last executing test programs: 2.376234607s ago: executing program 3 (id=2131): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x18, 0x0, 0x1, &(0x7f0000001780)) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000ffffffd70700002000000095000000000000002ba72804605789bfbc7174159805d30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc162619b3af8a4e825d922c65e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bf3d6b2e28f90c52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d350100c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64dc4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a7e008f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d054c744fd06a57f7bcb8fb58c512d0884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637c335892b420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072da00f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce6459200000067c38a656d326cff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b52f79a3f7306436762dd1a08ce023e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac3ffff1ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d0dbaec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f6eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032bd2649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a604e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b0104000000000000a4c0a1d44d9dfd82896f5623e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f330a5e05b59db781cf9cf33752836fff6fcbf379332357c47f3597e084d0779b3cbfb312925a8151e338eca2c80600000000ac5992a4c7ec0b741f117f628562c3b27483ad6d733ffcbfca0ba805af95f8985901b0b8f918efa139e984fe872f22f5f094e3fbdf45ec2076710d8c787156b3e05774ac977c3db6288d252b2a73c84a07d73f9721e52f5b5d331ebb7db0a03be93fd96d7355405e954b8d6d0efcd6c37d869086efe15e30b7b6b2b37647e265a62fccfeb16f12f109dc5e405b53d1737b7a2620943affaa2eb07585e23e0513df2f83218f9f3ed9ba3026bcfbe5e9b36ab5b052886227827b983c0fe8da495f1ea7b5c35e42ff83f6e5e5a71ba3000000000000000000f73ffcd0c92a30304d5142441978012e2e6e1c45c28713fa5354f1fd124598688dffa0890dc8c6b4d9732347896d17d4efe12c20c706dcd4601135c553713cc4000a6690a2eed2e680db50589a659a240afc2c1eaa381a4135933a8d7abff2a7882ff50eabbe493ae54f71473eb65fe8e850f36d096a9c7dfd8fd2a35234bef2ba4755e10489b2508e4a9d911135b6c802e16e23fc7a3c3c0f5939b842bca82db931e5ba180f1eed5f539371105aee1d06af045892e18eb5dfd361f6d89fff0b82da98fa7aa90fe92b59887fda0ed8d375ba13fe3f63e69e417c89e31fdf55b9c2e9e0398c661d4c4ce0804971f3"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000f000000040000000100000000000000", @ANYRES32, @ANYBLOB="feffffff0000000001000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000080), &(0x7f0000000340)}, 0x20) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000016c0)=@base={0x1f, 0x0, 0x0, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xf7, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x42}, 0x21) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2.303886429s ago: executing program 2 (id=2133): r0 = perf_event_open(&(0x7f0000000040)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) (async) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000001380)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRES8=r1, @ANYRES32=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x81, 0x6, 0xa, 0x0, 0x80000000008, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x7, 0x5}, 0x2800, 0x1, 0x7fffffff, 0x4, 0x3, 0x7fff, 0x3, 0x0, 0x8, 0x0, 0x100000001}, r1, 0x9, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xffc, 0x1, 0x0, 0x0, 0x4, 0x0, 0xfffffff8, 0x0, 0x4000000000}, 0x0, 0x1, 0xffffffffffffffff, 0xa) (async) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000013c0), 0x4) (async) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) (async) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000bc0)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @broadcast}, 0x80, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001040)='memory.swap.current\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000001140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000001c00000000000300000000030000000200000002000000080000000000000700ff03000000"], &(0x7f0000001300)=""/64, 0x3e, 0x40, 0x1, 0x7, 0x10000, @value=r6}, 0x28) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000011000000000000000000001b000000"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000380), 0xc, r7}, 0x38) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) (async) ioctl$TUNSETLINK(r6, 0x400454cd, 0x313) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) r9 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r9, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x129}], 0x2, &(0x7f0000001400)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11, 0x29, 0x2}}], 0x50}, 0xfffc) 2.140826454s ago: executing program 1 (id=2134): r0 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="39943837faa8474b8199711db0bdc1b0c74701832e8947f25d53e0054bda28d6a29d476dfc5a885833d1846f0c5968eb435e9d4eecbdc83aa05ad8aaf9d311c7649210985d0407d1daa107b61ea8029ea66c7190c9124303a0dd65a1bc3b2532bb5d77d9764050d7798fcbf75073f4bf7f1393aeeb7a53a9cffb", 0x7a}, {&(0x7f0000000600)="c569ee7099e2d9b2025e7e11c5ca61d5f8ebaa7320d2e5ec3c2c40c04b03c988f95e4c0a953c4539f39ebf44bfe78b36751d86b1311a3883c37ff889a1bf7b929ebeaf410c7efe8e9cf6e256a9d3cf9f804a08b7af0fce27b6927483e41e1fccc69441b12be8cefa4ce1040a82f6d8c410529f3b176241921d78a563941a2cd6caf36feb855d1bdafc9c78a9d140ff96abc1b04d46065022b6d0f2c7519087946716ee67fca9b79106e3f9c97ea6c81838892a6d3f", 0xb5}], 0x2, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x40, 0x10}, 0x8894) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x39, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40c40, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xf}, 0x100002, 0x400010000, 0x9e6, 0x2, 0x6, 0x20105, 0x0, 0x0, 0x0, 0x0, 0x20000006}, r0, 0x11, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8f4, 0x2}, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r2, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000200), 0x21) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2000481c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000d4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4008050) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000001b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 2.018638158s ago: executing program 2 (id=2136): socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000970007000000441c0503e0200001", @ANYRES64], 0x30}, 0x40880) 1.981030609s ago: executing program 0 (id=2137): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0x43, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x2b, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff2}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x3, 0x0, 0x3, 0x4, 0x6, 0xfffffffffffffff0, 0x10}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0x43, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x2b, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff2}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x3, 0x0, 0x3, 0x4, 0x6, 0xfffffffffffffff0, 0x10}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) (async) 1.911987021s ago: executing program 3 (id=2138): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x20, &(0x7f0000000980)={&(0x7f0000000740)=""/139, 0x8b, 0x0, &(0x7f0000000800)=""/221, 0xdd}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000001c0)=ANY=[@ANYRES16=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) close(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000100004c00000000009500000010000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000010008500000022000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r9, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0}, 0x200ce0c0) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r10, 0x88, 0x67, &(0x7f00000002c0)=r11, 0x4) sendmsg$kcm(r9, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000017c0)="eb7746cfdbd4c448396eec770a8ef94cd714bac5524105268dc46523915b79c042e388ca33a23da338c4c84aaf2e27305630b77ea19ca85fef5daf9574192c412cc65090cbd25e33437311b0f8b26f9d2f9fe7bf9b1d7a51a931f5a648318a1cf2e2d5de121552ea9134135ed9c8f38738413331f4e2c9d99886ff71aaa20a034d3dbe2a3cc8ad46a56f96af271610ec4ae14cd53f33def402600cc68eca4aa772906d9fa36d762663e63d0e85ab5e233a093a41f062ee1809391908274cfe82bde316977870a969c4d30b14e551693817db10157cacdf3ce9b91b5c9d4a3db3c2eb28d40f88995869", 0xe9}, {&(0x7f00000018c0)="dfdcbfeb9d86dd63cdf171ae03e46b5c89771fcbb9208f9637bbbd88631085abf847647aefceaa7e543a6c49f97a770b550fb7546e001d8c0f982821efdbebaf368937e79a3f54d54b2b58de29514197c2064a7a8f1b812616f512d99488bc526a12f218d248bf46bb5c164fdb43cdbfea7998f37561070e6a85d5de42a4fb2756f2dadfbaf49d920fe26346da6aa9f2461f7e5ae07fa1cd2e6865541f79b728e25ab2dc3668d5828634a48c74faddb1ba431514c09af513405f97069af702165ed2f15b08817b956a8f234eca056829f4576753be", 0xd5}], 0x2}, 0xc0) sendmsg$inet(r10, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local}}}], 0x20}, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xff97, &(0x7f0000000dc0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x20040080) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007000000000000ac9ac41046be3bb8d4fd44465f002208f711d5112383ecbc5799fba8e143009c2ffe34a4b98c80452111e3a03e998d927529b3a4e5ab03ea29d3012588889e1c9b", @ANYRES32, @ANYBLOB="ff0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r13, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x89e1, &(0x7f0000000040)={r10}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r10, 0x2405, r0) 1.813608914s ago: executing program 0 (id=2139): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640bd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x101d0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002ec0)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3, 0x4000}, 0x80, 0x0}, 0x20000804) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.794543815s ago: executing program 2 (id=2140): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xb}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800000000000000000000000000000000000700000095000000000000009829d16e8c1cb7e26f6b932a447a51f3aa91559cd602bfa77cd186928b78338b201a9a44fa6d605ad4c8830fca05d670bb5741fe5c0be71debdc82"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003640)={0x5, 0xb, &(0x7f0000003580)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x98b}}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000080)=ANY=[]) socket$kcm(0x2, 0x3, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000190081054e8155dddb4cb9040220080006007cc7fb4cd02a09e8fe55a10a0005000400142603600e1208001e0000000401a8101600200004400400027c035c0461c1d67f8a94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791645cc88d722c42be97a19ec23a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00361ab798262f3d40fad95667e006dcdf63951f215ce3bb485a27e001f23b6e779ad809d5e1cace81ed0bffece0b42a9ecbee5d", 0xd7}], 0x1}, 0x4000010) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c04000afff903905800000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc06020000004603b886a5e54f8f", 0x48}], 0x1}, 0x4000000) 1.529589013s ago: executing program 1 (id=2141): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc", 0x13}], 0x1}, 0x0) recvmsg$kcm(r1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffcbe, &(0x7f0000000140)="06f7", 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b70000000000000095000010000000004e62011c3034fdb117168bd07ba08af339d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d458e17f791f4798c8eb484de03312c69b3edff5be26765ba5f8f2879021c2ea53ac547a654bbd2db5356b971d83dd12742be9087a3e7b7c0efd3e38c794eb06b0b8c392904ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057826ef4e912f01a201e694e3049b8c8fe8b65d8d66bb766f7f3f918c86a702522368d9f81897133af94a5a4cff7f4d8b9d8eaf302f0b2e0c252b0000000000000000ee917bca4885bbf597a14ab6458e6272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36be115be3b325ecd201d2ffb0a7fa4f5d1106560cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b861299fcd9ed9d8679406419406bf0c5329bd5b4697336112b0b8756ce3574046bf611a108f8df4d1a88597840b702b6fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf39a43a66c5540b8762b42007c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4b19b53b60322af0aa66e8f448e1bd96822e6b70b62912c926dbe417cccd4f696d528fa8a3ea847f10e9b1106f3bb506f1d7fbdf801000000000000006c028eb5b5a073d0de5538ab42e171b3baae34c35987b0dda497ac3f5e97e60eaeea15c6d55badf9b86b1c000100006e60cd06c9ed24313ce607d403bb6030f800000000690db0221b1705c501f802ff59b4e683efa4b6e77e042072ec9eb8166f6e28b49a7705a1befc4d315878f88a8fb1dd679fb4c5557abae6849917dc51a89d47b728502f7e621fc0e3ba04020000c149ee6601728c750930519339b44197c22da865059b475afd96187d881e93b42a5fdfd686d8900c44c67133eeb0109dcb60dddad58037fda65885a15a42560ee3027a5ebf95254744f10fd607bc3100b94932b8d9447c42f6e21ee0e54f8be386bdc09decece910a481e648e0cb074536a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6ae00f0000000000006a8194479700a02b92bec8d05eae1f24fdd7b80d3dde04c22f689594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4acd7acf1dfe79d6771903b76e2ae47d972651390c22d641030e1ddac018dc3116e1803af10a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f00000000000000001000ba96edb95ede0e1957c2a2754258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548941d5d16297757310d9daebd5a3dabbced3b051129cd60a37d397643324e6f0aadf978d639650000000000000000570b0acbcaa196e6b46e213a34c1a550e7c2d8cee7a278cee591f360e345d37dc9f8991a16c08d72317e42d2ac9126acd76130ef1086016697e4d51c4b42b2efc8edab88d46bc3d5d6e5a634c912bc40513643bf44cb416b3149040220aa39035ae46d16d879fc815a5cb84b0d5c8ad970128adf8dec1171e860ca54ce5d6a5aa0327bca4f49a710bf8a8399071237fe5d764e2034873c94a4f21287f3bce3eeb69e94df2e14e4ab10cc7834b304bc879b80255991dd7aac2e92c9e7c411c019d229c1f1e563152f1c5ae9cda3e808000000a0c779d624c5a2b7491b8f73e767389ecd1dee951353bb22b7caf89468871520823715cfebd04189c6c6b34bd8a6541f6bc0630000000000f94e85f5111add3a3cb5bcace95f38465402c39df835754ef33056b0e1134187822c001a25304f3e00b44675d0a25a21dc4023c642cc6f5a75c45a29ab933600acf9a2d471b73a73178cdf309e5d53311996215b44295dfddc1dd6b81132e999366e460d15d366e84da02b8afc40c47e733f804460ed8300ec34eab2ed80097bd32ff1a6143ab1476037e474ca876187c85bed4391215cd77e6a1fd6399a498b96b9b0cca93255acb08c67e50004c5af6fd5b4ce7c1ebc9202bd7b329a4d2530486d5999dd7f90ebecca37f2869135438f05407b1fd7481daf9ec94b799c12e714d573e2a6331f496254f254a60c52b2026ed6a72c82cd191490fabe7b151f92e5d700f21830d613fbe490f305b3845a78817e59bf7ed36471dbca01d39e50ae2535460e1d2f2614940647233a02d5000000000000000000f70e52f0d56f6a4dcf7e57c03d4b4add0500000000000000320304d0d2b308c5ed3956eae263035d703f862224e9818a3d7ac270793a7bf2af87585293960a80ac63c54e55063bf8d24639e561253ef0caf6c58118120d8acecc0528f0d81d291009fc46401baf9c22d1c452a5b61b7a1b9adfcc17f5ad99dcdf935923185db7b14a7fa7babc1f53df70618bb73aa810b756696f26653b84cf842ae433fda59fbe312be11bb7dfecdc38c1c1f688d2724568cc396fca7c74984b7f7bd000000000000003ff3e5857fc6598c933610be374909dc8622b0722259e922f40d7862f7ea72f1754f07711de7600000000000000000000000000c4cb643e73ad8a45f0c7164484540e66e29943aa72297d831ce6c978866a55ed53130c6747f569c9c9abe724b4fc647b17401d2201e8c201e7d6ffa1fa122677f7393ed4fe8a93306f048b6703b04544e42a9cd937ef8d98ee8d878a12a627791c5c2d9fc6de65356be92fd98fdbe819686c7bd3be5bd0ce627c8357675f752c73a502d25c31c831078f098c34295bfe90e882843003841f4c0c65dc1810a50000000000000015911cb03e743c482199757d35df5b59fe0a0c5240c85498d818578e2d65c4ff4acbee037498222b1f81f3726a244da1fd6b8c195f1303bedb744045f31e1547d7bc3c3eae68b8da059a59c8c37e3639c2c4eb3d8229ac24d2ce12bc0e5db4a8202d72e64d5c5eacd0d0c0cd7a879ed967f5a2bd39ae4cf7daf7c9fa1777d54fb5920c8434163f75062c62455bf6e23817a85d"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0xfeffff, 0x111, 0x0, &(0x7f0000000700)="c45c573d395de5b2891aaa5e825b6b2e91c6f6acfeb0d57d637a3920f181c2e57d71483cfb2d075a3fa67258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778ebac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a63d0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23ee3d160d4fd90f66beba68860456ed3188922a40519d99079b272e1e68d16e2564c85f5556e18784113c493d13253e14d6eb891707fba3c3", 0x0, 0xf0, 0x0, 0x0, 0x75, &(0x7f0000000100), &(0x7f0000000380)="a66379c5ad06d1618d57ba3e314e6a0ff4b08c12e8f22d33d75f1b3c642b6a8d12d4258e3701403d672e45ff32c04a686e7f11c8c0c237bbe70b6236973e8f2360ef81afdb3c1f5a212d2a43ca47698f9d257897fb0e3e51fd5d51928d831f0557262350d4f43d41858cd47b2e900998239ae59e4a", 0x0, 0x0, 0xfffffffe}, 0x50) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0xc0}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90924fc60040f030047000000053582c137153e370248018000f01700d1", 0x2d}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES8=r7], 0x12) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001980)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003b00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x6000000) 1.431293676s ago: executing program 0 (id=2142): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xb, r0, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x200, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85a, 0x0, @perf_config_ext={0x8a15, 0x5}, 0x411, 0x1, 0xb, 0x5, 0xe4c2, 0x0, 0x0, 0x0, 0x2}, r2, 0x0, 0xffffffffffffffff, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x80ffff}, 0x80) 1.240046202s ago: executing program 1 (id=2143): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000e80)={r0, &(0x7f0000000e00)="bd02b0d7f871969a8b8eed49231d9d0f0dc41e9f73479e53056745e2c82f11c8c8183f0c9dcabfde8d10e44d9d196c090708e46436cb9097dabac5b34939ff0a4c1c48854e08a0bd7f524d5ab8329e1bfe32e3c8e481137a2daa53"}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e6900850000008a00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB="05000000000000008a526f9fe02e5f3ecae25c23d9b04b527fa9d9326e0a9cd312a8d7471defe1b86a9cc0b1187f4481d12afaff43f64c0a38f568f584990e4ef899b0c12939dacbd67c57ab2af71223e7b41b9a54fc2fbae0c36a2b0981fc55d458ff2c90d8a728c3526564afac070b52c9cde0c65e4324943f45673e2a9e93a0b63a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0200000009000000040000000104000010010300", @ANYRES32=r0, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000300"/24, @ANYRES32, @ANYBLOB="81855d73f29f4c455ba90b3cf8755ffad66144836d5c3c8725cb100e91eac867c9baf09f7c62bbea28f3ecbc5ff60e8740e46f26f67c6cbf03f47dec64d7cbd185fdc5b9dc7bf46eb62b72995a4964ef0906140221ff2c4aa1b7a8886cbd5a69f43364ec972751f43f8b76b28cd35fd575b5ca15691b0b233d1fe97307f1e0bd0f3c6a2e96920f7c8e869e92257d1991"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r1, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000780)=[0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000480), &(0x7f00000009c0), 0x8, 0x2009f, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b80), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c00)={0x1, 0x0}, 0x8) r10 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x23, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xa, 0x13, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000009000000000000000000008018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000002007020000f8ffffffb703000008000000b704000000000000850000008200000095000000000000001844000007000000000000000000000095000000000000004c422554c7f2fde538dfeeb199491cc8f860f6cc8dcd471ba906e914c7b34e6a2aa19e8884c8b365df0f0f31f95c6c224e93f6"], &(0x7f0000000640)='syzkaller\x00', 0x5, 0x92, &(0x7f0000000680)=""/146, 0x40f00, 0x4, '\x00', r7, @fallback=0x26, r8, 0x8, &(0x7f0000000bc0)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x3, 0x2, 0xc, 0xb}, {0x3, 0x2, 0x2, 0x8}], 0x10, 0x1}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000030000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r11}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f0000002100)={0x53fa9127253110ac, 0x80, 0x2, 0x0, 0x0, 0x5, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x80000001, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x10886, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f93da3c92b", 0x14}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x0, 0xfffffffc}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000540)="f4000900062b2f25fe80000000000000dc8b2b8b816937dcef1258850f238466cc00007a000000ad6e91880b", 0x2c}], 0x1}, 0x0) 1.194423093s ago: executing program 3 (id=2144): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3efd7ab4c41335d9, @perf_config_ext={0x8, 0x54e}, 0x0, 0xf452, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000061115c00000000001800000028000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 1.020419378s ago: executing program 0 (id=2145): socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0xf}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) socket$kcm(0x10, 0x400000002, 0x0) 1.014171309s ago: executing program 2 (id=2146): bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000016c0)=@base={0x1f, 0x0, 0x0, 0x2000}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0xa8}, 0x10140) openat$ppp(0xffffffffffffff9c, &(0x7f0000000800), 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) (fail_nth: 43) 985.27989ms ago: executing program 3 (id=2147): socket$kcm(0x10, 0x3, 0x10) (async) socket$kcm(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000f00), 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x2b, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x8905, &(0x7f0000000100)={0xffffffffffffffff, r0}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x8905, &(0x7f0000000100)={0xffffffffffffffff, r0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001980)}], 0x1}, 0x24000008) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000f40)=ANY=[], 0x0, 0x30, 0x0, 0x1, 0xa5}, 0x28) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="2500000029000500", @ANYRES32=r3, @ANYBLOB, @ANYBLOB="7d7d0a77c8b8ba6f052952cdddf88a6fac937b4f3844e4be635efd7565da5f0da49c2120660d1302888387325e44c4c1cef40c2dac1d9143ffbcabc3e534c0727c81c040646783025ae513631941aa600632508bbd47c2301688bdcf355d8ab79c96a1d49f26c73e843d040ffed61c9adb4924a4170abde162cb13c1307601aaf7b65804b5e57722d87b0558a232f941d31c686cc8cd3147ecfd0cc4a0b31c5418945fefb37086adce94eb79d26ab7a21f52f5bc80d7e2721c09cf9c339773cf64b352fff5ffc3f7a868c5f1273a5ebeb7de6efe3ce2c90450a55212", @ANYRES64=0x0], 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="8fedcb79020098750e7638e486dd6317cf62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4108, 0x100c}], 0x1}, 0x2002) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f90824fc602f0000000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000003d8bb5c000000052bd0ce921b78c48c944dff60000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000005b987490caa6e5fdff9d9377c07a00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r8, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x20000007, 0x1002, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x20000007, 0x1002, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) 917.067422ms ago: executing program 1 (id=2148): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825ff02000000000060dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 916.097102ms ago: executing program 0 (id=2149): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0xc9495724790b983a, 0x80, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000003, 0x198a9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='c *:* '], 0x9) (async) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='c *:* '], 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x141002, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x141002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'erspan0\x00', 0x100}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'erspan0\x00', 0x100}) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 408.335437ms ago: executing program 1 (id=2150): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x109a42, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b112d00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x64}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES8=r2, @ANYRES8], 0x12) mkdir(0x0, 0x0) close(r0) 334.76187ms ago: executing program 3 (id=2151): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40040) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071101c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) 203.461403ms ago: executing program 2 (id=2152): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 108.034986ms ago: executing program 3 (id=2153): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x20, &(0x7f0000000980)={&(0x7f0000000740)=""/139, 0x8b, 0x0, &(0x7f0000000800)=""/221, 0xdd}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000001c0)=ANY=[@ANYRES16=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) close(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000100004c00000000009500000010000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000010008500000022000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r9, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0}, 0x200ce0c0) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r10, 0x88, 0x67, &(0x7f00000002c0)=r11, 0x4) sendmsg$kcm(r9, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000017c0)="eb7746cfdbd4c448396eec770a8ef94cd714bac5524105268dc46523915b79c042e388ca33a23da338c4c84aaf2e27305630b77ea19ca85fef5daf9574192c412cc65090cbd25e33437311b0f8b26f9d2f9fe7bf9b1d7a51a931f5a648318a1cf2e2d5de121552ea9134135ed9c8f38738413331f4e2c9d99886ff71aaa20a034d3dbe2a3cc8ad46a56f96af271610ec4ae14cd53f33def402600cc68eca4aa772906d9fa36d762663e63d0e85ab5e233a093a41f062ee1809391908274cfe82bde316977870a969c4d30b14e551693817db10157cacdf3ce9b91b5c9d4a3db3c2eb28d40f88995869", 0xe9}, {&(0x7f00000018c0)="dfdcbfeb9d86dd63cdf171ae03e46b5c89771fcbb9208f9637bbbd88631085abf847647aefceaa7e543a6c49f97a770b550fb7546e001d8c0f982821efdbebaf368937e79a3f54d54b2b58de29514197c2064a7a8f1b812616f512d99488bc526a12f218d248bf46bb5c164fdb43cdbfea7998f37561070e6a85d5de42a4fb2756f2dadfbaf49d920fe26346da6aa9f2461f7e5ae07fa1cd2e6865541f79b728e25ab2dc3668d5828634a48c74faddb1ba431514c09af513405f97069af702165ed2f15b08817b956a8f234eca056829f4576753be", 0xd5}], 0x2}, 0xc0) sendmsg$inet(r10, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local}}}], 0x20}, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xff97, &(0x7f0000000dc0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x20040080) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007000000000000ac9ac41046be3bb8d4fd44465f002208f711d5112383ecbc5799fba8e143009c2ffe34a4b98c80452111e3a03e998d927529b3a4e5ab03ea29d3012588889e1c9b", @ANYRES32, @ANYBLOB="ff0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r13, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x89e1, &(0x7f0000000040)={r10}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r10, 0x2405, r0) 107.468776ms ago: executing program 1 (id=2154): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x20040080) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@map, 0xffffffffffffffff, 0x3, 0x2c, r2}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa, 0xfff0, 0xffb0}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 69.012427ms ago: executing program 0 (id=2155): r0 = perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xb}, 0x114581, 0x4, 0x0, 0x1, 0x0, 0x100, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) (async) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40400, 0x0) (async) r3 = socket$kcm(0xa, 0x1, 0x106) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f00000001c0), 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x18, 0x0, 0x1, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x18, &(0x7f0000000000)=r7, 0x8) r8 = socket$kcm(0x10, 0x2, 0x4) close(r8) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$kcm(0x10, 0x2, 0x0) (async) r10 = socket$kcm(0x2, 0x2, 0x73) sendmsg$kcm(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$kcm(r3, 0x0, 0x20000001) r11 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r11, 0x6, 0x15, &(0x7f0000000500), 0x4) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000100)) (async, rerun: 32) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) (rerun: 32) 0s ago: executing program 2 (id=2156): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000002000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts. [ 70.229572][ T5761] cgroup: Unknown subsys name 'net' [ 70.360463][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.816271][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.822936][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.041831][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.554220][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.562213][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.571896][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.594106][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.603591][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.621533][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.623939][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.629562][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.644047][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.651205][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.656341][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.660560][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.666851][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.673413][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.687224][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.687557][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.695504][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.703440][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.709567][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.717828][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.723221][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.731835][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.761063][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.775835][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.203867][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 74.229441][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 74.308229][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 74.365769][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 74.455779][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.466186][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.473722][ T5775] bridge_slave_0: entered allmulticast mode [ 74.480636][ T5775] bridge_slave_0: entered promiscuous mode [ 74.491719][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.499127][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.506562][ T5776] bridge_slave_0: entered allmulticast mode [ 74.515860][ T5776] bridge_slave_0: entered promiscuous mode [ 74.548897][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.556307][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.563692][ T5775] bridge_slave_1: entered allmulticast mode [ 74.570538][ T5775] bridge_slave_1: entered promiscuous mode [ 74.577901][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.585265][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.592440][ T5776] bridge_slave_1: entered allmulticast mode [ 74.599674][ T5776] bridge_slave_1: entered promiscuous mode [ 74.637438][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.644768][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.651891][ T5774] bridge_slave_0: entered allmulticast mode [ 74.658955][ T5774] bridge_slave_0: entered promiscuous mode [ 74.692187][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.699737][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.707184][ T5774] bridge_slave_1: entered allmulticast mode [ 74.714737][ T5774] bridge_slave_1: entered promiscuous mode [ 74.742214][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.756531][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.769445][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.807717][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.815027][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.822199][ T5773] bridge_slave_0: entered allmulticast mode [ 74.829211][ T5773] bridge_slave_0: entered promiscuous mode [ 74.839950][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.878317][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.885718][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.893023][ T5773] bridge_slave_1: entered allmulticast mode [ 74.899807][ T5773] bridge_slave_1: entered promiscuous mode [ 74.920420][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.932632][ T5775] team0: Port device team_slave_0 added [ 74.941275][ T5775] team0: Port device team_slave_1 added [ 74.959204][ T5776] team0: Port device team_slave_0 added [ 74.969148][ T5776] team0: Port device team_slave_1 added [ 74.976866][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.039485][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.061574][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.075083][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.082035][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.108114][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.131856][ T5774] team0: Port device team_slave_0 added [ 75.149432][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.156547][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.182756][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.202202][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.209270][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.235391][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.248179][ T5774] team0: Port device team_slave_1 added [ 75.278474][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.285583][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.312426][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.347792][ T5773] team0: Port device team_slave_0 added [ 75.359519][ T5773] team0: Port device team_slave_1 added [ 75.373599][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.380579][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.406732][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.447827][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.455098][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.481237][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.523904][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.530899][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.559610][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.583413][ T5775] hsr_slave_0: entered promiscuous mode [ 75.589955][ T5775] hsr_slave_1: entered promiscuous mode [ 75.602141][ T5776] hsr_slave_0: entered promiscuous mode [ 75.608986][ T5776] hsr_slave_1: entered promiscuous mode [ 75.615318][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.623164][ T5776] Cannot create hsr debugfs directory [ 75.629290][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.639122][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.667812][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.774589][ T5774] hsr_slave_0: entered promiscuous mode [ 75.780894][ T5774] hsr_slave_1: entered promiscuous mode [ 75.787273][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.795490][ T5774] Cannot create hsr debugfs directory [ 75.806658][ T5773] hsr_slave_0: entered promiscuous mode [ 75.815748][ T5085] Bluetooth: hci3: command tx timeout [ 75.821826][ T5773] hsr_slave_1: entered promiscuous mode [ 75.827742][ T5085] Bluetooth: hci1: command tx timeout [ 75.827772][ T5781] Bluetooth: hci0: command tx timeout [ 75.827963][ T5781] Bluetooth: hci2: command tx timeout [ 75.844631][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.852216][ T5773] Cannot create hsr debugfs directory [ 76.246322][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.263553][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.282347][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.300769][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.351189][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.363435][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.382023][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.391880][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.489997][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.516249][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.526779][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.560727][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.656857][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.669867][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.680634][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.692588][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.713016][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.777935][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.797644][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.831393][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.838812][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.851223][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.858455][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.886418][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.917696][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.924891][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.946890][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.954098][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.976556][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.020583][ T5775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.031750][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.068740][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.114433][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.121669][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.155816][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.163038][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.220778][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.317407][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.351119][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.358333][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.432432][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.439654][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.517642][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.660060][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.725891][ T5775] veth0_vlan: entered promiscuous mode [ 77.768879][ T5775] veth1_vlan: entered promiscuous mode [ 77.899406][ T5781] Bluetooth: hci1: command tx timeout [ 77.899429][ T5085] Bluetooth: hci0: command tx timeout [ 77.899468][ T5085] Bluetooth: hci3: command tx timeout [ 77.905238][ T5781] Bluetooth: hci2: command tx timeout [ 77.934434][ T5775] veth0_macvtap: entered promiscuous mode [ 77.947438][ T5776] veth0_vlan: entered promiscuous mode [ 77.975129][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.028103][ T5775] veth1_macvtap: entered promiscuous mode [ 78.039349][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.056233][ T5776] veth1_vlan: entered promiscuous mode [ 78.128450][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.152227][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.166676][ T5774] veth0_vlan: entered promiscuous mode [ 78.174050][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.183602][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.192342][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.201568][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.237962][ T5774] veth1_vlan: entered promiscuous mode [ 78.252313][ T5773] veth0_vlan: entered promiscuous mode [ 78.279038][ T5776] veth0_macvtap: entered promiscuous mode [ 78.290625][ T5776] veth1_macvtap: entered promiscuous mode [ 78.317582][ T5773] veth1_vlan: entered promiscuous mode [ 78.393797][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.407717][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.419613][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.437234][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.448027][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.460058][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.474828][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.486221][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.495408][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.506170][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.530391][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.542563][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.545705][ T5774] veth0_macvtap: entered promiscuous mode [ 78.583876][ T5774] veth1_macvtap: entered promiscuous mode [ 78.641812][ T5773] veth0_macvtap: entered promiscuous mode [ 78.649809][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.678711][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.690087][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.699358][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.709240][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.719767][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.730915][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.758700][ T5773] veth1_macvtap: entered promiscuous mode [ 78.769802][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.780937][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.791079][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.801617][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.814949][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.831890][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.841076][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.850729][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.861292][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.889427][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.907305][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.929800][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.943524][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.955407][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.966608][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.976800][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.987734][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.999396][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.044131][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.056531][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.080254][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.106073][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.117057][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.127759][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.139559][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.159704][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.173544][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.175455][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.190884][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.215895][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.226340][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.312672][ C0] hrtimer: interrupt took 49085 ns [ 79.496571][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.506254][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.575347][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.595991][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.645234][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.683463][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.726772][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.769919][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.977689][ T5781] Bluetooth: hci2: command tx timeout [ 79.983305][ T5780] Bluetooth: hci3: command tx timeout [ 79.983378][ T5085] Bluetooth: hci1: command tx timeout [ 79.988724][ T5780] Bluetooth: hci0: command tx timeout [ 81.558490][ T5859] warning: `syz.0.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.909258][ T5870] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.13'. [ 82.057287][ T5085] Bluetooth: hci2: command tx timeout [ 82.057553][ T5777] Bluetooth: hci0: command tx timeout [ 82.063326][ T5085] Bluetooth: hci3: command tx timeout [ 82.069902][ T5781] Bluetooth: hci1: command tx timeout [ 82.236575][ T5876] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15'. [ 83.849260][ T5876] syz.1.15 (5876) used greatest stack depth: 19688 bytes left [ 84.125023][ T5887] veth1_macvtap: left promiscuous mode [ 84.130722][ T5887] macsec0: entered promiscuous mode [ 84.317443][ T5889] veth1_macvtap: entered promiscuous mode [ 84.327574][ T5889] macsec0: entered allmulticast mode [ 84.338425][ T5889] veth1_macvtap: entered allmulticast mode [ 85.276117][ T5896] netlink: 196 bytes leftover after parsing attributes in process `syz.3.23'. [ 86.332135][ T5906] syzkaller0: entered promiscuous mode [ 86.477274][ T5906] syzkaller0: entered allmulticast mode [ 86.941481][ T5912] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 86.978994][ T5906] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 87.193180][ T9] cfg80211: failed to load regulatory.db [ 89.869404][ T5917] netlink: 'syz.3.29': attribute type 10 has an invalid length. [ 89.877593][ T5917] netlink: 168 bytes leftover after parsing attributes in process `syz.3.29'. [ 90.050501][ T5924] netlink: 'syz.0.31': attribute type 1 has an invalid length. [ 90.065121][ T5924] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.31'. [ 92.244643][ T5942] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 92.261852][ T5926] netlink: 'syz.3.32': attribute type 10 has an invalid length. [ 92.498335][ T5938] netlink: 'syz.3.32': attribute type 9 has an invalid length. [ 92.536106][ T5938] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.32'. [ 92.562406][ T5929] netlink: 'syz.3.32': attribute type 9 has an invalid length. [ 92.667511][ T5929] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.32'. [ 93.265774][ T5952] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.41'. [ 93.310043][ T5948] netlink: 164 bytes leftover after parsing attributes in process `syz.0.40'. [ 94.414434][ T5956] sit0: entered allmulticast mode [ 94.552947][ T5959] sit0: entered promiscuous mode [ 94.720676][ T5970] netlink: 'syz.2.44': attribute type 40 has an invalid length. [ 94.849591][ T5970] syz.2.44 (5970) used greatest stack depth: 19432 bytes left [ 96.014517][ T5992] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.51'. [ 96.056343][ T5994] netlink: 'syz.2.52': attribute type 10 has an invalid length. [ 96.093001][ T5994] netlink: 40 bytes leftover after parsing attributes in process `syz.2.52'. [ 96.161345][ T5994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.938855][ T5999] netlink: 164 bytes leftover after parsing attributes in process `syz.1.53'. [ 97.195319][ T6004] netlink: 'syz.0.50': attribute type 9 has an invalid length. [ 97.203119][ T6004] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.50'. [ 97.301054][ T6001] netlink: 'syz.0.50': attribute type 9 has an invalid length. [ 97.410583][ T6001] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.50'. [ 97.920124][ T5987] netlink: 'syz.0.50': attribute type 10 has an invalid length. [ 97.983461][ T6002] sit0: entered allmulticast mode [ 98.000218][ T6003] sit0: entered promiscuous mode [ 98.309622][ T6015] netlink: 'syz.1.57': attribute type 40 has an invalid length. [ 100.949889][ T6042] netlink: 164 bytes leftover after parsing attributes in process `syz.2.66'. [ 101.576377][ T6045] sit0: entered allmulticast mode [ 101.623649][ T6050] sit0: entered promiscuous mode [ 101.859640][ T6049] netlink: 'syz.0.69': attribute type 40 has an invalid length. [ 102.156184][ T6048] netlink: 'syz.1.70': attribute type 10 has an invalid length. [ 102.331040][ T6060] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.364981][ T6062] netlink: 'syz.1.70': attribute type 9 has an invalid length. [ 102.365031][ T6062] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.70'. [ 102.401894][ T6055] netlink: 'syz.1.70': attribute type 9 has an invalid length. [ 102.421208][ T6055] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.70'. [ 102.778915][ T6067] netlink: 'syz.2.75': attribute type 10 has an invalid length. [ 103.827186][ T6077] Zero length message leads to an empty skb [ 104.277410][ T6094] netlink: 'syz.1.86': attribute type 10 has an invalid length. [ 104.292041][ T6094] batman_adv: batadv0: Adding interface: netdevsim0 [ 104.300919][ T6094] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.367955][ T6094] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 104.753139][ T6098] netlink: 'syz.2.88': attribute type 10 has an invalid length. [ 104.853123][ T6099] netlink: 'syz.2.88': attribute type 9 has an invalid length. [ 104.860763][ T6099] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.88'. [ 105.161167][ T6104] netlink: 'syz.1.90': attribute type 58 has an invalid length. [ 105.169730][ T6104] netlink: 152 bytes leftover after parsing attributes in process `syz.1.90'. [ 105.179077][ T6106] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.91'. [ 105.409373][ T6107] netlink: 'syz.2.88': attribute type 9 has an invalid length. [ 105.443034][ T6107] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.88'. [ 105.570208][ T6122] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.96'. [ 105.613081][ T6122] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 108.068226][ T6144] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 108.100534][ T6150] netlink: 'syz.1.105': attribute type 10 has an invalid length. [ 108.152924][ T6144] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 108.173267][ T6144] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 108.522230][ T6144] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 108.541823][ T6157] netlink: 830 bytes leftover after parsing attributes in process `syz.3.110'. [ 108.558233][ T6152] À: port 1(vlan0) entered blocking state [ 108.564780][ T6152] À: port 1(vlan0) entered disabled state [ 108.571291][ T6152] vlan0: entered allmulticast mode [ 108.577598][ T6152] veth0_vlan: entered allmulticast mode [ 108.584594][ T6152] vlan0: entered promiscuous mode [ 108.600843][ T6162] netlink: 132 bytes leftover after parsing attributes in process `syz.1.111'. [ 108.622940][ T6144] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 108.639348][ T6144] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 108.648516][ T6144] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 108.659887][ T6144] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 108.672328][ T6144] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 110.063682][ T6182] syzkaller0: entered promiscuous mode [ 110.070385][ T6182] syzkaller0: entered allmulticast mode [ 110.372360][ T6197] netlink: 132 bytes leftover after parsing attributes in process `syz.0.123'. [ 110.906299][ T6209] syz.1.129 uses obsolete (PF_INET,SOCK_PACKET) [ 112.985824][ T6236] team0 (unregistering): Port device team_slave_0 removed [ 113.043822][ T6236] team0 (unregistering): Port device team_slave_1 removed [ 113.230167][ T6240] netdevsim netdevsim0: Direct firmware load for .net/syz1 failed with error -2 [ 113.275377][ T6240] netdevsim netdevsim0: Falling back to sysfs fallback for: .net/syz1 [ 113.485133][ T6257] FAULT_INJECTION: forcing a failure. [ 113.485133][ T6257] name failslab, interval 1, probability 0, space 0, times 0 [ 113.498177][ T6257] CPU: 0 PID: 6257 Comm: syz.2.145 Not tainted syzkaller #0 [ 113.505497][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.515567][ T6257] Call Trace: [ 113.518856][ T6257] [ 113.521799][ T6257] dump_stack_lvl+0x18c/0x250 [ 113.526511][ T6257] ? show_regs_print_info+0x20/0x20 [ 113.531730][ T6257] ? load_image+0x420/0x420 [ 113.536262][ T6257] should_fail_ex+0x39d/0x4d0 [ 113.541051][ T6257] should_failslab+0x9/0x20 [ 113.545582][ T6257] slab_pre_alloc_hook+0x59/0x310 [ 113.550627][ T6257] kmem_cache_alloc_node+0x60/0x320 [ 113.555840][ T6257] ? __alloc_skb+0x103/0x2c0 [ 113.560443][ T6257] __alloc_skb+0x103/0x2c0 [ 113.564873][ T6257] skb_segment+0xee2/0x3f50 [ 113.569399][ T6257] ? mark_lock+0x94/0x320 [ 113.573745][ T6257] ? __lock_acquire+0x1273/0x7d40 [ 113.578834][ T6257] udp6_ufo_fragment+0x9b7/0xf40 [ 113.583889][ T6257] ? udpv6_offload_exit+0x20/0x20 [ 113.588940][ T6257] ipv6_gso_segment+0xb8b/0x2140 [ 113.593906][ T6257] ? inet6_del_offload+0x50/0x50 [ 113.598873][ T6257] ? skb_crc32c_csum_help+0x520/0x520 [ 113.604268][ T6257] ? inet6_del_offload+0x50/0x50 [ 113.609221][ T6257] skb_mac_gso_segment+0x320/0x640 [ 113.614349][ T6257] ? skb_mac_gso_segment+0x185/0x640 [ 113.619648][ T6257] ? skb_eth_gso_segment+0x270/0x270 [ 113.624952][ T6257] __skb_gso_segment+0x302/0x4a0 [ 113.629905][ T6257] validate_xmit_skb+0x565/0xf60 [ 113.634870][ T6257] ? validate_xmit_skb_list+0x120/0x120 [ 113.640439][ T6257] __dev_queue_xmit+0x13cf/0x3660 [ 113.645488][ T6257] ? __dev_queue_xmit+0x265/0x3660 [ 113.650625][ T6257] ? netdev_core_pick_tx+0x340/0x340 [ 113.655925][ T6257] ? virtio_net_hdr_to_skb+0xa45/0x1510 [ 113.661477][ T6257] ? packet_parse_headers+0x7cb/0xac0 [ 113.666869][ T6257] ? __check_object_size+0x506/0xa20 [ 113.672168][ T6257] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 113.677725][ T6257] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 113.683888][ T6257] ? skb_copy_datagram_from_iter+0x5f6/0x6e0 [ 113.689887][ T6257] ? packet_xmit+0x66/0x330 [ 113.694415][ T6257] ? packet_sendmsg+0x3916/0x4c30 [ 113.699465][ T6257] packet_sendmsg+0x3a0e/0x4c30 [ 113.704354][ T6257] ? __might_sleep+0xe0/0xe0 [ 113.708992][ T6257] ? mark_lock+0x94/0x320 [ 113.713340][ T6257] ? __lock_acquire+0x1273/0x7d40 [ 113.718378][ T6257] ? verify_lock_unused+0x140/0x140 [ 113.723597][ T6257] ? aa_sk_perm+0x83c/0x970 [ 113.728125][ T6257] ? packet_getsockopt+0xad0/0xad0 [ 113.733257][ T6257] ? tomoyo_try_to_gc+0x3c0/0xb20 [ 113.738295][ T6257] ? aa_sock_msg_perm+0x94/0x150 [ 113.743250][ T6257] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 113.748548][ T6257] ? security_socket_sendmsg+0x80/0xa0 [ 113.754037][ T6257] ? packet_getsockopt+0xad0/0xad0 [ 113.759172][ T6257] ____sys_sendmsg+0x5ba/0x960 [ 113.763948][ T6257] ? __lock_acquire+0x7d40/0x7d40 [ 113.768987][ T6257] ? __asan_memset+0x22/0x40 [ 113.773595][ T6257] ? __sys_sendmsg_sock+0x30/0x30 [ 113.778629][ T6257] ? __import_iovec+0x3fa/0x850 [ 113.783499][ T6257] ? import_iovec+0x73/0xa0 [ 113.788016][ T6257] ___sys_sendmsg+0x2a6/0x360 [ 113.792703][ T6257] ? get_pid_task+0x20/0x1e0 [ 113.797309][ T6257] ? __sys_sendmsg+0x2a0/0x2a0 [ 113.802107][ T6257] ? __lock_acquire+0x7d40/0x7d40 [ 113.807166][ T6257] __se_sys_sendmsg+0x1c2/0x2b0 [ 113.812032][ T6257] ? __x64_sys_sendmsg+0x80/0x80 [ 113.817006][ T6257] ? lockdep_hardirqs_on+0x98/0x150 [ 113.822218][ T6257] do_syscall_64+0x55/0xa0 [ 113.826649][ T6257] ? clear_bhb_loop+0x40/0x90 [ 113.831340][ T6257] ? clear_bhb_loop+0x40/0x90 [ 113.836035][ T6257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.841945][ T6257] RIP: 0033:0x7fdb6d39ce59 [ 113.846371][ T6257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.865987][ T6257] RSP: 002b:00007fdb6e34c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.874415][ T6257] RAX: ffffffffffffffda RBX: 00007fdb6d615fa0 RCX: 00007fdb6d39ce59 [ 113.882393][ T6257] RDX: 0000000000004041 RSI: 0000200000000100 RDI: 0000000000000003 [ 113.890370][ T6257] RBP: 00007fdb6e34c090 R08: 0000000000000000 R09: 0000000000000000 [ 113.898353][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.906334][ T6257] R13: 00007fdb6d616038 R14: 00007fdb6d615fa0 R15: 00007ffefbbbf6a8 [ 113.914327][ T6257] [ 115.179705][ T6292] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.157'. [ 117.292107][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 117.956551][ T6344] netlink: 128 bytes leftover after parsing attributes in process `syz.1.176'. [ 118.031371][ T6344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.571838][ T6381] netlink: 132 bytes leftover after parsing attributes in process `syz.1.189'. [ 119.635912][ T6381] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.189'. [ 119.766608][ T6384] netlink: 44 bytes leftover after parsing attributes in process `syz.1.189'. [ 120.616502][ T6402] FAULT_INJECTION: forcing a failure. [ 120.616502][ T6402] name failslab, interval 1, probability 0, space 0, times 0 [ 120.642827][ T6402] CPU: 0 PID: 6402 Comm: syz.3.196 Not tainted syzkaller #0 [ 120.650186][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.660283][ T6402] Call Trace: [ 120.663600][ T6402] [ 120.666565][ T6402] dump_stack_lvl+0x18c/0x250 [ 120.671295][ T6402] ? sctp_sendmsg+0x1575/0x28c0 [ 120.676180][ T6402] ? ___sys_sendmsg+0x2a6/0x360 [ 120.681047][ T6402] ? show_regs_print_info+0x20/0x20 [ 120.686267][ T6402] ? load_image+0x420/0x420 [ 120.690801][ T6402] should_fail_ex+0x39d/0x4d0 [ 120.695507][ T6402] should_failslab+0x9/0x20 [ 120.700030][ T6402] slab_pre_alloc_hook+0x59/0x310 [ 120.705074][ T6402] ? sctp_add_bind_addr+0x8c/0x360 [ 120.710196][ T6402] __kmem_cache_alloc_node+0x53/0x250 [ 120.715587][ T6402] ? sctp_add_bind_addr+0x8c/0x360 [ 120.720711][ T6402] kmalloc_trace+0x2a/0xe0 [ 120.725145][ T6402] sctp_add_bind_addr+0x8c/0x360 [ 120.730098][ T6402] sctp_copy_local_addr_list+0x315/0x4f0 [ 120.735745][ T6402] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 120.741474][ T6402] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 120.747554][ T6402] ? sctp_v4_is_any+0x35/0x60 [ 120.752239][ T6402] ? sctp_copy_one_addr+0x8c/0x350 [ 120.757364][ T6402] sctp_bind_addr_copy+0xb3/0x3c0 [ 120.762402][ T6402] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 120.768750][ T6402] sctp_connect_new_asoc+0x2f9/0x6a0 [ 120.774053][ T6402] ? __sctp_connect+0xd80/0xd80 [ 120.778914][ T6402] ? __local_bh_enable_ip+0x13a/0x1c0 [ 120.784306][ T6402] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 120.789865][ T6402] ? security_sctp_bind_connect+0x89/0xb0 [ 120.795601][ T6402] sctp_sendmsg+0x1575/0x28c0 [ 120.800302][ T6402] ? sctp_getsockopt+0xb60/0xb60 [ 120.805250][ T6402] ? aa_sk_perm+0x83c/0x970 [ 120.809777][ T6402] ? aa_af_perm+0x330/0x330 [ 120.814292][ T6402] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 120.820718][ T6402] ? sock_rps_record_flow+0x19/0x3f0 [ 120.826024][ T6402] ? inet_sendmsg+0xe9/0x2f0 [ 120.830629][ T6402] ? inet_send_prepare+0x260/0x260 [ 120.835758][ T6402] ____sys_sendmsg+0x5ba/0x960 [ 120.840534][ T6402] ? __lock_acquire+0x7d40/0x7d40 [ 120.845574][ T6402] ? __asan_memset+0x22/0x40 [ 120.850177][ T6402] ? __sys_sendmsg_sock+0x30/0x30 [ 120.855211][ T6402] ? __import_iovec+0x5f2/0x850 [ 120.860083][ T6402] ? import_iovec+0x73/0xa0 [ 120.864597][ T6402] ___sys_sendmsg+0x2a6/0x360 [ 120.869287][ T6402] ? get_pid_task+0x20/0x1e0 [ 120.873893][ T6402] ? __sys_sendmsg+0x2a0/0x2a0 [ 120.878685][ T6402] ? __lock_acquire+0x7d40/0x7d40 [ 120.883749][ T6402] __se_sys_sendmsg+0x1c2/0x2b0 [ 120.888617][ T6402] ? __x64_sys_sendmsg+0x80/0x80 [ 120.893581][ T6402] ? lockdep_hardirqs_on+0x98/0x150 [ 120.898797][ T6402] do_syscall_64+0x55/0xa0 [ 120.903310][ T6402] ? clear_bhb_loop+0x40/0x90 [ 120.908002][ T6402] ? clear_bhb_loop+0x40/0x90 [ 120.912706][ T6402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.918618][ T6402] RIP: 0033:0x7f57b359ce59 [ 120.923049][ T6402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.942669][ T6402] RSP: 002b:00007f57b4493028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.951106][ T6402] RAX: ffffffffffffffda RBX: 00007f57b3815fa0 RCX: 00007f57b359ce59 [ 120.959098][ T6402] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000039 [ 120.967076][ T6402] RBP: 00007f57b4493090 R08: 0000000000000000 R09: 0000000000000000 [ 120.975053][ T6402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.983037][ T6402] R13: 00007f57b3816038 R14: 00007f57b3815fa0 R15: 00007fffc7f3d348 [ 120.991034][ T6402] [ 121.259344][ T6411] FAULT_INJECTION: forcing a failure. [ 121.259344][ T6411] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 121.293423][ T6411] CPU: 0 PID: 6411 Comm: syz.3.200 Not tainted syzkaller #0 [ 121.300794][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.310894][ T6411] Call Trace: [ 121.314223][ T6411] [ 121.317170][ T6411] dump_stack_lvl+0x18c/0x250 [ 121.321874][ T6411] ? show_regs_print_info+0x20/0x20 [ 121.327090][ T6411] ? load_image+0x420/0x420 [ 121.331611][ T6411] ? __might_fault+0xaa/0x120 [ 121.336299][ T6411] ? __lock_acquire+0x7d40/0x7d40 [ 121.341339][ T6411] should_fail_ex+0x39d/0x4d0 [ 121.346040][ T6411] _copy_to_user+0x2f/0xa0 [ 121.350472][ T6411] bpf_test_finish+0x19f/0x650 [ 121.355252][ T6411] ? convert___skb_to_skb+0x590/0x590 [ 121.360633][ T6411] ? convert_skb_to___skb+0x420/0x420 [ 121.366026][ T6411] ? rcuref_put_slowpath+0x141/0x150 [ 121.371759][ T6411] ? rep_movs_alternative+0x4a/0x90 [ 121.376968][ T6411] bpf_prog_test_run_xdp+0x8a9/0x10e0 [ 121.382374][ T6411] ? dev_put+0x80/0x80 [ 121.386467][ T6411] ? dev_put+0x80/0x80 [ 121.390552][ T6411] bpf_prog_test_run+0x321/0x390 [ 121.395506][ T6411] __sys_bpf+0x49d/0x890 [ 121.399762][ T6411] ? bpf_link_show_fdinfo+0x390/0x390 [ 121.405157][ T6411] ? lock_chain_count+0x20/0x20 [ 121.410030][ T6411] __x64_sys_bpf+0x7c/0x90 [ 121.414456][ T6411] do_syscall_64+0x55/0xa0 [ 121.418878][ T6411] ? clear_bhb_loop+0x40/0x90 [ 121.423570][ T6411] ? clear_bhb_loop+0x40/0x90 [ 121.428260][ T6411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.434167][ T6411] RIP: 0033:0x7f57b359ce59 [ 121.438594][ T6411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.458211][ T6411] RSP: 002b:00007f57b4493028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.466638][ T6411] RAX: ffffffffffffffda RBX: 00007f57b3815fa0 RCX: 00007f57b359ce59 [ 121.474617][ T6411] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 121.482593][ T6411] RBP: 00007f57b4493090 R08: 0000000000000000 R09: 0000000000000000 [ 121.490583][ T6411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.498563][ T6411] R13: 00007f57b3816038 R14: 00007f57b3815fa0 R15: 00007fffc7f3d348 [ 121.506563][ T6411] [ 128.911218][ T6482] validate_nla: 40 callbacks suppressed [ 128.911236][ T6482] netlink: 'syz.1.220': attribute type 10 has an invalid length. [ 128.956298][ T6482] syz_tun: entered promiscuous mode [ 129.010117][ T6484] FAULT_INJECTION: forcing a failure. [ 129.010117][ T6484] name failslab, interval 1, probability 0, space 0, times 0 [ 129.043026][ T6484] CPU: 1 PID: 6484 Comm: syz.3.221 Not tainted syzkaller #0 [ 129.050480][ T6484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 129.060577][ T6484] Call Trace: [ 129.063896][ T6484] [ 129.066886][ T6484] dump_stack_lvl+0x18c/0x250 [ 129.071626][ T6484] ? show_regs_print_info+0x20/0x20 [ 129.076870][ T6484] ? load_image+0x420/0x420 [ 129.081419][ T6484] ? __might_sleep+0xe0/0xe0 [ 129.086051][ T6484] ? __lock_acquire+0x7d40/0x7d40 [ 129.091119][ T6484] should_fail_ex+0x39d/0x4d0 [ 129.095835][ T6484] should_failslab+0x9/0x20 [ 129.100356][ T6484] slab_pre_alloc_hook+0x59/0x310 [ 129.105410][ T6484] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 129.111157][ T6484] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 129.116898][ T6484] __kmem_cache_alloc_node+0x53/0x250 [ 129.122310][ T6484] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 129.128041][ T6484] __kmalloc+0xa4/0x230 [ 129.132218][ T6484] tomoyo_realpath_from_path+0xe3/0x5d0 [ 129.137875][ T6484] tomoyo_path_number_perm+0x248/0x620 [ 129.143356][ T6484] ? tomoyo_path_number_perm+0x217/0x620 [ 129.149007][ T6484] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 129.154490][ T6484] ? ksys_write+0x1c4/0x260 [ 129.159040][ T6484] ? __fget_files+0x28/0x4b0 [ 129.163648][ T6484] ? __fget_files+0x28/0x4b0 [ 129.168264][ T6484] security_file_ioctl+0x70/0xa0 [ 129.173227][ T6484] __se_sys_ioctl+0x48/0x170 [ 129.177861][ T6484] do_syscall_64+0x55/0xa0 [ 129.182289][ T6484] ? clear_bhb_loop+0x40/0x90 [ 129.187069][ T6484] ? clear_bhb_loop+0x40/0x90 [ 129.191780][ T6484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.197699][ T6484] RIP: 0033:0x7f57b359ce59 [ 129.202132][ T6484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.221751][ T6484] RSP: 002b:00007f57b4493028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.230183][ T6484] RAX: ffffffffffffffda RBX: 00007f57b3815fa0 RCX: 00007f57b359ce59 [ 129.238167][ T6484] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 129.246150][ T6484] RBP: 00007f57b4493090 R08: 0000000000000000 R09: 0000000000000000 [ 129.254131][ T6484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.262115][ T6484] R13: 00007f57b3816038 R14: 00007f57b3815fa0 R15: 00007fffc7f3d348 [ 129.270111][ T6484] [ 129.282210][ T6484] ERROR: Out of memory at tomoyo_realpath_from_path. [ 131.077784][ T6523] netlink: 'syz.3.235': attribute type 29 has an invalid length. [ 131.100591][ T6523] netlink: 'syz.3.235': attribute type 29 has an invalid length. [ 131.122518][ T6519] netlink: 'syz.3.235': attribute type 29 has an invalid length. [ 131.143704][ T6519] netlink: 'syz.3.235': attribute type 29 has an invalid length. [ 131.175867][ T6519] netlink: 'syz.3.235': attribute type 29 has an invalid length. [ 132.370234][ T6547] FAULT_INJECTION: forcing a failure. [ 132.370234][ T6547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.383549][ T6547] CPU: 0 PID: 6547 Comm: syz.1.247 Not tainted syzkaller #0 [ 132.390957][ T6547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 132.401028][ T6547] Call Trace: [ 132.404319][ T6547] [ 132.407262][ T6547] dump_stack_lvl+0x18c/0x250 [ 132.411964][ T6547] ? show_regs_print_info+0x20/0x20 [ 132.417184][ T6547] ? load_image+0x420/0x420 [ 132.421705][ T6547] ? __might_fault+0xaa/0x120 [ 132.426394][ T6547] ? __lock_acquire+0x7d40/0x7d40 [ 132.431435][ T6547] should_fail_ex+0x39d/0x4d0 [ 132.436136][ T6547] _copy_from_iter+0x1d9/0x12e0 [ 132.441004][ T6547] ? __might_fault+0xaa/0x120 [ 132.445697][ T6547] ? _copy_from_iter+0x24e/0x12e0 [ 132.450741][ T6547] ? __virt_addr_valid+0x18c/0x540 [ 132.455893][ T6547] ? __lock_acquire+0x7d40/0x7d40 [ 132.460969][ T6547] ? copyout_mc+0x70/0x70 [ 132.465337][ T6547] ? copyout_mc+0x70/0x70 [ 132.469699][ T6547] ? __virt_addr_valid+0x18c/0x540 [ 132.474846][ T6547] ? page_copy_sane+0x16a/0x270 [ 132.479726][ T6547] copy_page_from_iter+0x7b/0x100 [ 132.484774][ T6547] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 132.490610][ T6547] tun_get_user+0x15db/0x3ca0 [ 132.495310][ T6547] ? aa_file_perm+0x11b/0xee0 [ 132.500007][ T6547] ? rcu_read_unlock+0xa0/0xa0 [ 132.504794][ T6547] ? tun_get+0x1c/0x2e0 [ 132.508963][ T6547] ? __lock_acquire+0x7d40/0x7d40 [ 132.514009][ T6547] ? tun_get+0x1c/0x2e0 [ 132.518184][ T6547] tun_chr_write_iter+0x119/0x200 [ 132.523224][ T6547] vfs_write+0x46c/0x990 [ 132.527492][ T6547] ? file_end_write+0x250/0x250 [ 132.532364][ T6547] ? __fget_files+0x43d/0x4b0 [ 132.537064][ T6547] ? __fdget_pos+0x1d8/0x330 [ 132.541672][ T6547] ? ksys_write+0x75/0x260 [ 132.546104][ T6547] ksys_write+0x150/0x260 [ 132.550464][ T6547] ? __ia32_sys_read+0x90/0x90 [ 132.555264][ T6547] ? lockdep_hardirqs_on+0x98/0x150 [ 132.560504][ T6547] do_syscall_64+0x55/0xa0 [ 132.564930][ T6547] ? clear_bhb_loop+0x40/0x90 [ 132.569620][ T6547] ? clear_bhb_loop+0x40/0x90 [ 132.574313][ T6547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.580222][ T6547] RIP: 0033:0x7faaa099ce59 [ 132.584655][ T6547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.604270][ T6547] RSP: 002b:00007faaa18d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.612704][ T6547] RAX: ffffffffffffffda RBX: 00007faaa0c15fa0 RCX: 00007faaa099ce59 [ 132.620693][ T6547] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 132.628676][ T6547] RBP: 00007faaa18d5090 R08: 0000000000000000 R09: 0000000000000000 [ 132.636655][ T6547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.644639][ T6547] R13: 00007faaa0c16038 R14: 00007faaa0c15fa0 R15: 00007fff6db87398 [ 132.652643][ T6547] [ 133.138504][ T6555] netlink: 'syz.1.249': attribute type 9 has an invalid length. [ 133.153282][ T6555] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.249'. [ 133.311242][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.322034][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.077326][ T6580] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.259'. [ 136.457938][ T6616] FAULT_INJECTION: forcing a failure. [ 136.457938][ T6616] name failslab, interval 1, probability 0, space 0, times 0 [ 136.500875][ T6616] CPU: 1 PID: 6616 Comm: syz.2.275 Not tainted syzkaller #0 [ 136.508241][ T6616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 136.518336][ T6616] Call Trace: [ 136.521695][ T6616] [ 136.524663][ T6616] dump_stack_lvl+0x18c/0x250 [ 136.529382][ T6616] ? sctp_sendmsg+0x1575/0x28c0 [ 136.534276][ T6616] ? ___sys_sendmsg+0x2a6/0x360 [ 136.539161][ T6616] ? show_regs_print_info+0x20/0x20 [ 136.544411][ T6616] ? load_image+0x420/0x420 [ 136.548974][ T6616] should_fail_ex+0x39d/0x4d0 [ 136.553709][ T6616] should_failslab+0x9/0x20 [ 136.558257][ T6616] slab_pre_alloc_hook+0x59/0x310 [ 136.563302][ T6616] ? sctp_add_bind_addr+0x8c/0x360 [ 136.568426][ T6616] __kmem_cache_alloc_node+0x53/0x250 [ 136.573819][ T6616] ? sctp_add_bind_addr+0x8c/0x360 [ 136.578942][ T6616] kmalloc_trace+0x2a/0xe0 [ 136.583377][ T6616] sctp_add_bind_addr+0x8c/0x360 [ 136.588333][ T6616] sctp_copy_local_addr_list+0x315/0x4f0 [ 136.593979][ T6616] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 136.599710][ T6616] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 136.605808][ T6616] ? sctp_v4_is_any+0x35/0x60 [ 136.610498][ T6616] ? sctp_copy_one_addr+0x8c/0x350 [ 136.615624][ T6616] sctp_bind_addr_copy+0xb3/0x3c0 [ 136.620663][ T6616] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 136.627007][ T6616] sctp_connect_new_asoc+0x2f9/0x6a0 [ 136.632307][ T6616] ? __sctp_connect+0xd80/0xd80 [ 136.637169][ T6616] ? __local_bh_enable_ip+0x13a/0x1c0 [ 136.642560][ T6616] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 136.648134][ T6616] ? security_sctp_bind_connect+0x89/0xb0 [ 136.653872][ T6616] sctp_sendmsg+0x1575/0x28c0 [ 136.658579][ T6616] ? sctp_getsockopt+0xb60/0xb60 [ 136.663531][ T6616] ? aa_sk_perm+0x83c/0x970 [ 136.668061][ T6616] ? aa_af_perm+0x330/0x330 [ 136.672580][ T6616] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 136.679016][ T6616] ? sock_rps_record_flow+0x19/0x3f0 [ 136.684321][ T6616] ? inet_sendmsg+0xe9/0x2f0 [ 136.689019][ T6616] ? inet_send_prepare+0x260/0x260 [ 136.694145][ T6616] ____sys_sendmsg+0x5ba/0x960 [ 136.698925][ T6616] ? __lock_acquire+0x7d40/0x7d40 [ 136.703969][ T6616] ? __asan_memset+0x22/0x40 [ 136.708579][ T6616] ? __sys_sendmsg_sock+0x30/0x30 [ 136.713616][ T6616] ? __import_iovec+0x5f2/0x850 [ 136.718490][ T6616] ? import_iovec+0x73/0xa0 [ 136.723011][ T6616] ___sys_sendmsg+0x2a6/0x360 [ 136.727702][ T6616] ? get_pid_task+0x20/0x1e0 [ 136.732309][ T6616] ? __sys_sendmsg+0x2a0/0x2a0 [ 136.737106][ T6616] ? __lock_acquire+0x7d40/0x7d40 [ 136.742168][ T6616] __se_sys_sendmsg+0x1c2/0x2b0 [ 136.747032][ T6616] ? __x64_sys_sendmsg+0x80/0x80 [ 136.752000][ T6616] ? lockdep_hardirqs_on+0x98/0x150 [ 136.757220][ T6616] do_syscall_64+0x55/0xa0 [ 136.761645][ T6616] ? clear_bhb_loop+0x40/0x90 [ 136.766341][ T6616] ? clear_bhb_loop+0x40/0x90 [ 136.771035][ T6616] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.776942][ T6616] RIP: 0033:0x7fdb6d39ce59 [ 136.781374][ T6616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.801014][ T6616] RSP: 002b:00007fdb6e34c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.809443][ T6616] RAX: ffffffffffffffda RBX: 00007fdb6d615fa0 RCX: 00007fdb6d39ce59 [ 136.817433][ T6616] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000039 [ 136.825413][ T6616] RBP: 00007fdb6e34c090 R08: 0000000000000000 R09: 0000000000000000 [ 136.833398][ T6616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.841467][ T6616] R13: 00007fdb6d616038 R14: 00007fdb6d615fa0 R15: 00007ffefbbbf6a8 [ 136.849466][ T6616] [ 136.936766][ T6620] FAULT_INJECTION: forcing a failure. [ 136.936766][ T6620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.963698][ T6620] CPU: 1 PID: 6620 Comm: syz.1.277 Not tainted syzkaller #0 [ 136.971073][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 136.981169][ T6620] Call Trace: [ 136.984500][ T6620] [ 136.987477][ T6620] dump_stack_lvl+0x18c/0x250 [ 136.992206][ T6620] ? show_regs_print_info+0x20/0x20 [ 136.997445][ T6620] ? load_image+0x420/0x420 [ 137.001997][ T6620] ? __might_fault+0xaa/0x120 [ 137.006712][ T6620] ? __lock_acquire+0x7d40/0x7d40 [ 137.011775][ T6620] should_fail_ex+0x39d/0x4d0 [ 137.016502][ T6620] _copy_to_user+0x2f/0xa0 [ 137.020954][ T6620] bpf_test_finish+0x25a/0x650 [ 137.025767][ T6620] ? convert___skb_to_skb+0x590/0x590 [ 137.031184][ T6620] ? convert_skb_to___skb+0x420/0x420 [ 137.036602][ T6620] ? rcuref_put_slowpath+0x141/0x150 [ 137.041939][ T6620] ? rep_movs_alternative+0x4a/0x90 [ 137.047177][ T6620] bpf_prog_test_run_xdp+0x8a9/0x10e0 [ 137.052613][ T6620] ? dev_put+0x80/0x80 [ 137.056734][ T6620] ? dev_put+0x80/0x80 [ 137.060843][ T6620] bpf_prog_test_run+0x321/0x390 [ 137.065822][ T6620] __sys_bpf+0x49d/0x890 [ 137.070103][ T6620] ? bpf_link_show_fdinfo+0x390/0x390 [ 137.075527][ T6620] ? lock_chain_count+0x20/0x20 [ 137.080428][ T6620] __x64_sys_bpf+0x7c/0x90 [ 137.084879][ T6620] do_syscall_64+0x55/0xa0 [ 137.089330][ T6620] ? clear_bhb_loop+0x40/0x90 [ 137.094047][ T6620] ? clear_bhb_loop+0x40/0x90 [ 137.098756][ T6620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.104689][ T6620] RIP: 0033:0x7faaa099ce59 [ 137.109138][ T6620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.128789][ T6620] RSP: 002b:00007faaa18d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.137248][ T6620] RAX: ffffffffffffffda RBX: 00007faaa0c15fa0 RCX: 00007faaa099ce59 [ 137.145253][ T6620] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 137.153256][ T6620] RBP: 00007faaa18d5090 R08: 0000000000000000 R09: 0000000000000000 [ 137.161411][ T6620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.169418][ T6620] R13: 00007faaa0c16038 R14: 00007faaa0c15fa0 R15: 00007fff6db87398 [ 137.177444][ T6620] [ 137.286271][ T6627] Driver unsupported XDP return value 0 on prog (id 219) dev N/A, expect packet loss! [ 137.888331][ T6632] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.281'. [ 137.942047][ T6632] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.281'. [ 139.112447][ T6661] FAULT_INJECTION: forcing a failure. [ 139.112447][ T6661] name failslab, interval 1, probability 0, space 0, times 0 [ 139.125192][ T6661] CPU: 0 PID: 6661 Comm: syz.0.291 Not tainted syzkaller #0 [ 139.132530][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.142646][ T6661] Call Trace: [ 139.145950][ T6661] [ 139.148900][ T6661] dump_stack_lvl+0x18c/0x250 [ 139.153615][ T6661] ? show_regs_print_info+0x20/0x20 [ 139.158841][ T6661] ? load_image+0x420/0x420 [ 139.163387][ T6661] ? perf_trace_preemptirq_template+0xac/0x330 [ 139.169561][ T6661] should_fail_ex+0x39d/0x4d0 [ 139.174270][ T6661] should_failslab+0x9/0x20 [ 139.178793][ T6661] slab_pre_alloc_hook+0x59/0x310 [ 139.183841][ T6661] kmem_cache_alloc+0x5a/0x2d0 [ 139.188625][ T6661] ? skb_clone+0x1eb/0x370 [ 139.193058][ T6661] skb_clone+0x1eb/0x370 [ 139.197310][ T6661] ? dev_queue_xmit_nit+0x212/0xbb0 [ 139.202526][ T6661] dev_queue_xmit_nit+0x24d/0xbb0 [ 139.207566][ T6661] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 139.212701][ T6661] ? validate_xmit_skb+0x949/0xf60 [ 139.217837][ T6661] dev_hard_start_xmit+0x148/0x740 [ 139.222981][ T6661] __dev_queue_xmit+0x19a3/0x3660 [ 139.228037][ T6661] ? __dev_queue_xmit+0x265/0x3660 [ 139.233260][ T6661] ? netdev_core_pick_tx+0x340/0x340 [ 139.238558][ T6661] ? virtio_net_hdr_to_skb+0xa45/0x1510 [ 139.244130][ T6661] ? packet_parse_headers+0x7cb/0xac0 [ 139.249541][ T6661] ? __check_object_size+0x506/0xa20 [ 139.254880][ T6661] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 139.260446][ T6661] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 139.266615][ T6661] ? skb_copy_datagram_from_iter+0x5f6/0x6e0 [ 139.272668][ T6661] ? packet_xmit+0x66/0x330 [ 139.277182][ T6661] ? packet_sendmsg+0x3916/0x4c30 [ 139.282229][ T6661] packet_sendmsg+0x3a0e/0x4c30 [ 139.287128][ T6661] ? __might_sleep+0xe0/0xe0 [ 139.291737][ T6661] ? mark_lock+0x94/0x320 [ 139.296088][ T6661] ? __lock_acquire+0x1273/0x7d40 [ 139.301129][ T6661] ? verify_lock_unused+0x140/0x140 [ 139.306348][ T6661] ? aa_sk_perm+0x83c/0x970 [ 139.310873][ T6661] ? packet_getsockopt+0xad0/0xad0 [ 139.316012][ T6661] ? tomoyo_try_to_gc+0x3c0/0xb20 [ 139.321053][ T6661] ? aa_sock_msg_perm+0x94/0x150 [ 139.326010][ T6661] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 139.331311][ T6661] ? security_socket_sendmsg+0x80/0xa0 [ 139.336781][ T6661] ? packet_getsockopt+0xad0/0xad0 [ 139.341916][ T6661] ____sys_sendmsg+0x5ba/0x960 [ 139.346696][ T6661] ? __lock_acquire+0x7d40/0x7d40 [ 139.351747][ T6661] ? __asan_memset+0x22/0x40 [ 139.356356][ T6661] ? __sys_sendmsg_sock+0x30/0x30 [ 139.361387][ T6661] ? __import_iovec+0x3fa/0x850 [ 139.366258][ T6661] ? import_iovec+0x73/0xa0 [ 139.370778][ T6661] ___sys_sendmsg+0x2a6/0x360 [ 139.375464][ T6661] ? get_pid_task+0x20/0x1e0 [ 139.380075][ T6661] ? __sys_sendmsg+0x2a0/0x2a0 [ 139.384879][ T6661] ? __lock_acquire+0x7d40/0x7d40 [ 139.389939][ T6661] __se_sys_sendmsg+0x1c2/0x2b0 [ 139.394807][ T6661] ? __x64_sys_sendmsg+0x80/0x80 [ 139.399800][ T6661] ? lockdep_hardirqs_on+0x98/0x150 [ 139.405020][ T6661] do_syscall_64+0x55/0xa0 [ 139.409453][ T6661] ? clear_bhb_loop+0x40/0x90 [ 139.414150][ T6661] ? clear_bhb_loop+0x40/0x90 [ 139.418847][ T6661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.424756][ T6661] RIP: 0033:0x7f477899ce59 [ 139.429273][ T6661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.448891][ T6661] RSP: 002b:00007f4779780028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.457320][ T6661] RAX: ffffffffffffffda RBX: 00007f4778c15fa0 RCX: 00007f477899ce59 [ 139.465322][ T6661] RDX: 0000000000004041 RSI: 0000200000000100 RDI: 0000000000000003 [ 139.473303][ T6661] RBP: 00007f4779780090 R08: 0000000000000000 R09: 0000000000000000 [ 139.481281][ T6661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.489261][ T6661] R13: 00007f4778c16038 R14: 00007f4778c15fa0 R15: 00007ffc6214ea58 [ 139.497259][ T6661] [ 139.686123][ T6659] netlink: 'syz.3.290': attribute type 10 has an invalid length. [ 140.751038][ T6654] netlink: 830 bytes leftover after parsing attributes in process `syz.2.289'. [ 140.971527][ T6681] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.297'. [ 140.988281][ T6681] netlink: 'syz.3.297': attribute type 21 has an invalid length. [ 140.997762][ T6681] netlink: 132 bytes leftover after parsing attributes in process `syz.3.297'. [ 141.298160][ T6687] netlink: 'syz.3.300': attribute type 10 has an invalid length. [ 141.343792][ T6687] batman_adv: batadv0: Adding interface: netdevsim0 [ 141.350476][ T6687] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.407574][ T6687] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 141.543618][ T6689] netdevsim netdevsim0: Direct firmware load for .net/syz1 failed with error -2 [ 141.559864][ T6689] netdevsim netdevsim0: Falling back to sysfs fallback for: .net/syz1 [ 142.435236][ T6703] netlink: 830 bytes leftover after parsing attributes in process `syz.3.305'. [ 143.080751][ T6719] netlink: 'syz.1.309': attribute type 10 has an invalid length. [ 145.425614][ T6769] FAULT_INJECTION: forcing a failure. [ 145.425614][ T6769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.462924][ T6769] CPU: 1 PID: 6769 Comm: syz.1.328 Not tainted syzkaller #0 [ 145.470306][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.480407][ T6769] Call Trace: [ 145.483718][ T6769] [ 145.486681][ T6769] dump_stack_lvl+0x18c/0x250 [ 145.491414][ T6769] ? show_regs_print_info+0x20/0x20 [ 145.496673][ T6769] ? load_image+0x420/0x420 [ 145.501227][ T6769] ? __might_fault+0xaa/0x120 [ 145.505955][ T6769] ? __lock_acquire+0x7d40/0x7d40 [ 145.511032][ T6769] should_fail_ex+0x39d/0x4d0 [ 145.515759][ T6769] _copy_from_iter+0x1d9/0x12e0 [ 145.520658][ T6769] ? __might_fault+0xaa/0x120 [ 145.525381][ T6769] ? _copy_from_iter+0x24e/0x12e0 [ 145.530447][ T6769] ? __virt_addr_valid+0x18c/0x540 [ 145.535600][ T6769] ? __lock_acquire+0x7d40/0x7d40 [ 145.540667][ T6769] ? copyout_mc+0x70/0x70 [ 145.545050][ T6769] ? copyout_mc+0x70/0x70 [ 145.549425][ T6769] ? __virt_addr_valid+0x18c/0x540 [ 145.554594][ T6769] ? page_copy_sane+0x16a/0x270 [ 145.559497][ T6769] copy_page_from_iter+0x7b/0x100 [ 145.564591][ T6769] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 145.570453][ T6769] tun_get_user+0x15db/0x3ca0 [ 145.575185][ T6769] ? aa_file_perm+0x11b/0xee0 [ 145.579926][ T6769] ? rcu_read_unlock+0xa0/0xa0 [ 145.584761][ T6769] ? tun_get+0x1c/0x2e0 [ 145.588959][ T6769] ? __lock_acquire+0x7d40/0x7d40 [ 145.594034][ T6769] ? tun_get+0x1c/0x2e0 [ 145.598258][ T6769] tun_chr_write_iter+0x119/0x200 [ 145.603331][ T6769] vfs_write+0x46c/0x990 [ 145.607625][ T6769] ? file_end_write+0x250/0x250 [ 145.612518][ T6769] ? __fget_files+0x43d/0x4b0 [ 145.617254][ T6769] ? __fdget_pos+0x1d8/0x330 [ 145.621882][ T6769] ? ksys_write+0x75/0x260 [ 145.626349][ T6769] ksys_write+0x150/0x260 [ 145.630730][ T6769] ? __ia32_sys_read+0x90/0x90 [ 145.635537][ T6769] ? lockdep_hardirqs_on+0x98/0x150 [ 145.640779][ T6769] do_syscall_64+0x55/0xa0 [ 145.645232][ T6769] ? clear_bhb_loop+0x40/0x90 [ 145.649949][ T6769] ? clear_bhb_loop+0x40/0x90 [ 145.654669][ T6769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.660600][ T6769] RIP: 0033:0x7faaa099ce59 [ 145.665052][ T6769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.684701][ T6769] RSP: 002b:00007faaa18d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 145.693158][ T6769] RAX: ffffffffffffffda RBX: 00007faaa0c15fa0 RCX: 00007faaa099ce59 [ 145.701166][ T6769] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 145.709172][ T6769] RBP: 00007faaa18d5090 R08: 0000000000000000 R09: 0000000000000000 [ 145.717176][ T6769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.725185][ T6769] R13: 00007faaa0c16038 R14: 00007faaa0c15fa0 R15: 00007fff6db87398 [ 145.733204][ T6769] [ 146.204283][ T6790] netlink: 'syz.1.335': attribute type 2 has an invalid length. [ 146.212150][ T6790] netlink: 164 bytes leftover after parsing attributes in process `syz.1.335'. [ 146.236382][ T6788] netlink: 1039 bytes leftover after parsing attributes in process `syz.3.336'. [ 146.317153][ T6790] netlink: 'syz.1.335': attribute type 2 has an invalid length. [ 146.343217][ T6790] netlink: 164 bytes leftover after parsing attributes in process `syz.1.335'. [ 146.503976][ T6798] netlink: 'syz.0.337': attribute type 22 has an invalid length. [ 146.523331][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 148.090025][ T6825] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.345'. [ 148.395572][ T6830] geneve1: entered promiscuous mode [ 148.400866][ T6830] geneve1: entered allmulticast mode [ 148.495901][ T6833] FAULT_INJECTION: forcing a failure. [ 148.495901][ T6833] name failslab, interval 1, probability 0, space 0, times 0 [ 148.522838][ T6833] CPU: 0 PID: 6833 Comm: syz.3.348 Not tainted syzkaller #0 [ 148.530190][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 148.540270][ T6833] Call Trace: [ 148.543575][ T6833] [ 148.546519][ T6833] dump_stack_lvl+0x18c/0x250 [ 148.551225][ T6833] ? sctp_sendmsg+0x1575/0x28c0 [ 148.556092][ T6833] ? ___sys_sendmsg+0x2a6/0x360 [ 148.560954][ T6833] ? show_regs_print_info+0x20/0x20 [ 148.566175][ T6833] ? load_image+0x420/0x420 [ 148.570708][ T6833] should_fail_ex+0x39d/0x4d0 [ 148.575411][ T6833] should_failslab+0x9/0x20 [ 148.579930][ T6833] slab_pre_alloc_hook+0x59/0x310 [ 148.584979][ T6833] ? sctp_add_bind_addr+0x8c/0x360 [ 148.590105][ T6833] __kmem_cache_alloc_node+0x53/0x250 [ 148.595500][ T6833] ? sctp_add_bind_addr+0x8c/0x360 [ 148.600629][ T6833] kmalloc_trace+0x2a/0xe0 [ 148.605064][ T6833] sctp_add_bind_addr+0x8c/0x360 [ 148.610015][ T6833] sctp_copy_local_addr_list+0x315/0x4f0 [ 148.615664][ T6833] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 148.621397][ T6833] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 148.627480][ T6833] ? sctp_v4_is_any+0x35/0x60 [ 148.632167][ T6833] ? sctp_copy_one_addr+0x8c/0x350 [ 148.637295][ T6833] sctp_bind_addr_copy+0xb3/0x3c0 [ 148.642333][ T6833] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 148.648680][ T6833] sctp_connect_new_asoc+0x2f9/0x6a0 [ 148.653984][ T6833] ? __sctp_connect+0xd80/0xd80 [ 148.658846][ T6833] ? __local_bh_enable_ip+0x13a/0x1c0 [ 148.664234][ T6833] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 148.669797][ T6833] ? security_sctp_bind_connect+0x89/0xb0 [ 148.675536][ T6833] sctp_sendmsg+0x1575/0x28c0 [ 148.680242][ T6833] ? sctp_getsockopt+0xb60/0xb60 [ 148.685195][ T6833] ? aa_sk_perm+0x83c/0x970 [ 148.689714][ T6833] ? __perf_event_overflow+0x4f8/0x630 [ 148.695191][ T6833] ? aa_af_perm+0x330/0x330 [ 148.699717][ T6833] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 148.706149][ T6833] ? sock_rps_record_flow+0x19/0x3f0 [ 148.711452][ T6833] ? inet_sendmsg+0xe9/0x2f0 [ 148.716058][ T6833] ? inet_send_prepare+0x260/0x260 [ 148.721187][ T6833] ____sys_sendmsg+0x5ba/0x960 [ 148.725962][ T6833] ? __lock_acquire+0x7d40/0x7d40 [ 148.731003][ T6833] ? __asan_memset+0x22/0x40 [ 148.735626][ T6833] ? __sys_sendmsg_sock+0x30/0x30 [ 148.740656][ T6833] ? __import_iovec+0x5f2/0x850 [ 148.745525][ T6833] ? import_iovec+0x73/0xa0 [ 148.750046][ T6833] ___sys_sendmsg+0x2a6/0x360 [ 148.754734][ T6833] ? get_pid_task+0x20/0x1e0 [ 148.759364][ T6833] ? __sys_sendmsg+0x2a0/0x2a0 [ 148.764175][ T6833] ? __lock_acquire+0x7d40/0x7d40 [ 148.769259][ T6833] __se_sys_sendmsg+0x1c2/0x2b0 [ 148.774154][ T6833] ? __x64_sys_sendmsg+0x80/0x80 [ 148.779132][ T6833] ? lockdep_hardirqs_on+0x98/0x150 [ 148.784355][ T6833] do_syscall_64+0x55/0xa0 [ 148.788782][ T6833] ? clear_bhb_loop+0x40/0x90 [ 148.793475][ T6833] ? clear_bhb_loop+0x40/0x90 [ 148.798176][ T6833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.804088][ T6833] RIP: 0033:0x7f57b359ce59 [ 148.808574][ T6833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.828660][ T6833] RSP: 002b:00007f57b4493028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.837113][ T6833] RAX: ffffffffffffffda RBX: 00007f57b3815fa0 RCX: 00007f57b359ce59 [ 148.845113][ T6833] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000039 [ 148.853105][ T6833] RBP: 00007f57b4493090 R08: 0000000000000000 R09: 0000000000000000 [ 148.861136][ T6833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.869119][ T6833] R13: 00007f57b3816038 R14: 00007f57b3815fa0 R15: 00007fffc7f3d348 [ 148.877117][ T6833] [ 148.918699][ T6835] netlink: 830 bytes leftover after parsing attributes in process `syz.0.349'. [ 149.531967][ T6858] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.356'. [ 149.576705][ T6856] netlink: 'syz.1.354': attribute type 2 has an invalid length. [ 149.637805][ T6856] netlink: 'syz.1.354': attribute type 9 has an invalid length. [ 149.737548][ T6856] netlink: 132 bytes leftover after parsing attributes in process `syz.1.354'. [ 150.951556][ T6869] netlink: 'syz.2.362': attribute type 10 has an invalid length. [ 151.367973][ T6883] netlink: 'syz.1.366': attribute type 10 has an invalid length. [ 151.541456][ T6890] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.369'. [ 151.757996][ T6899] netlink: 'syz.0.371': attribute type 10 has an invalid length. [ 151.766070][ T6899] syz_tun: entered promiscuous mode [ 152.276046][ T6903] netlink: 196 bytes leftover after parsing attributes in process `syz.0.373'. [ 154.626550][ T6947] netlink: 128 bytes leftover after parsing attributes in process `syz.3.397'. [ 154.669697][ T6947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.054625][ T6949] syzkaller0: entered promiscuous mode [ 155.054801][ T6956] FAULT_INJECTION: forcing a failure. [ 155.054801][ T6956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.060150][ T6949] syzkaller0: entered allmulticast mode [ 155.119878][ T6956] CPU: 0 PID: 6956 Comm: syz.3.390 Not tainted syzkaller #0 [ 155.127247][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 155.137339][ T6956] Call Trace: [ 155.140632][ T6956] [ 155.143580][ T6956] dump_stack_lvl+0x18c/0x250 [ 155.148287][ T6956] ? show_regs_print_info+0x20/0x20 [ 155.153508][ T6956] ? load_image+0x420/0x420 [ 155.158029][ T6956] ? __might_fault+0xaa/0x120 [ 155.162717][ T6956] ? __lock_acquire+0x7d40/0x7d40 [ 155.167763][ T6956] should_fail_ex+0x39d/0x4d0 [ 155.172464][ T6956] _copy_from_iter+0x1d9/0x12e0 [ 155.177337][ T6956] ? __might_fault+0xaa/0x120 [ 155.182026][ T6956] ? _copy_from_iter+0x24e/0x12e0 [ 155.187084][ T6956] ? __virt_addr_valid+0x18c/0x540 [ 155.192213][ T6956] ? __lock_acquire+0x7d40/0x7d40 [ 155.197248][ T6956] ? copyout_mc+0x70/0x70 [ 155.201601][ T6956] ? copyout_mc+0x70/0x70 [ 155.205945][ T6956] ? __virt_addr_valid+0x18c/0x540 [ 155.211072][ T6956] ? page_copy_sane+0x16a/0x270 [ 155.215942][ T6956] copy_page_from_iter+0x7b/0x100 [ 155.220989][ T6956] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 155.226820][ T6956] tun_get_user+0x15db/0x3ca0 [ 155.231521][ T6956] ? aa_file_perm+0x11b/0xee0 [ 155.236254][ T6956] ? rcu_read_unlock+0xa0/0xa0 [ 155.241042][ T6956] ? tun_get+0x1c/0x2e0 [ 155.245228][ T6956] ? __lock_acquire+0x7d40/0x7d40 [ 155.250284][ T6956] ? tun_get+0x1c/0x2e0 [ 155.254468][ T6956] tun_chr_write_iter+0x119/0x200 [ 155.259547][ T6956] vfs_write+0x46c/0x990 [ 155.263820][ T6956] ? file_end_write+0x250/0x250 [ 155.268692][ T6956] ? __fget_files+0x43d/0x4b0 [ 155.273396][ T6956] ? __fdget_pos+0x1d8/0x330 [ 155.277996][ T6956] ? ksys_write+0x75/0x260 [ 155.282429][ T6956] ksys_write+0x150/0x260 [ 155.286789][ T6956] ? __ia32_sys_read+0x90/0x90 [ 155.291572][ T6956] ? lockdep_hardirqs_on+0x98/0x150 [ 155.296789][ T6956] do_syscall_64+0x55/0xa0 [ 155.301220][ T6956] ? clear_bhb_loop+0x40/0x90 [ 155.305914][ T6956] ? clear_bhb_loop+0x40/0x90 [ 155.310603][ T6956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.316508][ T6956] RIP: 0033:0x7f57b359ce59 [ 155.320948][ T6956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.340567][ T6956] RSP: 002b:00007f57b4493028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 155.349080][ T6956] RAX: ffffffffffffffda RBX: 00007f57b3815fa0 RCX: 00007f57b359ce59 [ 155.357063][ T6956] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 155.365047][ T6956] RBP: 00007f57b4493090 R08: 0000000000000000 R09: 0000000000000000 [ 155.373024][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.381008][ T6956] R13: 00007f57b3816038 R14: 00007f57b3815fa0 R15: 00007fffc7f3d348 [ 155.389019][ T6956] [ 157.687275][ T6998] FAULT_INJECTION: forcing a failure. [ 157.687275][ T6998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.700609][ T6998] CPU: 1 PID: 6998 Comm: syz.2.404 Not tainted syzkaller #0 [ 157.707964][ T6998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.718033][ T6998] Call Trace: [ 157.721334][ T6998] [ 157.724378][ T6998] dump_stack_lvl+0x18c/0x250 [ 157.729101][ T6998] ? show_regs_print_info+0x20/0x20 [ 157.734314][ T6998] ? load_image+0x420/0x420 [ 157.738827][ T6998] ? __might_fault+0xaa/0x120 [ 157.743513][ T6998] ? __lock_acquire+0x7d40/0x7d40 [ 157.748544][ T6998] should_fail_ex+0x39d/0x4d0 [ 157.753252][ T6998] _copy_to_user+0x2f/0xa0 [ 157.757710][ T6998] bpf_test_finish+0x4e7/0x650 [ 157.762496][ T6998] ? convert___skb_to_skb+0x590/0x590 [ 157.767885][ T6998] ? convert_skb_to___skb+0x420/0x420 [ 157.773272][ T6998] ? rcuref_put_slowpath+0x141/0x150 [ 157.778575][ T6998] ? rep_movs_alternative+0x4a/0x90 [ 157.783789][ T6998] bpf_prog_test_run_xdp+0x8a9/0x10e0 [ 157.789188][ T6998] ? dev_put+0x80/0x80 [ 157.793280][ T6998] ? dev_put+0x80/0x80 [ 157.797362][ T6998] bpf_prog_test_run+0x321/0x390 [ 157.802313][ T6998] __sys_bpf+0x49d/0x890 [ 157.806572][ T6998] ? bpf_link_show_fdinfo+0x390/0x390 [ 157.811971][ T6998] ? lock_chain_count+0x20/0x20 [ 157.816834][ T6998] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 157.823007][ T6998] __x64_sys_bpf+0x7c/0x90 [ 157.827437][ T6998] do_syscall_64+0x55/0xa0 [ 157.831891][ T6998] ? clear_bhb_loop+0x40/0x90 [ 157.836581][ T6998] ? clear_bhb_loop+0x40/0x90 [ 157.841274][ T6998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.847184][ T6998] RIP: 0033:0x7fdb6d39ce59 [ 157.851610][ T6998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.871230][ T6998] RSP: 002b:00007fdb6e34c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 157.879664][ T6998] RAX: ffffffffffffffda RBX: 00007fdb6d615fa0 RCX: 00007fdb6d39ce59 [ 157.887647][ T6998] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 157.895628][ T6998] RBP: 00007fdb6e34c090 R08: 0000000000000000 R09: 0000000000000000 [ 157.903621][ T6998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.911602][ T6998] R13: 00007fdb6d616038 R14: 00007fdb6d615fa0 R15: 00007ffefbbbf6a8 [ 157.919598][ T6998] [ 159.263178][ T7016] netlink: 'syz.1.409': attribute type 3 has an invalid length. [ 159.312346][ T7016] netlink: 132 bytes leftover after parsing attributes in process `syz.1.409'. [ 159.614908][ T7021] netlink: 'syz.3.412': attribute type 9 has an invalid length. [ 159.653814][ T7021] netlink: 160016 bytes leftover after parsing attributes in process `syz.3.412'. [ 160.909930][ T7029] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.414'. [ 160.922773][ T7029] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.414'. [ 161.371985][ T7041] netlink: 'syz.3.418': attribute type 21 has an invalid length. [ 161.813999][ T7048] netlink: 'syz.2.419': attribute type 10 has an invalid length. [ 162.696516][ T7050] netlink: 60 bytes leftover after parsing attributes in process `syz.0.420'. [ 162.707131][ T7050] netlink: 60 bytes leftover after parsing attributes in process `syz.0.420'. [ 162.718477][ T7050] netlink: 60 bytes leftover after parsing attributes in process `syz.0.420'. [ 162.764181][ T7050] netlink: 60 bytes leftover after parsing attributes in process `syz.0.420'. [ 163.407879][ T7069] FAULT_INJECTION: forcing a failure. [ 163.407879][ T7069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.446022][ T7069] CPU: 1 PID: 7069 Comm: syz.1.427 Not tainted syzkaller #0 [ 163.453399][ T7069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.463500][ T7069] Call Trace: [ 163.466820][ T7069] [ 163.469791][ T7069] dump_stack_lvl+0x18c/0x250 [ 163.474530][ T7069] ? show_regs_print_info+0x20/0x20 [ 163.479789][ T7069] ? load_image+0x420/0x420 [ 163.484340][ T7069] ? __might_fault+0xaa/0x120 [ 163.489061][ T7069] ? __lock_acquire+0x7d40/0x7d40 [ 163.494140][ T7069] should_fail_ex+0x39d/0x4d0 [ 163.498891][ T7069] _copy_from_user+0x2f/0xe0 [ 163.503622][ T7069] br_dev_siocdevprivate+0x119/0x1540 [ 163.509064][ T7069] ? rcu_is_watching+0x15/0xb0 [ 163.513875][ T7069] ? br_handle_local_finish+0x20/0x20 [ 163.519270][ T7069] ? trace_contention_end+0x39/0xe0 [ 163.524484][ T7069] ? __mutex_lock+0x315/0xcc0 [ 163.529180][ T7069] ? dev_load+0x21/0x1f0 [ 163.533442][ T7069] ? dev_ioctl+0x83c/0x1140 [ 163.537960][ T7069] ? __lock_acquire+0x7d40/0x7d40 [ 163.542996][ T7069] ? mutex_lock_nested+0x20/0x20 [ 163.547945][ T7069] ? full_name_hash+0x92/0xe0 [ 163.552652][ T7069] ? dev_ifsioc+0x958/0xc40 [ 163.557189][ T7069] dev_ioctl+0x84c/0x1140 [ 163.561538][ T7069] sock_ioctl+0x74c/0x7e0 [ 163.565889][ T7069] ? sock_poll+0x3e0/0x3e0 [ 163.570328][ T7069] ? bpf_lsm_file_ioctl+0x9/0x10 [ 163.575275][ T7069] ? security_file_ioctl+0x80/0xa0 [ 163.580405][ T7069] ? sock_poll+0x3e0/0x3e0 [ 163.584842][ T7069] __se_sys_ioctl+0xfd/0x170 [ 163.589454][ T7069] do_syscall_64+0x55/0xa0 [ 163.593880][ T7069] ? clear_bhb_loop+0x40/0x90 [ 163.598572][ T7069] ? clear_bhb_loop+0x40/0x90 [ 163.603267][ T7069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.609176][ T7069] RIP: 0033:0x7faaa099ce59 [ 163.613602][ T7069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.633220][ T7069] RSP: 002b:00007faaa18d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.641656][ T7069] RAX: ffffffffffffffda RBX: 00007faaa0c15fa0 RCX: 00007faaa099ce59 [ 163.649643][ T7069] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 163.657722][ T7069] RBP: 00007faaa18d5090 R08: 0000000000000000 R09: 0000000000000000 [ 163.665721][ T7069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.673705][ T7069] R13: 00007faaa0c16038 R14: 00007faaa0c15fa0 R15: 00007fff6db87398 [ 163.681703][ T7069] [ 163.709139][ T7071] netlink: 128 bytes leftover after parsing attributes in process `syz.3.429'. [ 163.742252][ T7071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.774752][ T7071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.864175][ T7126] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 165.879124][ T7126] netlink: 'syz.0.446': attribute type 3 has an invalid length. [ 165.897222][ T7126] netlink: 132 bytes leftover after parsing attributes in process `syz.0.446'. [ 166.102455][ T7126] netlink: 'syz.0.446': attribute type 27 has an invalid length. [ 166.114408][ T7126] netlink: 'syz.0.446': attribute type 4 has an invalid length. [ 166.122291][ T7126] netlink: 152 bytes leftover after parsing attributes in process `syz.0.446'. [ 166.939660][ T7140] FAULT_INJECTION: forcing a failure. [ 166.939660][ T7140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.970956][ T7140] CPU: 1 PID: 7140 Comm: syz.0.451 Not tainted syzkaller #0 [ 166.978330][ T7140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.988420][ T7140] Call Trace: [ 166.991726][ T7140] [ 166.994675][ T7140] dump_stack_lvl+0x18c/0x250 [ 166.999388][ T7140] ? show_regs_print_info+0x20/0x20 [ 167.004610][ T7140] ? load_image+0x420/0x420 [ 167.009142][ T7140] ? __might_fault+0xaa/0x120 [ 167.013839][ T7140] ? __lock_acquire+0x7d40/0x7d40 [ 167.018887][ T7140] should_fail_ex+0x39d/0x4d0 [ 167.023595][ T7140] _copy_to_iter+0x1ce/0x1120 [ 167.028311][ T7140] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 167.034307][ T7140] ? iov_iter_init+0x1e0/0x1e0 [ 167.039093][ T7140] ? __virt_addr_valid+0x18c/0x540 [ 167.044223][ T7140] ? __virt_addr_valid+0x469/0x540 [ 167.049354][ T7140] ? __phys_addr_symbol+0x2f/0x70 [ 167.054408][ T7140] __skb_datagram_iter+0xdb/0x780 [ 167.059474][ T7140] ? skb_copy_datagram_iter+0x200/0x200 [ 167.065050][ T7140] skb_copy_datagram_iter+0xb1/0x200 [ 167.070364][ T7140] sock_recv_errqueue+0x136/0x590 [ 167.075424][ T7140] ? sock_gettstamp+0x2f0/0x2f0 [ 167.080321][ T7140] packet_recvmsg+0x1d8/0x1660 [ 167.085139][ T7140] ? aa_sk_perm+0x83c/0x970 [ 167.089697][ T7140] ? verify_lock_unused+0x140/0x140 [ 167.094937][ T7140] ? packet_sendmsg+0x4c30/0x4c30 [ 167.099986][ T7140] ? aa_af_perm+0x330/0x330 [ 167.104516][ T7140] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 167.111125][ T7140] ? verify_lock_unused+0x140/0x140 [ 167.116338][ T7140] ? aa_sock_msg_perm+0x94/0x150 [ 167.121310][ T7140] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 167.126621][ T7140] ? security_socket_recvmsg+0x89/0xb0 [ 167.132104][ T7140] ? packet_sendmsg+0x4c30/0x4c30 [ 167.137153][ T7140] ____sys_recvmsg+0x2ce/0x5e0 [ 167.141950][ T7140] ? __sys_recvmsg_sock+0x50/0x50 [ 167.147012][ T7140] ? import_iovec+0x73/0xa0 [ 167.151536][ T7140] ___sys_recvmsg+0x216/0x590 [ 167.156236][ T7140] ? __sys_recvmsg+0x2a0/0x2a0 [ 167.161023][ T7140] ? ksys_write+0x1c4/0x260 [ 167.165569][ T7140] ? __fget_files+0x43d/0x4b0 [ 167.170297][ T7140] __x64_sys_recvmsg+0x20c/0x2e0 [ 167.175261][ T7140] ? ___sys_recvmsg+0x590/0x590 [ 167.180157][ T7140] ? lockdep_hardirqs_on+0x98/0x150 [ 167.185384][ T7140] do_syscall_64+0x55/0xa0 [ 167.189812][ T7140] ? clear_bhb_loop+0x40/0x90 [ 167.194521][ T7140] ? clear_bhb_loop+0x40/0x90 [ 167.199255][ T7140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.205186][ T7140] RIP: 0033:0x7f477899ce59 [ 167.209648][ T7140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.229321][ T7140] RSP: 002b:00007f4779780028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 167.237776][ T7140] RAX: ffffffffffffffda RBX: 00007f4778c15fa0 RCX: 00007f477899ce59 [ 167.245767][ T7140] RDX: 0000000000002002 RSI: 0000200000000380 RDI: 0000000000000003 [ 167.253756][ T7140] RBP: 00007f4779780090 R08: 0000000000000000 R09: 0000000000000000 [ 167.261740][ T7140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.269730][ T7140] R13: 00007f4778c16038 R14: 00007f4778c15fa0 R15: 00007ffc6214ea58 [ 167.277743][ T7140] [ 168.693301][ T7176] FAULT_INJECTION: forcing a failure. [ 168.693301][ T7176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.754642][ T7176] CPU: 1 PID: 7176 Comm: syz.2.464 Not tainted syzkaller #0 [ 168.762012][ T7176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.772114][ T7176] Call Trace: [ 168.775434][ T7176] [ 168.778406][ T7176] dump_stack_lvl+0x18c/0x250 [ 168.783142][ T7176] ? show_regs_print_info+0x20/0x20 [ 168.788385][ T7176] ? load_image+0x420/0x420 [ 168.792916][ T7176] ? __might_fault+0xaa/0x120 [ 168.797608][ T7176] ? __lock_acquire+0x7d40/0x7d40 [ 168.802659][ T7176] should_fail_ex+0x39d/0x4d0 [ 168.807375][ T7176] _copy_from_user+0x2f/0xe0 [ 168.811988][ T7176] kstrtouint_from_user+0xde/0x170 [ 168.817123][ T7176] ? kstrtol_from_user+0x190/0x190 [ 168.822269][ T7176] proc_fail_nth_write+0x8f/0x250 [ 168.827314][ T7176] ? proc_fail_nth_read+0x260/0x260 [ 168.832532][ T7176] ? proc_fail_nth_read+0x260/0x260 [ 168.837746][ T7176] vfs_write+0x296/0x990 [ 168.842009][ T7176] ? file_end_write+0x250/0x250 [ 168.846875][ T7176] ? __fget_files+0x28/0x4b0 [ 168.851481][ T7176] ? __fget_files+0x28/0x4b0 [ 168.856087][ T7176] ? __fget_files+0x43d/0x4b0 [ 168.860791][ T7176] ? __fdget_pos+0x2a3/0x330 [ 168.865399][ T7176] ? ksys_write+0x75/0x260 [ 168.869832][ T7176] ksys_write+0x150/0x260 [ 168.874209][ T7176] ? __ia32_sys_read+0x90/0x90 [ 168.878993][ T7176] ? lockdep_hardirqs_on+0x98/0x150 [ 168.884209][ T7176] do_syscall_64+0x55/0xa0 [ 168.888636][ T7176] ? clear_bhb_loop+0x40/0x90 [ 168.893325][ T7176] ? clear_bhb_loop+0x40/0x90 [ 168.898018][ T7176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.903927][ T7176] RIP: 0033:0x7fdb6d35d68e [ 168.908352][ T7176] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 168.927975][ T7176] RSP: 002b:00007fdb6e34bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.936404][ T7176] RAX: ffffffffffffffda RBX: 00007fdb6e34c6c0 RCX: 00007fdb6d35d68e [ 168.944389][ T7176] RDX: 0000000000000001 RSI: 00007fdb6e34c0a0 RDI: 0000000000000005 [ 168.952368][ T7176] RBP: 00007fdb6e34c090 R08: 0000000000000000 R09: 0000000000000000 [ 168.960350][ T7176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.968335][ T7176] R13: 00007fdb6d616038 R14: 00007fdb6d615fa0 R15: 00007ffefbbbf6a8 [ 168.976330][ T7176] [ 169.407036][ T7195] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.471'. [ 169.431508][ T7189] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.468'. [ 169.442036][ T7189] netlink: 3064 bytes leftover after parsing attributes in process `syz.1.468'. [ 169.488069][ T7198] netlink: 'syz.1.468': attribute type 1 has an invalid length. [ 169.499023][ T7195] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.471'. [ 169.508983][ T7198] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.468'. [ 169.911546][ T7205] netlink: 14 bytes leftover after parsing attributes in process `syz.2.474'. [ 170.500784][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 171.263214][ T7226] netlink: 'syz.1.479': attribute type 21 has an invalid length. [ 171.679173][ T7237] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.481'. [ 171.861669][ T7237] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 171.921073][ T7241] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.485'. [ 172.206078][ T7262] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.491'. [ 172.244508][ T7260] netlink: 'syz.1.490': attribute type 10 has an invalid length. [ 172.254080][ T7260] batman_adv: batadv0: Removing interface: netdevsim0 [ 172.418853][ T7266] netlink: 'syz.0.493': attribute type 3 has an invalid length. [ 172.419317][ T7260] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 172.442967][ T7266] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.493'. [ 172.458783][ T7264] netlink: 'syz.2.492': attribute type 9 has an invalid length. [ 172.488032][ T7264] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.492'. [ 173.198913][ T7281] netpci0: tun_chr_ioctl cmd 1074812117 [ 175.244481][ T7289] netlink: 'syz.1.500': attribute type 22 has an invalid length. [ 175.253404][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'. [ 176.064341][ T7323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.208211][ T7325] netlink: 'syz.3.515': attribute type 10 has an invalid length. [ 176.227241][ T7325] batman_adv: batadv0: Removing interface: netdevsim0 [ 176.400289][ T7325] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 179.374364][ T7332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.383837][ T7332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.401821][ T7332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.409991][ T7332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.696522][ T7346] netlink: 'syz.0.522': attribute type 3 has an invalid length. [ 179.740202][ T7346] netlink: 'syz.0.522': attribute type 1 has an invalid length. [ 179.783135][ T7346] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.522'. [ 180.273838][ T7364] netlink: 830 bytes leftover after parsing attributes in process `syz.2.528'. [ 180.444117][ T7370] netlink: 'syz.2.530': attribute type 10 has an invalid length. [ 180.659995][ T7370] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 180.674210][ T7373] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.531'. [ 180.688864][ T7375] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.531'. [ 180.711281][ T7376] netlink: 'syz.3.532': attribute type 10 has an invalid length. [ 180.875523][ T7383] netlink: 'syz.0.535': attribute type 10 has an invalid length. [ 180.914168][ T7383] batman_adv: batadv0: Adding interface: netdevsim0 [ 180.938842][ T7383] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.021176][ T7383] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 181.415802][ T7395] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.540'. [ 181.432124][ T7395] netlink: 'syz.1.540': attribute type 2 has an invalid length. [ 181.690588][ T7403] FAULT_INJECTION: forcing a failure. [ 181.690588][ T7403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.708275][ T7403] CPU: 1 PID: 7403 Comm: syz.3.543 Not tainted syzkaller #0 [ 181.715601][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 181.725680][ T7403] Call Trace: [ 181.728995][ T7403] [ 181.731957][ T7403] dump_stack_lvl+0x18c/0x250 [ 181.736687][ T7403] ? show_regs_print_info+0x20/0x20 [ 181.741923][ T7403] ? load_image+0x420/0x420 [ 181.746473][ T7403] ? __lock_acquire+0x7d40/0x7d40 [ 181.751537][ T7403] should_fail_ex+0x39d/0x4d0 [ 181.756267][ T7403] _copy_to_user+0x2f/0xa0 [ 181.760725][ T7403] put_user_ifreq+0x78/0xb0 [ 181.765270][ T7403] sock_ioctl+0x77b/0x7e0 [ 181.769636][ T7403] ? sock_poll+0x3e0/0x3e0 [ 181.774093][ T7403] ? bpf_lsm_file_ioctl+0x9/0x10 [ 181.779059][ T7403] ? security_file_ioctl+0x80/0xa0 [ 181.784204][ T7403] ? sock_poll+0x3e0/0x3e0 [ 181.788657][ T7403] __se_sys_ioctl+0xfd/0x170 [ 181.793294][ T7403] do_syscall_64+0x55/0xa0 [ 181.797747][ T7403] ? clear_bhb_loop+0x40/0x90 [ 181.802460][ T7403] ? clear_bhb_loop+0x40/0x90 [ 181.807170][ T7403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.813097][ T7403] RIP: 0033:0x7f57b359ce59 [ 181.817542][ T7403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.837184][ T7403] RSP: 002b:00007f57b4493028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.845632][ T7403] RAX: ffffffffffffffda RBX: 00007f57b3815fa0 RCX: 00007f57b359ce59 [ 181.853630][ T7403] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 181.861624][ T7403] RBP: 00007f57b4493090 R08: 0000000000000000 R09: 0000000000000000 [ 181.869623][ T7403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.877621][ T7403] R13: 00007f57b3816038 R14: 00007f57b3815fa0 R15: 00007fffc7f3d348 [ 181.885637][ T7403] [ 182.429849][ T7418] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.545'. [ 182.461010][ T7418] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.545'. [ 182.576844][ T7429] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.552'. [ 183.176797][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 183.192115][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 183.207430][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 183.221601][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 183.235511][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 183.506093][ T7448] netlink: 60 bytes leftover after parsing attributes in process `syz.2.557'. [ 183.542753][ T7448] netlink: 60 bytes leftover after parsing attributes in process `syz.2.557'. [ 184.745641][ T7477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.693875][ T7486] __nla_validate_parse: 2 callbacks suppressed [ 185.693921][ T7486] netlink: 60 bytes leftover after parsing attributes in process `syz.1.571'. [ 185.840240][ T7486] netlink: 60 bytes leftover after parsing attributes in process `syz.1.571'. [ 185.866709][ T7485] netlink: 60 bytes leftover after parsing attributes in process `syz.1.571'. [ 187.115128][ T7504] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.577'. [ 188.520732][ T7521] netlink: 'syz.3.584': attribute type 10 has an invalid length. [ 188.581427][ T7521] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 189.163721][ T7523] netlink: 'syz.3.584': attribute type 39 has an invalid length. [ 189.197597][ T7518] netlink: 60 bytes leftover after parsing attributes in process `syz.0.582'. [ 189.236964][ T7518] netlink: 60 bytes leftover after parsing attributes in process `syz.0.582'. [ 189.437956][ T7516] netlink: 60 bytes leftover after parsing attributes in process `syz.0.582'. [ 192.215556][ T7541] FAULT_INJECTION: forcing a failure. [ 192.215556][ T7541] name failslab, interval 1, probability 0, space 0, times 0 [ 192.264828][ T7541] CPU: 1 PID: 7541 Comm: syz.2.589 Not tainted syzkaller #0 [ 192.272199][ T7541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.282299][ T7541] Call Trace: [ 192.285623][ T7541] [ 192.288598][ T7541] dump_stack_lvl+0x18c/0x250 [ 192.293330][ T7541] ? sctp_sendmsg+0x1575/0x28c0 [ 192.298244][ T7541] ? ___sys_sendmsg+0x2a6/0x360 [ 192.303150][ T7541] ? show_regs_print_info+0x20/0x20 [ 192.308406][ T7541] ? load_image+0x420/0x420 [ 192.312971][ T7541] should_fail_ex+0x39d/0x4d0 [ 192.317706][ T7541] should_failslab+0x9/0x20 [ 192.322258][ T7541] slab_pre_alloc_hook+0x59/0x310 [ 192.327336][ T7541] ? sctp_add_bind_addr+0x8c/0x360 [ 192.332494][ T7541] __kmem_cache_alloc_node+0x53/0x250 [ 192.337926][ T7541] ? sctp_add_bind_addr+0x8c/0x360 [ 192.343073][ T7541] kmalloc_trace+0x2a/0xe0 [ 192.347537][ T7541] sctp_add_bind_addr+0x8c/0x360 [ 192.352523][ T7541] sctp_copy_local_addr_list+0x315/0x4f0 [ 192.358195][ T7541] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 192.363951][ T7541] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 192.370057][ T7541] ? sctp_v4_is_any+0x35/0x60 [ 192.374775][ T7541] ? sctp_copy_one_addr+0x8c/0x350 [ 192.379924][ T7541] sctp_bind_addr_copy+0xb3/0x3c0 [ 192.384985][ T7541] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 192.391345][ T7541] sctp_connect_new_asoc+0x2f9/0x6a0 [ 192.396658][ T7541] ? __sctp_connect+0xd80/0xd80 [ 192.401525][ T7541] ? __local_bh_enable_ip+0x13a/0x1c0 [ 192.406918][ T7541] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 192.412479][ T7541] ? security_sctp_bind_connect+0x89/0xb0 [ 192.418233][ T7541] sctp_sendmsg+0x1575/0x28c0 [ 192.422943][ T7541] ? sctp_getsockopt+0xb60/0xb60 [ 192.427921][ T7541] ? aa_sk_perm+0x83c/0x970 [ 192.432482][ T7541] ? aa_af_perm+0x330/0x330 [ 192.437189][ T7541] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 192.443642][ T7541] ? sock_rps_record_flow+0x19/0x3f0 [ 192.448948][ T7541] ? inet_sendmsg+0xe9/0x2f0 [ 192.453551][ T7541] ? inet_send_prepare+0x260/0x260 [ 192.458680][ T7541] ____sys_sendmsg+0x5ba/0x960 [ 192.463469][ T7541] ? __lock_acquire+0x7d40/0x7d40 [ 192.468512][ T7541] ? __asan_memset+0x22/0x40 [ 192.473122][ T7541] ? __sys_sendmsg_sock+0x30/0x30 [ 192.478159][ T7541] ? __import_iovec+0x5f2/0x850 [ 192.483031][ T7541] ? import_iovec+0x73/0xa0 [ 192.487546][ T7541] ___sys_sendmsg+0x2a6/0x360 [ 192.492315][ T7541] ? __sys_sendmsg+0x2a0/0x2a0 [ 192.497130][ T7541] ? trace_call_bpf+0xc3/0x6c0 [ 192.501949][ T7541] __se_sys_sendmsg+0x1c2/0x2b0 [ 192.506829][ T7541] ? __x64_sys_sendmsg+0x80/0x80 [ 192.511797][ T7541] ? lockdep_hardirqs_on+0x98/0x150 [ 192.517013][ T7541] do_syscall_64+0x55/0xa0 [ 192.521443][ T7541] ? clear_bhb_loop+0x40/0x90 [ 192.526139][ T7541] ? clear_bhb_loop+0x40/0x90 [ 192.530829][ T7541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.536734][ T7541] RIP: 0033:0x7fdb6d39ce59 [ 192.541162][ T7541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.560783][ T7541] RSP: 002b:00007fdb6e34c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.569218][ T7541] RAX: ffffffffffffffda RBX: 00007fdb6d615fa0 RCX: 00007fdb6d39ce59 [ 192.577232][ T7541] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000039 [ 192.585232][ T7541] RBP: 00007fdb6e34c090 R08: 0000000000000000 R09: 0000000000000000 [ 192.593226][ T7541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.601220][ T7541] R13: 00007fdb6d616038 R14: 00007fdb6d615fa0 R15: 00007ffefbbbf6a8 [ 192.609229][ T7541] [ 193.106416][ T7562] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.597'. [ 194.459196][ T7591] netlink: 156 bytes leftover after parsing attributes in process `syz.1.606'. [ 194.498353][ T7593] netlink: 156 bytes leftover after parsing attributes in process `syz.1.606'. [ 194.720953][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.727455][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.462982][ T7615] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.612'. [ 195.560647][ T7615] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.612'. [ 195.888153][ T7624] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.616'. [ 196.125772][ T7631] netlink: 'syz.1.619': attribute type 4 has an invalid length. [ 196.143815][ T7631] netlink: 'syz.1.619': attribute type 16 has an invalid length. [ 196.161127][ T7631] netlink: 132 bytes leftover after parsing attributes in process `syz.1.619'. [ 196.556762][ T7634] netlink: 'syz.1.619': attribute type 10 has an invalid length. [ 196.582979][ T7634] netlink: 55 bytes leftover after parsing attributes in process `syz.1.619'. [ 196.745175][ T7642] FAULT_INJECTION: forcing a failure. [ 196.745175][ T7642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.791469][ T7642] CPU: 1 PID: 7642 Comm: syz.2.623 Not tainted syzkaller #0 [ 196.798844][ T7642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.808939][ T7642] Call Trace: [ 196.812263][ T7642] [ 196.815229][ T7642] dump_stack_lvl+0x18c/0x250 [ 196.819964][ T7642] ? show_regs_print_info+0x20/0x20 [ 196.825220][ T7642] ? load_image+0x420/0x420 [ 196.829772][ T7642] ? __might_fault+0xaa/0x120 [ 196.834505][ T7642] ? __lock_acquire+0x7d40/0x7d40 [ 196.839568][ T7642] should_fail_ex+0x39d/0x4d0 [ 196.844291][ T7642] _copy_from_iter+0x1d9/0x12e0 [ 196.849177][ T7642] ? __might_fault+0xaa/0x120 [ 196.853883][ T7642] ? _copy_from_iter+0x24e/0x12e0 [ 196.858944][ T7642] ? __virt_addr_valid+0x18c/0x540 [ 196.864091][ T7642] ? __lock_acquire+0x7d40/0x7d40 [ 196.869143][ T7642] ? copyout_mc+0x70/0x70 [ 196.873514][ T7642] ? copyout_mc+0x70/0x70 [ 196.877886][ T7642] ? __virt_addr_valid+0x18c/0x540 [ 196.883048][ T7642] ? page_copy_sane+0x16a/0x270 [ 196.887938][ T7642] copy_page_from_iter+0x7b/0x100 [ 196.893003][ T7642] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 196.898863][ T7642] tun_get_user+0x15db/0x3ca0 [ 196.903590][ T7642] ? aa_file_perm+0x11b/0xee0 [ 196.908401][ T7642] ? rcu_read_unlock+0xa0/0xa0 [ 196.913213][ T7642] ? tun_get+0x1c/0x2e0 [ 196.917406][ T7642] ? __lock_acquire+0x7d40/0x7d40 [ 196.922483][ T7642] ? tun_get+0x1c/0x2e0 [ 196.926682][ T7642] tun_chr_write_iter+0x119/0x200 [ 196.931739][ T7642] vfs_write+0x46c/0x990 [ 196.936021][ T7642] ? file_end_write+0x250/0x250 [ 196.940913][ T7642] ? __fget_files+0x43d/0x4b0 [ 196.945632][ T7642] ? __fdget_pos+0x1d8/0x330 [ 196.950252][ T7642] ? ksys_write+0x75/0x260 [ 196.954706][ T7642] ksys_write+0x150/0x260 [ 196.959077][ T7642] ? __ia32_sys_read+0x90/0x90 [ 196.963891][ T7642] ? lockdep_hardirqs_on+0x98/0x150 [ 196.969135][ T7642] do_syscall_64+0x55/0xa0 [ 196.973580][ T7642] ? clear_bhb_loop+0x40/0x90 [ 196.978292][ T7642] ? clear_bhb_loop+0x40/0x90 [ 196.983005][ T7642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.988935][ T7642] RIP: 0033:0x7fdb6d39ce59 [ 196.993374][ T7642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.013024][ T7642] RSP: 002b:00007fdb6e34c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.021454][ T7642] RAX: ffffffffffffffda RBX: 00007fdb6d615fa0 RCX: 00007fdb6d39ce59 [ 197.029526][ T7642] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 197.037520][ T7642] RBP: 00007fdb6e34c090 R08: 0000000000000000 R09: 0000000000000000 [ 197.045506][ T7642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.053491][ T7642] R13: 00007fdb6d616038 R14: 00007fdb6d615fa0 R15: 00007ffefbbbf6a8 [ 197.061508][ T7642] [ 197.082701][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 197.088931][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 197.095212][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 197.101829][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 198.182505][ T7672] netlink: 'syz.3.634': attribute type 3 has an invalid length. [ 198.190577][ T7672] netlink: 132 bytes leftover after parsing attributes in process `syz.3.634'. [ 199.224472][ T7695] syzkaller0: entered promiscuous mode [ 199.230220][ T7695] syzkaller0: entered allmulticast mode [ 199.875994][ T7709] netlink: 'syz.2.648': attribute type 3 has an invalid length. [ 199.890781][ T7709] netlink: 132 bytes leftover after parsing attributes in process `syz.2.648'. [ 202.487555][ T7730] FAULT_INJECTION: forcing a failure. [ 202.487555][ T7730] name failslab, interval 1, probability 0, space 0, times 0 [ 202.563555][ T7733] netlink: 'syz.0.658': attribute type 21 has an invalid length. [ 202.592803][ T7730] CPU: 0 PID: 7730 Comm: syz.2.657 Not tainted syzkaller #0 [ 202.600219][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 202.610343][ T7730] Call Trace: [ 202.613690][ T7730] [ 202.616687][ T7730] dump_stack_lvl+0x18c/0x250 [ 202.621449][ T7730] ? sctp_sendmsg+0x1575/0x28c0 [ 202.626378][ T7730] ? ___sys_sendmsg+0x2a6/0x360 [ 202.631303][ T7730] ? show_regs_print_info+0x20/0x20 [ 202.636588][ T7730] ? load_image+0x420/0x420 [ 202.641243][ T7730] should_fail_ex+0x39d/0x4d0 [ 202.646031][ T7730] should_failslab+0x9/0x20 [ 202.650610][ T7730] slab_pre_alloc_hook+0x59/0x310 [ 202.655723][ T7730] ? sctp_add_bind_addr+0x8c/0x360 [ 202.660908][ T7730] __kmem_cache_alloc_node+0x53/0x250 [ 202.666375][ T7730] ? sctp_add_bind_addr+0x8c/0x360 [ 202.671553][ T7730] kmalloc_trace+0x2a/0xe0 [ 202.676055][ T7730] sctp_add_bind_addr+0x8c/0x360 [ 202.681094][ T7730] sctp_copy_local_addr_list+0x315/0x4f0 [ 202.686824][ T7730] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 202.692618][ T7730] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 202.698784][ T7730] ? sctp_v4_is_any+0x35/0x60 [ 202.703531][ T7730] ? sctp_copy_one_addr+0x8c/0x350 [ 202.708736][ T7730] sctp_bind_addr_copy+0xb3/0x3c0 [ 202.713840][ T7730] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 202.720270][ T7730] sctp_connect_new_asoc+0x2f9/0x6a0 [ 202.725649][ T7730] ? __sctp_connect+0xd80/0xd80 [ 202.730568][ T7730] ? __local_bh_enable_ip+0x13a/0x1c0 [ 202.736035][ T7730] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 202.741654][ T7730] ? security_sctp_bind_connect+0x89/0xb0 [ 202.747464][ T7730] sctp_sendmsg+0x1575/0x28c0 [ 202.752285][ T7730] ? sctp_getsockopt+0xb60/0xb60 [ 202.757313][ T7730] ? aa_sk_perm+0x83c/0x970 [ 202.761932][ T7730] ? aa_af_perm+0x330/0x330 [ 202.766500][ T7730] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 202.773003][ T7730] ? sock_rps_record_flow+0x19/0x3f0 [ 202.778385][ T7730] ? inet_sendmsg+0xe9/0x2f0 [ 202.783056][ T7730] ? inet_send_prepare+0x260/0x260 [ 202.788263][ T7730] ____sys_sendmsg+0x5ba/0x960 [ 202.793096][ T7730] ? __lock_acquire+0x7d40/0x7d40 [ 202.798221][ T7730] ? __asan_memset+0x22/0x40 [ 202.802884][ T7730] ? __sys_sendmsg_sock+0x30/0x30 [ 202.807968][ T7730] ? __import_iovec+0x5f2/0x850 [ 202.812929][ T7730] ? import_iovec+0x73/0xa0 [ 202.817520][ T7730] ___sys_sendmsg+0x2a6/0x360 [ 202.822288][ T7730] ? __sys_sendmsg+0x2a0/0x2a0 [ 202.827225][ T7730] ? __lock_acquire+0x7d40/0x7d40 [ 202.832438][ T7730] __se_sys_sendmsg+0x1c2/0x2b0 [ 202.837369][ T7730] ? __x64_sys_sendmsg+0x80/0x80 [ 202.842448][ T7730] ? lockdep_hardirqs_on+0x98/0x150 [ 202.847731][ T7730] do_syscall_64+0x55/0xa0 [ 202.852211][ T7730] ? clear_bhb_loop+0x40/0x90 [ 202.856951][ T7730] ? clear_bhb_loop+0x40/0x90 [ 202.861707][ T7730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.867673][ T7730] RIP: 0033:0x7fdb6d39ce59 [ 202.872159][ T7730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.891849][ T7730] RSP: 002b:00007fdb6e34c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.900352][ T7730] RAX: ffffffffffffffda RBX: 00007fdb6d615fa0 RCX: 00007fdb6d39ce59 [ 202.908392][ T7730] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000039 [ 202.916602][ T7730] RBP: 00007fdb6e34c090 R08: 0000000000000000 R09: 0000000000000000 [ 202.924640][ T7730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.932676][ T7730] R13: 00007fdb6d616038 R14: 00007fdb6d615fa0 R15: 00007ffefbbbf6a8 [ 202.940782][ T7730] [ 204.673788][ T7750] netlink: 'syz.1.660': attribute type 3 has an invalid length. [ 204.689107][ T7750] netlink: 132 bytes leftover after parsing attributes in process `syz.1.660'. [ 204.894903][ T7753] syzkaller0: entered promiscuous mode [ 204.915320][ T7753] syzkaller0: entered allmulticast mode [ 204.930258][ T7755] netlink: 'syz.2.663': attribute type 13 has an invalid length. [ 204.945003][ T7755] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.663'. [ 205.526169][ T7768] netlink: 'syz.2.667': attribute type 3 has an invalid length. [ 205.601218][ T7768] netlink: 'syz.2.667': attribute type 4 has an invalid length. [ 205.699880][ T7768] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.667'. [ 205.701441][ T7752] delete_channel: no stack [ 205.932030][ T7768] netlink: zone id is out of range [ 205.937283][ T7768] netlink: set zone limit has 8 unknown bytes [ 206.533045][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 206.543437][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 206.553227][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 206.562952][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 206.572696][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 209.908414][ T7772] netlink: 'syz.0.669': attribute type 10 has an invalid length. [ 210.046194][ T7793] netlink: 'syz.1.674': attribute type 21 has an invalid length. [ 210.080537][ T7792] netlink: 'syz.0.673': attribute type 3 has an invalid length. [ 210.102701][ T7792] netlink: 132 bytes leftover after parsing attributes in process `syz.0.673'. [ 211.473857][ T7817] netlink: 60 bytes leftover after parsing attributes in process `syz.0.681'. [ 211.543422][ T7817] netlink: 60 bytes leftover after parsing attributes in process `syz.0.681'. [ 211.601869][ T7816] netlink: 60 bytes leftover after parsing attributes in process `syz.0.681'. [ 212.140603][ T7837] netlink: 'syz.2.691': attribute type 21 has an invalid length. [ 213.230929][ T7860] netlink: 'syz.3.698': attribute type 9 has an invalid length. [ 213.301330][ T7860] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.698'. [ 213.572776][ T7864] netlink: 'syz.3.698': attribute type 9 has an invalid length. [ 213.628829][ T7864] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.698'. [ 213.691559][ T7858] netlink: 60 bytes leftover after parsing attributes in process `syz.0.697'. [ 213.835109][ T7858] netlink: 60 bytes leftover after parsing attributes in process `syz.0.697'. [ 213.882057][ T7861] netlink: 60 bytes leftover after parsing attributes in process `syz.0.697'. [ 215.623819][ T5777] Bluetooth: hci2: ISO packet too small [ 215.727606][ T7895] netlink: 60 bytes leftover after parsing attributes in process `syz.0.710'. [ 215.884195][ T7895] netlink: 60 bytes leftover after parsing attributes in process `syz.0.710'. [ 216.011420][ T7897] netlink: 60 bytes leftover after parsing attributes in process `syz.0.710'. [ 216.527564][ T7899] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.711'. [ 216.565470][ T7899] bridge_slave_1: default FDB implementation only supports local addresses [ 217.507217][ T7930] netlink: 60 bytes leftover after parsing attributes in process `syz.0.723'. [ 217.530748][ T7930] netlink: 60 bytes leftover after parsing attributes in process `syz.0.723'. [ 217.550765][ T7938] netlink: 'syz.2.721': attribute type 1 has an invalid length. [ 217.562819][ T7938] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.721'. [ 217.573991][ T7931] netlink: 60 bytes leftover after parsing attributes in process `syz.0.723'. [ 217.592513][ T7938] netlink: 9 bytes leftover after parsing attributes in process `syz.2.721'. [ 218.311148][ T7955] netlink: 'syz.2.731': attribute type 10 has an invalid length. [ 218.926948][ T7961] FAULT_INJECTION: forcing a failure. [ 218.926948][ T7961] name failslab, interval 1, probability 0, space 0, times 0 [ 219.002720][ T7961] CPU: 0 PID: 7961 Comm: syz.0.733 Not tainted syzkaller #0 [ 219.010088][ T7961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.020179][ T7961] Call Trace: [ 219.023505][ T7961] [ 219.026470][ T7961] dump_stack_lvl+0x18c/0x250 [ 219.031195][ T7961] ? sctp_sendmsg+0x1575/0x28c0 [ 219.036086][ T7961] ? ___sys_sendmsg+0x2a6/0x360 [ 219.039893][ T7957] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.732'. [ 219.040958][ T7961] ? show_regs_print_info+0x20/0x20 [ 219.041019][ T7961] ? load_image+0x420/0x420 [ 219.059992][ T7961] should_fail_ex+0x39d/0x4d0 [ 219.064908][ T7961] should_failslab+0x9/0x20 [ 219.069458][ T7961] slab_pre_alloc_hook+0x59/0x310 [ 219.074543][ T7961] ? sctp_add_bind_addr+0x8c/0x360 [ 219.079697][ T7961] __kmem_cache_alloc_node+0x53/0x250 [ 219.085121][ T7961] ? sctp_add_bind_addr+0x8c/0x360 [ 219.090270][ T7961] kmalloc_trace+0x2a/0xe0 [ 219.094739][ T7961] sctp_add_bind_addr+0x8c/0x360 [ 219.099721][ T7961] sctp_copy_local_addr_list+0x315/0x4f0 [ 219.105401][ T7961] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 219.111163][ T7961] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 219.117283][ T7961] ? sctp_v4_is_any+0x35/0x60 [ 219.122021][ T7961] ? sctp_copy_one_addr+0x8c/0x350 [ 219.127260][ T7961] sctp_bind_addr_copy+0xb3/0x3c0 [ 219.132334][ T7961] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 219.138716][ T7961] sctp_connect_new_asoc+0x2f9/0x6a0 [ 219.144056][ T7961] ? __sctp_connect+0xd80/0xd80 [ 219.148945][ T7961] ? __local_bh_enable_ip+0x13a/0x1c0 [ 219.154373][ T7961] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 219.159967][ T7961] ? security_sctp_bind_connect+0x89/0xb0 [ 219.165740][ T7961] sctp_sendmsg+0x1575/0x28c0 [ 219.170469][ T7961] ? sctp_getsockopt+0xb60/0xb60 [ 219.175450][ T7961] ? aa_sk_perm+0x83c/0x970 [ 219.180016][ T7961] ? __perf_event_overflow+0x4f8/0x630 [ 219.185541][ T7961] ? aa_af_perm+0x330/0x330 [ 219.190092][ T7961] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 219.196559][ T7961] ? sock_rps_record_flow+0x19/0x3f0 [ 219.201892][ T7961] ? inet_sendmsg+0xe9/0x2f0 [ 219.206621][ T7961] ? inet_send_prepare+0x260/0x260 [ 219.211779][ T7961] ____sys_sendmsg+0x5ba/0x960 [ 219.216587][ T7961] ? __lock_acquire+0x7d40/0x7d40 [ 219.221657][ T7961] ? __asan_memset+0x22/0x40 [ 219.226297][ T7961] ? __sys_sendmsg_sock+0x30/0x30 [ 219.231358][ T7961] ? __import_iovec+0x5f2/0x850 [ 219.236261][ T7961] ? import_iovec+0x73/0xa0 [ 219.240912][ T7961] ___sys_sendmsg+0x2a6/0x360 [ 219.245629][ T7961] ? get_pid_task+0x20/0x1e0 [ 219.250282][ T7961] ? __sys_sendmsg+0x2a0/0x2a0 [ 219.255115][ T7961] ? __lock_acquire+0x7d40/0x7d40 [ 219.260221][ T7961] __se_sys_sendmsg+0x1c2/0x2b0 [ 219.265129][ T7961] ? __x64_sys_sendmsg+0x80/0x80 [ 219.270132][ T7961] ? lockdep_hardirqs_on+0x98/0x150 [ 219.275381][ T7961] do_syscall_64+0x55/0xa0 [ 219.279837][ T7961] ? clear_bhb_loop+0x40/0x90 [ 219.284561][ T7961] ? clear_bhb_loop+0x40/0x90 [ 219.289294][ T7961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.295235][ T7961] RIP: 0033:0x7f477899ce59 [ 219.299697][ T7961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.319356][ T7961] RSP: 002b:00007f4779780028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.327818][ T7961] RAX: ffffffffffffffda RBX: 00007f4778c15fa0 RCX: 00007f477899ce59 [ 219.335833][ T7961] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000039 [ 219.343852][ T7961] RBP: 00007f4779780090 R08: 0000000000000000 R09: 0000000000000000 [ 219.351870][ T7961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.359888][ T7961] R13: 00007f4778c16038 R14: 00007f4778c15fa0 R15: 00007ffc6214ea58 [ 219.367022][ T7971] netlink: 'syz.2.735': attribute type 29 has an invalid length. [ 219.367899][ T7961] [ 219.393314][ T7971] netlink: 'syz.2.735': attribute type 29 has an invalid length. [ 219.401411][ T7972] netlink: 'syz.2.735': attribute type 29 has an invalid length. [ 219.410605][ T7972] netlink: 'syz.2.735': attribute type 29 has an invalid length. [ 219.445042][ T7972] netlink: 'syz.2.735': attribute type 29 has an invalid length. [ 221.146038][ T8021] __nla_validate_parse: 4 callbacks suppressed [ 221.146060][ T8021] netlink: 60 bytes leftover after parsing attributes in process `syz.3.753'. [ 221.185805][ T8021] netlink: 60 bytes leftover after parsing attributes in process `syz.3.753'. [ 221.226160][ T8021] netlink: 60 bytes leftover after parsing attributes in process `syz.3.753'. [ 222.298082][ T8035] netlink: 60 bytes leftover after parsing attributes in process `syz.1.757'. [ 222.422841][ T8035] netlink: 60 bytes leftover after parsing attributes in process `syz.1.757'. [ 222.476306][ T8044] netlink: 60 bytes leftover after parsing attributes in process `syz.1.757'. [ 222.901103][ T8050] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.763'. [ 223.126162][ T8050] netlink: 'syz.2.763': attribute type 17 has an invalid length. [ 223.408909][ T8061] netlink: 'syz.0.766': attribute type 7 has an invalid length. [ 223.634575][ T8065] netlink: 'syz.2.767': attribute type 10 has an invalid length. [ 224.344102][ T8082] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.773'. [ 224.372838][ T8082] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.773'. [ 226.220012][ T8139] netlink: 'syz.3.794': attribute type 1 has an invalid length. [ 226.259865][ T8139] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.794'. [ 226.960462][ T8153] C: renamed from team_slave_0 (while UP) [ 227.208695][ T8153] netlink: 'syz.1.799': attribute type 3 has an invalid length. [ 227.219987][ T8153] netlink: 128 bytes leftover after parsing attributes in process `syz.1.799'. [ 227.392782][ T8165] netlink: 'syz.0.804': attribute type 13 has an invalid length. [ 227.423060][ T8165] netlink: 160 bytes leftover after parsing attributes in process `syz.0.804'. [ 227.672328][ T8165] erspan0: refused to change device tx_queue_len [ 227.701855][ T8165] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 228.137732][ T8183] netlink: 'syz.2.811': attribute type 10 has an invalid length. [ 228.574245][ T8197] FAULT_INJECTION: forcing a failure. [ 228.574245][ T8197] name failslab, interval 1, probability 0, space 0, times 0 [ 228.664457][ T8197] CPU: 1 PID: 8197 Comm: syz.1.815 Not tainted syzkaller #0 [ 228.671844][ T8197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.681966][ T8197] Call Trace: [ 228.685296][ T8197] [ 228.688276][ T8197] dump_stack_lvl+0x18c/0x250 [ 228.692996][ T8197] ? sctp_sendmsg+0x1575/0x28c0 [ 228.697854][ T8197] ? ___sys_sendmsg+0x2a6/0x360 [ 228.702706][ T8197] ? show_regs_print_info+0x20/0x20 [ 228.707922][ T8197] ? load_image+0x420/0x420 [ 228.712445][ T8197] should_fail_ex+0x39d/0x4d0 [ 228.717155][ T8197] should_failslab+0x9/0x20 [ 228.721707][ T8197] slab_pre_alloc_hook+0x59/0x310 [ 228.726769][ T8197] ? sctp_add_bind_addr+0x8c/0x360 [ 228.731882][ T8197] __kmem_cache_alloc_node+0x53/0x250 [ 228.737264][ T8197] ? sctp_add_bind_addr+0x8c/0x360 [ 228.742376][ T8197] kmalloc_trace+0x2a/0xe0 [ 228.746801][ T8197] sctp_add_bind_addr+0x8c/0x360 [ 228.751837][ T8197] sctp_copy_local_addr_list+0x315/0x4f0 [ 228.757496][ T8197] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 228.763244][ T8197] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 228.769348][ T8197] ? sctp_v4_is_any+0x35/0x60 [ 228.774040][ T8197] ? sctp_copy_one_addr+0x8c/0x350 [ 228.779173][ T8197] sctp_bind_addr_copy+0xb3/0x3c0 [ 228.784212][ T8197] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 228.790559][ T8197] sctp_connect_new_asoc+0x2f9/0x6a0 [ 228.795869][ T8197] ? __sctp_connect+0xd80/0xd80 [ 228.800735][ T8197] ? __local_bh_enable_ip+0x13a/0x1c0 [ 228.806128][ T8197] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 228.811723][ T8197] ? security_sctp_bind_connect+0x89/0xb0 [ 228.817465][ T8197] sctp_sendmsg+0x1575/0x28c0 [ 228.822273][ T8197] ? sctp_getsockopt+0xb60/0xb60 [ 228.827237][ T8197] ? aa_sk_perm+0x83c/0x970 [ 228.831769][ T8197] ? aa_af_perm+0x330/0x330 [ 228.836290][ T8197] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 228.842732][ T8197] ? sock_rps_record_flow+0x19/0x3f0 [ 228.848035][ T8197] ? inet_sendmsg+0xe9/0x2f0 [ 228.852642][ T8197] ? inet_send_prepare+0x260/0x260 [ 228.857769][ T8197] ____sys_sendmsg+0x5ba/0x960 [ 228.862547][ T8197] ? __lock_acquire+0x7d40/0x7d40 [ 228.867596][ T8197] ? __asan_memset+0x22/0x40 [ 228.872207][ T8197] ? __sys_sendmsg_sock+0x30/0x30 [ 228.877241][ T8197] ? __import_iovec+0x5f2/0x850 [ 228.882115][ T8197] ? import_iovec+0x73/0xa0 [ 228.886640][ T8197] ___sys_sendmsg+0x2a6/0x360 [ 228.891329][ T8197] ? get_pid_task+0x20/0x1e0 [ 228.895942][ T8197] ? __sys_sendmsg+0x2a0/0x2a0 [ 228.900739][ T8197] ? __lock_acquire+0x7d40/0x7d40 [ 228.905802][ T8197] __se_sys_sendmsg+0x1c2/0x2b0 [ 228.910674][ T8197] ? __x64_sys_sendmsg+0x80/0x80 [ 228.915640][ T8197] ? lockdep_hardirqs_on+0x98/0x150 [ 228.920859][ T8197] do_syscall_64+0x55/0xa0 [ 228.925283][ T8197] ? clear_bhb_loop+0x40/0x90 [ 228.929974][ T8197] ? clear_bhb_loop+0x40/0x90 [ 228.934671][ T8197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.940583][ T8197] RIP: 0033:0x7faaa099ce59 [ 228.945012][ T8197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.964652][ T8197] RSP: 002b:00007faaa18d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.973187][ T8197] RAX: ffffffffffffffda RBX: 00007faaa0c15fa0 RCX: 00007faaa099ce59 [ 228.981184][ T8197] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000039 [ 228.989178][ T8197] RBP: 00007faaa18d5090 R08: 0000000000000000 R09: 0000000000000000 [ 228.997168][ T8197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 229.005155][ T8197] R13: 00007faaa0c16038 R14: 00007faaa0c15fa0 R15: 00007fff6db87398 [ 229.013167][ T8197] [ 229.440111][ T8211] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.821'. [ 229.867593][ T8218] netlink: 'syz.2.823': attribute type 1 has an invalid length. [ 229.903280][ T8218] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.823'. [ 230.227232][ T8227] netlink: 'syz.2.826': attribute type 2 has an invalid length. [ 230.242027][ T8227] netlink: 'syz.2.826': attribute type 6 has an invalid length. [ 230.913131][ T8237] netlink: 60 bytes leftover after parsing attributes in process `syz.3.831'. [ 230.948112][ T8237] netlink: 60 bytes leftover after parsing attributes in process `syz.3.831'. [ 230.964323][ T8236] netlink: 60 bytes leftover after parsing attributes in process `syz.3.831'. [ 232.633756][ T8274] netlink: 60 bytes leftover after parsing attributes in process `syz.1.845'. [ 232.729441][ T8274] netlink: 60 bytes leftover after parsing attributes in process `syz.1.845'. [ 232.813737][ T8277] netlink: 60 bytes leftover after parsing attributes in process `syz.1.845'. [ 233.525262][ T8289] FAULT_INJECTION: forcing a failure. [ 233.525262][ T8289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.542159][ T8289] CPU: 0 PID: 8289 Comm: syz.3.853 Not tainted syzkaller #0 [ 233.549516][ T8289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.559619][ T8289] Call Trace: [ 233.562935][ T8289] [ 233.565900][ T8289] dump_stack_lvl+0x18c/0x250 [ 233.570624][ T8289] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 233.576828][ T8289] ? show_regs_print_info+0x20/0x20 [ 233.582062][ T8289] ? load_image+0x420/0x420 [ 233.586621][ T8289] should_fail_ex+0x39d/0x4d0 [ 233.591358][ T8289] _copy_from_user+0x2f/0xe0 [ 233.596004][ T8289] __sys_bpf+0x23e/0x890 [ 233.600291][ T8289] ? bpf_link_show_fdinfo+0x390/0x390 [ 233.605717][ T8289] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 233.611926][ T8289] __x64_sys_bpf+0x7c/0x90 [ 233.616381][ T8289] do_syscall_64+0x55/0xa0 [ 233.620831][ T8289] ? clear_bhb_loop+0x40/0x90 [ 233.625644][ T8289] ? clear_bhb_loop+0x40/0x90 [ 233.630366][ T8289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.636303][ T8289] RIP: 0033:0x7f57b359ce59 [ 233.640766][ T8289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.660409][ T8289] RSP: 002b:00007f57b4493028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.668845][ T8289] RAX: ffffffffffffffda RBX: 00007f57b3815fa0 RCX: 00007f57b359ce59 [ 233.676833][ T8289] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 233.684816][ T8289] RBP: 00007f57b4493090 R08: 0000000000000000 R09: 0000000000000000 [ 233.692816][ T8289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.700797][ T8289] R13: 00007f57b3816038 R14: 00007f57b3815fa0 R15: 00007fffc7f3d348 [ 233.708792][ T8289] [ 233.847451][ T8294] tun0: tun_chr_ioctl cmd 1074025677 [ 233.860109][ T8294] tun0: linktype set to 776 [ 233.872178][ T8294] tun0: tun_chr_ioctl cmd 1074025675 [ 233.895268][ T8294] tun0: persist disabled [ 233.900928][ T8294] tun0: tun_chr_ioctl cmd 1074025680 [ 233.945485][ T8298] netlink: 'syz.2.856': attribute type 4 has an invalid length. [ 235.584119][ T8328] netlink: 60 bytes leftover after parsing attributes in process `syz.1.865'. [ 236.001606][ T8331] netlink: 128 bytes leftover after parsing attributes in process `syz.3.867'. [ 236.037055][ T8331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.258892][ T8336] netlink: 'syz.3.870': attribute type 20 has an invalid length. [ 236.798547][ T8346] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.871'. [ 236.834009][ T8346] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.871'. [ 236.972051][ T8344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.872'. [ 236.981314][ T8344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.872'. [ 236.995039][ T8344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.872'. [ 237.374022][ T8365] netlink: 'syz.2.880': attribute type 10 has an invalid length. [ 237.897628][ T8384] FAULT_INJECTION: forcing a failure. [ 237.897628][ T8384] name failslab, interval 1, probability 0, space 0, times 0 [ 237.929477][ T8384] CPU: 0 PID: 8384 Comm: syz.3.887 Not tainted syzkaller #0 [ 237.936845][ T8384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 237.946935][ T8384] Call Trace: [ 237.950243][ T8384] [ 237.953203][ T8384] dump_stack_lvl+0x18c/0x250 [ 237.957922][ T8384] ? sctp_sendmsg+0x1575/0x28c0 [ 237.962805][ T8384] ? ___sys_sendmsg+0x2a6/0x360 [ 237.967689][ T8384] ? show_regs_print_info+0x20/0x20 [ 237.972925][ T8384] ? load_image+0x420/0x420 [ 237.977486][ T8384] should_fail_ex+0x39d/0x4d0 [ 237.982221][ T8384] should_failslab+0x9/0x20 [ 237.986773][ T8384] slab_pre_alloc_hook+0x59/0x310 [ 237.991852][ T8384] ? sctp_add_bind_addr+0x8c/0x360 [ 237.997010][ T8384] __kmem_cache_alloc_node+0x53/0x250 [ 238.002423][ T8384] ? sctp_add_bind_addr+0x8c/0x360 [ 238.007562][ T8384] kmalloc_trace+0x2a/0xe0 [ 238.012041][ T8384] sctp_add_bind_addr+0x8c/0x360 [ 238.017024][ T8384] sctp_copy_local_addr_list+0x315/0x4f0 [ 238.022685][ T8384] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 238.028439][ T8384] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 238.034535][ T8384] ? sctp_v4_is_any+0x35/0x60 [ 238.039222][ T8384] ? sctp_copy_one_addr+0x8c/0x350 [ 238.044451][ T8384] sctp_bind_addr_copy+0xb3/0x3c0 [ 238.049525][ T8384] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 238.055901][ T8384] sctp_connect_new_asoc+0x2f9/0x6a0 [ 238.061234][ T8384] ? __sctp_connect+0xd80/0xd80 [ 238.066119][ T8384] ? __local_bh_enable_ip+0x13a/0x1c0 [ 238.071537][ T8384] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 238.077126][ T8384] ? security_sctp_bind_connect+0x89/0xb0 [ 238.082896][ T8384] sctp_sendmsg+0x1575/0x28c0 [ 238.087631][ T8384] ? sctp_getsockopt+0xb60/0xb60 [ 238.092608][ T8384] ? aa_sk_perm+0x83c/0x970 [ 238.097176][ T8384] ? aa_af_perm+0x330/0x330 [ 238.101720][ T8384] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 238.108179][ T8384] ? sock_rps_record_flow+0x19/0x3f0 [ 238.113509][ T8384] ? inet_sendmsg+0xe9/0x2f0 [ 238.118138][ T8384] ? inet_send_prepare+0x260/0x260 [ 238.123295][ T8384] ____sys_sendmsg+0x5ba/0x960 [ 238.128094][ T8384] ? __lock_acquire+0x7d40/0x7d40 [ 238.133173][ T8384] ? __asan_memset+0x22/0x40 [ 238.137806][ T8384] ? __sys_sendmsg_sock+0x30/0x30 [ 238.142864][ T8384] ? __import_iovec+0x5f2/0x850 [ 238.147759][ T8384] ? import_iovec+0x73/0xa0 [ 238.152303][ T8384] ___sys_sendmsg+0x2a6/0x360 [ 238.157015][ T8384] ? get_pid_task+0x20/0x1e0 [ 238.161649][ T8384] ? __sys_sendmsg+0x2a0/0x2a0 [ 238.166472][ T8384] ? __lock_acquire+0x7d40/0x7d40 [ 238.171565][ T8384] __se_sys_sendmsg+0x1c2/0x2b0 [ 238.176452][ T8384] ? __x64_sys_sendmsg+0x80/0x80 [ 238.181446][ T8384] ? lockdep_hardirqs_on+0x98/0x150 [ 238.186701][ T8384] do_syscall_64+0x55/0xa0 [ 238.191175][ T8384] ? clear_bhb_loop+0x40/0x90 [ 238.195900][ T8384] ? clear_bhb_loop+0x40/0x90 [ 238.200624][ T8384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.206558][ T8384] RIP: 0033:0x7f57b359ce59 [ 238.211018][ T8384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.230673][ T8384] RSP: 002b:00007f57b4493028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.239128][ T8384] RAX: ffffffffffffffda RBX: 00007f57b3815fa0 RCX: 00007f57b359ce59 [ 238.247140][ T8384] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000039 [ 238.255166][ T8384] RBP: 00007f57b4493090 R08: 0000000000000000 R09: 0000000000000000 [ 238.263178][ T8384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 238.271181][ T8384] R13: 00007f57b3816038 R14: 00007f57b3815fa0 R15: 00007fffc7f3d348 [ 238.279208][ T8384] [ 239.822285][ T8394] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.890'. [ 239.880670][ T8396] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.891'. [ 241.665622][ T8444] FAULT_INJECTION: forcing a failure. [ 241.665622][ T8444] name failslab, interval 1, probability 0, space 0, times 0 [ 241.743807][ T8429] netlink: 60 bytes leftover after parsing attributes in process `syz.2.904'. [ 241.772290][ T8429] netlink: 60 bytes leftover after parsing attributes in process `syz.2.904'. [ 241.782186][ T8444] CPU: 1 PID: 8444 Comm: syz.0.908 Not tainted syzkaller #0 [ 241.782212][ T8444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 241.782225][ T8444] Call Trace: [ 241.782234][ T8444] [ 241.782243][ T8444] dump_stack_lvl+0x18c/0x250 [ 241.782281][ T8444] ? show_regs_print_info+0x20/0x20 [ 241.782309][ T8444] ? load_image+0x420/0x420 [ 241.782338][ T8444] ? __might_sleep+0xe0/0xe0 [ 241.782363][ T8444] ? __lock_acquire+0x7d40/0x7d40 [ 241.782391][ T8444] should_fail_ex+0x39d/0x4d0 [ 241.782424][ T8444] should_failslab+0x9/0x20 [ 241.782450][ T8444] slab_pre_alloc_hook+0x59/0x310 [ 241.782476][ T8444] ? lock_chain_count+0x20/0x20 [ 241.782498][ T8444] ? __get_vm_area_node+0x125/0x370 [ 241.782524][ T8444] __kmem_cache_alloc_node+0x53/0x250 [ 241.782554][ T8444] ? __get_vm_area_node+0x125/0x370 [ 241.782580][ T8444] kmalloc_node_trace+0x26/0xe0 [ 241.782610][ T8444] __get_vm_area_node+0x125/0x370 [ 241.782635][ T8444] ? __vmalloc_node_range+0x81/0x1330 [ 241.782663][ T8444] __vmalloc_node_range+0x36e/0x1330 [ 241.782689][ T8444] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 241.782712][ T8444] ? mark_lock+0x94/0x320 [ 241.782737][ T8444] ? __lock_acquire+0x1347/0x7d40 [ 241.782776][ T8444] ? free_vm_area+0x50/0x50 [ 241.782801][ T8444] ? end_current_label_crit_section+0x170/0x170 [ 241.782833][ T8444] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 241.782854][ T8444] __vmalloc+0x7a/0x90 [ 241.782886][ T8444] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 241.782909][ T8444] bpf_prog_alloc_no_stats+0x47/0x440 [ 241.782930][ T8444] ? bpf_prog_alloc+0x2b/0x1a0 [ 241.782953][ T8444] bpf_prog_alloc+0x3d/0x1a0 [ 241.782978][ T8444] bpf_prog_load+0x6eb/0x1670 [ 241.783012][ T8444] ? map_freeze+0x420/0x420 [ 241.783037][ T8444] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 241.783064][ T8444] ? lockdep_hardirqs_on+0x98/0x150 [ 241.783088][ T8444] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 241.783118][ T8444] ? __sys_bpf+0x254/0x890 [ 241.783137][ T8444] ? bpf_lsm_bpf+0x9/0x10 [ 241.783162][ T8444] ? security_bpf+0x7e/0xa0 [ 241.783187][ T8444] __sys_bpf+0x5ba/0x890 [ 241.783210][ T8444] ? bpf_link_show_fdinfo+0x390/0x390 [ 241.783243][ T8444] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 241.783280][ T8444] __x64_sys_bpf+0x7c/0x90 [ 241.783302][ T8444] do_syscall_64+0x55/0xa0 [ 241.783319][ T8444] ? clear_bhb_loop+0x40/0x90 [ 241.783342][ T8444] ? clear_bhb_loop+0x40/0x90 [ 241.783366][ T8444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.783390][ T8444] RIP: 0033:0x7f477899ce59 [ 241.783408][ T8444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.783425][ T8444] RSP: 002b:00007f4779780028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 241.783448][ T8444] RAX: ffffffffffffffda RBX: 00007f4778c15fa0 RCX: 00007f477899ce59 [ 241.783462][ T8444] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 241.783475][ T8444] RBP: 00007f4779780090 R08: 0000000000000000 R09: 0000000000000000 [ 241.783488][ T8444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.783500][ T8444] R13: 00007f4778c16038 R14: 00007f4778c15fa0 R15: 00007ffc6214ea58 [ 241.783530][ T8444] [ 241.790922][ T8444] syz.0.908: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 241.869498][ T8435] netlink: 60 bytes leftover after parsing attributes in process `syz.2.904'. [ 242.050419][ T8444] ,cpuset=syz0,mems_allowed=0-1 [ 242.220403][ T8444] CPU: 0 PID: 8444 Comm: syz.0.908 Not tainted syzkaller #0 [ 242.227745][ T8444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.237844][ T8444] Call Trace: [ 242.241162][ T8444] [ 242.244122][ T8444] dump_stack_lvl+0x18c/0x250 [ 242.248848][ T8444] ? show_regs_print_info+0x20/0x20 [ 242.254104][ T8444] ? load_image+0x420/0x420 [ 242.258668][ T8444] ? __rcu_read_unlock+0x7c/0xd0 [ 242.263652][ T8444] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 242.270125][ T8444] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 242.276686][ T8444] warn_alloc+0x246/0x340 [ 242.281067][ T8444] ? __get_vm_area_node+0x125/0x370 [ 242.286297][ T8444] ? zone_watermark_ok_safe+0x230/0x230 [ 242.291870][ T8444] ? rcu_is_watching+0x15/0xb0 [ 242.296664][ T8444] ? __get_vm_area_node+0x356/0x370 [ 242.301883][ T8444] ? __vmalloc_node_range+0x81/0x1330 [ 242.307281][ T8444] __vmalloc_node_range+0x393/0x1330 [ 242.312594][ T8444] ? mark_lock+0x94/0x320 [ 242.317004][ T8444] ? __lock_acquire+0x1347/0x7d40 [ 242.322059][ T8444] ? free_vm_area+0x50/0x50 [ 242.326580][ T8444] ? end_current_label_crit_section+0x170/0x170 [ 242.332847][ T8444] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 242.338402][ T8444] __vmalloc+0x7a/0x90 [ 242.342490][ T8444] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 242.348047][ T8444] bpf_prog_alloc_no_stats+0x47/0x440 [ 242.353523][ T8444] ? bpf_prog_alloc+0x2b/0x1a0 [ 242.358304][ T8444] bpf_prog_alloc+0x3d/0x1a0 [ 242.362912][ T8444] bpf_prog_load+0x6eb/0x1670 [ 242.367639][ T8444] ? map_freeze+0x420/0x420 [ 242.372293][ T8444] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 242.378482][ T8444] ? lockdep_hardirqs_on+0x98/0x150 [ 242.383705][ T8444] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 242.389887][ T8444] ? __sys_bpf+0x254/0x890 [ 242.394326][ T8444] ? bpf_lsm_bpf+0x9/0x10 [ 242.398672][ T8444] ? security_bpf+0x7e/0xa0 [ 242.403191][ T8444] __sys_bpf+0x5ba/0x890 [ 242.407450][ T8444] ? bpf_link_show_fdinfo+0x390/0x390 [ 242.412844][ T8444] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 242.419019][ T8444] __x64_sys_bpf+0x7c/0x90 [ 242.423445][ T8444] do_syscall_64+0x55/0xa0 [ 242.427869][ T8444] ? clear_bhb_loop+0x40/0x90 [ 242.432570][ T8444] ? clear_bhb_loop+0x40/0x90 [ 242.437353][ T8444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.443258][ T8444] RIP: 0033:0x7f477899ce59 [ 242.447683][ T8444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.467301][ T8444] RSP: 002b:00007f4779780028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 242.475751][ T8444] RAX: ffffffffffffffda RBX: 00007f4778c15fa0 RCX: 00007f477899ce59 [ 242.483760][ T8444] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 242.491747][ T8444] RBP: 00007f4779780090 R08: 0000000000000000 R09: 0000000000000000 [ 242.499736][ T8444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.507718][ T8444] R13: 00007f4778c16038 R14: 00007f4778c15fa0 R15: 00007ffc6214ea58 [ 242.515717][ T8444] [ 242.564364][ T8444] Mem-Info: [ 242.570219][ T8444] active_anon:5633 inactive_anon:0 isolated_anon:0 [ 242.570219][ T8444] active_file:1892 inactive_file:40015 isolated_file:0 [ 242.570219][ T8444] unevictable:768 dirty:95 writeback:13 [ 242.570219][ T8444] slab_reclaimable:10291 slab_unreclaimable:94024 [ 242.570219][ T8444] mapped:24363 shmem:1361 pagetables:600 [ 242.570219][ T8444] sec_pagetables:0 bounce:0 [ 242.570219][ T8444] kernel_misc_reclaimable:0 [ 242.570219][ T8444] free:1361254 free_pcp:12164 free_cma:0 [ 242.662668][ T8444] Node 0 active_anon:22432kB inactive_anon:0kB active_file:7668kB inactive_file:159860kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97452kB dirty:480kB writeback:52kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10540kB pagetables:2200kB sec_pagetables:0kB all_unreclaimable? no [ 242.702109][ T8444] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 242.744032][ T8444] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.846421][ T8444] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 242.871902][ T8444] Node 0 DMA32 free:1527792kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22396kB inactive_anon:0kB active_file:7668kB inactive_file:159032kB unevictable:1536kB writepending:532kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:33424kB local_pcp:14928kB free_cma:0kB [ 242.952881][ T8444] lowmem_reserve[]: 0 0 0 0 0 [ 242.957720][ T8444] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 243.012658][ T8444] lowmem_reserve[]: 0 0 0 0 0 [ 243.017469][ T8444] Node 1 Normal free:3901864kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15300kB local_pcp:7140kB free_cma:0kB [ 243.100441][ T8444] lowmem_reserve[]: 0 0 0 0 0 [ 243.105656][ T8444] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 243.132720][ T8444] Node 0 DMA32: 2*4kB (ME) 69*8kB (U) 310*16kB (UE) 207*32kB (UE) 32*64kB (U) 3*128kB (UE) 3*256kB (ME) 6*512kB (UME) 0*1024kB 5*2048kB (UME) 366*4096kB (UM) = 1527792kB [ 243.183887][ T8444] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 243.256211][ T8444] Node 1 Normal: 250*4kB (UME) 58*8kB (UME) 41*16kB (UME) 65*32kB (UME) 15*64kB (UME) 9*128kB (UME) 1*256kB (M) 2*512kB (UE) 1*1024kB (U) 1*2048kB (E) 950*4096kB (M) = 3901864kB [ 243.293090][ T8444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.303133][ T8444] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 243.312461][ T8444] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.382869][ T8469] netlink: 'syz.1.918': attribute type 10 has an invalid length. [ 243.410685][ T8444] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 243.442016][ T8444] 43343 total pagecache pages [ 243.452758][ T8444] 0 pages in swap cache [ 243.460590][ T8444] Free swap = 124996kB [ 243.480147][ T8444] Total swap = 124996kB [ 243.486175][ T8444] 2097051 pages RAM [ 243.490016][ T8444] 0 pages HighMem/MovableOnly [ 243.490904][ T8461] netlink: 60 bytes leftover after parsing attributes in process `syz.2.915'. [ 243.518730][ T8444] 416927 pages reserved [ 243.518744][ T8444] 0 pages cma reserved [ 243.727100][ T8461] netlink: 60 bytes leftover after parsing attributes in process `syz.2.915'. [ 244.101689][ T8485] netlink: 128 bytes leftover after parsing attributes in process `syz.2.923'. [ 244.130834][ T8485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.284239][ T8490] netlink: 'syz.3.924': attribute type 21 has an invalid length. [ 245.505834][ T8513] netlink: 'syz.3.933': attribute type 21 has an invalid length. [ 245.646191][ T8510] netlink: 'syz.0.932': attribute type 10 has an invalid length. [ 246.300962][ T8537] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 246.308993][ T8537] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.942'. [ 247.398068][ T8554] netlink: 'syz.2.947': attribute type 10 has an invalid length. [ 247.704091][ T8562] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 247.712656][ T8562] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 248.059017][ T8580] netlink: 'syz.2.957': attribute type 21 has an invalid length. [ 248.070701][ T8577] FAULT_INJECTION: forcing a failure. [ 248.070701][ T8577] name failslab, interval 1, probability 0, space 0, times 0 [ 248.138069][ T8577] CPU: 1 PID: 8577 Comm: syz.1.956 Not tainted syzkaller #0 [ 248.145445][ T8577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 248.155538][ T8577] Call Trace: [ 248.158849][ T8577] [ 248.161818][ T8577] dump_stack_lvl+0x18c/0x250 [ 248.166542][ T8577] ? sctp_sendmsg+0x1575/0x28c0 [ 248.171435][ T8577] ? ___sys_sendmsg+0x2a6/0x360 [ 248.176332][ T8577] ? show_regs_print_info+0x20/0x20 [ 248.181577][ T8577] ? load_image+0x420/0x420 [ 248.186143][ T8577] should_fail_ex+0x39d/0x4d0 [ 248.190883][ T8577] should_failslab+0x9/0x20 [ 248.195444][ T8577] slab_pre_alloc_hook+0x59/0x310 [ 248.200515][ T8577] ? sctp_add_bind_addr+0x8c/0x360 [ 248.205667][ T8577] __kmem_cache_alloc_node+0x53/0x250 [ 248.211089][ T8577] ? sctp_add_bind_addr+0x8c/0x360 [ 248.216236][ T8577] kmalloc_trace+0x2a/0xe0 [ 248.220688][ T8577] sctp_add_bind_addr+0x8c/0x360 [ 248.225668][ T8577] sctp_copy_local_addr_list+0x315/0x4f0 [ 248.231340][ T8577] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 248.237286][ T8577] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 248.243418][ T8577] ? sctp_v4_is_any+0x35/0x60 [ 248.248148][ T8577] ? sctp_copy_one_addr+0x8c/0x350 [ 248.253297][ T8577] sctp_bind_addr_copy+0xb3/0x3c0 [ 248.258350][ T8577] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 248.264720][ T8577] sctp_connect_new_asoc+0x2f9/0x6a0 [ 248.270075][ T8577] ? __sctp_connect+0xd80/0xd80 [ 248.274957][ T8577] ? __local_bh_enable_ip+0x13a/0x1c0 [ 248.280360][ T8577] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 248.286021][ T8577] ? security_sctp_bind_connect+0x89/0xb0 [ 248.291780][ T8577] sctp_sendmsg+0x1575/0x28c0 [ 248.296682][ T8577] ? sctp_getsockopt+0xb60/0xb60 [ 248.301652][ T8577] ? aa_sk_perm+0x83c/0x970 [ 248.306191][ T8577] ? __perf_event_overflow+0x4f8/0x630 [ 248.311686][ T8577] ? aa_af_perm+0x330/0x330 [ 248.316222][ T8577] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 248.322668][ T8577] ? sock_rps_record_flow+0x19/0x3f0 [ 248.327987][ T8577] ? inet_sendmsg+0xe9/0x2f0 [ 248.332608][ T8577] ? inet_send_prepare+0x260/0x260 [ 248.337752][ T8577] ____sys_sendmsg+0x5ba/0x960 [ 248.342546][ T8577] ? __lock_acquire+0x7d40/0x7d40 [ 248.347623][ T8577] ? __asan_memset+0x22/0x40 [ 248.352244][ T8577] ? __sys_sendmsg_sock+0x30/0x30 [ 248.357292][ T8577] ? __import_iovec+0x5f2/0x850 [ 248.362184][ T8577] ? import_iovec+0x73/0xa0 [ 248.366721][ T8577] ___sys_sendmsg+0x2a6/0x360 [ 248.371425][ T8577] ? get_pid_task+0x20/0x1e0 [ 248.376061][ T8577] ? __sys_sendmsg+0x2a0/0x2a0 [ 248.380882][ T8577] ? __lock_acquire+0x7d40/0x7d40 [ 248.385959][ T8577] __se_sys_sendmsg+0x1c2/0x2b0 [ 248.390847][ T8577] ? __x64_sys_sendmsg+0x80/0x80 [ 248.395832][ T8577] ? lockdep_hardirqs_on+0x98/0x150 [ 248.401083][ T8577] do_syscall_64+0x55/0xa0 [ 248.405524][ T8577] ? clear_bhb_loop+0x40/0x90 [ 248.410242][ T8577] ? clear_bhb_loop+0x40/0x90 [ 248.415049][ T8577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.420977][ T8577] RIP: 0033:0x7faaa099ce59 [ 248.425448][ T8577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.445098][ T8577] RSP: 002b:00007faaa18d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.453559][ T8577] RAX: ffffffffffffffda RBX: 00007faaa0c15fa0 RCX: 00007faaa099ce59 [ 248.461556][ T8577] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000039 [ 248.469723][ T8577] RBP: 00007faaa18d5090 R08: 0000000000000000 R09: 0000000000000000 [ 248.477733][ T8577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.485725][ T8577] R13: 00007faaa0c16038 R14: 00007faaa0c15fa0 R15: 00007fff6db87398 [ 248.493737][ T8577] [ 249.277368][ T8600] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 249.284454][ T8600] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 250.017888][ T8617] netlink: 'syz.0.969': attribute type 21 has an invalid length. [ 250.078208][ T8620] netlink: 'syz.1.970': attribute type 13 has an invalid length. [ 250.086299][ T8620] netlink: 152 bytes leftover after parsing attributes in process `syz.1.970'. [ 250.098141][ T8620] syz_tun: refused to change device tx_queue_len [ 250.104729][ T8620] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 252.189102][ T8659] netlink: 132 bytes leftover after parsing attributes in process `syz.1.985'. [ 252.783631][ T8674] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 252.791052][ T8674] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 253.575164][ T8686] netlink: 'syz.0.994': attribute type 9 has an invalid length. [ 253.612867][ T8686] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.994'. [ 253.798823][ T8689] netlink: 'syz.0.994': attribute type 9 has an invalid length. [ 253.853267][ T8689] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.994'. [ 256.103199][ T8742] netlink: 'syz.2.1015': attribute type 10 has an invalid length. [ 256.139917][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.146538][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.583862][ T8749] netlink: 'syz.0.1025': attribute type 21 has an invalid length. [ 258.281926][ T8781] netlink: 'syz.3.1027': attribute type 11 has an invalid length. [ 258.773255][ T8781] netlink: 'syz.3.1027': attribute type 1 has an invalid length. [ 258.987282][ T8781] netlink: 'syz.3.1027': attribute type 1 has an invalid length. [ 259.056165][ T8781] netlink: 'syz.3.1027': attribute type 2 has an invalid length. [ 259.108972][ T8781] netlink: 198140 bytes leftover after parsing attributes in process `syz.3.1027'. [ 259.730514][ T8807] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1033'. [ 260.155713][ T8814] FAULT_INJECTION: forcing a failure. [ 260.155713][ T8814] name failslab, interval 1, probability 0, space 0, times 0 [ 260.170882][ T8814] CPU: 1 PID: 8814 Comm: syz.3.1035 Not tainted syzkaller #0 [ 260.178303][ T8814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 260.188472][ T8814] Call Trace: [ 260.191783][ T8814] [ 260.194777][ T8814] dump_stack_lvl+0x18c/0x250 [ 260.199498][ T8814] ? sctp_sendmsg+0x1575/0x28c0 [ 260.204405][ T8814] ? ___sys_sendmsg+0x2a6/0x360 [ 260.209398][ T8814] ? show_regs_print_info+0x20/0x20 [ 260.214729][ T8814] ? load_image+0x420/0x420 [ 260.219287][ T8814] should_fail_ex+0x39d/0x4d0 [ 260.224009][ T8814] should_failslab+0x9/0x20 [ 260.228550][ T8814] slab_pre_alloc_hook+0x59/0x310 [ 260.233613][ T8814] ? sctp_add_bind_addr+0x8c/0x360 [ 260.238761][ T8814] __kmem_cache_alloc_node+0x53/0x250 [ 260.244178][ T8814] ? sctp_add_bind_addr+0x8c/0x360 [ 260.249324][ T8814] kmalloc_trace+0x2a/0xe0 [ 260.253781][ T8814] sctp_add_bind_addr+0x8c/0x360 [ 260.258753][ T8814] sctp_copy_local_addr_list+0x315/0x4f0 [ 260.264426][ T8814] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 260.270180][ T8814] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 260.276276][ T8814] ? sctp_v4_is_any+0x35/0x60 [ 260.280986][ T8814] ? sctp_copy_one_addr+0x8c/0x350 [ 260.286131][ T8814] sctp_bind_addr_copy+0xb3/0x3c0 [ 260.291184][ T8814] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 260.297545][ T8814] sctp_connect_new_asoc+0x2f9/0x6a0 [ 260.302870][ T8814] ? __sctp_connect+0xd80/0xd80 [ 260.307753][ T8814] ? __local_bh_enable_ip+0x13a/0x1c0 [ 260.313160][ T8814] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 260.318735][ T8814] ? security_sctp_bind_connect+0x89/0xb0 [ 260.324495][ T8814] sctp_sendmsg+0x1575/0x28c0 [ 260.329223][ T8814] ? sctp_getsockopt+0xb60/0xb60 [ 260.334192][ T8814] ? aa_sk_perm+0x83c/0x970 [ 260.338749][ T8814] ? aa_af_perm+0x330/0x330 [ 260.343284][ T8814] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 260.349739][ T8814] ? sock_rps_record_flow+0x19/0x3f0 [ 260.355059][ T8814] ? inet_sendmsg+0xe9/0x2f0 [ 260.359941][ T8814] ? inet_send_prepare+0x260/0x260 [ 260.365101][ T8814] ____sys_sendmsg+0x5ba/0x960 [ 260.369893][ T8814] ? __lock_acquire+0x7d40/0x7d40 [ 260.374967][ T8814] ? __asan_memset+0x22/0x40 [ 260.379596][ T8814] ? __sys_sendmsg_sock+0x30/0x30 [ 260.384645][ T8814] ? __import_iovec+0x5f2/0x850 [ 260.389535][ T8814] ? import_iovec+0x73/0xa0 [ 260.394102][ T8814] ___sys_sendmsg+0x2a6/0x360 [ 260.398811][ T8814] ? get_pid_task+0x20/0x1e0 [ 260.403437][ T8814] ? __sys_sendmsg+0x2a0/0x2a0 [ 260.408257][ T8814] ? __lock_acquire+0x7d40/0x7d40 [ 260.413338][ T8814] __se_sys_sendmsg+0x1c2/0x2b0 [ 260.418218][ T8814] ? __x64_sys_sendmsg+0x80/0x80 [ 260.423200][ T8814] ? lockdep_hardirqs_on+0x98/0x150 [ 260.428438][ T8814] do_syscall_64+0x55/0xa0 [ 260.432879][ T8814] ? clear_bhb_loop+0x40/0x90 [ 260.437584][ T8814] ? clear_bhb_loop+0x40/0x90 [ 260.442291][ T8814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.448215][ T8814] RIP: 0033:0x7f57b359ce59 [ 260.452664][ T8814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.472487][ T8814] RSP: 002b:00007f57b4451028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.480950][ T8814] RAX: ffffffffffffffda RBX: 00007f57b3816180 RCX: 00007f57b359ce59 [ 260.488953][ T8814] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000039 [ 260.496961][ T8814] RBP: 00007f57b4451090 R08: 0000000000000000 R09: 0000000000000000 [ 260.504961][ T8814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.512959][ T8814] R13: 00007f57b3816218 R14: 00007f57b3816180 R15: 00007fffc7f3d348 [ 260.520975][ T8814] [ 263.085929][ T8882] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1061'. [ 263.116160][ T8882] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 263.481112][ T8901] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1068'. [ 263.580698][ T8904] netlink: 'syz.0.1069': attribute type 10 has an invalid length. [ 264.936788][ T8945] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1082'. [ 265.039412][ T8950] FAULT_INJECTION: forcing a failure. [ 265.039412][ T8950] name failslab, interval 1, probability 0, space 0, times 0 [ 265.052417][ T8950] CPU: 1 PID: 8950 Comm: syz.2.1085 Not tainted syzkaller #0 [ 265.059829][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 265.069930][ T8950] Call Trace: [ 265.073243][ T8950] [ 265.076213][ T8950] dump_stack_lvl+0x18c/0x250 [ 265.080950][ T8950] ? show_regs_print_info+0x20/0x20 [ 265.086233][ T8950] ? load_image+0x420/0x420 [ 265.090782][ T8950] ? __local_bh_enable_ip+0x13a/0x1c0 [ 265.096195][ T8950] ? lockdep_hardirqs_on+0x98/0x150 [ 265.101441][ T8950] should_fail_ex+0x39d/0x4d0 [ 265.106181][ T8950] should_failslab+0x9/0x20 [ 265.110728][ T8950] slab_pre_alloc_hook+0x59/0x310 [ 265.115793][ T8950] ? llc_sap_find+0x75/0x3d0 [ 265.120425][ T8950] kmem_cache_alloc+0x5a/0x2d0 [ 265.125230][ T8950] ? skb_clone+0x1eb/0x370 [ 265.129686][ T8950] skb_clone+0x1eb/0x370 [ 265.133963][ T8950] ? llc_sap_remove_socket+0x380/0x380 [ 265.139462][ T8950] ? stp_proto_register+0x1c0/0x1c0 [ 265.144694][ T8950] llc_rcv+0x649/0xc70 [ 265.148794][ T8950] ? stp_proto_register+0x1c0/0x1c0 [ 265.154035][ T8950] ? llc_set_station_handler+0x40/0x40 [ 265.159530][ T8950] __netif_receive_skb+0xcc/0x290 [ 265.164595][ T8950] ? netif_receive_skb+0x106/0x720 [ 265.169747][ T8950] netif_receive_skb+0x1bc/0x720 [ 265.174730][ T8950] ? enqueue_to_backlog+0xe30/0xe30 [ 265.179968][ T8950] ? perf_trace_preemptirq_template+0xac/0x330 [ 265.186169][ T8950] ? tun_rx_batched+0x186/0x790 [ 265.191059][ T8950] tun_rx_batched+0x1df/0x790 [ 265.195786][ T8950] ? pskb_may_pull+0xf0/0xf0 [ 265.200409][ T8950] ? __local_bh_enable_ip+0x13a/0x1c0 [ 265.205817][ T8950] ? lockdep_hardirqs_on+0x98/0x150 [ 265.211055][ T8950] ? read_lock_is_recursive+0x20/0x20 [ 265.216462][ T8950] ? __local_bh_enable_ip+0x13a/0x1c0 [ 265.221866][ T8950] ? _local_bh_enable+0xa0/0xa0 [ 265.226754][ T8950] ? skb_copy_datagram_from_iter+0x62e/0x6e0 [ 265.232787][ T8950] tun_get_user+0x28a3/0x3ca0 [ 265.237509][ T8950] ? tun_get_user+0x24d9/0x3ca0 [ 265.242402][ T8950] ? aa_file_perm+0x11b/0xee0 [ 265.247126][ T8950] ? rcu_read_unlock+0xa0/0xa0 [ 265.251942][ T8950] ? tun_get+0x1c/0x2e0 [ 265.256140][ T8950] ? __lock_acquire+0x7d40/0x7d40 [ 265.261216][ T8950] ? tun_get+0x1c/0x2e0 [ 265.265416][ T8950] tun_chr_write_iter+0x119/0x200 [ 265.270479][ T8950] vfs_write+0x46c/0x990 [ 265.274768][ T8950] ? file_end_write+0x250/0x250 [ 265.279671][ T8950] ? __fget_files+0x43d/0x4b0 [ 265.284401][ T8950] ? __fdget_pos+0x1d8/0x330 [ 265.289029][ T8950] ? ksys_write+0x75/0x260 [ 265.293490][ T8950] ksys_write+0x150/0x260 [ 265.297870][ T8950] ? __ia32_sys_read+0x90/0x90 [ 265.302689][ T8950] ? lockdep_hardirqs_on+0x98/0x150 [ 265.307931][ T8950] do_syscall_64+0x55/0xa0 [ 265.312385][ T8950] ? clear_bhb_loop+0x40/0x90 [ 265.317096][ T8950] ? clear_bhb_loop+0x40/0x90 [ 265.321815][ T8950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.327744][ T8950] RIP: 0033:0x7fdb6d39ce59 [ 265.332190][ T8950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.351835][ T8950] RSP: 002b:00007fdb6e34c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 265.360289][ T8950] RAX: ffffffffffffffda RBX: 00007fdb6d615fa0 RCX: 00007fdb6d39ce59 [ 265.368301][ T8950] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 265.376302][ T8950] RBP: 00007fdb6e34c090 R08: 0000000000000000 R09: 0000000000000000 [ 265.384306][ T8950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.392308][ T8950] R13: 00007fdb6d616038 R14: 00007fdb6d615fa0 R15: 00007ffefbbbf6a8 [ 265.400337][ T8950] [ 265.867812][ T8964] netlink: 'syz.2.1087': attribute type 2 has an invalid length. [ 265.914437][ T8964] netlink: 'syz.2.1087': attribute type 8 has an invalid length. [ 265.922253][ T8964] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1087'. [ 265.976107][ T8966] netlink: 'syz.3.1088': attribute type 10 has an invalid length. [ 268.289092][ T8981] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.1093'. [ 268.669348][ T8993] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1095'. [ 268.700708][ T8993] netlink: zone id is out of range [ 268.746712][ T8993] netlink: zone id is out of range [ 268.751917][ T8993] netlink: zone id is out of range [ 268.759937][ T8993] netlink: zone id is out of range [ 268.766081][ T8993] netlink: zone id is out of range [ 268.771708][ T8993] netlink: zone id is out of range [ 268.779803][ T8993] netlink: zone id is out of range [ 268.785957][ T8993] netlink: zone id is out of range [ 268.791232][ T8993] netlink: zone id is out of range [ 268.798413][ T8993] netlink: zone id is out of range [ 268.947789][ T8998] FAULT_INJECTION: forcing a failure. [ 268.947789][ T8998] name failslab, interval 1, probability 0, space 0, times 0 [ 268.962471][ T8998] CPU: 0 PID: 8998 Comm: syz.2.1097 Not tainted syzkaller #0 [ 268.969972][ T8998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 268.980104][ T8998] Call Trace: [ 268.983402][ T8998] [ 268.986346][ T8998] dump_stack_lvl+0x18c/0x250 [ 268.991045][ T8998] ? sctp_sendmsg+0x1575/0x28c0 [ 268.995907][ T8998] ? ___sys_sendmsg+0x2a6/0x360 [ 269.000801][ T8998] ? show_regs_print_info+0x20/0x20 [ 269.006049][ T8998] ? load_image+0x420/0x420 [ 269.010598][ T8998] should_fail_ex+0x39d/0x4d0 [ 269.015307][ T8998] should_failslab+0x9/0x20 [ 269.019830][ T8998] slab_pre_alloc_hook+0x59/0x310 [ 269.024878][ T8998] ? sctp_add_bind_addr+0x8c/0x360 [ 269.030006][ T8998] __kmem_cache_alloc_node+0x53/0x250 [ 269.035399][ T8998] ? sctp_add_bind_addr+0x8c/0x360 [ 269.040525][ T8998] kmalloc_trace+0x2a/0xe0 [ 269.044963][ T8998] sctp_add_bind_addr+0x8c/0x360 [ 269.049917][ T8998] sctp_copy_local_addr_list+0x315/0x4f0 [ 269.055664][ T8998] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 269.061403][ T8998] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 269.067498][ T8998] ? sctp_v4_is_any+0x35/0x60 [ 269.072189][ T8998] ? sctp_copy_one_addr+0x8c/0x350 [ 269.077321][ T8998] sctp_bind_addr_copy+0xb3/0x3c0 [ 269.082358][ T8998] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 269.088710][ T8998] sctp_connect_new_asoc+0x2f9/0x6a0 [ 269.094014][ T8998] ? __sctp_connect+0xd80/0xd80 [ 269.098877][ T8998] ? __local_bh_enable_ip+0x13a/0x1c0 [ 269.104276][ T8998] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 269.109922][ T8998] ? security_sctp_bind_connect+0x89/0xb0 [ 269.115659][ T8998] sctp_sendmsg+0x1575/0x28c0 [ 269.120368][ T8998] ? sctp_getsockopt+0xb60/0xb60 [ 269.125318][ T8998] ? aa_sk_perm+0x83c/0x970 [ 269.129846][ T8998] ? aa_af_perm+0x330/0x330 [ 269.134361][ T8998] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 269.140792][ T8998] ? sock_rps_record_flow+0x19/0x3f0 [ 269.146098][ T8998] ? inet_sendmsg+0xe9/0x2f0 [ 269.150704][ T8998] ? inet_send_prepare+0x260/0x260 [ 269.155840][ T8998] ____sys_sendmsg+0x5ba/0x960 [ 269.160620][ T8998] ? __lock_acquire+0x7d40/0x7d40 [ 269.165780][ T8998] ? __asan_memset+0x22/0x40 [ 269.170419][ T8998] ? __sys_sendmsg_sock+0x30/0x30 [ 269.175474][ T8998] ? __import_iovec+0x5f2/0x850 [ 269.180348][ T8998] ? import_iovec+0x73/0xa0 [ 269.184866][ T8998] ___sys_sendmsg+0x2a6/0x360 [ 269.189568][ T8998] ? get_pid_task+0x20/0x1e0 [ 269.194201][ T8998] ? __sys_sendmsg+0x2a0/0x2a0 [ 269.198981][ T8998] ? perf_trace_preemptirq_template+0x269/0x330 [ 269.205283][ T8998] __se_sys_sendmsg+0x1c2/0x2b0 [ 269.210150][ T8998] ? __x64_sys_sendmsg+0x80/0x80 [ 269.215118][ T8998] ? lockdep_hardirqs_on+0x98/0x150 [ 269.220334][ T8998] do_syscall_64+0x55/0xa0 [ 269.224767][ T8998] ? clear_bhb_loop+0x40/0x90 [ 269.229463][ T8998] ? clear_bhb_loop+0x40/0x90 [ 269.234160][ T8998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.240066][ T8998] RIP: 0033:0x7fdb6d39ce59 [ 269.244498][ T8998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.264119][ T8998] RSP: 002b:00007fdb6e34c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.272552][ T8998] RAX: ffffffffffffffda RBX: 00007fdb6d615fa0 RCX: 00007fdb6d39ce59 [ 269.280547][ T8998] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000039 [ 269.288527][ T8998] RBP: 00007fdb6e34c090 R08: 0000000000000000 R09: 0000000000000000 [ 269.296510][ T8998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.304493][ T8998] R13: 00007fdb6d616038 R14: 00007fdb6d615fa0 R15: 00007ffefbbbf6a8 [ 269.312491][ T8998] [ 269.915683][ T9022] netlink: 'syz.1.1105': attribute type 21 has an invalid length. [ 269.963670][ T9022] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1105'. [ 270.008009][ T9023] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1105'. [ 270.262331][ T9029] syzkaller0: entered promiscuous mode [ 270.270078][ T9029] syzkaller0: entered allmulticast mode [ 273.106286][ T9065] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1120'. [ 273.937547][ T9064] netlink: 'syz.0.1120': attribute type 21 has an invalid length. [ 273.948569][ T9064] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1120'. [ 273.980735][ T9068] netlink: 703 bytes leftover after parsing attributes in process `syz.2.1121'. [ 274.248964][ T5777] Bluetooth: hci3: unexpected event 0x3b length: 15 > 10 [ 275.476363][ T9094] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1128'. [ 276.265705][ T9108] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1132'. [ 276.331903][ T9106] netlink: 'syz.2.1132': attribute type 21 has an invalid length. [ 276.354350][ T9106] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1132'. [ 277.601466][ T5777] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10 [ 279.813890][ T9138] netlink: 'syz.3.1141': attribute type 10 has an invalid length. [ 280.531560][ T9157] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1147'. [ 280.611074][ T9157] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.1147'. [ 280.953579][ T9163] ±ÿ: renamed from lo (while UP) [ 283.440256][ T9186] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1155'. [ 283.497074][ T9186] net_ratelimit: 331 callbacks suppressed [ 283.497099][ T9186] openvswitch: netlink: Key type 29 is not supported [ 284.472933][ T9209] ±ÿ: renamed from lo (while UP) [ 285.505091][ T9229] netlink: 'syz.0.1164': attribute type 10 has an invalid length. [ 286.771717][ T9248] netlink: 'syz.0.1169': attribute type 10 has an invalid length. [ 286.976710][ T9248] macvlan1: entered allmulticast mode [ 287.267418][ T9248] veth1_vlan: entered allmulticast mode [ 287.539667][ T9248] team0: Port device macvlan1 added [ 287.605286][ T9251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.647506][ T9248] syz.0.1169 (9248) used greatest stack depth: 19120 bytes left [ 288.081289][ T5777] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10 [ 289.465600][ T9293] ±ÿ: renamed from lo (while UP) [ 289.474732][ T9288] netlink: 'syz.1.1189': attribute type 6 has an invalid length. [ 289.487973][ T9288] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1189'. [ 289.780769][ T5777] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10 [ 289.924423][ T9306] FAULT_INJECTION: forcing a failure. [ 289.924423][ T9306] name failslab, interval 1, probability 0, space 0, times 0 [ 289.965304][ T9306] CPU: 1 PID: 9306 Comm: syz.1.1187 Not tainted syzkaller #0 [ 289.972765][ T9306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.982871][ T9306] Call Trace: [ 289.986193][ T9306] [ 289.989246][ T9306] dump_stack_lvl+0x18c/0x250 [ 289.993981][ T9306] ? sctp_sendmsg+0x1575/0x28c0 [ 289.998878][ T9306] ? ___sys_sendmsg+0x2a6/0x360 [ 290.003783][ T9306] ? show_regs_print_info+0x20/0x20 [ 290.009121][ T9306] ? load_image+0x420/0x420 [ 290.013690][ T9306] should_fail_ex+0x39d/0x4d0 [ 290.018427][ T9306] should_failslab+0x9/0x20 [ 290.023001][ T9306] slab_pre_alloc_hook+0x59/0x310 [ 290.028055][ T9306] ? sctp_add_bind_addr+0x8c/0x360 [ 290.033184][ T9306] __kmem_cache_alloc_node+0x53/0x250 [ 290.038576][ T9306] ? sctp_add_bind_addr+0x8c/0x360 [ 290.043706][ T9306] kmalloc_trace+0x2a/0xe0 [ 290.048142][ T9306] sctp_add_bind_addr+0x8c/0x360 [ 290.053097][ T9306] sctp_copy_local_addr_list+0x315/0x4f0 [ 290.058751][ T9306] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 290.064488][ T9306] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 290.070570][ T9306] ? sctp_v4_is_any+0x35/0x60 [ 290.075261][ T9306] ? sctp_copy_one_addr+0x8c/0x350 [ 290.080409][ T9306] sctp_bind_addr_copy+0xb3/0x3c0 [ 290.085445][ T9306] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 290.091796][ T9306] sctp_connect_new_asoc+0x2f9/0x6a0 [ 290.097097][ T9306] ? __sctp_connect+0xd80/0xd80 [ 290.101961][ T9306] ? __local_bh_enable_ip+0x13a/0x1c0 [ 290.107359][ T9306] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 290.113008][ T9306] ? security_sctp_bind_connect+0x89/0xb0 [ 290.118747][ T9306] sctp_sendmsg+0x1575/0x28c0 [ 290.123454][ T9306] ? sctp_getsockopt+0xb60/0xb60 [ 290.128404][ T9306] ? aa_sk_perm+0x83c/0x970 [ 290.132931][ T9306] ? aa_af_perm+0x330/0x330 [ 290.137447][ T9306] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 290.143887][ T9306] ? sock_rps_record_flow+0x19/0x3f0 [ 290.149191][ T9306] ? inet_sendmsg+0xe9/0x2f0 [ 290.153797][ T9306] ? inet_send_prepare+0x260/0x260 [ 290.159359][ T9306] ____sys_sendmsg+0x5ba/0x960 [ 290.164136][ T9306] ? __lock_acquire+0x7d40/0x7d40 [ 290.169179][ T9306] ? __asan_memset+0x22/0x40 [ 290.173803][ T9306] ? __sys_sendmsg_sock+0x30/0x30 [ 290.178841][ T9306] ? __import_iovec+0x5f2/0x850 [ 290.183712][ T9306] ? import_iovec+0x73/0xa0 [ 290.188234][ T9306] ___sys_sendmsg+0x2a6/0x360 [ 290.192931][ T9306] ? get_pid_task+0x20/0x1e0 [ 290.197563][ T9306] ? __sys_sendmsg+0x2a0/0x2a0 [ 290.202355][ T9306] ? __lock_acquire+0x7d40/0x7d40 [ 290.207414][ T9306] __se_sys_sendmsg+0x1c2/0x2b0 [ 290.212293][ T9306] ? __x64_sys_sendmsg+0x80/0x80 [ 290.217343][ T9306] ? lockdep_hardirqs_on+0x98/0x150 [ 290.222571][ T9306] do_syscall_64+0x55/0xa0 [ 290.227006][ T9306] ? clear_bhb_loop+0x40/0x90 [ 290.231693][ T9306] ? clear_bhb_loop+0x40/0x90 [ 290.236494][ T9306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.242402][ T9306] RIP: 0033:0x7faaa099ce59 [ 290.246830][ T9306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.266451][ T9306] RSP: 002b:00007faaa18d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.274879][ T9306] RAX: ffffffffffffffda RBX: 00007faaa0c15fa0 RCX: 00007faaa099ce59 [ 290.282864][ T9306] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000039 [ 290.290845][ T9306] RBP: 00007faaa18d5090 R08: 0000000000000000 R09: 0000000000000000 [ 290.298822][ T9306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 290.306801][ T9306] R13: 00007faaa0c16038 R14: 00007faaa0c15fa0 R15: 00007fff6db87398 [ 290.314804][ T9306] [ 290.917929][ T9316] netlink: 'syz.2.1191': attribute type 10 has an invalid length. [ 292.590014][ T5777] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10 [ 293.806289][ T5777] Bluetooth: hci2: unexpected event 0x3b length: 15 > 10 [ 293.997421][ T9377] netlink: 'syz.0.1210': attribute type 6 has an invalid length. [ 294.044620][ T9377] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1210'. [ 294.154798][ T9382] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1212'. [ 294.192714][ T9382] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.1212'. [ 296.034586][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1223'. [ 296.079629][ T9431] netlink: 'syz.3.1226': attribute type 10 has an invalid length. [ 296.094989][ T9431] syz_tun: entered promiscuous mode [ 296.339972][ T9440] syzkaller0: entered promiscuous mode [ 296.422433][ T9440] syzkaller0: entered allmulticast mode [ 296.444506][ T9435] netlink: 'syz.0.1228': attribute type 10 has an invalid length. [ 297.247045][ T9435] team0 (unregistering): Port device team_slave_0 removed [ 297.297257][ T9435] team0 (unregistering): Port device team_slave_1 removed [ 297.326572][ T9435] veth1_vlan: left allmulticast mode [ 297.357861][ T9435] team0 (unregistering): Port device macvlan1 removed [ 297.526911][ T9443] netlink: 'syz.0.1228': attribute type 10 has an invalid length. [ 297.542195][ T9443] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1228'. [ 297.566104][ T9443] batman_adv: batadv0: Adding interface: veth0_vlan [ 297.574666][ T9443] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.607411][ T9443] batman_adv: batadv0: Interface activated: veth0_vlan [ 300.039765][ T9474] netlink: 'syz.1.1240': attribute type 10 has an invalid length. [ 300.048285][ T9474] macvlan1: entered allmulticast mode [ 300.062417][ T9474] veth1_vlan: entered allmulticast mode [ 300.079951][ T9474] team0: Port device macvlan1 added [ 300.090974][ T9477] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 300.338146][ T9504] netlink: 'syz.2.1246': attribute type 10 has an invalid length. [ 301.344612][ T9504] team0 (unregistering): Port device team_slave_0 removed [ 301.377848][ T9504] team0 (unregistering): Port device team_slave_1 removed [ 301.445938][ T9512] netlink: 'syz.2.1246': attribute type 10 has an invalid length. [ 301.458312][ T9512] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1246'. [ 301.469097][ T9512] batman_adv: batadv0: Adding interface: veth0_vlan [ 301.476127][ T9512] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.504327][ T9512] batman_adv: batadv0: Interface activated: veth0_vlan [ 301.551177][ T9518] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1249'. [ 301.811471][ T9531] netlink: 'syz.1.1255': attribute type 29 has an invalid length. [ 301.857338][ T9531] netlink: 'syz.1.1255': attribute type 29 has an invalid length. [ 301.876465][ T9533] netlink: 'syz.1.1255': attribute type 29 has an invalid length. [ 302.449403][ T9543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.491132][ T9543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.597388][ T9543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.617050][ T9543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.808429][ T9543] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 302.819648][ T9543] batman_adv: batadv0: Removing interface: veth0_vlan [ 303.132849][ T9547] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1261'. [ 303.274587][ T9557] netlink: 'syz.1.1264': attribute type 10 has an invalid length. [ 303.335102][ T9557] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1264'. [ 303.495318][ T9557] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 303.548421][ T9559] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1265'. [ 305.920014][ T9614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.953833][ T9614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.010293][ T9626] netlink: 'syz.2.1284': attribute type 29 has an invalid length. [ 306.146973][ T9614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.157057][ T9614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.241115][ T9614] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 306.257256][ T9614] batman_adv: batadv0: Removing interface: veth0_vlan [ 306.298271][ T9614] batman_adv: batadv0: Removing interface: netdevsim0 [ 306.411631][ T9626] netlink: 'syz.2.1284': attribute type 29 has an invalid length. [ 306.451449][ T9630] netlink: 'syz.2.1284': attribute type 29 has an invalid length. [ 306.545367][ T9629] netlink: 'syz.2.1284': attribute type 29 has an invalid length. [ 306.632889][ T9636] netlink: 'syz.2.1284': attribute type 29 has an invalid length. [ 311.374983][ T9765] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1326'. [ 312.684186][ T9800] bridge_slave_1: left allmulticast mode [ 312.691453][ T9800] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.723691][ T9800] bridge_slave_0: left allmulticast mode [ 312.729517][ T9800] bridge_slave_0: left promiscuous mode [ 312.785483][ T9800] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.801139][ T9861] netlink: 'syz.0.1362': attribute type 2 has an invalid length. [ 315.832909][ T9861] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1362'. [ 315.882671][ T9866] tap0: tun_chr_ioctl cmd 1074025675 [ 315.908838][ T9866] tap0: persist enabled [ 315.973015][ T9862] tap0: tun_chr_ioctl cmd 21731 [ 316.008997][ T9863] tap0: tun_chr_ioctl cmd 1074025675 [ 316.035975][ T9863] tap0: persist enabled [ 317.052196][ T9878] netlink: 'syz.0.1368': attribute type 10 has an invalid length. [ 317.183647][ T9878] bond0: (slave bond_slave_0): Releasing backup interface [ 317.328724][ T9880] C: renamed from team_slave_0 [ 317.402228][ T9880] netlink: 'syz.0.1368': attribute type 3 has an invalid length. [ 317.457318][ T9880] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1368'. [ 317.475778][ T9880] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 317.621029][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.627527][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.516021][ T9953] netlink: 7986 bytes leftover after parsing attributes in process `syz.1.1393'. [ 321.064780][ T9973] netlink: 'syz.2.1399': attribute type 2 has an invalid length. [ 321.077205][ T9973] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1399'. [ 321.366344][ T9987] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1404'. [ 322.716421][T10014] netlink: 'syz.1.1412': attribute type 9 has an invalid length. [ 322.923220][T10031] netlink: 'syz.3.1415': attribute type 2 has an invalid length. [ 323.008693][T10031] netlink: 119 bytes leftover after parsing attributes in process `syz.3.1415'. [ 323.177298][ T5777] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10 [ 326.752283][T10097] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1432'. [ 329.312613][T10110] netlink: 'syz.3.1440': attribute type 29 has an invalid length. [ 329.353133][T10110] netlink: 'syz.3.1440': attribute type 29 has an invalid length. [ 329.379135][T10107] netlink: 'syz.3.1440': attribute type 29 has an invalid length. [ 329.719957][T10110] netlink: 'syz.3.1440': attribute type 29 has an invalid length. [ 329.761518][T10112] netlink: 'syz.3.1440': attribute type 29 has an invalid length. [ 331.573455][T10134] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1446'. [ 331.654669][T10134] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.1446'. [ 333.338434][T10170] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1458'. [ 333.368131][T10170] openvswitch: netlink: Key type 4112 is out of range max 32 [ 333.869740][ T5777] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 335.184856][T10212] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1470'. [ 335.303164][T10214] netlink: 'syz.2.1471': attribute type 22 has an invalid length. [ 335.860430][ T5777] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 336.468493][T10239] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1476'. [ 337.303847][ T5777] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 338.016739][T10275] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1489'. [ 338.378314][T10287] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 338.419258][T10287] bridge_slave_1: left allmulticast mode [ 338.444178][T10287] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.621721][T10287] bridge_slave_0: left allmulticast mode [ 338.629590][T10287] bridge_slave_0: left promiscuous mode [ 338.646070][T10287] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.881748][T10321] netlink: 'syz.3.1504': attribute type 10 has an invalid length. [ 344.004213][T10397] netlink: 'syz.2.1534': attribute type 10 has an invalid length. [ 344.023033][T10397] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1534'. [ 344.044333][T10397] hsr0: entered promiscuous mode [ 344.838663][T10419] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1541'. [ 349.176036][T10479] mac80211_hwsim hwsim2 ªªªªªªð¥UŠZ£G„: renamed from wlan0 [ 349.995801][T10487] netlink: 'syz.3.1568': attribute type 3 has an invalid length. [ 350.046485][T10487] netlink: 16795 bytes leftover after parsing attributes in process `syz.3.1568'. [ 351.256996][T10516] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.1577'. [ 351.465852][T10527] netlink: 'syz.1.1580': attribute type 10 has an invalid length. [ 351.477284][T10527] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1580'. [ 351.487374][T10527] hsr0: entered promiscuous mode [ 351.502173][T10527] bridge0: port 3(hsr0) entered blocking state [ 351.510901][T10527] bridge0: port 3(hsr0) entered disabled state [ 351.528499][T10527] hsr0: entered allmulticast mode [ 351.534426][T10527] hsr_slave_0: entered allmulticast mode [ 351.540308][T10527] hsr_slave_1: entered allmulticast mode [ 351.562647][T10527] bridge0: port 3(hsr0) entered blocking state [ 351.570372][T10527] bridge0: port 3(hsr0) entered forwarding state [ 351.587136][T10531] netlink: 'syz.0.1582': attribute type 10 has an invalid length. [ 351.625509][T10531] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 352.462125][T10552] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.1590'. [ 352.507882][T10557] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1591'. [ 352.803222][T10555] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1592'. [ 352.847100][T10555] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.1592'. [ 353.026816][T10562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1593'. [ 353.047958][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1593'. [ 354.066489][T10574] netlink: 'syz.2.1596': attribute type 6 has an invalid length. [ 354.087850][T10574] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1596'. [ 354.136074][T10581] IPv6: Can't replace route, no match found [ 355.413849][T10627] IPv6: NLM_F_CREATE should be specified when creating new route [ 355.429237][T10625] netlink: 'syz.1.1604': attribute type 3 has an invalid length. [ 355.448490][T10625] netlink: 16795 bytes leftover after parsing attributes in process `syz.1.1604'. [ 355.451808][T10627] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1603'. [ 359.163372][T10656] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1613'. [ 359.484734][T10663] netlink: 'syz.0.1614': attribute type 4 has an invalid length. [ 359.500681][T10663] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1614'. [ 359.542486][T10663] .`: renamed from bond0 (while UP) [ 359.665408][T10665] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1609'. [ 362.027911][ T5777] Bluetooth: hci3: unexpected event 0x3b length: 15 > 10 [ 362.805040][T10732] FAULT_INJECTION: forcing a failure. [ 362.805040][T10732] name failslab, interval 1, probability 0, space 0, times 0 [ 362.851742][T10732] CPU: 1 PID: 10732 Comm: syz.0.1640 Not tainted syzkaller #0 [ 362.859295][T10732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 362.869391][T10732] Call Trace: [ 362.872700][T10732] [ 362.875660][T10732] dump_stack_lvl+0x18c/0x250 [ 362.880382][T10732] ? sctp_sendmsg+0x1575/0x28c0 [ 362.885265][T10732] ? ___sys_sendmsg+0x2a6/0x360 [ 362.890146][T10732] ? show_regs_print_info+0x20/0x20 [ 362.895387][T10732] ? load_image+0x420/0x420 [ 362.899944][T10732] should_fail_ex+0x39d/0x4d0 [ 362.904663][T10732] should_failslab+0x9/0x20 [ 362.909202][T10732] slab_pre_alloc_hook+0x59/0x310 [ 362.914257][T10732] ? sctp_add_bind_addr+0x8c/0x360 [ 362.919403][T10732] __kmem_cache_alloc_node+0x53/0x250 [ 362.924832][T10732] ? sctp_add_bind_addr+0x8c/0x360 [ 362.929973][T10732] kmalloc_trace+0x2a/0xe0 [ 362.934424][T10732] sctp_add_bind_addr+0x8c/0x360 [ 362.939398][T10732] sctp_copy_local_addr_list+0x315/0x4f0 [ 362.945063][T10732] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 362.950813][T10732] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 362.956920][T10732] ? sctp_v4_is_any+0x35/0x60 [ 362.961631][T10732] ? sctp_copy_one_addr+0x8c/0x350 [ 362.966776][T10732] sctp_bind_addr_copy+0xb3/0x3c0 [ 362.971857][T10732] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 362.978226][T10732] sctp_connect_new_asoc+0x2f9/0x6a0 [ 362.983546][T10732] ? __sctp_connect+0xd80/0xd80 [ 362.988426][T10732] ? __local_bh_enable_ip+0x13a/0x1c0 [ 362.993832][T10732] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 362.999415][T10732] ? security_sctp_bind_connect+0x89/0xb0 [ 363.005177][T10732] sctp_sendmsg+0x1575/0x28c0 [ 363.009907][T10732] ? sctp_getsockopt+0xb60/0xb60 [ 363.014877][T10732] ? aa_sk_perm+0x83c/0x970 [ 363.019434][T10732] ? aa_af_perm+0x330/0x330 [ 363.023988][T10732] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 363.030444][T10732] ? sock_rps_record_flow+0x19/0x3f0 [ 363.035765][T10732] ? inet_sendmsg+0xe9/0x2f0 [ 363.040386][T10732] ? inet_send_prepare+0x260/0x260 [ 363.045970][T10732] ____sys_sendmsg+0x5ba/0x960 [ 363.050762][T10732] ? __lock_acquire+0x7d40/0x7d40 [ 363.055822][T10732] ? __asan_memset+0x22/0x40 [ 363.060451][T10732] ? __sys_sendmsg_sock+0x30/0x30 [ 363.065502][T10732] ? __import_iovec+0x5f2/0x850 [ 363.070393][T10732] ? import_iovec+0x73/0xa0 [ 363.074932][T10732] ___sys_sendmsg+0x2a6/0x360 [ 363.079634][T10732] ? get_pid_task+0x20/0x1e0 [ 363.084268][T10732] ? __sys_sendmsg+0x2a0/0x2a0 [ 363.089088][T10732] ? __lock_acquire+0x7d40/0x7d40 [ 363.094173][T10732] __se_sys_sendmsg+0x1c2/0x2b0 [ 363.099058][T10732] ? __x64_sys_sendmsg+0x80/0x80 [ 363.104039][T10732] ? lockdep_hardirqs_on+0x98/0x150 [ 363.109274][T10732] do_syscall_64+0x55/0xa0 [ 363.113720][T10732] ? clear_bhb_loop+0x40/0x90 [ 363.118425][T10732] ? clear_bhb_loop+0x40/0x90 [ 363.123134][T10732] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.129054][T10732] RIP: 0033:0x7f477899ce59 [ 363.133495][T10732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.153127][T10732] RSP: 002b:00007f4779780028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.161572][T10732] RAX: ffffffffffffffda RBX: 00007f4778c15fa0 RCX: 00007f477899ce59 [ 363.169570][T10732] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000039 [ 363.177560][T10732] RBP: 00007f4779780090 R08: 0000000000000000 R09: 0000000000000000 [ 363.185558][T10732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 363.193549][T10732] R13: 00007f4778c16038 R14: 00007f4778c15fa0 R15: 00007ffc6214ea58 [ 363.201564][T10732] [ 363.640978][T10749] netlink: 'syz.0.1646': attribute type 2 has an invalid length. [ 363.649140][T10749] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1646'. [ 363.662155][T10747] netlink: 'syz.2.1645': attribute type 10 has an invalid length. [ 363.672026][T10747] syz_tun: entered promiscuous mode [ 363.710684][T10747] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 363.731648][T10749] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1646'. [ 367.047796][T10780] tun0: tun_chr_ioctl cmd 1074025677 [ 367.073407][T10780] tun0: linktype set to 768 [ 367.710910][T10789] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1658'. [ 367.740886][T10789] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.1658'. [ 368.112038][T10797] netlink: 'syz.0.1662': attribute type 2 has an invalid length. [ 368.120398][T10797] netlink: 'syz.0.1662': attribute type 8 has an invalid length. [ 368.151116][T10797] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1662'. [ 368.868531][T10817] netlink: 'syz.2.1668': attribute type 21 has an invalid length. [ 369.313079][T10823] tun0: tun_chr_ioctl cmd 1074025677 [ 369.318572][T10823] tun0: linktype set to 768 [ 369.788652][T10837] netlink: 'syz.3.1674': attribute type 17 has an invalid length. [ 369.849951][T10837] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1674'. [ 369.935392][T10837] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 370.542408][T10850] netlink: 'syz.3.1679': attribute type 21 has an invalid length. [ 370.559739][T10850] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1679'. [ 370.585276][T10847] netlink: 'syz.0.1678': attribute type 10 has an invalid length. [ 370.594398][T10847] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1678'. [ 370.686937][T10847] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 371.290783][T10879] tun0: tun_chr_ioctl cmd 1074025677 [ 371.309722][T10879] tun0: linktype set to 768 [ 372.729836][T10899] netlink: 'syz.3.1693': attribute type 10 has an invalid length. [ 372.740183][T10899] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1693'. [ 373.228304][T10899] batman_adv: batadv0: Adding interface: virt_wifi0 [ 373.252854][T10899] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.359469][T10899] batman_adv: batadv0: Interface activated: virt_wifi0 [ 374.001343][T10930] netlink: 'syz.3.1705': attribute type 4 has an invalid length. [ 374.012167][T10930] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1705'. [ 374.044050][T10930] .`: renamed from bond0 (while UP) [ 374.194933][T10932] netlink: 'syz.1.1706': attribute type 10 has an invalid length. [ 374.238015][ T5777] Bluetooth: hci2: unexpected event 0x3b length: 15 > 10 [ 374.309090][T10932] team0: Device hsr_slave_0 failed to register rx_handler [ 375.224610][T10959] netlink: 'syz.2.1711': attribute type 10 has an invalid length. [ 375.242723][T10959] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1711'. [ 375.366961][T10959] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 375.392685][ T5777] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10 [ 375.616533][T10979] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1724'. [ 376.203150][T10987] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1727'. [ 376.363002][ T5777] Bluetooth: hci3: unexpected event 0x3b length: 15 > 10 [ 376.566316][T10993] delete_channel: no stack [ 376.779522][T10999] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1732'. [ 376.792389][T10999] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.1732'. [ 377.267691][ T5777] Bluetooth: hci2: unexpected event 0x3b length: 15 > 10 [ 377.423364][T11027] netlink: 'syz.2.1742': attribute type 10 has an invalid length. [ 377.444304][ T5777] Bluetooth: hci0: unexpected event 0x3b length: 15 > 10 [ 377.706571][T11037] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1745'. [ 377.909598][T11035] syzkaller0: entered promiscuous mode [ 377.940881][T11035] syzkaller0: entered allmulticast mode [ 378.723378][ T5777] Bluetooth: hci3: unexpected event 0x3b length: 15 > 10 [ 379.026342][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.040226][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.181053][T11072] FAULT_INJECTION: forcing a failure. [ 379.181053][T11072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.219559][T11072] CPU: 1 PID: 11072 Comm: syz.1.1759 Not tainted syzkaller #0 [ 379.227143][T11072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 379.237271][T11072] Call Trace: [ 379.240565][T11072] [ 379.243509][T11072] dump_stack_lvl+0x18c/0x250 [ 379.248211][T11072] ? show_regs_print_info+0x20/0x20 [ 379.253429][T11072] ? load_image+0x420/0x420 [ 379.257948][T11072] ? __might_fault+0xaa/0x120 [ 379.262638][T11072] ? __lock_acquire+0x7d40/0x7d40 [ 379.267678][T11072] should_fail_ex+0x39d/0x4d0 [ 379.272380][T11072] _copy_from_user+0x2f/0xe0 [ 379.276989][T11072] __sys_bpf+0x23e/0x890 [ 379.281253][T11072] ? bpf_link_show_fdinfo+0x390/0x390 [ 379.286652][T11072] ? lock_chain_count+0x20/0x20 [ 379.291522][T11072] __x64_sys_bpf+0x7c/0x90 [ 379.296127][T11072] do_syscall_64+0x55/0xa0 [ 379.300552][T11072] ? clear_bhb_loop+0x40/0x90 [ 379.305244][T11072] ? clear_bhb_loop+0x40/0x90 [ 379.309944][T11072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 379.315853][T11072] RIP: 0033:0x7faaa099ce59 [ 379.320283][T11072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.339921][T11072] RSP: 002b:00007faaa18d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 379.348352][T11072] RAX: ffffffffffffffda RBX: 00007faaa0c15fa0 RCX: 00007faaa099ce59 [ 379.356333][T11072] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 379.364316][T11072] RBP: 00007faaa18d5090 R08: 0000000000000000 R09: 0000000000000000 [ 379.372294][T11072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.380273][T11072] R13: 00007faaa0c16038 R14: 00007faaa0c15fa0 R15: 00007fff6db87398 [ 379.388357][T11072] [ 379.470222][ T5777] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 380.654665][T11049] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 380.664990][T11050] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1748'. [ 380.675804][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'. [ 380.837581][T11092] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1767'. [ 381.267197][T11096] delete_channel: no stack [ 381.281083][T11106] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 381.486934][T11118] netlink: 'syz.1.1777': attribute type 21 has an invalid length. [ 381.495204][T11118] netlink: 'syz.1.1777': attribute type 6 has an invalid length. [ 381.950586][T11127] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1781'. [ 382.591117][T11150] netlink: 'syz.1.1790': attribute type 3 has an invalid length. [ 382.601253][T11150] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1790'. [ 383.527278][T11157] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1793'. [ 383.548542][T11157] bridge_slave_1: default FDB implementation only supports local addresses [ 384.146444][T11180] syz.3.1797[11180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.277220][T11183] netlink: 'syz.2.1801': attribute type 33 has an invalid length. [ 384.277757][T11179] delete_channel: no stack [ 384.306651][T11183] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1801'. [ 384.381086][T11183] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 384.960903][T11202] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1806'. [ 385.003753][T11202] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.1806'. [ 385.999382][T11210] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1809'. [ 386.281247][T11219] netlink: 'syz.2.1811': attribute type 4 has an invalid length. [ 387.018338][T11234] netlink: 'syz.0.1818': attribute type 21 has an invalid length. [ 387.042820][T11234] IPv6: NLM_F_CREATE should be specified when creating new route [ 387.050720][T11234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 387.056641][T11239] FAULT_INJECTION: forcing a failure. [ 387.056641][T11239] name failslab, interval 1, probability 0, space 0, times 0 [ 387.058012][T11234] IPv6: NLM_F_CREATE should be set when creating new route [ 387.077979][T11234] IPv6: NLM_F_CREATE should be set when creating new route [ 387.085301][T11234] IPv6: NLM_F_CREATE should be set when creating new route [ 387.089065][T11239] CPU: 1 PID: 11239 Comm: syz.2.1820 Not tainted syzkaller #0 [ 387.100020][T11239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 387.110106][T11239] Call Trace: [ 387.113401][T11239] [ 387.116343][T11239] dump_stack_lvl+0x18c/0x250 [ 387.121141][T11239] ? show_regs_print_info+0x20/0x20 [ 387.126361][T11239] ? load_image+0x420/0x420 [ 387.130905][T11239] ? __might_sleep+0xe0/0xe0 [ 387.135523][T11239] ? __lock_acquire+0x7d40/0x7d40 [ 387.140578][T11239] ? mark_lock+0x94/0x320 [ 387.144930][T11239] should_fail_ex+0x39d/0x4d0 [ 387.149636][T11239] should_failslab+0x9/0x20 [ 387.154159][T11239] slab_pre_alloc_hook+0x59/0x310 [ 387.159205][T11239] ? __get_vm_area_node+0x125/0x370 [ 387.164420][T11239] __kmem_cache_alloc_node+0x53/0x250 [ 387.169812][T11239] ? __get_vm_area_node+0x125/0x370 [ 387.175034][T11239] kmalloc_node_trace+0x26/0xe0 [ 387.179979][T11239] __get_vm_area_node+0x125/0x370 [ 387.185057][T11239] __vmalloc_node_range+0x36e/0x1330 [ 387.190373][T11239] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 387.195935][T11239] ? mark_lock+0x94/0x320 [ 387.200287][T11239] ? __lock_acquire+0x1347/0x7d40 [ 387.205338][T11239] ? free_vm_area+0x50/0x50 [ 387.209861][T11239] ? end_current_label_crit_section+0x170/0x170 [ 387.216123][T11239] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 387.221683][T11239] __vmalloc+0x7a/0x90 [ 387.225770][T11239] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 387.231328][T11239] bpf_prog_alloc_no_stats+0x47/0x440 [ 387.236714][T11239] ? bpf_prog_alloc+0x2b/0x1a0 [ 387.241496][T11239] bpf_prog_alloc+0x3d/0x1a0 [ 387.246103][T11239] bpf_prog_load+0x6eb/0x1670 [ 387.250802][T11239] ? map_freeze+0x420/0x420 [ 387.255324][T11239] ? __might_fault+0xaa/0x120 [ 387.260097][T11239] ? __lock_acquire+0x7d40/0x7d40 [ 387.265140][T11239] ? file_end_write+0x159/0x250 [ 387.270023][T11239] ? __might_fault+0xaa/0x120 [ 387.274707][T11239] ? __might_fault+0xc6/0x120 [ 387.279389][T11239] ? __might_fault+0xaa/0x120 [ 387.284076][T11239] ? bpf_lsm_bpf+0x9/0x10 [ 387.288420][T11239] ? security_bpf+0x7e/0xa0 [ 387.292939][T11239] __sys_bpf+0x5ba/0x890 [ 387.297202][T11239] ? bpf_link_show_fdinfo+0x390/0x390 [ 387.302601][T11239] ? lock_chain_count+0x20/0x20 [ 387.307471][T11239] __x64_sys_bpf+0x7c/0x90 [ 387.311917][T11239] do_syscall_64+0x55/0xa0 [ 387.316355][T11239] ? clear_bhb_loop+0x40/0x90 [ 387.321050][T11239] ? clear_bhb_loop+0x40/0x90 [ 387.325771][T11239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.331689][T11239] RIP: 0033:0x7fdb6d39ce59 [ 387.336124][T11239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.355832][T11239] RSP: 002b:00007fdb6e34c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 387.364262][T11239] RAX: ffffffffffffffda RBX: 00007fdb6d615fa0 RCX: 00007fdb6d39ce59 [ 387.372245][T11239] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 387.380227][T11239] RBP: 00007fdb6e34c090 R08: 0000000000000000 R09: 0000000000000000 [ 387.388232][T11239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.396227][T11239] R13: 00007fdb6d616038 R14: 00007fdb6d615fa0 R15: 00007ffefbbbf6a8 [ 387.404226][T11239] [ 387.432709][T11239] syz.2.1820: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 387.461780][T11239] CPU: 0 PID: 11239 Comm: syz.2.1820 Not tainted syzkaller #0 [ 387.469480][T11239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 387.479581][T11239] Call Trace: [ 387.482894][T11239] [ 387.485865][T11239] dump_stack_lvl+0x18c/0x250 [ 387.490602][T11239] ? show_regs_print_info+0x20/0x20 [ 387.495924][T11239] ? load_image+0x420/0x420 [ 387.500548][T11239] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 387.507017][T11239] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 387.513550][T11239] warn_alloc+0x246/0x340 [ 387.517916][T11239] ? __get_vm_area_node+0x125/0x370 [ 387.523139][T11239] ? zone_watermark_ok_safe+0x230/0x230 [ 387.528710][T11239] ? rcu_is_watching+0x15/0xb0 [ 387.533502][T11239] ? __get_vm_area_node+0x356/0x370 [ 387.538729][T11239] __vmalloc_node_range+0x393/0x1330 [ 387.544042][T11239] ? mark_lock+0x94/0x320 [ 387.548387][T11239] ? __lock_acquire+0x1347/0x7d40 [ 387.553439][T11239] ? free_vm_area+0x50/0x50 [ 387.557962][T11239] ? end_current_label_crit_section+0x170/0x170 [ 387.564225][T11239] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 387.569780][T11239] __vmalloc+0x7a/0x90 [ 387.573864][T11239] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 387.579424][T11239] bpf_prog_alloc_no_stats+0x47/0x440 [ 387.584808][T11239] ? bpf_prog_alloc+0x2b/0x1a0 [ 387.589587][T11239] bpf_prog_alloc+0x3d/0x1a0 [ 387.594194][T11239] bpf_prog_load+0x6eb/0x1670 [ 387.598895][T11239] ? map_freeze+0x420/0x420 [ 387.603418][T11239] ? __might_fault+0xaa/0x120 [ 387.608106][T11239] ? __lock_acquire+0x7d40/0x7d40 [ 387.613144][T11239] ? file_end_write+0x159/0x250 [ 387.618032][T11239] ? __might_fault+0xaa/0x120 [ 387.622763][T11239] ? __might_fault+0xc6/0x120 [ 387.627471][T11239] ? __might_fault+0xaa/0x120 [ 387.632166][T11239] ? bpf_lsm_bpf+0x9/0x10 [ 387.636515][T11239] ? security_bpf+0x7e/0xa0 [ 387.641037][T11239] __sys_bpf+0x5ba/0x890 [ 387.645315][T11239] ? bpf_link_show_fdinfo+0x390/0x390 [ 387.650712][T11239] ? lock_chain_count+0x20/0x20 [ 387.655593][T11239] __x64_sys_bpf+0x7c/0x90 [ 387.660025][T11239] do_syscall_64+0x55/0xa0 [ 387.664458][T11239] ? clear_bhb_loop+0x40/0x90 [ 387.669151][T11239] ? clear_bhb_loop+0x40/0x90 [ 387.673847][T11239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.679754][T11239] RIP: 0033:0x7fdb6d39ce59 [ 387.684269][T11239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.703976][T11239] RSP: 002b:00007fdb6e34c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 387.712404][T11239] RAX: ffffffffffffffda RBX: 00007fdb6d615fa0 RCX: 00007fdb6d39ce59 [ 387.720559][T11239] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 387.728541][T11239] RBP: 00007fdb6e34c090 R08: 0000000000000000 R09: 0000000000000000 [ 387.736525][T11239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.744524][T11239] R13: 00007fdb6d616038 R14: 00007fdb6d615fa0 R15: 00007ffefbbbf6a8 [ 387.752521][T11239] [ 387.765185][T11239] Mem-Info: [ 387.768515][T11239] active_anon:5669 inactive_anon:0 isolated_anon:0 [ 387.768515][T11239] active_file:18436 inactive_file:40071 isolated_file:0 [ 387.768515][T11239] unevictable:768 dirty:90 writeback:0 [ 387.768515][T11239] slab_reclaimable:10451 slab_unreclaimable:93902 [ 387.768515][T11239] mapped:24506 shmem:1377 pagetables:575 [ 387.768515][T11239] sec_pagetables:0 bounce:0 [ 387.768515][T11239] kernel_misc_reclaimable:0 [ 387.768515][T11239] free:1348856 free_pcp:7043 free_cma:0 [ 387.824096][T11239] Node 0 active_anon:22676kB inactive_anon:0kB active_file:73744kB inactive_file:160084kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98024kB dirty:360kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11384kB pagetables:2300kB sec_pagetables:0kB all_unreclaimable? no [ 387.858222][T11239] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 387.881383][T11243] netlink: 'syz.1.1821': attribute type 29 has an invalid length. [ 387.889898][T11239] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 387.929845][T11239] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 387.936278][T11239] Node 0 DMA32 free:1477692kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22540kB inactive_anon:0kB active_file:73744kB inactive_file:159256kB unevictable:1536kB writepending:360kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:13116kB local_pcp:1696kB free_cma:0kB [ 387.955035][T11243] netlink: 'syz.1.1821': attribute type 29 has an invalid length. [ 388.023980][T11244] netlink: 'syz.1.1821': attribute type 29 has an invalid length. [ 388.053037][T11245] netlink: 'syz.1.1821': attribute type 29 has an invalid length. [ 388.063906][T11248] netlink: 'syz.1.1821': attribute type 29 has an invalid length. [ 388.104447][T11239] lowmem_reserve[]: 0 0 0 0 0 [ 388.109311][T11239] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 388.170746][T11239] lowmem_reserve[]: 0 0 0 0 0 [ 388.181564][T11239] Node 1 Normal free:3901864kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15364kB local_pcp:8192kB free_cma:0kB [ 388.418694][T11239] lowmem_reserve[]: 0 0 0 0 0 [ 388.743076][T11239] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 388.772689][T11239] Node 0 DMA32: 1646*4kB (UME) 1391*8kB (UME) 1091*16kB (UME) 698*32kB (UME) 333*64kB (UME) 147*128kB (UM) 80*256kB (UM) 31*512kB (UME) 8*1024kB (M) 4*2048kB (UME) 324*4096kB (UM) = 1477472kB [ 388.908745][T11239] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 388.933395][T11250] netlink: 'syz.3.1824': attribute type 29 has an invalid length. [ 388.943830][T11239] Node 1 Normal: 250*4kB (UME) 58*8kB (UME) 41*16kB (UME) 65*32kB (UME) 15*64kB (UME) 9*128kB (UME) 1*256kB (M) 2*512kB (UE) 1*1024kB (U) 1*2048kB (E) 950*4096kB (M) = 3901864kB [ 389.015506][T11250] netlink: 'syz.3.1824': attribute type 29 has an invalid length. [ 389.032690][T11239] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 389.032992][T11253] netlink: 'syz.3.1824': attribute type 29 has an invalid length. [ 389.045040][T11239] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 389.074020][T11239] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 389.087005][T11239] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 389.098591][T11256] netlink: 'syz.3.1824': attribute type 29 has an invalid length. [ 389.106620][T11239] 59868 total pagecache pages [ 389.111428][T11239] 0 pages in swap cache [ 389.117235][T11239] Free swap = 124996kB [ 389.121451][T11239] Total swap = 124996kB [ 389.126253][T11239] 2097051 pages RAM [ 389.130098][T11239] 0 pages HighMem/MovableOnly [ 389.136856][T11239] 416927 pages reserved [ 389.141051][T11239] 0 pages cma reserved [ 389.150325][T11265] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 389.157666][T11265] IPv6: NLM_F_CREATE should be set when creating new route [ 389.165018][T11265] IPv6: NLM_F_CREATE should be set when creating new route [ 389.172269][T11265] IPv6: NLM_F_CREATE should be set when creating new route [ 390.266475][T11298] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 390.290128][T11302] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1841'. [ 392.174159][T11361] FAULT_INJECTION: forcing a failure. [ 392.174159][T11361] name failslab, interval 1, probability 0, space 0, times 0 [ 392.227096][T11361] CPU: 0 PID: 11361 Comm: syz.3.1863 Not tainted syzkaller #0 [ 392.234733][T11361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 392.244824][T11361] Call Trace: [ 392.248131][T11361] [ 392.251090][T11361] dump_stack_lvl+0x18c/0x250 [ 392.255813][T11361] ? sctp_sendmsg+0x1575/0x28c0 [ 392.260703][T11361] ? ___sys_sendmsg+0x2a6/0x360 [ 392.265584][T11361] ? show_regs_print_info+0x20/0x20 [ 392.270824][T11361] ? load_image+0x420/0x420 [ 392.275383][T11361] should_fail_ex+0x39d/0x4d0 [ 392.280105][T11361] should_failslab+0x9/0x20 [ 392.284652][T11361] slab_pre_alloc_hook+0x59/0x310 [ 392.289727][T11361] ? sctp_add_bind_addr+0x8c/0x360 [ 392.295306][T11361] __kmem_cache_alloc_node+0x53/0x250 [ 392.300728][T11361] ? sctp_add_bind_addr+0x8c/0x360 [ 392.305891][T11361] kmalloc_trace+0x2a/0xe0 [ 392.310353][T11361] sctp_add_bind_addr+0x8c/0x360 [ 392.315329][T11361] sctp_copy_local_addr_list+0x315/0x4f0 [ 392.321006][T11361] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 392.326763][T11361] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 392.332865][T11361] ? sctp_v4_is_any+0x35/0x60 [ 392.337598][T11361] ? sctp_copy_one_addr+0x8c/0x350 [ 392.342747][T11361] sctp_bind_addr_copy+0xb3/0x3c0 [ 392.347806][T11361] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 392.354177][T11361] sctp_connect_new_asoc+0x2f9/0x6a0 [ 392.359502][T11361] ? __sctp_connect+0xd80/0xd80 [ 392.364385][T11361] ? __local_bh_enable_ip+0x13a/0x1c0 [ 392.369797][T11361] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 392.375377][T11361] ? security_sctp_bind_connect+0x89/0xb0 [ 392.381140][T11361] sctp_sendmsg+0x1575/0x28c0 [ 392.385880][T11361] ? sctp_getsockopt+0xb60/0xb60 [ 392.390863][T11361] ? aa_sk_perm+0x83c/0x970 [ 392.395505][T11361] ? aa_af_perm+0x330/0x330 [ 392.400050][T11361] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 392.406503][T11361] ? sock_rps_record_flow+0x19/0x3f0 [ 392.411831][T11361] ? inet_sendmsg+0xe9/0x2f0 [ 392.416469][T11361] ? inet_send_prepare+0x260/0x260 [ 392.421627][T11361] ____sys_sendmsg+0x5ba/0x960 [ 392.426427][T11361] ? __lock_acquire+0x7d40/0x7d40 [ 392.431492][T11361] ? __asan_memset+0x22/0x40 [ 392.436122][T11361] ? __sys_sendmsg_sock+0x30/0x30 [ 392.441181][T11361] ? __import_iovec+0x5f2/0x850 [ 392.446080][T11361] ? import_iovec+0x73/0xa0 [ 392.450623][T11361] ___sys_sendmsg+0x2a6/0x360 [ 392.455333][T11361] ? get_pid_task+0x20/0x1e0 [ 392.459958][T11361] ? __sys_sendmsg+0x2a0/0x2a0 [ 392.464744][T11361] ? __lock_acquire+0x7d40/0x7d40 [ 392.469802][T11361] __se_sys_sendmsg+0x1c2/0x2b0 [ 392.474659][T11361] ? __x64_sys_sendmsg+0x80/0x80 [ 392.479743][T11361] ? lockdep_hardirqs_on+0x98/0x150 [ 392.485001][T11361] do_syscall_64+0x55/0xa0 [ 392.489466][T11361] ? clear_bhb_loop+0x40/0x90 [ 392.494193][T11361] ? clear_bhb_loop+0x40/0x90 [ 392.496762][T11366] validate_nla: 2 callbacks suppressed [ 392.496777][T11366] netlink: 'syz.1.1865': attribute type 10 has an invalid length. [ 392.498902][T11361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.498936][T11361] RIP: 0033:0x7f57b359ce59 [ 392.498958][T11361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.532795][T11364] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1861'. [ 392.542151][T11361] RSP: 002b:00007f57b4493028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.542184][T11361] RAX: ffffffffffffffda RBX: 00007f57b3815fa0 RCX: 00007f57b359ce59 [ 392.542199][T11361] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000039 [ 392.542213][T11361] RBP: 00007f57b4493090 R08: 0000000000000000 R09: 0000000000000000 [ 392.542227][T11361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 392.542240][T11361] R13: 00007f57b3816038 R14: 00007f57b3815fa0 R15: 00007fffc7f3d348 [ 392.599657][T11361] [ 392.838864][T11373] netlink: 'syz.2.1869': attribute type 10 has an invalid length. [ 392.839770][T11370] netlink: 'syz.1.1867': attribute type 9 has an invalid length. [ 392.856080][T11370] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1867'. [ 393.000586][T11377] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1867'. [ 393.104998][T11370] netlink: 'syz.1.1867': attribute type 9 has an invalid length. [ 393.132779][T11370] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1867'. [ 394.209446][T11394] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1877'. [ 394.359057][T11401] netlink: 'syz.3.1876': attribute type 8 has an invalid length. [ 394.393113][T11401] netlink: 'syz.3.1876': attribute type 6 has an invalid length. [ 394.426812][T11401] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.1876'. [ 397.606392][T11426] netlink: 'syz.2.1885': attribute type 6 has an invalid length. [ 397.614416][T11426] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1885'. [ 397.625880][T11427] IPv6: Can't replace route, no match found [ 397.632014][T11428] netlink: 'syz.1.1886': attribute type 6 has an invalid length. [ 397.640026][T11428] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1886'. [ 397.650261][T11429] IPv6: Can't replace route, no match found [ 398.087536][T11443] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1888'. [ 398.105185][T11443] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.1888'. [ 399.205401][T11465] netlink: 'syz.0.1897': attribute type 6 has an invalid length. [ 399.342409][T11465] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1897'. [ 399.411095][T11466] IPv6: Can't replace route, no match found [ 399.432785][T11467] netlink: 'syz.3.1896': attribute type 6 has an invalid length. [ 399.440582][T11467] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1896'. [ 399.636716][T11459] IPv6: Can't replace route, no match found [ 399.963899][T11482] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1902'. [ 399.982660][T11482] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1902'. [ 399.993995][T11481] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1902'. [ 402.577882][T11494] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 403.261000][T11507] netlink: 'syz.3.1911': attribute type 3 has an invalid length. [ 403.280617][T11507] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1911'. [ 403.322429][T11513] netlink: 'syz.2.1912': attribute type 6 has an invalid length. [ 403.377912][T11513] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1912'. [ 403.388067][T11515] IPv6: Can't replace route, no match found [ 403.663239][T11522] netlink: 'syz.1.1915': attribute type 4 has an invalid length. [ 403.672791][T11522] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1915'. [ 403.993186][T11522] .`: renamed from bond0 (while UP) [ 406.129154][T11524] IPv6: Can't replace route, no match found [ 406.135432][T11523] netlink: 'syz.0.1914': attribute type 6 has an invalid length. [ 406.148201][T11523] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1914'. [ 407.104089][T11556] netlink: 'syz.0.1925': attribute type 6 has an invalid length. [ 407.163751][T11556] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1925'. [ 407.242431][T11563] IPv6: Can't replace route, no match found [ 407.404770][T11565] netlink: 'syz.1.1927': attribute type 3 has an invalid length. [ 407.432794][T11565] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1927'. [ 407.479924][T11569] netlink: 'syz.3.1929': attribute type 1 has an invalid length. [ 407.499400][T11569] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1929'. [ 410.663113][T11598] netlink: 'syz.2.1936': attribute type 8 has an invalid length. [ 410.690676][T11598] netlink: 'syz.2.1936': attribute type 6 has an invalid length. [ 410.702171][T11598] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.1936'. [ 414.021138][T11610] netlink: 'syz.0.1939': attribute type 6 has an invalid length. [ 414.030217][T11610] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1939'. [ 414.039965][T11611] IPv6: Can't replace route, no match found [ 414.194409][T11619] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1944'. [ 414.791656][T11622] netlink: 'syz.0.1943': attribute type 3 has an invalid length. [ 414.806603][T11622] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1943'. [ 415.306518][T11639] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1950'. [ 415.538322][T11639] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1950'. [ 415.631421][T11637] netlink: 'syz.3.1947': attribute type 6 has an invalid length. [ 415.722813][T11637] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1947'. [ 415.794541][T11645] IPv6: Can't replace route, no match found [ 415.993782][T11655] netlink: 'syz.2.1954': attribute type 6 has an invalid length. [ 416.040570][T11655] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1954'. [ 416.117139][T11658] IPv6: Can't replace route, no match found [ 416.744500][T11671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.751989][T11671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.819053][T11671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.872752][T11671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.094588][T11671] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 418.103605][T11671] batman_adv: batadv0: Removing interface: virt_wifi0 [ 418.519041][T11711] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1963'. [ 418.539928][T11711] bridge_slave_1: default FDB implementation only supports local addresses [ 418.552830][T11719] netlink: 'syz.2.1964': attribute type 6 has an invalid length. [ 418.560670][T11719] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1964'. [ 418.673970][T11722] IPv6: Can't replace route, no match found [ 421.297301][T11734] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 421.880084][T11744] netlink: 'syz.0.1973': attribute type 6 has an invalid length. [ 421.903507][T11744] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1973'. [ 421.945834][T11762] IPv6: Can't replace route, no match found [ 422.893906][T11791] netlink: 'syz.0.1992': attribute type 6 has an invalid length. [ 422.978829][T11791] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1992'. [ 423.033975][T11796] IPv6: Can't replace route, no match found [ 423.060734][T11789] netlink: 'syz.1.1984': attribute type 6 has an invalid length. [ 423.079902][T11789] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1984'. [ 423.143840][T11797] IPv6: Can't replace route, no match found [ 423.230012][T11803] FAULT_INJECTION: forcing a failure. [ 423.230012][T11803] name failslab, interval 1, probability 0, space 0, times 0 [ 423.272701][T11803] CPU: 1 PID: 11803 Comm: syz.3.1989 Not tainted syzkaller #0 [ 423.280237][T11803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 423.290330][T11803] Call Trace: [ 423.293637][T11803] [ 423.296593][T11803] dump_stack_lvl+0x18c/0x250 [ 423.301349][T11803] ? sctp_sendmsg+0x1575/0x28c0 [ 423.306243][T11803] ? ___sys_sendmsg+0x2a6/0x360 [ 423.311126][T11803] ? show_regs_print_info+0x20/0x20 [ 423.316368][T11803] ? load_image+0x420/0x420 [ 423.320929][T11803] should_fail_ex+0x39d/0x4d0 [ 423.325659][T11803] should_failslab+0x9/0x20 [ 423.330206][T11803] slab_pre_alloc_hook+0x59/0x310 [ 423.335309][T11803] ? sctp_add_bind_addr+0x8c/0x360 [ 423.340466][T11803] __kmem_cache_alloc_node+0x53/0x250 [ 423.345888][T11803] ? sctp_add_bind_addr+0x8c/0x360 [ 423.351038][T11803] kmalloc_trace+0x2a/0xe0 [ 423.355494][T11803] sctp_add_bind_addr+0x8c/0x360 [ 423.360461][T11803] sctp_copy_local_addr_list+0x315/0x4f0 [ 423.366117][T11803] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 423.371860][T11803] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 423.377947][T11803] ? sctp_v4_is_any+0x35/0x60 [ 423.382638][T11803] ? sctp_copy_one_addr+0x8c/0x350 [ 423.387764][T11803] sctp_bind_addr_copy+0xb3/0x3c0 [ 423.392806][T11803] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 423.399154][T11803] sctp_connect_new_asoc+0x2f9/0x6a0 [ 423.404456][T11803] ? __sctp_connect+0xd80/0xd80 [ 423.409315][T11803] ? __local_bh_enable_ip+0x13a/0x1c0 [ 423.414711][T11803] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 423.420268][T11803] ? security_sctp_bind_connect+0x89/0xb0 [ 423.426007][T11803] sctp_sendmsg+0x1575/0x28c0 [ 423.430715][T11803] ? sctp_getsockopt+0xb60/0xb60 [ 423.435665][T11803] ? aa_sk_perm+0x83c/0x970 [ 423.440201][T11803] ? aa_af_perm+0x330/0x330 [ 423.444722][T11803] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 423.451155][T11803] ? sock_rps_record_flow+0x19/0x3f0 [ 423.456461][T11803] ? inet_sendmsg+0xe9/0x2f0 [ 423.461084][T11803] ? inet_send_prepare+0x260/0x260 [ 423.466321][T11803] ____sys_sendmsg+0x5ba/0x960 [ 423.471123][T11803] ? __lock_acquire+0x7d40/0x7d40 [ 423.476182][T11803] ? __asan_memset+0x22/0x40 [ 423.480793][T11803] ? __sys_sendmsg_sock+0x30/0x30 [ 423.485831][T11803] ? __import_iovec+0x5f2/0x850 [ 423.490706][T11803] ? import_iovec+0x73/0xa0 [ 423.495224][T11803] ___sys_sendmsg+0x2a6/0x360 [ 423.499910][T11803] ? get_pid_task+0x20/0x1e0 [ 423.504529][T11803] ? __sys_sendmsg+0x2a0/0x2a0 [ 423.509321][T11803] ? __lock_acquire+0x7d40/0x7d40 [ 423.514380][T11803] __se_sys_sendmsg+0x1c2/0x2b0 [ 423.519249][T11803] ? __x64_sys_sendmsg+0x80/0x80 [ 423.524212][T11803] ? lockdep_hardirqs_on+0x98/0x150 [ 423.529433][T11803] do_syscall_64+0x55/0xa0 [ 423.533857][T11803] ? clear_bhb_loop+0x40/0x90 [ 423.538549][T11803] ? clear_bhb_loop+0x40/0x90 [ 423.543240][T11803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.549153][T11803] RIP: 0033:0x7f57b359ce59 [ 423.553584][T11803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.573203][T11803] RSP: 002b:00007f57b4493028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.581636][T11803] RAX: ffffffffffffffda RBX: 00007f57b3815fa0 RCX: 00007f57b359ce59 [ 423.589627][T11803] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000039 [ 423.597615][T11803] RBP: 00007f57b4493090 R08: 0000000000000000 R09: 0000000000000000 [ 423.605600][T11803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.613578][T11803] R13: 00007f57b3816038 R14: 00007f57b3815fa0 R15: 00007fffc7f3d348 [ 423.621574][T11803] [ 423.694538][T11805] netlink: 'syz.2.1991': attribute type 10 has an invalid length. [ 426.379917][T11831] netlink: 'syz.2.2000': attribute type 39 has an invalid length. [ 429.008233][T11841] netlink: 'syz.1.2003': attribute type 6 has an invalid length. [ 429.016342][T11841] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2003'. [ 429.026168][T11843] netlink: 'syz.3.2002': attribute type 6 has an invalid length. [ 429.034107][T11843] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2002'. [ 429.046856][T11844] IPv6: Can't replace route, no match found [ 429.053604][T11845] IPv6: Can't replace route, no match found [ 430.690193][T11891] netlink: 'syz.2.2014': attribute type 6 has an invalid length. [ 430.753326][T11891] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2014'. [ 430.852572][T11889] netlink: 'syz.3.2015': attribute type 6 has an invalid length. [ 430.924485][T11889] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2015'. [ 431.102977][T11895] IPv6: Can't replace route, no match found [ 431.200151][T11894] IPv6: Can't replace route, no match found [ 432.107496][T11926] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2027'. [ 432.155740][T11926] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2027'. [ 432.195794][T11925] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2027'. [ 432.243791][T11926] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2027'. [ 432.334665][ T5777] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 432.755366][T11936] netlink: 'syz.1.2026': attribute type 6 has an invalid length. [ 432.843147][T11936] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2026'. [ 432.870295][T11942] netlink: 'syz.0.2029': attribute type 6 has an invalid length. [ 432.972706][T11942] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2029'. [ 433.066052][T11951] netlink: 'syz.2.2033': attribute type 21 has an invalid length. [ 433.137237][T11945] IPv6: Can't replace route, no match found [ 433.169894][T11947] IPv6: Can't replace route, no match found [ 435.506085][T11990] netlink: 'syz.3.2045': attribute type 6 has an invalid length. [ 435.529472][T11988] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2043'. [ 435.587800][T11990] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2045'. [ 435.639808][T11994] IPv6: Can't replace route, no match found [ 435.914480][T11996] netlink: 'syz.1.2046': attribute type 4 has an invalid length. Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.