_sk_storage_diag_alloc+0x221/0x690 [ 1789.932980][T28113] __inet_diag_dump_start+0x325/0x9f0 [ 1789.938386][T28113] ? netlink_lookup+0x30/0x200 [ 1789.943191][T28113] __netlink_dump_start+0x43c/0x7a0 [ 1789.948432][T28113] inet_diag_rcv_msg_compat+0x215/0x440 [ 1789.954010][T28113] ? __inet_diag_dump+0x380/0x380 [ 1789.959079][T28113] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 1789.964140][T28113] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 1789.969985][T28113] ? inet_diag_dump_start_compat+0x20/0x20 [ 1789.975839][T28113] ? inet_diag_dump+0x50/0x50 [ 1789.980606][T28113] ? __inet_diag_dump+0x380/0x380 [ 1789.985670][T28113] sock_diag_rcv_msg+0x3d3/0x5f0 [ 1789.990674][T28113] netlink_rcv_skb+0x235/0x4c0 [ 1789.995481][T28113] ? sock_diag_bind+0xb0/0xb0 [ 1790.000185][T28113] ? netlink_ack+0x1160/0x1160 [ 1790.004986][T28113] ? __lock_acquire+0x7eb0/0x7eb0 [ 1790.010054][T28113] ? netlink_deliver_tap+0x2e/0x1b0 [ 1790.015377][T28113] sock_diag_rcv+0x2a/0x40 [ 1790.019821][T28113] netlink_unicast+0x7b1/0x930 [ 1790.024622][T28113] netlink_sendmsg+0x8d0/0xbf0 [ 1790.029448][T28113] ? netlink_getsockopt+0x590/0x590 [ 1790.034704][T28113] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1790.040289][T28113] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1790.045607][T28113] ? security_socket_sendmsg+0x80/0xa0 [ 1790.051096][T28113] ? netlink_getsockopt+0x590/0x590 [ 1790.056329][T28113] ____sys_sendmsg+0x61b/0x980 [ 1790.061170][T28113] ? __asan_memset+0x22/0x40 [ 1790.065804][T28113] ? __sys_sendmsg_sock+0x30/0x30 [ 1790.070879][T28113] ? __import_iovec+0x3fa/0x850 [ 1790.075806][T28113] ? import_iovec+0x73/0xa0 [ 1790.080384][T28113] ___sys_sendmsg+0x2a6/0x360 [ 1790.085111][T28113] ? get_pid_task+0x20/0x1e0 [ 1790.089744][T28113] ? __sys_sendmsg+0x2b0/0x2b0 [ 1790.094568][T28113] ? __lock_acquire+0x7eb0/0x7eb0 [ 1790.099683][T28113] __se_sys_sendmsg+0x1d0/0x2c0 [ 1790.104582][T28113] ? __x64_sys_sendmsg+0x80/0x80 [ 1790.109566][T28113] ? lockdep_hardirqs_on+0x98/0x150 [ 1790.114798][T28113] do_syscall_64+0x55/0xb0 [ 1790.119242][T28113] ? clear_bhb_loop+0x40/0x90 [ 1790.123934][T28113] ? clear_bhb_loop+0x40/0x90 [ 1790.128639][T28113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1790.134584][T28113] RIP: 0033:0x7ff25539e559 [ 1790.139023][T28113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1790.158653][T28113] RSP: 002b:00007ff2561eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1790.167103][T28113] RAX: ffffffffffffffda RBX: 00007ff255625fa0 RCX: 00007ff25539e559 [ 1790.175101][T28113] RDX: 0000000000040804 RSI: 00002000000003c0 RDI: 0000000000000004 [ 1790.183182][T28113] RBP: 00007ff2561eb090 R08: 0000000000000000 R09: 0000000000000000 [ 1790.191181][T28113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1790.199175][T28113] R13: 00007ff255626038 R14: 00007ff255625fa0 R15: 00007ffda9e80bc8 [ 1790.207203][T28113] [ 1790.811016][T28126] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6507'. [ 1791.455835][T28146] netlink: 'syz.4.6514': attribute type 10 has an invalid length. [ 1791.477615][T23913] Bluetooth: hci0: unexpected event 0x14 length: 151 > 6 [ 1791.579548][T28146] team0: Port device netdevsim0 added [ 1791.964107][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.971056][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.684402][T23913] Bluetooth: hci0: unexpected event 0x14 length: 151 > 6 [ 1793.809928][T28218] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6544'. [ 1793.871151][T28218] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6544'. [ 1793.912827][T28219] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6544'. [ 1793.929611][T28221] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6546'. [ 1794.816778][T28243] netlink: 'syz.0.6557': attribute type 10 has an invalid length. [ 1794.999824][T28243] team0: Port device netdevsim0 added [ 1798.088852][T28324] FAULT_INJECTION: forcing a failure. [ 1798.088852][T28324] name failslab, interval 1, probability 0, space 0, times 0 [ 1798.119034][T28324] CPU: 0 PID: 28324 Comm: syz.0.6588 Not tainted syzkaller #0 [ 1798.126649][T28324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1798.136774][T28324] Call Trace: [ 1798.140092][T28324] [ 1798.143059][T28324] dump_stack_lvl+0x18c/0x250 [ 1798.147777][T28324] ? show_regs_print_info+0x20/0x20 [ 1798.153045][T28324] ? load_image+0x420/0x420 [ 1798.157610][T28324] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1798.163650][T28324] ? __lock_acquire+0x7eb0/0x7eb0 [ 1798.168711][T28324] ? lock_chain_count+0x20/0x20 [ 1798.173613][T28324] ? try_to_wake_up+0x6c3/0x10e0 [ 1798.178680][T28324] should_fail_ex+0x394/0x4c0 [ 1798.183450][T28324] should_failslab+0x9/0x20 [ 1798.188002][T28324] slab_pre_alloc_hook+0x59/0x300 [ 1798.193064][T28324] ? __wake_up_common+0x28e/0x4d0 [ 1798.198141][T28324] kmem_cache_alloc_node+0x5e/0x310 [ 1798.203387][T28324] ? __alloc_skb+0x103/0x2c0 [ 1798.208022][T28324] __alloc_skb+0x103/0x2c0 [ 1798.212491][T28324] sctp_ulpevent_make_assoc_change+0x186/0xa60 [ 1798.218706][T28324] sctp_do_sm+0x16b3/0x5b70 [ 1798.223298][T28324] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 1798.229275][T28324] ? sctp_make_abort_user+0x62a/0x780 [ 1798.234781][T28324] ? sctp_make_abort_no_data+0x610/0x610 [ 1798.240452][T28324] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1798.245866][T28324] sctp_primitive_ABORT+0x98/0xc0 [ 1798.250938][T28324] sctp_sendmsg_check_sflags+0x1f0/0x2d0 [ 1798.256629][T28324] sctp_sendmsg+0xc0a/0x27b0 [ 1798.261278][T28324] ? sctp_getsockopt+0xb60/0xb60 [ 1798.266251][T28324] ? aa_af_perm+0x330/0x330 [ 1798.270807][T28324] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1798.277260][T28324] ? sock_rps_record_flow+0x19/0x3f0 [ 1798.282578][T28324] ? inet_sendmsg+0x7e/0x2a0 [ 1798.287222][T28324] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1798.292644][T28324] ? inet_send_prepare+0x250/0x250 [ 1798.297793][T28324] ____sys_sendmsg+0x61b/0x980 [ 1798.302596][T28324] ? __sys_sendmsg_sock+0x30/0x30 [ 1798.307667][T28324] ? __import_iovec+0x3fa/0x850 [ 1798.312602][T28324] ? import_iovec+0x73/0xa0 [ 1798.317244][T28324] ___sys_sendmsg+0x2a6/0x360 [ 1798.322001][T28324] ? __sys_sendmsg+0x2b0/0x2b0 [ 1798.326839][T28324] ? __lock_acquire+0x7eb0/0x7eb0 [ 1798.331931][T28324] __se_sys_sendmsg+0x1d0/0x2c0 [ 1798.336865][T28324] ? __x64_sys_sendmsg+0x80/0x80 [ 1798.341862][T28324] ? lockdep_hardirqs_on+0x98/0x150 [ 1798.347104][T28324] do_syscall_64+0x55/0xb0 [ 1798.351565][T28324] ? clear_bhb_loop+0x40/0x90 [ 1798.356418][T28324] ? clear_bhb_loop+0x40/0x90 [ 1798.361148][T28324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1798.367077][T28324] RIP: 0033:0x7f28aa19e559 [ 1798.371534][T28324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1798.391176][T28324] RSP: 002b:00007f28a83d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1798.399624][T28324] RAX: ffffffffffffffda RBX: 00007f28aa426090 RCX: 00007f28aa19e559 [ 1798.407647][T28324] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1798.415663][T28324] RBP: 00007f28a83d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1798.423661][T28324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1798.431658][T28324] R13: 00007f28aa426128 R14: 00007f28aa426090 R15: 00007ffc0a34b448 [ 1798.439690][T28324] [ 1798.839540][T28316] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.6587'. [ 1798.919158][T28316] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.6587'. [ 1802.306279][T28382] netlink: 'syz.1.6613': attribute type 1 has an invalid length. [ 1802.333302][T28382] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.6613'. [ 1802.649739][T28392] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6617'. [ 1803.397079][T28416] netlink: 'syz.0.6627': attribute type 9 has an invalid length. [ 1803.405122][T28416] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6627'. [ 1804.318400][T28423] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6629'. [ 1804.338897][T28423] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6629'. [ 1804.349354][T28423] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6629'. [ 1804.366256][T28423] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6629'. [ 1804.712118][T28432] rxe_eth0 speed is unknown, defaulting to 1000 [ 1806.804785][T28465] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6644'. [ 1806.847232][T28465] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6644'. [ 1806.869056][T28466] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6644'. [ 1807.696040][T28488] netlink: 'syz.0.6651': attribute type 1 has an invalid length. [ 1807.716278][T28488] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.6651'. [ 1808.007032][T28497] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6656'. [ 1808.094782][T28497] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6656'. [ 1808.131593][T23913] Bluetooth: hci4: unexpected event 0x0f length: 151 > 4 [ 1808.853585][T28518] FAULT_INJECTION: forcing a failure. [ 1808.853585][T28518] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.873869][T28518] CPU: 1 PID: 28518 Comm: syz.1.6664 Not tainted syzkaller #0 [ 1808.881405][T28518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1808.891620][T28518] Call Trace: [ 1808.894956][T28518] [ 1808.897937][T28518] dump_stack_lvl+0x18c/0x250 [ 1808.902691][T28518] ? show_regs_print_info+0x20/0x20 [ 1808.907964][T28518] ? load_image+0x420/0x420 [ 1808.912555][T28518] ? __might_sleep+0xe0/0xe0 [ 1808.917217][T28518] ? __lock_acquire+0x7eb0/0x7eb0 [ 1808.922409][T28518] should_fail_ex+0x394/0x4c0 [ 1808.927186][T28518] should_failslab+0x9/0x20 [ 1808.931913][T28518] slab_pre_alloc_hook+0x59/0x300 [ 1808.937005][T28518] ? sk_prot_alloc+0xe7/0x210 [ 1808.941748][T28518] ? sk_prot_alloc+0xe7/0x210 [ 1808.947451][T28518] __kmem_cache_alloc_node+0x53/0x250 [ 1808.952920][T28518] ? sk_prot_alloc+0xe7/0x210 [ 1808.957701][T28518] __kmalloc+0xa7/0x240 [ 1808.961953][T28518] sk_prot_alloc+0xe7/0x210 [ 1808.966526][T28518] ? sk_alloc+0x24/0x350 [ 1808.970844][T28518] sk_alloc+0x3a/0x350 [ 1808.974977][T28518] ? bpf_ctx_init+0x154/0x190 [ 1808.979741][T28518] bpf_prog_test_run_skb+0x371/0x18f0 [ 1808.985710][T28518] ? __fget_files+0x28/0x460 [ 1808.990363][T28518] ? __fget_files+0x3fc/0x460 [ 1808.995391][T28518] ? cpu_online+0x60/0x60 [ 1808.999807][T28518] bpf_prog_test_run+0x31f/0x390 [ 1809.005164][T28518] __sys_bpf+0x49d/0x890 [ 1809.009551][T28518] ? bpf_link_show_fdinfo+0x560/0x560 [ 1809.015099][T28518] ? lock_chain_count+0x20/0x20 [ 1809.020052][T28518] __x64_sys_bpf+0x7c/0x90 [ 1809.024549][T28518] do_syscall_64+0x55/0xb0 [ 1809.029005][T28518] ? clear_bhb_loop+0x40/0x90 [ 1809.033756][T28518] ? clear_bhb_loop+0x40/0x90 [ 1809.038688][T28518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1809.044780][T28518] RIP: 0033:0x7ff25539e559 [ 1809.049281][T28518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1809.068993][T28518] RSP: 002b:00007ff2561eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1809.077483][T28518] RAX: ffffffffffffffda RBX: 00007ff255625fa0 RCX: 00007ff25539e559 [ 1809.085628][T28518] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 1809.093732][T28518] RBP: 00007ff2561eb090 R08: 0000000000000000 R09: 0000000000000000 [ 1809.101742][T28518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1809.109755][T28518] R13: 00007ff255626038 R14: 00007ff255625fa0 R15: 00007ffda9e80bc8 [ 1809.117873][T28518] [ 1809.410133][T28525] __nla_validate_parse: 1 callbacks suppressed [ 1809.410243][T28525] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6667'. [ 1809.442954][T28528] netlink: 'syz.4.6667': attribute type 10 has an invalid length. [ 1809.472713][T28528] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6667'. [ 1809.547224][T28528] dummy0: entered promiscuous mode [ 1809.609201][T28528] dummy0: entered allmulticast mode [ 1809.615390][T28527] netlink: 'syz.2.6668': attribute type 1 has an invalid length. [ 1809.648015][T28528] bridge0: port 3(dummy0) entered blocking state [ 1809.657243][T28527] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.6668'. [ 1809.709187][T28528] bridge0: port 3(dummy0) entered disabled state [ 1809.754328][T28528] bridge0: port 3(dummy0) entered blocking state [ 1809.760990][T28528] bridge0: port 3(dummy0) entered forwarding state [ 1810.263290][T28537] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6672'. [ 1810.273833][T28537] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6672'. [ 1810.285020][T28537] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6672'. [ 1810.961953][T28551] rxe_eth0 speed is unknown, defaulting to 1000 [ 1811.544139][T28565] netlink: 'syz.1.6678': attribute type 10 has an invalid length. [ 1811.686422][T28565] team0: Device ipvlan1 failed to register rx_handler [ 1812.200427][T23913] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1812.209213][T23913] Bluetooth: hci4: Injecting HCI hardware error event [ 1812.218395][T23913] Bluetooth: hci4: hardware error 0x00 [ 1813.066902][T28592] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6687'. [ 1813.108651][T28592] netlink: 'syz.2.6687': attribute type 10 has an invalid length. [ 1813.118608][T28592] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6687'. [ 1813.129145][T28592] dummy0: entered promiscuous mode [ 1813.142317][T28592] dummy0: entered allmulticast mode [ 1813.157448][T28592] bridge0: port 2(dummy0) entered blocking state [ 1813.182036][T28592] bridge0: port 2(dummy0) entered disabled state [ 1813.275656][T28592] bridge0: port 2(dummy0) entered blocking state [ 1813.283310][T28592] bridge0: port 2(dummy0) entered forwarding state [ 1814.452325][T23913] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1815.122701][T28634] FAULT_INJECTION: forcing a failure. [ 1815.122701][T28634] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.153885][T28634] CPU: 1 PID: 28634 Comm: syz.1.6705 Not tainted syzkaller #0 [ 1815.161444][T28634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1815.171557][T28634] Call Trace: [ 1815.174886][T28634] [ 1815.177871][T28634] dump_stack_lvl+0x18c/0x250 [ 1815.182624][T28634] ? show_regs_print_info+0x20/0x20 [ 1815.187888][T28634] ? load_image+0x420/0x420 [ 1815.192468][T28634] ? __might_sleep+0xe0/0xe0 [ 1815.197121][T28634] ? __lock_acquire+0x7eb0/0x7eb0 [ 1815.202203][T28634] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1815.208297][T28634] should_fail_ex+0x394/0x4c0 [ 1815.213057][T28634] should_failslab+0x9/0x20 [ 1815.217632][T28634] slab_pre_alloc_hook+0x59/0x300 [ 1815.222413][T28631] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6704'. [ 1815.222691][T28634] ? lockdep_hardirqs_on+0x98/0x150 [ 1815.222754][T28634] ? tomoyo_encode+0x2ad/0x570 [ 1815.222780][T28634] ? tomoyo_encode+0x2ad/0x570 [ 1815.222802][T28634] __kmem_cache_alloc_node+0x53/0x250 [ 1815.222844][T28634] ? tomoyo_encode+0x2ad/0x570 [ 1815.222866][T28634] __kmalloc+0xa7/0x240 [ 1815.222905][T28634] tomoyo_encode+0x2ad/0x570 [ 1815.265873][T28634] tomoyo_realpath_from_path+0x57c/0x5c0 [ 1815.271690][T28634] ? tomoyo_domain+0xd6/0x120 [ 1815.275234][T28635] netlink: 'syz.0.6704': attribute type 10 has an invalid length. [ 1815.276551][T28634] tomoyo_path_number_perm+0x248/0x5e0 [ 1815.289923][T28634] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1815.295625][T28634] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1815.301309][T28634] ? __fget_files+0x28/0x460 [ 1815.306011][T28634] security_file_ioctl+0x70/0xa0 [ 1815.311034][T28634] __se_sys_ioctl+0x48/0x170 [ 1815.315695][T28634] do_syscall_64+0x55/0xb0 [ 1815.320182][T28634] ? clear_bhb_loop+0x40/0x90 [ 1815.324935][T28634] ? clear_bhb_loop+0x40/0x90 [ 1815.329672][T28634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1815.335631][T28634] RIP: 0033:0x7ff25539e559 [ 1815.340103][T28634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.350639][T28635] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6704'. [ 1815.359929][T28634] RSP: 002b:00007ff2561eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1815.359961][T28634] RAX: ffffffffffffffda RBX: 00007ff255625fa0 RCX: 00007ff25539e559 [ 1815.359978][T28634] RDX: 0000200000001340 RSI: 0000000000008922 RDI: 0000000000000008 [ 1815.359992][T28634] RBP: 00007ff2561eb090 R08: 0000000000000000 R09: 0000000000000000 [ 1815.360007][T28634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1815.360021][T28634] R13: 00007ff255626038 R14: 00007ff255625fa0 R15: 00007ffda9e80bc8 [ 1815.360062][T28634] [ 1815.520444][T28634] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1815.538213][T28635] dummy0: entered promiscuous mode [ 1815.543994][T28635] dummy0: entered allmulticast mode [ 1815.550733][T28635] bridge0: port 2(dummy0) entered blocking state [ 1815.557455][T28635] bridge0: port 2(dummy0) entered disabled state [ 1815.595706][T28635] bridge0: port 2(dummy0) entered blocking state [ 1815.602381][T28635] bridge0: port 2(dummy0) entered forwarding state [ 1817.258596][T28672] netlink: 'syz.0.6716': attribute type 10 has an invalid length. [ 1817.361402][T28672] macvlan0: entered promiscuous mode [ 1817.381464][T28672] macvlan0: entered allmulticast mode [ 1817.552609][T28672] veth1_vlan: entered allmulticast mode [ 1817.625114][T28672] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1817.867168][T28684] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6720'. [ 1819.300350][T28706] netlink: 'syz.1.6728': attribute type 1 has an invalid length. [ 1819.310314][T28706] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.6728'. [ 1819.507533][T28708] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6729'. [ 1819.548229][T28709] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6729'. [ 1820.005173][T28718] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1820.829261][T28735] netlink: 'syz.4.6737': attribute type 10 has an invalid length. [ 1820.953110][T28735] macvlan0: entered promiscuous mode [ 1820.980469][T28735] macvlan0: entered allmulticast mode Stopping sshd: [ 1821.474362][T28735] veth1_vlan: entered allmulticast mode stopped /usr/sbin/sshd (pid 5530) OK [ 1821.859612][T28735] bond0: (slave macvlan0): Enslaving as an active interface with an up link Stopping crond: stopped /usr/sbin/crond (pid 5517) OK [ 1822.511066][T28776] netlink: 'syz.4.6742': attribute type 10 has an invalid length. [ 1822.570286][T28776] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6742'. [ 1822.695955][T28785] netlink: 'syz.1.6746': attribute type 10 has an invalid length. [ 1822.754714][T28785] macvlan0: entered promiscuous mode [ 1822.764744][T28785] macvlan0: entered allmulticast mode [ 1822.796295][T28785] veth1_vlan: entered allmulticast mode [ 1822.830091][T28785] bond0: (slave macvlan0): Enslaving as an active interface with an up link Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5435) [ 1823.395959][T28804] netlink: 'syz.1.6751': attribute type 10 has an invalid length. [ 1823.472542][T28804] veth1_vlan: left allmulticast mode Stopping network: OK Stopping iptables: OK Stopping system message bus: [ 1826.777090][T28877] netlink: 'syz.4.6773': attribute type 10 has an invalid length. [ 1826.796772][T28877] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6773'. [ 1827.209480][T28900] FAULT_INJECTION: forcing a failure. [ 1827.209480][T28900] name failslab, interval 1, probability 0, space 0, times 0 [ 1827.264617][T28900] CPU: 1 PID: 28900 Comm: syz.2.6780 Not tainted syzkaller #0 [ 1827.272210][T28900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1827.282333][T28900] Call Trace: [ 1827.285657][T28900] [ 1827.288637][T28900] dump_stack_lvl+0x18c/0x250 [ 1827.293470][T28900] ? show_regs_print_info+0x20/0x20 [ 1827.298724][T28900] ? load_image+0x420/0x420 [ 1827.303297][T28900] ? __lock_acquire+0x7eb0/0x7eb0 [ 1827.308383][T28900] ? verify_lock_unused+0x140/0x140 [ 1827.313649][T28900] should_fail_ex+0x394/0x4c0 [ 1827.318390][T28900] should_failslab+0x9/0x20 [ 1827.322956][T28900] slab_pre_alloc_hook+0x59/0x300 [ 1827.328041][T28900] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 1827.333644][T28900] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 1827.339272][T28900] __kmem_cache_alloc_node+0x53/0x250 [ 1827.344710][T28900] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 1827.350319][T28900] __kmalloc+0xa7/0x240 [ 1827.354544][T28900] bpf_prog_test_run_skb+0x242/0x18f0 [ 1827.359979][T28900] ? __fget_files+0x28/0x460 [ 1827.364636][T28900] ? __fget_files+0x3fc/0x460 [ 1827.369400][T28900] ? cpu_online+0x60/0x60 [ 1827.373797][T28900] bpf_prog_test_run+0x31f/0x390 [ 1827.379340][T28900] __sys_bpf+0x49d/0x890 [ 1827.383646][T28900] ? bpf_link_show_fdinfo+0x560/0x560 [ 1827.389088][T28900] ? lock_chain_count+0x20/0x20 [ 1827.394042][T28900] __x64_sys_bpf+0x7c/0x90 [ 1827.398507][T28900] do_syscall_64+0x55/0xb0 [ 1827.402970][T28900] ? clear_bhb_loop+0x40/0x90 [ 1827.407698][T28900] ? clear_bhb_loop+0x40/0x90 [ 1827.412422][T28900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1827.418380][T28900] RIP: 0033:0x7f1d3a79e559 [ 1827.422844][T28900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1827.442507][T28900] RSP: 002b:00007f1d3b63a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1827.451087][T28900] RAX: ffffffffffffffda RBX: 00007f1d3aa25fa0 RCX: 00007f1d3a79e559 [ 1827.459124][T28900] RDX: 0000000000000050 RSI: 00002000000009c0 RDI: 000000000000000a [ 1827.467189][T28900] RBP: 00007f1d3b63a090 R08: 0000000000000000 R09: 0000000000000000 [ 1827.475219][T28900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1827.483256][T28900] R13: 00007f1d3aa26038 R14: 00007f1d3aa25fa0 R15: 00007fffb181de58 [ 1827.491326][T28900] [ 1827.903039][T28911] netlink: 'syz.4.6785': attribute type 11 has an invalid length. [ 1827.930145][T28911] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6785'. done [ 1828.619274][T28921] netlink: 'syz.1.6789': attribute type 21 has an invalid length. [ 1828.640361][T28921] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6789'. [ 1829.017643][T28937] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.6795'. [ 1829.170294][T28940] netlink: 'syz.2.6796': attribute type 21 has an invalid length. [ 1829.210204][T28940] netlink: 'syz.2.6796': attribute type 1 has an invalid length. [ 1829.218136][T28940] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6796'. [ 1830.518443][T28963] IPv6: NLM_F_CREATE should be specified when creating new route Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 5123) OK [ 1833.655366][T29052] netlink: 'syz.4.6834': attribute type 10 has an invalid length. [ 1833.676953][T29052] wlan1: mtu less than device minimum [ 1833.716545][T29052] bond0: (slave wlan1): Error -22 calling dev_set_mtu umount: can't remount debugfs read-only [ 1834.127952][T29055] rxe_eth0 speed is unknown, defaulting to 1000 [ 1834.594113][T29069] FAULT_INJECTION: forcing a failure. [ 1834.594113][T29069] name failslab, interval 1, probability 0, space 0, times 0 [ 1834.667380][T29069] CPU: 0 PID: 29069 Comm: syz.2.6844 Not tainted syzkaller #0 [ 1834.674950][T29069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1834.685056][T29069] Call Trace: [ 1834.688376][T29069] [ 1834.691342][T29069] dump_stack_lvl+0x18c/0x250 [ 1834.696067][T29069] ? show_regs_print_info+0x20/0x20 [ 1834.701311][T29069] ? load_image+0x420/0x420 [ 1834.705891][T29069] ? __might_sleep+0xe0/0xe0 [ 1834.710578][T29069] ? __lock_acquire+0x7eb0/0x7eb0 [ 1834.715666][T29069] should_fail_ex+0x394/0x4c0 [ 1834.720410][T29069] should_failslab+0x9/0x20 [ 1834.725259][T29069] slab_pre_alloc_hook+0x59/0x300 [ 1834.730343][T29069] ? __request_module+0x2ed/0x600 [ 1834.735451][T29069] ? __request_module+0x2ed/0x600 [ 1834.740530][T29069] __kmem_cache_alloc_node+0x53/0x250 [ 1834.745971][T29069] ? __request_module+0x2ed/0x600 [ 1834.751041][T29069] __kmalloc_node_track_caller+0xa4/0x230 [ 1834.756829][T29069] kstrdup+0x3b/0x80 [ 1834.760792][T29069] __request_module+0x2ed/0x600 [ 1834.765792][T29069] ? module_enforce_rwx_sections+0x150/0x150 [ 1834.771827][T29069] ? dev_load+0x21/0x1f0 [ 1834.776122][T29069] ? bpf_lsm_capable+0x9/0x10 [ 1834.780855][T29069] ? dev_load+0x21/0x1f0 [ 1834.785256][T29069] dev_load+0x18b/0x1f0 [ 1834.789466][T29069] dev_ioctl+0x79f/0x1140 [ 1834.793842][T29069] sock_do_ioctl+0x239/0x310 [ 1834.798493][T29069] ? sock_show_fdinfo+0xb0/0xb0 [ 1834.803423][T29069] sock_ioctl+0x5be/0x7e0 [ 1834.807805][T29069] ? sock_poll+0x3e0/0x3e0 [ 1834.812286][T29069] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1834.817266][T29069] ? security_file_ioctl+0x80/0xa0 [ 1834.822436][T29069] ? sock_poll+0x3e0/0x3e0 [ 1834.826909][T29069] __se_sys_ioctl+0xfd/0x170 [ 1834.831602][T29069] do_syscall_64+0x55/0xb0 [ 1834.836069][T29069] ? clear_bhb_loop+0x40/0x90 [ 1834.840834][T29069] ? clear_bhb_loop+0x40/0x90 [ 1834.845565][T29069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1834.851519][T29069] RIP: 0033:0x7f1d3a79e559 [ 1834.855985][T29069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1834.875647][T29069] RSP: 002b:00007f1d3b63a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1834.884097][T29069] RAX: ffffffffffffffda RBX: 00007f1d3aa25fa0 RCX: 00007f1d3a79e559 [ 1834.892097][T29069] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000004 [ 1834.900093][T29069] RBP: 00007f1d3b63a090 R08: 0000000000000000 R09: 0000000000000000 [ 1834.908082][T29069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1834.916070][T29069] R13: 00007f1d3aa26038 R14: 00007f1d3aa25fa0 R15: 00007fffb181de58 [ 1834.924082][T29069] [ 1835.283193][T29077] netlink: 190016 bytes leftover after parsing attributes in process `syz.2.6847'. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.162 closed by remote host. Sent SIGKILL to all processes [ 1838.853498][T28763] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Requesting system poweroff [ 1838.958581][T28763] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.034060][T28763] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.120752][T28763] team0: Port device netdevsim0 removed [ 1839.129859][T28763] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.891740][T29130] smc: removing ib device rxe0 [ 1839.917889][T29130] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1839.931626][T29130] ACPI: PM: Preparing to enter system sleep state S5 [ 1839.942866][T29130] kvm: exiting hardware virtualization [ 1839.948959][T29130] reboot: Power down serialport: VM disconnected.