last executing test programs: 18.459046082s ago: executing program 1 (id=1237): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x0, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$kcm(0x10, 0x100000000002, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324", 0x12}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r3, 0x84, 0xb, &(0x7f0000000000), 0xe) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r2) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/167, 0xa7}, 0x2002) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180", 0x19}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x40, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x0, 0xa}, 0x8000, 0x5, 0x29, 0x7, 0x81, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000f8fe77ed00"/32], 0x48) socketpair(0x1e, 0x4, 0x4, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@ax25={{0x3, @bcast}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x18, 0xb00}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x0, 0x10, 0x3, 0x0, 0xc, 0x28000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000040), 0xe}, 0x102a4, 0x2, 0x2, 0x8, 0x4, 0x6, 0x9, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0x1) 17.487490773s ago: executing program 1 (id=1248): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x10000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0xc, 0x0, 0xd6, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x2, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x49, 0x6, 0x2, 0x0, 0xffffdfff, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) socket$kcm(0x73, 0x2, 0x2) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000880)={&(0x7f0000000340)="aadd70d8a2f7444d69b89670e143c57cc13c3b8edd44b85dc5cea235ca6203f0705665715bc44fa78427324d17e22427bf9862033fc95b3b51ffbf32b90ee018d500cd81eee8ddef01761113d557fdc674e50a4e0c6fc9a73ccf7f8ee6535ad2", &(0x7f00000003c0)=""/148, &(0x7f0000000600)="3526d1668de83665dcc4cbf4a9c25085ccbf33ef06ef526481e863e00bd8425928350d12609fa108783f53a5d7193d71d1da2ac0fa2c755d93113cc5eb2cb633ea58e35696279dfe50c889f341754026bb10c964e59736a74b260a910436017c0c129612189198d35740f1869429", &(0x7f00000007c0)="2870a8eb0ab5c48b6a10b296ab299e44de79d17c8dcce303299b2e62f8f95a7f02b1624a92360454b59cd40491232eae2c5a5b972d7ba2e299a1f49cada03a63a2216f33921489ed37143cf3d30a031afffb7c3f9c3f29de16efd75ab58bbf7c6e504bbecc6ea5e106abc13db778d1", 0x80, r6, 0x4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000bc0)={&(0x7f00000008c0), &(0x7f00000009c0)=""/152, &(0x7f0000000a80)="52bdefa91355b4bdd77c21c70a7684", &(0x7f0000000ac0)="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", 0xcef, r0, 0x4}, 0x38) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0xe0ffff00000000) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x100000000, 0x6}, 0xe01, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x80002, 0xffffffffffffffff, 0xa) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x60000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40042409, 0x0) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r9, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x4, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0xfffffffd, 0x3, 0xfe0, 0x206f}, 0xffffffffffffffff, 0x4000000, r2, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) 17.118704361s ago: executing program 3 (id=1253): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000001000000040000000808"], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) (async) bpf$LINK_DETACH(0x22, &(0x7f00000001c0), 0x4) (async) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0xff, 0x4}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x1000009, 0x8, 0x0, 0x0, 0x0, 0x800003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x48, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x8, 0x2}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x5c441, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x1}, 0x2098, 0x3, 0x9, 0x0, 0x10, 0x2, 0x4007, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r7, 0x0) (async) recvmsg(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)="9f", 0x1}], 0x1}, 0x0) r8 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0x4}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r3) (async) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) (async) sendmsg$kcm(r8, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xfffffffd}, 0x80, 0x0}, 0x0) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @random="c24f7b36aec9"}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0x9f, 0x11, &(0x7f0000000340)="a9c6aa187ed5a76768b4aa9dccf8a77bbf5a1a921acfbc94037c6aa2307be3b11de974c819d14c8e561579af913e0870b0bfb2d7ebd3d87cd9b14b38643d446d0ae3be5561d74cc0acf47eccc5eba1fb480c638576e0acb716a5b7bb78a4212223a2ecbaf755a408d612afccdb49b9e59c3470163540d17737ca8fce1bf65e9a66e21fdd4015ee7f1a98126faf3cdd1d409f9df940255596a9036f476ae9a4", &(0x7f0000000400)=""/17, 0x81, 0x0, 0xb, 0x15, &(0x7f0000000580)="3470a4ae564562dee53ea8", &(0x7f0000000680)="55acbd0b9bec34b69dba0aad6a439399770414bbb0", 0x3, 0x0, 0xc3}, 0x50) 16.829975658s ago: executing program 3 (id=1255): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000007000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000001c850000001f000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x653988b496406357, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.670168661s ago: executing program 1 (id=1257): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x0, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$kcm(0x10, 0x100000000002, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324", 0x12}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r3, 0x84, 0xb, &(0x7f0000000000), 0xe) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r2) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/167, 0xa7}, 0x2002) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180", 0x19}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x40, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x0, 0xa}, 0x8000, 0x5, 0x29, 0x7, 0x81, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000f8fe77ed00"/32], 0x48) socketpair(0x1e, 0x4, 0x4, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@ax25={{0x3, @bcast}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x18, 0xb00}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x0, 0x10, 0x3, 0x0, 0xc, 0x28000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000040), 0xe}, 0x102a4, 0x2, 0x2, 0x8, 0x4, 0x6, 0x9, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0x1) 16.608129553s ago: executing program 3 (id=1259): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1ff0ff000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad00009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 16.062151515s ago: executing program 3 (id=1261): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x502b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000015c0)=@ll={0x11, 0xf8, 0x0, 0x1, 0x7, 0x6, @random="77c0b5e26439"}, 0x80, &(0x7f0000001a00)}, 0x4005) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000090002000000000000000000630140000000a7791be0000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e00003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e3704000180fc0b09000300", 0x33fe0}], 0x1}, 0x0) 16.060784195s ago: executing program 0 (id=1269): socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xcc, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1019}, {{0x18, 0x1, 0x1, 0x0, r3, 0x0, 0x0, 0x0, 0x1010000}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.803241551s ago: executing program 0 (id=1263): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000300)={r0}) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x3, &(0x7f0000001080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x39c}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x10) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe000024"], 0xfe33) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000280), 0x2}, 0x107004, 0x2, 0xfffffffe, 0x0, 0x0, 0xa, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x14, &(0x7f0000000100), 0x120) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe44b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x400000007, 0x0) sendmsg$inet(r5, 0x0, 0x4000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x20, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x1, 0x8}, 0x100c, 0x8, 0x0, 0x3, 0x4000003, 0x1000, 0x0, 0x0, 0x7, 0x0, 0x5462}, r2, 0x0, r2, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="350400004100054cc6a119e30c80a843015a35400c0002000200002037153e370c04018006041a004500ac377653c6de2a7c31f4a918505e7a19ff6dc6a3cb9708b9469405009c8e000000800000516c006c154938456646efee34b951a078932502bdbcf6c6b8d226dc64f5b1a0718d687ed8934d4780bae8ba0a55a6c130214043ff8ad5084a642a4d4aac02e408ff3af4be00"/159, 0x9f}, {&(0x7f0000000a40)="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", 0x396}], 0x2}, 0x10049014) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) 15.749058092s ago: executing program 3 (id=1264): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x4f00, 0x400006}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 15.725888962s ago: executing program 1 (id=1265): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00'], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) 15.592749765s ago: executing program 3 (id=1267): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x62) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair(0x22, 0x2, 0x4, &(0x7f0000000800)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) recvmsg(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2102) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r2, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000540)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000580), &(0x7f0000000700), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000b40)={r6}, 0x4) ioctl$TUNGETVNETLE(r4, 0x8004745a, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) 15.418488319s ago: executing program 0 (id=1268): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x1, 0x49, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x4}, 0x283ab9bb45922541, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xea, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000f00)="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", 0x13b}, {&(0x7f0000001cc0)="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", 0x192}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98cfb4951e1dd166d062838bc49356383883778cbbaf9e010b4adb98889254740ac86a3c330836b8cc6764cf", 0xad}, {&(0x7f00000009c0)="a484d15488fb016289fa4e2b0b25648e7abf5a74ab5e75516b79103a9b0711dd70d5a141294998c249dda70370b7f076f3ec132111d4866784da73cd0f18993549e7b185584053fb7b48d2b271af8a14858473eb1edd82f3f4cd1150bee83bf4f624d8f873ec45fe60bb431221e35526a58313e39813e83be21f2834bbf6fc621f6d9894eb03b4c8690635c5ce509de10000000000000004d8d8550dc3763f779ad276b6f32236b8534ab6701184dac56e1af78c6013715d94b4d6cd59821581983f7e3b6c5369cda3f0bc763bdda2ec97d4542041be5568230b1a9b24e1d5efff9226066adcdfd53abc7078ff74aca53708cb4e62ed", 0xf6}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x7, 0x0, 0x3}, 0x0, 0x1, r1, 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0xc00}) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x21005, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x823, 0x4, 0x4, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x1, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f00000000c0)=':q\x00', 0x0}, 0x30) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r5}, 0x4) write$cgroup_subtree(r4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000680)={r2}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000007c0)=r6, 0x4) recvmsg$kcm(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000000380)=""/209, 0xd1}, {&(0x7f0000000880)=""/220, 0xdc}, {&(0x7f0000000000)=""/160, 0xa0}, {&(0x7f00000006c0)=""/224, 0xe0}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000200)=""/100, 0x64}], 0x7}, 0x0) 15.417877219s ago: executing program 2 (id=1270): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1019}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x4000}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.192868204s ago: executing program 2 (id=1271): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc6, 0x8}, @exit={0x95, 0x0, 0x0, 0x1000000}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 15.013695178s ago: executing program 2 (id=1272): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0xef) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="620454ff590200ff2c00602f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0xfcb9}], 0x3}, 0x8045) 14.822239902s ago: executing program 2 (id=1273): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x1c000, 0x20000003, 0x43a1bd76, 0x7, 0x9, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f91524fc6010000a000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 14.721443724s ago: executing program 2 (id=1274): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x0, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$kcm(0x10, 0x100000000002, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324", 0x12}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r3, 0x84, 0xb, &(0x7f0000000000), 0xe) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r2) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/167, 0xa7}, 0x2002) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180", 0x19}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x40, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x0, 0xa}, 0x8000, 0x5, 0x29, 0x7, 0x81, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000020000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000f8fe77ed00"/32], 0x48) socketpair(0x1e, 0x4, 0x4, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@ax25={{0x3, @bcast}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x18, 0xb00}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x0, 0x10, 0x3, 0x0, 0xc, 0x28000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000040), 0xe}, 0x102a4, 0x2, 0x2, 0x8, 0x4, 0x6, 0x9, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0x1) 13.496450002s ago: executing program 0 (id=1275): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, 0x0, 0x97ff, 0x0, 0x0, 0x900}, 0x0) 13.370132094s ago: executing program 1 (id=1276): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x2f, 0x18, 0x4}, 0x20) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x4, 0x18}, 0xc) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r2 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000040), 0x4) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r2}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0ffeffff7e0000000500000000b27002000000000925b152ae9de05de76426351d57c05d28eb982ff8d84a18f94418e9463803c671afb4b21d71cc671684dc73634fd8005f9d2e942aa46efbc6793e4ad0e395fb83c0e47218622bfb86e6d3c192686e11423d4c771fd2bdb602883eaa5184c83b4df404f08ac665a1cffbdac923b22539376596be5e2c0fd93c85c419ada76ce498bdd64dacf7229268e061ad004779ce734293a35a0898266b91ee27336bef9e5ca095d890ae3fe63656624913879d96a35587a67bf4d767", @ANYRES32=r0, @ANYBLOB="ff0700"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="02000000010000000500"/28], 0x50) openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000680)=@hci={0x1f, 0xa888, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000700)="02040000f81eba30573500000000", 0xe}], 0x1}, 0x20040000) 13.369721654s ago: executing program 2 (id=1277): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230007) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000100"/15], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r12 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000001f80)=r11, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r13 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(0x3) 13.369441254s ago: executing program 0 (id=1278): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x2000, 0x32, 0x43a1bd79, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @local, 0x7}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12000000}, 0x48084) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x5e5, r3}, 0x38) socketpair(0x26, 0xa, 0x2f, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, 0x0, 0x880) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001640)=@in6={0xa, 0x4e23, 0x97, @mcast2}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0x12b) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 13.204884108s ago: executing program 1 (id=1279): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0}) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair(0x22, 0x2, 0x4, &(0x7f0000000800)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) recvmsg(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2102) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r2, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000540)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000580), &(0x7f0000000700), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000b40)={r6}, 0x4) ioctl$TUNGETVNETLE(r4, 0x8004745a, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): attribute type 10 has an invalid length. [ 187.337138][ T7287] netlink: 40 bytes leftover after parsing attributes in process `syz.3.509'. [ 187.356904][ T7287] team0: entered promiscuous mode [ 187.372737][ T7287] team_slave_0: entered promiscuous mode [ 187.396842][ T7287] team_slave_1: entered promiscuous mode [ 187.414470][ T7287] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 187.430508][ T7287] team0: entered allmulticast mode [ 187.455327][ T7287] team_slave_0: entered allmulticast mode [ 187.482894][ T7287] team_slave_1: entered allmulticast mode [ 187.509544][ T7287] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 187.582156][ T7287] bond0: (slave team0): Releasing backup interface [ 187.690441][ T7287] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 188.254083][ T7303] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.512'. [ 188.555272][ T7311] netlink: 132 bytes leftover after parsing attributes in process `syz.2.515'. [ 188.683537][ T7179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.843700][ T7319] netlink: 'syz.2.518': attribute type 23 has an invalid length. [ 189.123939][ T7325] netlink: 'syz.2.522': attribute type 10 has an invalid length. [ 189.144645][ T7325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.522'. [ 189.163601][ T7325] team0: entered promiscuous mode [ 189.169818][ T7325] team_slave_0: entered promiscuous mode [ 189.190408][ T7325] team_slave_1: entered promiscuous mode [ 189.208396][ T7325] team0: entered allmulticast mode [ 189.217955][ T7325] team_slave_0: entered allmulticast mode [ 189.238761][ T7325] team_slave_1: entered allmulticast mode [ 189.286171][ T7325] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 189.561402][ T7328] syzkaller0: entered promiscuous mode [ 189.566979][ T7328] syzkaller0: entered allmulticast mode [ 192.145184][ T7368] netlink: 'syz.0.536': attribute type 10 has an invalid length. [ 192.293410][ T7368] netlink: 40 bytes leftover after parsing attributes in process `syz.0.536'. [ 192.354794][ T7368] team0: entered promiscuous mode [ 192.392710][ T7368] team_slave_0: entered promiscuous mode [ 192.408085][ T7370] netlink: 'syz.2.537': attribute type 2 has an invalid length. [ 192.414058][ T7368] team_slave_1: entered promiscuous mode [ 192.417720][ T7368] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 192.421012][ T7368] bridge0: entered promiscuous mode [ 192.422168][ T7368] team0: entered allmulticast mode [ 192.422282][ T7368] team_slave_0: entered allmulticast mode [ 192.422303][ T7368] team_slave_1: entered allmulticast mode [ 192.422327][ T7368] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 192.422639][ T7368] bridge0: entered allmulticast mode [ 192.426219][ T7368] bridge0: port 3(team0) entered blocking state [ 192.426736][ T7368] bridge0: port 3(team0) entered disabled state [ 192.531796][ T7382] FAULT_INJECTION: forcing a failure. [ 192.531796][ T7382] name failslab, interval 1, probability 0, space 0, times 0 [ 192.531878][ T7382] CPU: 1 PID: 7382 Comm: syz.3.541 Not tainted syzkaller #0 [ 192.531901][ T7382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 192.531916][ T7382] Call Trace: [ 192.531925][ T7382] [ 192.531935][ T7382] dump_stack_lvl+0x18c/0x250 [ 192.531976][ T7382] ? sctp_sendmsg+0x1519/0x27b0 [ 192.532001][ T7382] ? ___sys_sendmsg+0x2a6/0x360 [ 192.532035][ T7382] ? show_regs_print_info+0x20/0x20 [ 192.532070][ T7382] ? load_image+0x420/0x420 [ 192.532117][ T7382] should_fail_ex+0x394/0x4c0 [ 192.532154][ T7382] should_failslab+0x9/0x20 [ 192.532186][ T7382] slab_pre_alloc_hook+0x59/0x300 [ 192.532222][ T7382] ? sctp_add_bind_addr+0x8c/0x360 [ 192.532247][ T7382] __kmem_cache_alloc_node+0x53/0x250 [ 192.532284][ T7382] ? sctp_add_bind_addr+0x8c/0x360 [ 192.532307][ T7382] kmalloc_trace+0x2a/0xe0 [ 192.532341][ T7382] sctp_add_bind_addr+0x8c/0x360 [ 192.532370][ T7382] sctp_copy_local_addr_list+0x31b/0x4e0 [ 192.532397][ T7382] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 192.532423][ T7382] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 192.532450][ T7382] ? sctp_v6_is_any+0x64/0x70 [ 192.532482][ T7382] ? sctp_copy_one_addr+0x8c/0x350 [ 192.532518][ T7382] sctp_bind_addr_copy+0xb3/0x3c0 [ 192.532543][ T7382] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 192.532577][ T7382] sctp_connect_new_asoc+0x2f9/0x6a0 [ 192.532607][ T7382] ? __sctp_connect+0xd80/0xd80 [ 192.532630][ T7382] ? __local_bh_enable_ip+0x13a/0x1c0 [ 192.532662][ T7382] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 192.532692][ T7382] ? security_sctp_bind_connect+0x89/0xb0 [ 192.532721][ T7382] sctp_sendmsg+0x1519/0x27b0 [ 192.532762][ T7382] ? sctp_getsockopt+0xb60/0xb60 [ 192.532796][ T7382] ? aa_af_perm+0x330/0x330 [ 192.532830][ T7382] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 192.532868][ T7382] ? sock_rps_record_flow+0x19/0x3f0 [ 192.532900][ T7382] ? inet_sendmsg+0xce/0x2a0 [ 192.532927][ T7382] ? inet_send_prepare+0x250/0x250 [ 192.532957][ T7382] ____sys_sendmsg+0x61b/0x980 [ 192.533000][ T7382] ? __asan_memset+0x22/0x40 [ 192.533031][ T7382] ? __sys_sendmsg_sock+0x30/0x30 [ 192.533062][ T7382] ? __import_iovec+0x5f2/0x850 [ 192.533103][ T7382] ? import_iovec+0x73/0xa0 [ 192.533137][ T7382] ___sys_sendmsg+0x2a6/0x360 [ 192.533178][ T7382] ? __sys_sendmsg+0x2b0/0x2b0 [ 192.533239][ T7382] ? __lock_acquire+0x7d80/0x7d80 [ 192.533299][ T7382] __se_sys_sendmsg+0x1d0/0x2c0 [ 192.533337][ T7382] ? __x64_sys_sendmsg+0x80/0x80 [ 192.533396][ T7382] ? lockdep_hardirqs_on+0x98/0x150 [ 192.533429][ T7382] do_syscall_64+0x55/0xb0 [ 192.533460][ T7382] ? clear_bhb_loop+0x40/0x90 [ 192.533481][ T7382] ? clear_bhb_loop+0x40/0x90 [ 192.533511][ T7382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.533544][ T7382] RIP: 0033:0x7fc7c4f9de59 [ 192.533565][ T7382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.533585][ T7382] RSP: 002b:00007fc7c5dbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.533611][ T7382] RAX: ffffffffffffffda RBX: 00007fc7c5225fa0 RCX: 00007fc7c4f9de59 [ 192.533628][ T7382] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 192.533643][ T7382] RBP: 00007fc7c5dbc090 R08: 0000000000000000 R09: 0000000000000000 [ 192.533658][ T7382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.533672][ T7382] R13: 00007fc7c5226038 R14: 00007fc7c5225fa0 R15: 00007fff2684aa08 [ 192.533709][ T7382] [ 193.196548][ T7392] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.540'. [ 193.578803][ T7370] netlink: 'syz.2.537': attribute type 1 has an invalid length. [ 193.590198][ T7370] netlink: 9 bytes leftover after parsing attributes in process `syz.2.537'. [ 193.636288][ T7368] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 193.915358][ T7396] netlink: 'syz.3.545': attribute type 4 has an invalid length. [ 194.009360][ T7396] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.545'. [ 194.479340][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.485911][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.851617][ T7407] syzkaller0: entered promiscuous mode [ 194.857343][ T7407] syzkaller0: entered allmulticast mode [ 196.579523][ T7427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.586990][ T7427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.595568][ T7427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.603129][ T7427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.086211][ T7444] FAULT_INJECTION: forcing a failure. [ 197.086211][ T7444] name failslab, interval 1, probability 0, space 0, times 0 [ 197.156071][ T7444] CPU: 1 PID: 7444 Comm: syz.0.560 Not tainted syzkaller #0 [ 197.163472][ T7444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 197.173586][ T7444] Call Trace: [ 197.176922][ T7444] [ 197.179904][ T7444] dump_stack_lvl+0x18c/0x250 [ 197.184639][ T7444] ? sctp_sendmsg+0x1519/0x27b0 [ 197.189549][ T7444] ? ___sys_sendmsg+0x2a6/0x360 [ 197.194457][ T7444] ? show_regs_print_info+0x20/0x20 [ 197.199721][ T7444] ? load_image+0x420/0x420 [ 197.204299][ T7444] should_fail_ex+0x394/0x4c0 [ 197.209040][ T7444] should_failslab+0x9/0x20 [ 197.213682][ T7444] slab_pre_alloc_hook+0x59/0x300 [ 197.218759][ T7444] ? sctp_add_bind_addr+0x8c/0x360 [ 197.223927][ T7444] __kmem_cache_alloc_node+0x53/0x250 [ 197.229367][ T7444] ? sctp_add_bind_addr+0x8c/0x360 [ 197.234538][ T7444] kmalloc_trace+0x2a/0xe0 [ 197.238909][ T7439] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.557'. [ 197.238994][ T7444] sctp_add_bind_addr+0x8c/0x360 [ 197.253047][ T7444] sctp_copy_local_addr_list+0x31b/0x4e0 [ 197.258736][ T7444] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 197.264506][ T7444] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 197.270644][ T7444] ? sctp_v4_is_any+0x35/0x60 [ 197.275374][ T7444] ? sctp_copy_one_addr+0x8c/0x350 [ 197.280550][ T7444] sctp_bind_addr_copy+0xb3/0x3c0 [ 197.285635][ T7444] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 197.292033][ T7444] sctp_connect_new_asoc+0x2f9/0x6a0 [ 197.297378][ T7444] ? __sctp_connect+0xd80/0xd80 [ 197.302278][ T7444] ? __local_bh_enable_ip+0x13a/0x1c0 [ 197.307704][ T7444] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 197.313306][ T7444] ? security_sctp_bind_connect+0x89/0xb0 [ 197.319081][ T7444] sctp_sendmsg+0x1519/0x27b0 [ 197.323830][ T7444] ? sctp_getsockopt+0xb60/0xb60 [ 197.328825][ T7444] ? aa_af_perm+0x330/0x330 [ 197.333391][ T7444] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 197.339874][ T7444] ? sock_rps_record_flow+0x19/0x3f0 [ 197.345223][ T7444] ? inet_sendmsg+0xce/0x2a0 [ 197.349872][ T7444] ? inet_send_prepare+0x250/0x250 [ 197.355056][ T7444] ____sys_sendmsg+0x61b/0x980 [ 197.359893][ T7444] ? __asan_memset+0x22/0x40 [ 197.364547][ T7444] ? __sys_sendmsg_sock+0x30/0x30 [ 197.369631][ T7444] ? __import_iovec+0x5f2/0x850 [ 197.374564][ T7444] ? import_iovec+0x73/0xa0 [ 197.379133][ T7444] ___sys_sendmsg+0x2a6/0x360 [ 197.383876][ T7444] ? get_pid_task+0x20/0x1e0 [ 197.388543][ T7444] ? __sys_sendmsg+0x2b0/0x2b0 [ 197.393398][ T7444] ? __lock_acquire+0x7d80/0x7d80 [ 197.398483][ T7444] __se_sys_sendmsg+0x1d0/0x2c0 [ 197.403388][ T7444] ? __x64_sys_sendmsg+0x80/0x80 [ 197.408386][ T7444] ? lockdep_hardirqs_on+0x98/0x150 [ 197.413625][ T7444] do_syscall_64+0x55/0xb0 [ 197.418113][ T7444] ? clear_bhb_loop+0x40/0x90 [ 197.422824][ T7444] ? clear_bhb_loop+0x40/0x90 [ 197.427533][ T7444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.433470][ T7444] RIP: 0033:0x7f040e39de59 [ 197.437916][ T7444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.457576][ T7444] RSP: 002b:00007f040c5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.466027][ T7444] RAX: ffffffffffffffda RBX: 00007f040e625fa0 RCX: 00007f040e39de59 [ 197.474033][ T7444] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000004 [ 197.482037][ T7444] RBP: 00007f040c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 197.490037][ T7444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.498031][ T7444] R13: 00007f040e626038 R14: 00007f040e625fa0 R15: 00007ffda8b08b68 [ 197.506045][ T7444] [ 198.168397][ T7456] netlink: 668 bytes leftover after parsing attributes in process `syz.2.564'. [ 198.182117][ T7456] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 198.215148][ T7456] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 198.898396][ T7471] FAULT_INJECTION: forcing a failure. [ 198.898396][ T7471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.920380][ T7471] CPU: 0 PID: 7471 Comm: syz.1.568 Not tainted syzkaller #0 [ 198.927744][ T7471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 198.937849][ T7471] Call Trace: [ 198.941169][ T7471] [ 198.944140][ T7471] dump_stack_lvl+0x18c/0x250 [ 198.948889][ T7471] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 198.955101][ T7471] ? show_regs_print_info+0x20/0x20 [ 198.960361][ T7471] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 198.966595][ T7471] should_fail_ex+0x394/0x4c0 [ 198.971331][ T7471] _copy_from_user+0x2f/0xe0 [ 198.975974][ T7471] ppp_get_filter+0xa7/0x1d0 [ 198.980612][ T7471] ? ppp_set_compress+0x720/0x720 [ 198.985702][ T7471] ppp_ioctl+0xec8/0x1ac0 [ 198.990088][ T7471] ? ppp_poll+0x250/0x250 [ 198.994492][ T7471] ? bpf_lsm_file_ioctl+0x9/0x10 [ 198.999479][ T7471] ? security_file_ioctl+0x80/0xa0 [ 199.004646][ T7471] ? ppp_poll+0x250/0x250 [ 199.009027][ T7471] __se_sys_ioctl+0xfd/0x170 [ 199.013673][ T7471] do_syscall_64+0x55/0xb0 [ 199.018142][ T7471] ? clear_bhb_loop+0x40/0x90 [ 199.022860][ T7471] ? clear_bhb_loop+0x40/0x90 [ 199.027592][ T7471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.033547][ T7471] RIP: 0033:0x7f078379de59 [ 199.038005][ T7471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.057656][ T7471] RSP: 002b:00007f07819f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.066122][ T7471] RAX: ffffffffffffffda RBX: 00007f0783a26090 RCX: 00007f078379de59 [ 199.074140][ T7471] RDX: 0000200000000180 RSI: 0000000040107447 RDI: 0000000000000004 [ 199.082159][ T7471] RBP: 00007f07819f6090 R08: 0000000000000000 R09: 0000000000000000 [ 199.090171][ T7471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.098184][ T7471] R13: 00007f0783a26128 R14: 00007f0783a26090 R15: 00007ffd959f13b8 [ 199.106217][ T7471] [ 201.072171][ T7473] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.569'. [ 201.083266][ T7473] netlink: del zone limit has 8 unknown bytes [ 201.248414][ T7479] netlink: 'syz.2.571': attribute type 29 has an invalid length. [ 201.270159][ T7479] netlink: 'syz.2.571': attribute type 29 has an invalid length. [ 201.657104][ T7493] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.572'. [ 202.936874][ T7501] netlink: 668 bytes leftover after parsing attributes in process `syz.3.580'. [ 202.998186][ T7501] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 203.014945][ T7501] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 204.059222][ T7522] netlink: 'syz.0.586': attribute type 21 has an invalid length. [ 204.094878][ T7522] netlink: 132 bytes leftover after parsing attributes in process `syz.0.586'. [ 204.465638][ T7534] netlink: 14 bytes leftover after parsing attributes in process `syz.2.589'. [ 205.325258][ T7546] netlink: 668 bytes leftover after parsing attributes in process `syz.0.592'. [ 205.367973][ T7546] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 205.438687][ T7546] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 205.641859][ T7548] netlink: 'syz.3.594': attribute type 29 has an invalid length. [ 205.659031][ T7548] netlink: 'syz.3.594': attribute type 29 has an invalid length. [ 205.707074][ T7548] netlink: 'syz.3.594': attribute type 29 has an invalid length. [ 205.779789][ T7557] netlink: 'syz.2.597': attribute type 21 has an invalid length. [ 205.978845][ T7551] netlink: 'syz.3.594': attribute type 29 has an invalid length. [ 206.071858][ T7561] FAULT_INJECTION: forcing a failure. [ 206.071858][ T7561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.094703][ T7561] CPU: 1 PID: 7561 Comm: syz.2.599 Not tainted syzkaller #0 [ 206.102125][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 206.112252][ T7561] Call Trace: [ 206.115632][ T7561] [ 206.118630][ T7561] dump_stack_lvl+0x18c/0x250 [ 206.123390][ T7561] ? show_regs_print_info+0x20/0x20 [ 206.128668][ T7561] ? load_image+0x420/0x420 [ 206.133252][ T7561] ? __might_fault+0xaa/0x120 [ 206.137997][ T7561] ? __lock_acquire+0x7d80/0x7d80 [ 206.143098][ T7561] ? __virt_addr_valid+0x10c/0x380 [ 206.148286][ T7561] should_fail_ex+0x394/0x4c0 [ 206.153050][ T7561] _copy_from_user+0x2f/0xe0 [ 206.157708][ T7561] generic_map_update_batch+0x58c/0x800 [ 206.163348][ T7561] ? rcu_read_unlock+0xa0/0xa0 [ 206.168195][ T7561] ? __fdget+0x180/0x210 [ 206.172517][ T7561] ? rcu_read_unlock+0xa0/0xa0 [ 206.177352][ T7561] bpf_map_do_batch+0x3f2/0x600 [ 206.182278][ T7561] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 206.188692][ T7561] __sys_bpf+0x381/0x890 [ 206.193010][ T7561] ? bpf_link_show_fdinfo+0x390/0x390 [ 206.198487][ T7561] ? lock_chain_count+0x20/0x20 [ 206.203426][ T7561] __x64_sys_bpf+0x7c/0x90 [ 206.207910][ T7561] do_syscall_64+0x55/0xb0 [ 206.212404][ T7561] ? clear_bhb_loop+0x40/0x90 [ 206.217141][ T7561] ? clear_bhb_loop+0x40/0x90 [ 206.221887][ T7561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.227852][ T7561] RIP: 0033:0x7f2feb59de59 [ 206.232329][ T7561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.252013][ T7561] RSP: 002b:00007f2fec4b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.260508][ T7561] RAX: ffffffffffffffda RBX: 00007f2feb825fa0 RCX: 00007f2feb59de59 [ 206.268537][ T7561] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 206.276572][ T7561] RBP: 00007f2fec4b0090 R08: 0000000000000000 R09: 0000000000000000 [ 206.284616][ T7561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.292660][ T7561] R13: 00007f2feb826038 R14: 00007f2feb825fa0 R15: 00007fff57414de8 [ 206.300729][ T7561] [ 206.760852][ T7568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.322633][ T7617] netlink: 668 bytes leftover after parsing attributes in process `syz.0.617'. [ 210.355545][ T7617] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 210.378905][ T7617] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 211.927445][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 211.933732][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 211.934751][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 211.939902][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 211.984830][ T7610] netlink: 14 bytes leftover after parsing attributes in process `syz.3.615'. [ 212.147850][ T7630] netlink: 'syz.1.623': attribute type 10 has an invalid length. [ 212.157287][ T7630] netlink: 40 bytes leftover after parsing attributes in process `syz.1.623'. [ 212.171073][ T7630] batman_adv: batadv0: Adding interface: veth0_vlan [ 212.179628][ T7630] batman_adv: batadv0: Interface activated: veth0_vlan [ 212.831852][ T7642] netlink: 668 bytes leftover after parsing attributes in process `syz.1.626'. [ 212.863596][ T7642] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 212.901621][ T7642] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 213.310333][ T7657] netlink: 14 bytes leftover after parsing attributes in process `syz.0.631'. [ 214.210915][ T7668] lo: entered promiscuous mode [ 214.878760][ T7680] netlink: 'syz.1.639': attribute type 3 has an invalid length. [ 214.886490][ T7680] netlink: 132 bytes leftover after parsing attributes in process `syz.1.639'. [ 214.939307][ T7680] netlink: 188 bytes leftover after parsing attributes in process `syz.1.639'. [ 214.949631][ T7679] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.638'. [ 215.032195][ T7679] openvswitch: netlink: IP tunnel dst address not specified [ 215.290344][ T7688] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.642'. [ 215.376772][ T7685] netlink: 668 bytes leftover after parsing attributes in process `syz.2.641'. [ 215.399009][ T7685] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 215.416870][ T7685] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 215.774285][ T7693] FAULT_INJECTION: forcing a failure. [ 215.774285][ T7693] name failslab, interval 1, probability 0, space 0, times 0 [ 215.787294][ T7693] CPU: 1 PID: 7693 Comm: syz.1.644 Not tainted syzkaller #0 [ 215.794630][ T7693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 215.804831][ T7693] Call Trace: [ 215.808157][ T7693] [ 215.811130][ T7693] dump_stack_lvl+0x18c/0x250 [ 215.815865][ T7693] ? _local_bh_enable+0xa0/0xa0 [ 215.820758][ T7693] ? show_regs_print_info+0x20/0x20 [ 215.825991][ T7693] ? load_image+0x420/0x420 [ 215.830536][ T7693] ? ipt_do_table+0x13b3/0x15c0 [ 215.835421][ T7693] should_fail_ex+0x394/0x4c0 [ 215.840138][ T7693] should_failslab+0x9/0x20 [ 215.844674][ T7693] slab_pre_alloc_hook+0x59/0x300 [ 215.849739][ T7693] kmem_cache_alloc_node+0x5e/0x310 [ 215.855019][ T7693] ? __alloc_skb+0x103/0x2c0 [ 215.859658][ T7693] __alloc_skb+0x103/0x2c0 [ 215.864118][ T7693] ip_frag_next+0xcd/0xb00 [ 215.868614][ T7693] ip_do_fragment+0x778/0x1750 [ 215.873424][ T7693] ? ip_fragment+0x210/0x210 [ 215.878059][ T7693] ip_output+0x2a5/0x3a0 [ 215.882331][ T7693] ? ip_output+0x5a/0x3a0 [ 215.886721][ T7693] iptunnel_xmit+0x4d0/0x910 [ 215.891349][ T7693] ip_tunnel_xmit+0x1d18/0x25b0 [ 215.896258][ T7693] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 215.901319][ T7693] ? validate_xmit_xfrm+0xbb/0x1340 [ 215.906553][ T7693] ? skb_push+0x8e/0xe0 [ 215.910746][ T7693] ipgre_xmit+0x7eb/0xb70 [ 215.915118][ T7693] dev_hard_start_xmit+0x269/0x790 [ 215.920271][ T7693] ? __dev_queue_xmit+0x275/0x3630 [ 215.925410][ T7693] __dev_queue_xmit+0x198c/0x3630 [ 215.930469][ T7693] ? __dev_queue_xmit+0x275/0x3630 [ 215.935619][ T7693] ? netdev_core_pick_tx+0x370/0x370 [ 215.940941][ T7693] ? pskb_expand_head+0x17a/0x1150 [ 215.946081][ T7693] ? pskb_expand_head+0x17a/0x1150 [ 215.951226][ T7693] ? skb_release_data+0x1de/0x7f0 [ 215.956297][ T7693] ? __bpf_redirect+0x4d1/0xdf0 [ 215.961190][ T7693] __bpf_tx_skb+0x181/0x260 [ 215.965729][ T7693] bpf_clone_redirect+0x315/0x4a0 [ 215.970802][ T7693] bpf_prog_208b094576c80b22+0x5e/0x63 [ 215.976297][ T7693] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 215.982311][ T7693] ? __lock_acquire+0x7d80/0x7d80 [ 215.987365][ T7693] ? lock_chain_count+0x20/0x20 [ 215.992252][ T7693] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 215.998258][ T7693] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 216.003575][ T7693] ? lock_chain_count+0x20/0x20 [ 216.008459][ T7693] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 216.014730][ T7693] ? __local_bh_disable_ip+0x108/0x1a0 [ 216.020213][ T7693] ? __cant_sleep+0x220/0x220 [ 216.024918][ T7693] ? __local_bh_enable_ip+0x13a/0x1c0 [ 216.030324][ T7693] ? _local_bh_enable+0xa0/0xa0 [ 216.035205][ T7693] ? bpf_test_timer_continue+0x135/0x380 [ 216.040874][ T7693] ? bpf_test_run+0x174/0x870 [ 216.045579][ T7693] bpf_test_run+0x2df/0x870 [ 216.050117][ T7693] ? bpf_test_run+0x174/0x870 [ 216.054821][ T7693] ? dst_hold+0x70/0x70 [ 216.059006][ T7693] ? eth_get_headlen+0x210/0x210 [ 216.063991][ T7693] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 216.069423][ T7693] ? cpu_online+0x60/0x60 [ 216.073785][ T7693] bpf_prog_test_run+0x31f/0x390 [ 216.078757][ T7693] __sys_bpf+0x49d/0x890 [ 216.083029][ T7693] ? bpf_link_show_fdinfo+0x390/0x390 [ 216.088449][ T7693] ? lock_chain_count+0x20/0x20 [ 216.093341][ T7693] __x64_sys_bpf+0x7c/0x90 [ 216.097803][ T7693] do_syscall_64+0x55/0xb0 [ 216.102518][ T7693] ? clear_bhb_loop+0x40/0x90 [ 216.107221][ T7693] ? clear_bhb_loop+0x40/0x90 [ 216.111925][ T7693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.117845][ T7693] RIP: 0033:0x7f078379de59 [ 216.122290][ T7693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.141922][ T7693] RSP: 002b:00007f078459a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 216.150368][ T7693] RAX: ffffffffffffffda RBX: 00007f0783a25fa0 RCX: 00007f078379de59 [ 216.158365][ T7693] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 216.166371][ T7693] RBP: 00007f078459a090 R08: 0000000000000000 R09: 0000000000000000 [ 216.174370][ T7693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.182370][ T7693] R13: 00007f0783a26038 R14: 00007f0783a25fa0 R15: 00007ffd959f13b8 [ 216.190387][ T7693] [ 216.263313][ T7695] netlink: 'syz.2.645': attribute type 23 has an invalid length. [ 216.280340][ T7695] netlink: 168 bytes leftover after parsing attributes in process `syz.2.645'. [ 216.300866][ T7691] netlink: 'syz.3.643': attribute type 21 has an invalid length. [ 216.320330][ T7691] netlink: 'syz.3.643': attribute type 1 has an invalid length. [ 216.350209][ T7691] netlink: 132 bytes leftover after parsing attributes in process `syz.3.643'. [ 216.775041][ T7703] netlink: 60 bytes leftover after parsing attributes in process `syz.1.647'. [ 217.065537][ T7708] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.648'. [ 217.429694][ T7710] netlink: 'syz.2.649': attribute type 10 has an invalid length. [ 217.591880][ T7710] team0: Device hsr_slave_0 failed to register rx_handler [ 217.910172][ T7710] syz.2.649 (7710) used greatest stack depth: 17736 bytes left [ 217.972890][ T7716] FAULT_INJECTION: forcing a failure. [ 217.972890][ T7716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.990057][ T7716] CPU: 0 PID: 7716 Comm: syz.1.651 Not tainted syzkaller #0 [ 217.997433][ T7716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 218.007543][ T7716] Call Trace: [ 218.010883][ T7716] [ 218.013858][ T7716] dump_stack_lvl+0x18c/0x250 [ 218.018603][ T7716] ? show_regs_print_info+0x20/0x20 [ 218.024123][ T7716] ? load_image+0x420/0x420 [ 218.028699][ T7716] ? __might_fault+0xaa/0x120 [ 218.033445][ T7716] ? __lock_acquire+0x7d80/0x7d80 [ 218.038543][ T7716] should_fail_ex+0x394/0x4c0 [ 218.043289][ T7716] _copy_from_user+0x2f/0xe0 [ 218.047939][ T7716] __sys_bpf+0x23e/0x890 [ 218.052255][ T7716] ? bpf_link_show_fdinfo+0x390/0x390 [ 218.057684][ T7716] ? lock_chain_count+0x20/0x20 [ 218.062594][ T7716] __x64_sys_bpf+0x7c/0x90 [ 218.067062][ T7716] do_syscall_64+0x55/0xb0 [ 218.071537][ T7716] ? clear_bhb_loop+0x40/0x90 [ 218.076267][ T7716] ? clear_bhb_loop+0x40/0x90 [ 218.081005][ T7716] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.086964][ T7716] RIP: 0033:0x7f078379de59 [ 218.091426][ T7716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.111086][ T7716] RSP: 002b:00007f078459a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 218.119547][ T7716] RAX: ffffffffffffffda RBX: 00007f0783a25fa0 RCX: 00007f078379de59 [ 218.127546][ T7716] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 218.135542][ T7716] RBP: 00007f078459a090 R08: 0000000000000000 R09: 0000000000000000 [ 218.143537][ T7716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.151536][ T7716] R13: 00007f0783a26038 R14: 00007f0783a25fa0 R15: 00007ffd959f13b8 [ 218.159556][ T7716] [ 218.273593][ T7720] raw_sendmsg: syz.2.652 forgot to set AF_INET. Fix it! [ 218.473331][ T7727] netlink: 'syz.2.656': attribute type 1 has an invalid length. [ 218.501306][ T7727] netlink: 'syz.2.656': attribute type 4 has an invalid length. [ 218.545206][ T7727] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.656'. [ 218.618751][ T7728] netlink: 'syz.2.656': attribute type 1 has an invalid length. [ 218.626881][ T7728] netlink: 'syz.2.656': attribute type 4 has an invalid length. [ 218.662598][ T7728] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.656'. [ 218.792263][ T7727] netlink: 'syz.2.656': attribute type 21 has an invalid length. [ 218.810847][ T7731] netlink: set zone limit has 8 unknown bytes [ 219.076607][ T7745] netlink: 'syz.0.659': attribute type 3 has an invalid length. [ 219.084734][ T7745] netlink: 132 bytes leftover after parsing attributes in process `syz.0.659'. [ 219.175017][ T7745] netlink: 188 bytes leftover after parsing attributes in process `syz.0.659'. [ 219.535620][ T7754] netlink: 668 bytes leftover after parsing attributes in process `syz.0.663'. [ 219.565626][ T7754] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 219.625833][ T7754] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 220.037702][ T7763] netlink: 'syz.0.665': attribute type 12 has an invalid length. [ 220.834205][ T7775] netlink: 'syz.0.670': attribute type 39 has an invalid length. [ 221.070753][ T7779] __nla_validate_parse: 2 callbacks suppressed [ 221.070773][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'. [ 221.594404][ T7785] netlink: 'syz.2.672': attribute type 3 has an invalid length. [ 221.609013][ T7785] netlink: 132 bytes leftover after parsing attributes in process `syz.2.672'. [ 221.646064][ T7785] netlink: 188 bytes leftover after parsing attributes in process `syz.2.672'. [ 221.742824][ T7783] netlink: 668 bytes leftover after parsing attributes in process `syz.1.674'. [ 221.775340][ T7783] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 221.811449][ T7783] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 222.126515][ T7795] netlink: 668 bytes leftover after parsing attributes in process `syz.3.677'. [ 222.153055][ T7795] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 222.184335][ T7795] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 222.399440][ T7801] syzkaller0: entered promiscuous mode [ 222.418782][ T7801] syzkaller0: entered allmulticast mode [ 222.622590][ T7799] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.679'. [ 224.473250][ T7813] netlink: 'syz.3.682': attribute type 2 has an invalid length. [ 224.522527][ T7813] netlink: 'syz.3.682': attribute type 8 has an invalid length. [ 224.578705][ T7813] netlink: 132 bytes leftover after parsing attributes in process `syz.3.682'. [ 224.771769][ T7821] syzkaller0: entered promiscuous mode [ 224.777422][ T7821] syzkaller0: entered allmulticast mode [ 225.597820][ T7831] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.690'. [ 225.742763][ T7845] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.693'. [ 228.022052][ T7848] netlink: 132 bytes leftover after parsing attributes in process `syz.2.694'. [ 228.058073][ T7852] netlink: 'syz.1.695': attribute type 21 has an invalid length. [ 228.090163][ T7852] netlink: 'syz.1.695': attribute type 1 has an invalid length. [ 228.099523][ T7852] netlink: 132 bytes leftover after parsing attributes in process `syz.1.695'. [ 228.551978][ T7874] syzkaller0: entered promiscuous mode [ 228.574577][ T7874] syzkaller0: entered allmulticast mode [ 228.727976][ T7880] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.703'. [ 229.065294][ T7887] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.704'. [ 230.850727][ T7902] FAULT_INJECTION: forcing a failure. [ 230.850727][ T7902] name failslab, interval 1, probability 0, space 0, times 0 [ 230.888675][ T7902] CPU: 0 PID: 7902 Comm: syz.3.711 Not tainted syzkaller #0 [ 230.896062][ T7902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 230.906161][ T7902] Call Trace: [ 230.909487][ T7902] [ 230.912457][ T7902] dump_stack_lvl+0x18c/0x250 [ 230.917197][ T7902] ? sctp_sendmsg+0x1519/0x27b0 [ 230.922098][ T7902] ? ___sys_sendmsg+0x2a6/0x360 [ 230.927025][ T7902] ? show_regs_print_info+0x20/0x20 [ 230.932278][ T7902] ? load_image+0x420/0x420 [ 230.936845][ T7902] should_fail_ex+0x394/0x4c0 [ 230.941571][ T7902] should_failslab+0x9/0x20 [ 230.946125][ T7902] slab_pre_alloc_hook+0x59/0x300 [ 230.951209][ T7902] ? sctp_add_bind_addr+0x8c/0x360 [ 230.956359][ T7902] __kmem_cache_alloc_node+0x53/0x250 [ 230.961783][ T7902] ? sctp_add_bind_addr+0x8c/0x360 [ 230.966937][ T7902] kmalloc_trace+0x2a/0xe0 [ 230.971416][ T7902] sctp_add_bind_addr+0x8c/0x360 [ 230.976405][ T7902] sctp_copy_local_addr_list+0x31b/0x4e0 [ 230.982093][ T7902] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 230.987862][ T7902] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 230.993972][ T7902] ? sctp_v6_is_any+0x64/0x70 [ 230.998697][ T7902] ? sctp_copy_one_addr+0x8c/0x350 [ 231.003860][ T7902] sctp_bind_addr_copy+0xb3/0x3c0 [ 231.008937][ T7902] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 231.015330][ T7902] sctp_connect_new_asoc+0x2f9/0x6a0 [ 231.020665][ T7902] ? __sctp_connect+0xd80/0xd80 [ 231.025559][ T7902] ? __local_bh_enable_ip+0x13a/0x1c0 [ 231.030980][ T7902] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 231.036575][ T7902] ? security_sctp_bind_connect+0x89/0xb0 [ 231.042346][ T7902] sctp_sendmsg+0x1519/0x27b0 [ 231.047083][ T7902] ? sctp_getsockopt+0xb60/0xb60 [ 231.052081][ T7902] ? aa_af_perm+0x330/0x330 [ 231.056640][ T7902] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 231.063119][ T7902] ? sock_rps_record_flow+0x19/0x3f0 [ 231.068461][ T7902] ? inet_sendmsg+0xce/0x2a0 [ 231.073098][ T7902] ? inet_send_prepare+0x250/0x250 [ 231.078257][ T7902] ____sys_sendmsg+0x61b/0x980 [ 231.083084][ T7902] ? __asan_memset+0x22/0x40 [ 231.087719][ T7902] ? __sys_sendmsg_sock+0x30/0x30 [ 231.092794][ T7902] ? __import_iovec+0x5f2/0x850 [ 231.097707][ T7902] ? import_iovec+0x73/0xa0 [ 231.102262][ T7902] ___sys_sendmsg+0x2a6/0x360 [ 231.106998][ T7902] ? get_pid_task+0x20/0x1e0 [ 231.111645][ T7902] ? __sys_sendmsg+0x2b0/0x2b0 [ 231.116499][ T7902] ? __lock_acquire+0x7d80/0x7d80 [ 231.121612][ T7902] __se_sys_sendmsg+0x1d0/0x2c0 [ 231.126526][ T7902] ? __x64_sys_sendmsg+0x80/0x80 [ 231.131536][ T7902] ? lockdep_hardirqs_on+0x98/0x150 [ 231.136789][ T7902] do_syscall_64+0x55/0xb0 [ 231.141256][ T7902] ? clear_bhb_loop+0x40/0x90 [ 231.145975][ T7902] ? clear_bhb_loop+0x40/0x90 [ 231.150698][ T7902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.156633][ T7902] RIP: 0033:0x7fc7c4f9de59 [ 231.161091][ T7902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.180747][ T7902] RSP: 002b:00007fc7c5dbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.189204][ T7902] RAX: ffffffffffffffda RBX: 00007fc7c5225fa0 RCX: 00007fc7c4f9de59 [ 231.197220][ T7902] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 231.205242][ T7902] RBP: 00007fc7c5dbc090 R08: 0000000000000000 R09: 0000000000000000 [ 231.213275][ T7902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 231.221286][ T7902] R13: 00007fc7c5226038 R14: 00007fc7c5225fa0 R15: 00007fff2684aa08 [ 231.229342][ T7902] [ 231.334523][ T7900] syzkaller0: entered promiscuous mode [ 231.424207][ T7900] syzkaller0: entered allmulticast mode [ 231.464154][ T7898] netlink: 'syz.2.709': attribute type 21 has an invalid length. [ 231.489440][ T7898] netlink: 'syz.2.709': attribute type 1 has an invalid length. [ 231.497869][ T7898] netlink: 132 bytes leftover after parsing attributes in process `syz.2.709'. [ 231.734365][ T7904] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.707'. [ 232.812989][ T7919] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.714'. [ 234.928279][ T7942] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.717'. [ 235.907576][ T7944] netlink: 668 bytes leftover after parsing attributes in process `syz.3.722'. [ 235.943797][ T7944] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 235.987729][ T7944] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 239.126772][ T7966] netlink: 'syz.2.728': attribute type 1 has an invalid length. [ 240.428325][ T7986] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.733'. [ 240.607723][ T7980] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.732'. [ 240.715096][ T7993] netlink: 668 bytes leftover after parsing attributes in process `syz.2.736'. [ 240.732565][ T7993] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 240.750584][ T7993] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 240.860209][ T7998] netlink: 132 bytes leftover after parsing attributes in process `syz.1.737'. [ 240.899572][ T7997] netlink: 'syz.3.738': attribute type 33 has an invalid length. [ 240.907699][ T7997] netlink: 152 bytes leftover after parsing attributes in process `syz.3.738'. [ 241.241611][ T8007] FAULT_INJECTION: forcing a failure. [ 241.241611][ T8007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.260980][ T8007] CPU: 0 PID: 8007 Comm: syz.3.742 Not tainted syzkaller #0 [ 241.263652][ T8010] netlink: 132 bytes leftover after parsing attributes in process `syz.2.744'. [ 241.268363][ T8007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 241.268435][ T8007] Call Trace: [ 241.290760][ T8007] [ 241.293730][ T8007] dump_stack_lvl+0x18c/0x250 [ 241.298465][ T8007] ? show_regs_print_info+0x20/0x20 [ 241.303723][ T8007] ? load_image+0x420/0x420 [ 241.308280][ T8007] ? __lock_acquire+0x7d80/0x7d80 [ 241.313356][ T8007] ? snprintf+0xe9/0x140 [ 241.317630][ T8007] should_fail_ex+0x394/0x4c0 [ 241.322340][ T8007] _copy_to_user+0x2f/0xa0 [ 241.326782][ T8007] simple_read_from_buffer+0xe7/0x150 [ 241.332198][ T8007] proc_fail_nth_read+0x1e8/0x260 [ 241.337259][ T8007] ? proc_fault_inject_write+0x360/0x360 [ 241.342931][ T8007] ? fsnotify_perm+0x271/0x5e0 [ 241.347723][ T8007] ? proc_fault_inject_write+0x360/0x360 [ 241.353394][ T8007] vfs_read+0x298/0x990 [ 241.357600][ T8007] ? kernel_read+0x1e0/0x1e0 [ 241.362225][ T8007] ? __fget_files+0x28/0x460 [ 241.366849][ T8007] ? __fget_files+0x3fc/0x460 [ 241.371572][ T8007] ? __fdget_pos+0x2a3/0x330 [ 241.376193][ T8007] ? ksys_read+0x74/0x260 [ 241.380563][ T8007] ksys_read+0x151/0x260 [ 241.384843][ T8007] ? vfs_write+0x9a0/0x9a0 [ 241.389291][ T8007] ? lockdep_hardirqs_on+0x98/0x150 [ 241.394517][ T8007] do_syscall_64+0x55/0xb0 [ 241.398971][ T8007] ? clear_bhb_loop+0x40/0x90 [ 241.403672][ T8007] ? clear_bhb_loop+0x40/0x90 [ 241.408380][ T8007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.414307][ T8007] RIP: 0033:0x7fc7c4f5e68e [ 241.418750][ T8007] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 241.438383][ T8007] RSP: 002b:00007fc7c5d9afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 241.446829][ T8007] RAX: ffffffffffffffda RBX: 00007fc7c5d9b6c0 RCX: 00007fc7c4f5e68e [ 241.454915][ T8007] RDX: 000000000000000f RSI: 00007fc7c5d9b0a0 RDI: 0000000000000007 [ 241.462915][ T8007] RBP: 00007fc7c5d9b090 R08: 0000000000000000 R09: 0000000000000000 [ 241.470921][ T8007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.478922][ T8007] R13: 00007fc7c5226128 R14: 00007fc7c5226090 R15: 00007fff2684aa08 [ 241.486937][ T8007] [ 241.530174][ T8010] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.744'. [ 241.545100][ T8010] openvswitch: netlink: Tunnel attr 1030 out of range max 16 [ 241.759454][ T8016] netlink: 'syz.0.746': attribute type 32 has an invalid length. [ 241.776236][ T8016] team0: left promiscuous mode [ 241.784156][ T8016] team_slave_0: left promiscuous mode [ 241.789946][ T8016] team_slave_1: left promiscuous mode [ 241.795697][ T8016] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 241.813579][ T8016] bridge0: left promiscuous mode [ 241.823309][ T8016] team0: left allmulticast mode [ 241.844409][ T8016] team_slave_0: left allmulticast mode [ 241.855031][ T8016] team_slave_1: left allmulticast mode [ 241.860735][ T8016] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 241.867741][ T8016] bridge0: left allmulticast mode [ 242.249255][ T8017] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.747'. [ 242.300573][ T8024] netlink: 668 bytes leftover after parsing attributes in process `syz.2.748'. [ 242.314533][ T8024] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 242.335631][ T8024] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 242.435616][ T8029] netlink: 'syz.3.750': attribute type 29 has an invalid length. [ 242.445225][ T8029] netlink: 'syz.3.750': attribute type 29 has an invalid length. [ 243.016534][ T8046] netlink: 132 bytes leftover after parsing attributes in process `syz.1.756'. [ 243.047747][ T8046] netlink: 'syz.1.756': attribute type 1 has an invalid length. [ 243.174410][ T8050] netlink: 'syz.1.758': attribute type 39 has an invalid length. [ 243.657531][ T8056] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 243.789670][ T8056] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 244.672052][ T8089] netlink: 'syz.2.772': attribute type 2 has an invalid length. [ 244.680956][ T8089] netlink: 'syz.2.772': attribute type 8 has an invalid length. [ 244.897326][ T8091] -}: renamed from syzkaller0 [ 245.222575][ T8095] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 245.233227][ T8095] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 245.373411][ T8099] netlink: 'syz.0.775': attribute type 21 has an invalid length. [ 245.879276][ T8111] netlink: 'syz.1.779': attribute type 21 has an invalid length. [ 245.897870][ T8111] __nla_validate_parse: 6 callbacks suppressed [ 245.898022][ T8111] netlink: 156 bytes leftover after parsing attributes in process `syz.1.779'. [ 246.464653][ T8122] netlink: 'syz.2.782': attribute type 33 has an invalid length. [ 246.508797][ T8122] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.782'. [ 246.723175][ T8128] netlink: 668 bytes leftover after parsing attributes in process `syz.3.785'. [ 246.738436][ T8128] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 246.760633][ T8128] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 246.865389][ T8133] netlink: 'syz.2.786': attribute type 21 has an invalid length. [ 246.888275][ T8133] netlink: 'syz.2.786': attribute type 6 has an invalid length. [ 246.906773][ T8133] netlink: 64 bytes leftover after parsing attributes in process `syz.2.786'. [ 247.234508][ T8142] FAULT_INJECTION: forcing a failure. [ 247.234508][ T8142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.264412][ T8142] CPU: 1 PID: 8142 Comm: syz.2.789 Not tainted syzkaller #0 [ 247.271802][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 247.281931][ T8142] Call Trace: [ 247.285251][ T8142] [ 247.288218][ T8142] dump_stack_lvl+0x18c/0x250 [ 247.292959][ T8142] ? show_regs_print_info+0x20/0x20 [ 247.298218][ T8142] ? load_image+0x420/0x420 [ 247.302775][ T8142] ? __might_fault+0xaa/0x120 [ 247.307497][ T8142] ? __lock_acquire+0x7d80/0x7d80 [ 247.312596][ T8142] ? __virt_addr_valid+0x10c/0x380 [ 247.317757][ T8142] should_fail_ex+0x394/0x4c0 [ 247.322493][ T8142] _copy_from_user+0x2f/0xe0 [ 247.327128][ T8142] generic_map_update_batch+0x53e/0x800 [ 247.332738][ T8142] ? rcu_read_unlock+0xa0/0xa0 [ 247.337549][ T8142] ? __fdget+0x180/0x210 [ 247.341844][ T8142] ? rcu_read_unlock+0xa0/0xa0 [ 247.346651][ T8142] bpf_map_do_batch+0x3f2/0x600 [ 247.351550][ T8142] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 247.357944][ T8142] __sys_bpf+0x381/0x890 [ 247.362261][ T8142] ? bpf_link_show_fdinfo+0x390/0x390 [ 247.367795][ T8142] ? lock_chain_count+0x20/0x20 [ 247.372709][ T8142] __x64_sys_bpf+0x7c/0x90 [ 247.377165][ T8142] do_syscall_64+0x55/0xb0 [ 247.381626][ T8142] ? clear_bhb_loop+0x40/0x90 [ 247.386420][ T8142] ? clear_bhb_loop+0x40/0x90 [ 247.391142][ T8142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.397079][ T8142] RIP: 0033:0x7f2feb59de59 [ 247.401542][ T8142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.421217][ T8142] RSP: 002b:00007f2fec4b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.429680][ T8142] RAX: ffffffffffffffda RBX: 00007f2feb825fa0 RCX: 00007f2feb59de59 [ 247.437691][ T8142] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 247.445707][ T8142] RBP: 00007f2fec4b0090 R08: 0000000000000000 R09: 0000000000000000 [ 247.453715][ T8142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.461724][ T8142] R13: 00007f2feb826038 R14: 00007f2feb825fa0 R15: 00007fff57414de8 [ 247.469764][ T8142] [ 247.919928][ T8149] netlink: 132 bytes leftover after parsing attributes in process `syz.0.790'. [ 248.019265][ T8149] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.790'. [ 248.043157][ T8149] openvswitch: netlink: Tunnel attr 1030 out of range max 16 [ 248.289732][ T8160] netlink: 668 bytes leftover after parsing attributes in process `syz.2.796'. [ 248.308967][ T8160] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 248.332844][ T8160] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 248.553865][ T8164] -}: renamed from syzkaller0 [ 248.792611][ T8171] netlink: 212908 bytes leftover after parsing attributes in process `syz.0.800'. [ 248.821544][ T8171] openvswitch: netlink: IP tunnel dst address not specified [ 249.260074][ T8178] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.801'. [ 249.932181][ T8192] netlink: 668 bytes leftover after parsing attributes in process `syz.2.807'. [ 249.945395][ T8192] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 249.964885][ T8192] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 250.123201][ T8197] openvswitch: netlink: Tunnel attr 1030 out of range max 16 [ 251.032219][ T8219] FAULT_INJECTION: forcing a failure. [ 251.032219][ T8219] name failslab, interval 1, probability 0, space 0, times 0 [ 251.068681][ T8219] CPU: 1 PID: 8219 Comm: syz.3.817 Not tainted syzkaller #0 [ 251.076051][ T8219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 251.086159][ T8219] Call Trace: [ 251.089488][ T8219] [ 251.092480][ T8219] dump_stack_lvl+0x18c/0x250 [ 251.097219][ T8219] ? sctp_sendmsg+0x1519/0x27b0 [ 251.102121][ T8219] ? ___sys_sendmsg+0x2a6/0x360 [ 251.107070][ T8219] ? show_regs_print_info+0x20/0x20 [ 251.112335][ T8219] ? load_image+0x420/0x420 [ 251.116905][ T8219] should_fail_ex+0x394/0x4c0 [ 251.121648][ T8219] should_failslab+0x9/0x20 [ 251.126215][ T8219] slab_pre_alloc_hook+0x59/0x300 [ 251.131306][ T8219] ? sctp_add_bind_addr+0x8c/0x360 [ 251.136459][ T8219] __kmem_cache_alloc_node+0x53/0x250 [ 251.141903][ T8219] ? sctp_add_bind_addr+0x8c/0x360 [ 251.147071][ T8219] kmalloc_trace+0x2a/0xe0 [ 251.151567][ T8219] sctp_add_bind_addr+0x8c/0x360 [ 251.156574][ T8219] sctp_copy_local_addr_list+0x31b/0x4e0 [ 251.162263][ T8219] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 251.168035][ T8219] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 251.174157][ T8219] ? sctp_v4_is_any+0x35/0x60 [ 251.178876][ T8219] ? sctp_copy_one_addr+0x8c/0x350 [ 251.184033][ T8219] sctp_bind_addr_copy+0xb3/0x3c0 [ 251.189104][ T8219] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 251.195484][ T8219] sctp_connect_new_asoc+0x2f9/0x6a0 [ 251.200823][ T8219] ? __sctp_connect+0xd80/0xd80 [ 251.205720][ T8219] ? __local_bh_enable_ip+0x13a/0x1c0 [ 251.211153][ T8219] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 251.216754][ T8219] ? security_sctp_bind_connect+0x89/0xb0 [ 251.222537][ T8219] sctp_sendmsg+0x1519/0x27b0 [ 251.227275][ T8219] ? sctp_getsockopt+0xb60/0xb60 [ 251.232272][ T8219] ? aa_af_perm+0x330/0x330 [ 251.236842][ T8219] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 251.243317][ T8219] ? sock_rps_record_flow+0x19/0x3f0 [ 251.248662][ T8219] ? inet_sendmsg+0xce/0x2a0 [ 251.253304][ T8219] ? inet_send_prepare+0x250/0x250 [ 251.258470][ T8219] ____sys_sendmsg+0x61b/0x980 [ 251.263299][ T8219] ? __asan_memset+0x22/0x40 [ 251.267940][ T8219] ? __sys_sendmsg_sock+0x30/0x30 [ 251.273015][ T8219] ? __import_iovec+0x5f2/0x850 [ 251.277931][ T8219] ? import_iovec+0x73/0xa0 [ 251.282497][ T8219] ___sys_sendmsg+0x2a6/0x360 [ 251.287235][ T8219] ? get_pid_task+0x20/0x1e0 [ 251.291916][ T8219] ? __sys_sendmsg+0x2b0/0x2b0 [ 251.296767][ T8219] ? __lock_acquire+0x7d80/0x7d80 [ 251.301883][ T8219] __se_sys_sendmsg+0x1d0/0x2c0 [ 251.306817][ T8219] ? __x64_sys_sendmsg+0x80/0x80 [ 251.311865][ T8219] ? lockdep_hardirqs_on+0x98/0x150 [ 251.317121][ T8219] do_syscall_64+0x55/0xb0 [ 251.321609][ T8219] ? clear_bhb_loop+0x40/0x90 [ 251.326332][ T8219] ? clear_bhb_loop+0x40/0x90 [ 251.331071][ T8219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.337029][ T8219] RIP: 0033:0x7fc7c4f9de59 [ 251.341488][ T8219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.361142][ T8219] RSP: 002b:00007fc7c5dbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.369623][ T8219] RAX: ffffffffffffffda RBX: 00007fc7c5225fa0 RCX: 00007fc7c4f9de59 [ 251.377652][ T8219] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000005 [ 251.385674][ T8219] RBP: 00007fc7c5dbc090 R08: 0000000000000000 R09: 0000000000000000 [ 251.393702][ T8219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.401717][ T8219] R13: 00007fc7c5226038 R14: 00007fc7c5225fa0 R15: 00007fff2684aa08 [ 251.409770][ T8219] [ 251.481269][ T8213] -}: renamed from syzkaller0 [ 252.035146][ T8235] __nla_validate_parse: 3 callbacks suppressed [ 252.035164][ T8235] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.822'. [ 252.544657][ T8255] netlink: 'syz.3.828': attribute type 5 has an invalid length. [ 252.787349][ T8256] netlink: 668 bytes leftover after parsing attributes in process `syz.0.827'. [ 252.803898][ T8254] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.834'. [ 252.842028][ T8256] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 252.854602][ T8256] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 253.534333][ T8270] netlink: 668 bytes leftover after parsing attributes in process `syz.0.832'. [ 253.574288][ T8270] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 253.623249][ T8270] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 253.963424][ T8277] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.835'. [ 254.544832][ T8289] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.839'. [ 255.222857][ T8294] netlink: 'syz.3.841': attribute type 41 has an invalid length. [ 255.488355][ T8299] netlink: 668 bytes leftover after parsing attributes in process `syz.3.844'. [ 255.523372][ T8299] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 255.559435][ T8299] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 255.774676][ T8308] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.846'. [ 255.791403][ T8310] netlink: 'syz.1.847': attribute type 5 has an invalid length. [ 255.882540][ T8310] netlink: 'syz.1.847': attribute type 25 has an invalid length. [ 255.891072][ T8310] netlink: 'syz.1.847': attribute type 28 has an invalid length. [ 255.912693][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.921553][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.985549][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.849'. [ 256.005329][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.849'. [ 256.032239][ T8314] bridge_slave_0: entered allmulticast mode [ 256.074355][ T8314] netlink: 'syz.3.849': attribute type 3 has an invalid length. [ 256.167003][ T8318] netlink: set zone limit has 8 unknown bytes [ 256.594347][ T8333] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 256.629662][ T8333] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 256.697460][ T8337] netlink: 'syz.1.857': attribute type 12 has an invalid length. [ 257.118459][ T8346] ref_ctr_offset mismatch. inode: 0x478 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x7000000 [ 257.346427][ T8353] __nla_validate_parse: 8 callbacks suppressed [ 257.346445][ T8353] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.861'. [ 257.691482][ T8359] netlink: 60 bytes leftover after parsing attributes in process `syz.3.863'. [ 257.783212][ T8359] netlink: 60 bytes leftover after parsing attributes in process `syz.3.863'. [ 257.813005][ T8359] netlink: 60 bytes leftover after parsing attributes in process `syz.3.863'. [ 257.915134][ T8366] netlink: 'syz.2.866': attribute type 1 has an invalid length. [ 258.125003][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 258.513612][ T8378] netlink: 668 bytes leftover after parsing attributes in process `syz.2.869'. [ 258.536357][ T8378] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 258.547915][ T8378] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 258.755364][ T8385] netlink: 'syz.1.872': attribute type 21 has an invalid length. [ 258.771925][ T8385] netlink: 'syz.1.872': attribute type 6 has an invalid length. [ 258.905241][ T8389] netlink: 'syz.2.874': attribute type 5 has an invalid length. [ 259.886866][ T8402] netlink: 'syz.2.878': attribute type 2 has an invalid length. [ 259.899028][ T8402] netlink: 'syz.2.878': attribute type 8 has an invalid length. [ 259.906737][ T8402] netlink: 132 bytes leftover after parsing attributes in process `syz.2.878'. [ 260.060869][ T8401] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.877'. [ 260.356432][ T8412] netlink: 668 bytes leftover after parsing attributes in process `syz.3.882'. [ 260.370690][ T8412] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 260.380917][ T8412] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 262.182206][ T8440] netlink: 132 bytes leftover after parsing attributes in process `syz.2.893'. [ 262.278746][ T8444] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 262.288164][ T8444] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 262.535841][ T8449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.562998][ T8449] netlink: 'syz.2.896': attribute type 9 has an invalid length. [ 262.581035][ T8449] __nla_validate_parse: 1 callbacks suppressed [ 262.581071][ T8449] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.896'. [ 263.128271][ T8450] netlink: 'syz.2.896': attribute type 9 has an invalid length. [ 263.150203][ T8450] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.896'. [ 263.534153][ T8464] netlink: 668 bytes leftover after parsing attributes in process `syz.1.900'. [ 263.554496][ T8464] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 263.579048][ T8464] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 264.092105][ T8473] syzkaller0: entered promiscuous mode [ 264.097676][ T8473] syzkaller0: entered allmulticast mode [ 264.585022][ T8483] netlink: 668 bytes leftover after parsing attributes in process `syz.2.906'. [ 264.616521][ T8483] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 264.631139][ T8483] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 265.143569][ T8486] FAULT_INJECTION: forcing a failure. [ 265.143569][ T8486] name failslab, interval 1, probability 0, space 0, times 0 [ 265.160746][ T8486] CPU: 1 PID: 8486 Comm: syz.2.907 Not tainted syzkaller #0 [ 265.168145][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 265.178259][ T8486] Call Trace: [ 265.181597][ T8486] [ 265.184576][ T8486] dump_stack_lvl+0x18c/0x250 [ 265.189321][ T8486] ? sctp_sendmsg+0x1519/0x27b0 [ 265.194229][ T8486] ? ___sys_sendmsg+0x2a6/0x360 [ 265.199144][ T8486] ? show_regs_print_info+0x20/0x20 [ 265.204417][ T8486] ? load_image+0x420/0x420 [ 265.208998][ T8486] should_fail_ex+0x394/0x4c0 [ 265.213735][ T8486] should_failslab+0x9/0x20 [ 265.218294][ T8486] slab_pre_alloc_hook+0x59/0x300 [ 265.223391][ T8486] ? sctp_add_bind_addr+0x8c/0x360 [ 265.228538][ T8486] __kmem_cache_alloc_node+0x53/0x250 [ 265.233962][ T8486] ? sctp_add_bind_addr+0x8c/0x360 [ 265.239101][ T8486] kmalloc_trace+0x2a/0xe0 [ 265.243555][ T8486] sctp_add_bind_addr+0x8c/0x360 [ 265.248544][ T8486] sctp_copy_local_addr_list+0x31b/0x4e0 [ 265.254241][ T8486] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 265.260001][ T8486] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 265.266106][ T8486] ? sctp_v6_is_any+0x64/0x70 [ 265.270841][ T8486] ? sctp_copy_one_addr+0x8c/0x350 [ 265.275990][ T8486] sctp_bind_addr_copy+0xb3/0x3c0 [ 265.281047][ T8486] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 265.287412][ T8486] sctp_connect_new_asoc+0x2f9/0x6a0 [ 265.292731][ T8486] ? __sctp_connect+0xd80/0xd80 [ 265.297783][ T8486] ? __local_bh_enable_ip+0x13a/0x1c0 [ 265.303189][ T8486] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 265.308794][ T8486] ? security_sctp_bind_connect+0x89/0xb0 [ 265.314559][ T8486] sctp_sendmsg+0x1519/0x27b0 [ 265.319281][ T8486] ? sctp_getsockopt+0xb60/0xb60 [ 265.324276][ T8486] ? aa_af_perm+0x330/0x330 [ 265.328827][ T8486] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 265.335279][ T8486] ? sock_rps_record_flow+0x19/0x3f0 [ 265.340616][ T8486] ? inet_sendmsg+0xce/0x2a0 [ 265.345232][ T8486] ? inet_send_prepare+0x250/0x250 [ 265.350376][ T8486] ____sys_sendmsg+0x61b/0x980 [ 265.355183][ T8486] ? __asan_memset+0x22/0x40 [ 265.359810][ T8486] ? __sys_sendmsg_sock+0x30/0x30 [ 265.364870][ T8486] ? __import_iovec+0x5f2/0x850 [ 265.369761][ T8486] ? import_iovec+0x73/0xa0 [ 265.374302][ T8486] ___sys_sendmsg+0x2a6/0x360 [ 265.379035][ T8486] ? get_pid_task+0x20/0x1e0 [ 265.383670][ T8486] ? __sys_sendmsg+0x2b0/0x2b0 [ 265.388494][ T8486] ? __lock_acquire+0x7d80/0x7d80 [ 265.393585][ T8486] __se_sys_sendmsg+0x1d0/0x2c0 [ 265.398479][ T8486] ? __x64_sys_sendmsg+0x80/0x80 [ 265.403476][ T8486] ? lockdep_hardirqs_on+0x98/0x150 [ 265.408714][ T8486] do_syscall_64+0x55/0xb0 [ 265.413167][ T8486] ? clear_bhb_loop+0x40/0x90 [ 265.417877][ T8486] ? clear_bhb_loop+0x40/0x90 [ 265.422582][ T8486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.428533][ T8486] RIP: 0033:0x7f2feb59de59 [ 265.432990][ T8486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.452634][ T8486] RSP: 002b:00007f2fec4b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.461081][ T8486] RAX: ffffffffffffffda RBX: 00007f2feb825fa0 RCX: 00007f2feb59de59 [ 265.469081][ T8486] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 265.477097][ T8486] RBP: 00007f2fec4b0090 R08: 0000000000000000 R09: 0000000000000000 [ 265.485109][ T8486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.493127][ T8486] R13: 00007f2feb826038 R14: 00007f2feb825fa0 R15: 00007fff57414de8 [ 265.501159][ T8486] [ 265.940177][ T8494] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.909'. [ 268.203880][ T8506] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.914'. [ 268.278317][ T8497] syzkaller0: entered promiscuous mode [ 268.284358][ T8497] syzkaller0: entered allmulticast mode [ 268.297267][ T8504] netlink: 148 bytes leftover after parsing attributes in process `syz.1.913'. [ 270.296391][ T8512] netlink: 'syz.1.916': attribute type 2 has an invalid length. [ 270.336824][ T8512] netlink: 'syz.1.916': attribute type 1 has an invalid length. [ 270.348689][ T8512] netlink: 9 bytes leftover after parsing attributes in process `syz.1.916'. [ 270.942665][ T8529] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.922'. [ 271.305294][ T8540] syzkaller0: entered promiscuous mode [ 271.312932][ T8540] syzkaller0: entered allmulticast mode [ 271.348201][ T8541] netlink: 668 bytes leftover after parsing attributes in process `syz.1.925'. [ 271.390589][ T8541] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 271.418900][ T8541] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 271.628800][ T8545] netlink: 'syz.2.927': attribute type 2 has an invalid length. [ 271.636725][ T8545] netlink: 'syz.2.927': attribute type 1 has an invalid length. [ 271.669070][ T8545] netlink: 9 bytes leftover after parsing attributes in process `syz.2.927'. [ 272.079955][ T8555] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.929'. [ 273.643378][ T8569] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.932'. [ 273.674211][ T8571] netlink: 'syz.2.934': attribute type 33 has an invalid length. [ 273.701628][ T8571] team0: left promiscuous mode [ 273.720477][ T8571] team_slave_0: left promiscuous mode [ 273.742802][ T8571] team_slave_1: left promiscuous mode [ 273.781102][ T8571] team0: left allmulticast mode [ 273.792348][ T8571] team_slave_0: left allmulticast mode [ 273.806248][ T8571] team_slave_1: left allmulticast mode [ 274.310151][ T8585] netlink: 668 bytes leftover after parsing attributes in process `syz.2.937'. [ 274.324837][ T8585] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 274.334268][ T8585] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 276.870112][ T8587] FAULT_INJECTION: forcing a failure. [ 276.870112][ T8587] name failslab, interval 1, probability 0, space 0, times 0 [ 276.883009][ T8587] CPU: 0 PID: 8587 Comm: syz.3.939 Not tainted syzkaller #0 [ 276.890344][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 276.900430][ T8587] Call Trace: [ 276.903737][ T8587] [ 276.906697][ T8587] dump_stack_lvl+0x18c/0x250 [ 276.911420][ T8587] ? show_regs_print_info+0x20/0x20 [ 276.916653][ T8587] ? load_image+0x420/0x420 [ 276.921187][ T8587] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 276.927208][ T8587] ? __asan_memset+0x22/0x40 [ 276.931838][ T8587] should_fail_ex+0x394/0x4c0 [ 276.936557][ T8587] should_failslab+0x9/0x20 [ 276.941101][ T8587] slab_pre_alloc_hook+0x59/0x300 [ 276.946177][ T8587] ? __debug_object_init+0xec/0x450 [ 276.951459][ T8587] kmem_cache_alloc+0x5a/0x2c0 [ 276.956261][ T8587] ? slab_build_skb+0x28/0x3e0 [ 276.961061][ T8587] slab_build_skb+0x28/0x3e0 [ 276.965717][ T8587] bpf_prog_test_run_skb+0x38f/0x18f0 [ 276.971124][ T8587] ? __fget_files+0x28/0x460 [ 276.975749][ T8587] ? __fget_files+0x3fc/0x460 [ 276.980471][ T8587] ? cpu_online+0x60/0x60 [ 276.984825][ T8587] bpf_prog_test_run+0x31f/0x390 [ 276.989814][ T8587] __sys_bpf+0x49d/0x890 [ 276.994090][ T8587] ? bpf_link_show_fdinfo+0x390/0x390 [ 276.999509][ T8587] ? lock_chain_count+0x20/0x20 [ 277.004395][ T8587] __x64_sys_bpf+0x7c/0x90 [ 277.008847][ T8587] do_syscall_64+0x55/0xb0 [ 277.013294][ T8587] ? clear_bhb_loop+0x40/0x90 [ 277.017988][ T8587] ? clear_bhb_loop+0x40/0x90 [ 277.022685][ T8587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.028614][ T8587] RIP: 0033:0x7fc7c4f9de59 [ 277.033053][ T8587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.052684][ T8587] RSP: 002b:00007fc7c5dbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.061142][ T8587] RAX: ffffffffffffffda RBX: 00007fc7c5225fa0 RCX: 00007fc7c4f9de59 [ 277.069132][ T8587] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 277.077126][ T8587] RBP: 00007fc7c5dbc090 R08: 0000000000000000 R09: 0000000000000000 [ 277.085123][ T8587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.093118][ T8587] R13: 00007fc7c5226038 R14: 00007fc7c5225fa0 R15: 00007fff2684aa08 [ 277.101129][ T8587] [ 277.403757][ T8606] netlink: 'syz.2.946': attribute type 10 has an invalid length. [ 277.612525][ T8610] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.945'. [ 277.795088][ T8614] netlink: 668 bytes leftover after parsing attributes in process `syz.0.947'. [ 277.852119][ T8614] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 277.880169][ T8614] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 278.500114][ T8627] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.949'. [ 279.304617][ T8643] netlink: 'syz.3.954': attribute type 12 has an invalid length. [ 279.313858][ T8643] netlink: 132 bytes leftover after parsing attributes in process `syz.3.954'. [ 279.680302][ T8652] netlink: 'syz.1.956': attribute type 21 has an invalid length. [ 279.698996][ T8652] netlink: 'syz.1.956': attribute type 6 has an invalid length. [ 279.727300][ T8652] netlink: 64 bytes leftover after parsing attributes in process `syz.1.956'. [ 279.952002][ T8658] netlink: 'syz.0.958': attribute type 4 has an invalid length. [ 279.975399][ T8658] netlink: 152 bytes leftover after parsing attributes in process `syz.0.958'. [ 280.001108][ T8658] .`: renamed from bond0 (while UP) [ 280.134638][ T8665] netlink: 'syz.1.959': attribute type 10 has an invalid length. [ 280.669542][ T8675] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.961'. [ 281.419791][ T8695] dummy0: left allmulticast mode [ 281.425136][ T8695] bridge0: port 3(dummy0) entered disabled state [ 281.462086][ T8695] bridge_slave_1: left allmulticast mode [ 281.488386][ T8695] bridge_slave_1: left promiscuous mode [ 281.520174][ T8695] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.554017][ T8695] bridge_slave_0: left allmulticast mode [ 281.572809][ T8695] bridge_slave_0: left promiscuous mode [ 281.605896][ T8695] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.724427][ T8695] team0: Port device bridge0 removed [ 282.311557][ T8706] netlink: 668 bytes leftover after parsing attributes in process `syz.0.975'. [ 282.373010][ T8706] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 282.409346][ T8706] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 282.492460][ T8711] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.976'. [ 282.583465][ T8713] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 282.903361][ T8720] FAULT_INJECTION: forcing a failure. [ 282.903361][ T8720] name failslab, interval 1, probability 0, space 0, times 0 [ 282.942601][ T8720] CPU: 1 PID: 8720 Comm: syz.0.981 Not tainted syzkaller #0 [ 282.949983][ T8720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 282.960083][ T8720] Call Trace: [ 282.963395][ T8720] [ 282.966354][ T8720] dump_stack_lvl+0x18c/0x250 [ 282.971077][ T8720] ? show_regs_print_info+0x20/0x20 [ 282.976308][ T8720] ? load_image+0x420/0x420 [ 282.980845][ T8720] ? __might_sleep+0xe0/0xe0 [ 282.985462][ T8720] ? __lock_acquire+0x7d80/0x7d80 [ 282.990516][ T8720] should_fail_ex+0x394/0x4c0 [ 282.995230][ T8720] should_failslab+0x9/0x20 [ 282.999769][ T8720] slab_pre_alloc_hook+0x59/0x300 [ 283.004828][ T8720] ? rcu_is_watching+0x15/0xb0 [ 283.009626][ T8720] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 283.015892][ T8720] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 283.022160][ T8720] __kmem_cache_alloc_node+0x53/0x250 [ 283.027572][ T8720] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 283.033837][ T8720] __kmalloc+0xa7/0x240 [ 283.038025][ T8720] ? __netlink_dump_start+0xf4/0x7a0 [ 283.043348][ T8720] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 283.049454][ T8720] genl_start+0x180/0x6c0 [ 283.053834][ T8720] __netlink_dump_start+0x43c/0x7a0 [ 283.059083][ T8720] genl_family_rcv_msg_dumpit+0x214/0x310 [ 283.064845][ T8720] ? genl_rcv_msg+0x7a0/0x7a0 [ 283.069588][ T8720] ? genl_get_cmd+0x4aa/0x930 [ 283.074308][ T8720] ? genl_family_rcv_msg_doit+0x310/0x310 [ 283.080061][ T8720] ? genl_start+0x6c0/0x6c0 [ 283.084586][ T8720] ? genl_dumpit+0x1a0/0x1a0 [ 283.089207][ T8720] ? mark_lock+0x94/0x320 [ 283.093571][ T8720] genl_rcv_msg+0x5de/0x7a0 [ 283.098113][ T8720] ? genl_bind+0x360/0x360 [ 283.102559][ T8720] ? devlink_nl_trap_fill+0x570/0x570 [ 283.107965][ T8720] ? lockdep_hardirqs_on+0x98/0x150 [ 283.113190][ T8720] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 283.119388][ T8720] netlink_rcv_skb+0x235/0x4c0 [ 283.124187][ T8720] ? genl_bind+0x360/0x360 [ 283.128634][ T8720] ? netlink_ack+0x1160/0x1160 [ 283.133436][ T8720] ? __lock_acquire+0x7d80/0x7d80 [ 283.138499][ T8720] ? down_read+0x1ac/0x2e0 [ 283.142954][ T8720] genl_rcv+0x28/0x40 [ 283.146968][ T8720] netlink_unicast+0x7b1/0x930 [ 283.151770][ T8720] netlink_sendmsg+0x8d0/0xbf0 [ 283.156569][ T8720] ? netlink_getsockopt+0x590/0x590 [ 283.161805][ T8720] ? apparmor_socket_sendmsg+0x8e/0x330 [ 283.167384][ T8720] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 283.172698][ T8720] ? security_socket_sendmsg+0x80/0xa0 [ 283.178191][ T8720] ? netlink_getsockopt+0x590/0x590 [ 283.183428][ T8720] ____sys_sendmsg+0x61b/0x980 [ 283.188266][ T8720] ? __asan_memset+0x22/0x40 [ 283.192886][ T8720] ? __sys_sendmsg_sock+0x30/0x30 [ 283.197945][ T8720] ? __import_iovec+0x5f2/0x850 [ 283.202831][ T8720] ? import_iovec+0x73/0xa0 [ 283.207365][ T8720] ___sys_sendmsg+0x2a6/0x360 [ 283.212106][ T8720] ? __sys_sendmsg+0x2b0/0x2b0 [ 283.216947][ T8720] __se_sys_sendmsg+0x1d0/0x2c0 [ 283.221832][ T8720] ? __x64_sys_sendmsg+0x80/0x80 [ 283.226812][ T8720] ? syscall_enter_from_user_mode+0x2e/0x80 [ 283.232742][ T8720] do_syscall_64+0x55/0xb0 [ 283.237203][ T8720] ? clear_bhb_loop+0x40/0x90 [ 283.241909][ T8720] ? clear_bhb_loop+0x40/0x90 [ 283.246613][ T8720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.252538][ T8720] RIP: 0033:0x7f040e39de59 [ 283.256981][ T8720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.276611][ T8720] RSP: 002b:00007f040c5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.285057][ T8720] RAX: ffffffffffffffda RBX: 00007f040e625fa0 RCX: 00007f040e39de59 [ 283.293053][ T8720] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 283.301047][ T8720] RBP: 00007f040c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 283.309039][ T8720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.317033][ T8720] R13: 00007f040e626038 R14: 00007f040e625fa0 R15: 00007ffda8b08b68 [ 283.325043][ T8720] [ 283.388353][ T8724] FAULT_INJECTION: forcing a failure. [ 283.388353][ T8724] name failslab, interval 1, probability 0, space 0, times 0 [ 283.403023][ T8724] CPU: 0 PID: 8724 Comm: syz.3.983 Not tainted syzkaller #0 [ 283.410379][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 283.420461][ T8724] Call Trace: [ 283.423765][ T8724] [ 283.426723][ T8724] dump_stack_lvl+0x18c/0x250 [ 283.431447][ T8724] ? sctp_sendmsg+0x1519/0x27b0 [ 283.436332][ T8724] ? ___sys_sendmsg+0x2a6/0x360 [ 283.441221][ T8724] ? show_regs_print_info+0x20/0x20 [ 283.446454][ T8724] ? load_image+0x420/0x420 [ 283.451006][ T8724] should_fail_ex+0x394/0x4c0 [ 283.455715][ T8724] should_failslab+0x9/0x20 [ 283.460256][ T8724] slab_pre_alloc_hook+0x59/0x300 [ 283.465320][ T8724] ? sctp_add_bind_addr+0x8c/0x360 [ 283.470459][ T8724] __kmem_cache_alloc_node+0x53/0x250 [ 283.475868][ T8724] ? sctp_add_bind_addr+0x8c/0x360 [ 283.481008][ T8724] kmalloc_trace+0x2a/0xe0 [ 283.485458][ T8724] sctp_add_bind_addr+0x8c/0x360 [ 283.490430][ T8724] sctp_copy_local_addr_list+0x31b/0x4e0 [ 283.496093][ T8724] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 283.501840][ T8724] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 283.507933][ T8724] ? sctp_v4_is_any+0x35/0x60 [ 283.512633][ T8724] ? sctp_copy_one_addr+0x8c/0x350 [ 283.517778][ T8724] sctp_bind_addr_copy+0xb3/0x3c0 [ 283.522828][ T8724] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 283.529198][ T8724] sctp_connect_new_asoc+0x2f9/0x6a0 [ 283.534515][ T8724] ? __sctp_connect+0xd80/0xd80 [ 283.539393][ T8724] ? __local_bh_enable_ip+0x13a/0x1c0 [ 283.544801][ T8724] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 283.550393][ T8724] ? security_sctp_bind_connect+0x89/0xb0 [ 283.556142][ T8724] sctp_sendmsg+0x1519/0x27b0 [ 283.560865][ T8724] ? sctp_getsockopt+0xb60/0xb60 [ 283.565834][ T8724] ? aa_af_perm+0x330/0x330 [ 283.570374][ T8724] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 283.576829][ T8724] ? sock_rps_record_flow+0x19/0x3f0 [ 283.582152][ T8724] ? inet_sendmsg+0xce/0x2a0 [ 283.586782][ T8724] ? inet_send_prepare+0x250/0x250 [ 283.592015][ T8724] ____sys_sendmsg+0x61b/0x980 [ 283.596818][ T8724] ? __asan_memset+0x22/0x40 [ 283.601440][ T8724] ? __sys_sendmsg_sock+0x30/0x30 [ 283.606493][ T8724] ? __import_iovec+0x5f2/0x850 [ 283.611388][ T8724] ? import_iovec+0x73/0xa0 [ 283.615926][ T8724] ___sys_sendmsg+0x2a6/0x360 [ 283.620649][ T8724] ? get_pid_task+0x20/0x1e0 [ 283.625273][ T8724] ? __sys_sendmsg+0x2b0/0x2b0 [ 283.630103][ T8724] ? __lock_acquire+0x7d80/0x7d80 [ 283.635171][ T8724] __se_sys_sendmsg+0x1d0/0x2c0 [ 283.640060][ T8724] ? __x64_sys_sendmsg+0x80/0x80 [ 283.645058][ T8724] ? lockdep_hardirqs_on+0x98/0x150 [ 283.650326][ T8724] do_syscall_64+0x55/0xb0 [ 283.654804][ T8724] ? clear_bhb_loop+0x40/0x90 [ 283.659524][ T8724] ? clear_bhb_loop+0x40/0x90 [ 283.664256][ T8724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.670203][ T8724] RIP: 0033:0x7fc7c4f9de59 [ 283.674743][ T8724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.694389][ T8724] RSP: 002b:00007fc7c5d9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.702842][ T8724] RAX: ffffffffffffffda RBX: 00007fc7c5226090 RCX: 00007fc7c4f9de59 [ 283.710851][ T8724] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000004 [ 283.718856][ T8724] RBP: 00007fc7c5d9b090 R08: 0000000000000000 R09: 0000000000000000 [ 283.726871][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 283.734881][ T8724] R13: 00007fc7c5226128 R14: 00007fc7c5226090 R15: 00007fff2684aa08 [ 283.742900][ T8724] [ 283.768330][ T8721] netlink: 'syz.1.982': attribute type 10 has an invalid length. [ 283.780608][ T8721] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.791943][ T8721] bond0: (slave team0): Enslaving as an active interface with an up link [ 284.227547][ T8739] netlink: 668 bytes leftover after parsing attributes in process `syz.1.989'. [ 284.257250][ T8739] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 284.298770][ T8739] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 284.475839][ T8742] netlink: 'syz.2.990': attribute type 39 has an invalid length. [ 284.848412][ T8751] netlink: 132 bytes leftover after parsing attributes in process `syz.3.995'. [ 284.990492][ T8749] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.993'. [ 285.069362][ T5783] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 285.573847][ T8747] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.990'. [ 285.789539][ T8747] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.990'. [ 285.916422][ T8773] netlink: 668 bytes leftover after parsing attributes in process `syz.1.1000'. [ 285.944079][ T8773] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 285.957277][ T8742] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.990'. [ 285.977296][ T8773] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 286.368813][ T8781] netlink: 'syz.1.1004': attribute type 3 has an invalid length. [ 286.377043][ T8781] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1004'. [ 286.513915][ T8788] FAULT_INJECTION: forcing a failure. [ 286.513915][ T8788] name failslab, interval 1, probability 0, space 0, times 0 [ 286.533658][ T8788] CPU: 1 PID: 8788 Comm: syz.0.1006 Not tainted syzkaller #0 [ 286.541118][ T8788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 286.551266][ T8788] Call Trace: [ 286.554601][ T8788] [ 286.557572][ T8788] dump_stack_lvl+0x18c/0x250 [ 286.562314][ T8788] ? show_regs_print_info+0x20/0x20 [ 286.567602][ T8788] ? load_image+0x420/0x420 [ 286.572171][ T8788] ? __lock_acquire+0x7d80/0x7d80 [ 286.577254][ T8788] should_fail_ex+0x394/0x4c0 [ 286.582263][ T8788] should_failslab+0x9/0x20 [ 286.586820][ T8788] slab_pre_alloc_hook+0x59/0x300 [ 286.592019][ T8788] ? bpf_prog_alloc+0x3d/0x1a0 [ 286.596845][ T8788] ? bpf_prog_load+0x6b2/0x1610 [ 286.601744][ T8788] ? __sys_bpf+0x5ba/0x890 [ 286.606213][ T8788] kmem_cache_alloc_node+0x5e/0x310 [ 286.611483][ T8788] ? alloc_vmap_area+0x1b4/0x1e50 [ 286.616579][ T8788] alloc_vmap_area+0x1b4/0x1e50 [ 286.621506][ T8788] ? vm_map_ram+0xcf0/0xcf0 [ 286.626063][ T8788] ? rcu_is_watching+0x15/0xb0 [ 286.630893][ T8788] __get_vm_area_node+0x162/0x370 [ 286.635986][ T8788] __vmalloc_node_range+0x36f/0x1320 [ 286.641328][ T8788] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 286.646942][ T8788] ? mark_lock+0x94/0x320 [ 286.651333][ T8788] ? __lock_acquire+0x1336/0x7d80 [ 286.656419][ T8788] ? aa_get_newest_label+0xfd/0x5c0 [ 286.661682][ T8788] ? free_vm_area+0x50/0x50 [ 286.666242][ T8788] ? end_current_label_crit_section+0x170/0x170 [ 286.672536][ T8788] ? verify_lock_unused+0x140/0x140 [ 286.677786][ T8788] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 286.683367][ T8788] __vmalloc+0x7a/0x90 [ 286.687479][ T8788] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 286.693087][ T8788] bpf_prog_alloc_no_stats+0x46/0x430 [ 286.698502][ T8788] bpf_prog_alloc+0x3d/0x1a0 [ 286.703136][ T8788] bpf_prog_load+0x6b2/0x1610 [ 286.707852][ T8788] ? map_freeze+0x420/0x420 [ 286.712384][ T8788] ? __might_fault+0xaa/0x120 [ 286.717091][ T8788] ? __lock_acquire+0x7d80/0x7d80 [ 286.722150][ T8788] ? file_end_write+0x159/0x250 [ 286.727038][ T8788] ? __might_fault+0xaa/0x120 [ 286.731744][ T8788] ? __might_fault+0xc6/0x120 [ 286.736450][ T8788] ? __might_fault+0xaa/0x120 [ 286.741151][ T8788] ? bpf_lsm_bpf+0x9/0x10 [ 286.745504][ T8788] ? security_bpf+0x7e/0xa0 [ 286.750036][ T8788] __sys_bpf+0x5ba/0x890 [ 286.754314][ T8788] ? bpf_link_show_fdinfo+0x390/0x390 [ 286.759736][ T8788] ? lock_chain_count+0x20/0x20 [ 286.764645][ T8788] __x64_sys_bpf+0x7c/0x90 [ 286.769089][ T8788] do_syscall_64+0x55/0xb0 [ 286.773536][ T8788] ? clear_bhb_loop+0x40/0x90 [ 286.778231][ T8788] ? clear_bhb_loop+0x40/0x90 [ 286.782946][ T8788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.788876][ T8788] RIP: 0033:0x7f040e39de59 [ 286.793316][ T8788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.812952][ T8788] RSP: 002b:00007f040c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 286.821395][ T8788] RAX: ffffffffffffffda RBX: 00007f040e625fa0 RCX: 00007f040e39de59 [ 286.829405][ T8788] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 286.837401][ T8788] RBP: 00007f040c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 286.845397][ T8788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.853420][ T8788] R13: 00007f040e626038 R14: 00007f040e625fa0 R15: 00007ffda8b08b68 [ 286.861425][ T8788] [ 286.928857][ T8788] syz.0.1006: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 286.965107][ T8788] CPU: 0 PID: 8788 Comm: syz.0.1006 Not tainted syzkaller #0 [ 286.972565][ T8788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 286.982667][ T8788] Call Trace: [ 286.985991][ T8788] [ 286.988958][ T8788] dump_stack_lvl+0x18c/0x250 [ 286.993696][ T8788] ? show_regs_print_info+0x20/0x20 [ 286.998943][ T8788] ? load_image+0x420/0x420 [ 287.003505][ T8788] ? __rcu_read_unlock+0x7c/0xd0 [ 287.008501][ T8788] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 287.014967][ T8788] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 287.021529][ T8788] warn_alloc+0x246/0x340 [ 287.025929][ T8788] ? slab_free_freelist_hook+0x130/0x1a0 [ 287.031619][ T8788] ? zone_watermark_ok_safe+0x230/0x230 [ 287.037225][ T8788] ? __get_vm_area_node+0x17b/0x370 [ 287.042489][ T8788] ? __get_vm_area_node+0x17b/0x370 [ 287.047749][ T8788] __vmalloc_node_range+0x394/0x1320 [ 287.053085][ T8788] ? mark_lock+0x94/0x320 [ 287.057465][ T8788] ? __lock_acquire+0x1336/0x7d80 [ 287.062557][ T8788] ? aa_get_newest_label+0xfd/0x5c0 [ 287.067799][ T8788] ? free_vm_area+0x50/0x50 [ 287.072377][ T8788] ? end_current_label_crit_section+0x170/0x170 [ 287.078670][ T8788] ? verify_lock_unused+0x140/0x140 [ 287.083923][ T8788] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 287.089519][ T8788] __vmalloc+0x7a/0x90 [ 287.093644][ T8788] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 287.099236][ T8788] bpf_prog_alloc_no_stats+0x46/0x430 [ 287.104665][ T8788] bpf_prog_alloc+0x3d/0x1a0 [ 287.109314][ T8788] bpf_prog_load+0x6b2/0x1610 [ 287.114055][ T8788] ? map_freeze+0x420/0x420 [ 287.118623][ T8788] ? __might_fault+0xaa/0x120 [ 287.123352][ T8788] ? __lock_acquire+0x7d80/0x7d80 [ 287.128419][ T8788] ? file_end_write+0x159/0x250 [ 287.133326][ T8788] ? __might_fault+0xaa/0x120 [ 287.138051][ T8788] ? __might_fault+0xc6/0x120 [ 287.142767][ T8788] ? __might_fault+0xaa/0x120 [ 287.147483][ T8788] ? bpf_lsm_bpf+0x9/0x10 [ 287.151871][ T8788] ? security_bpf+0x7e/0xa0 [ 287.156432][ T8788] __sys_bpf+0x5ba/0x890 [ 287.160732][ T8788] ? bpf_link_show_fdinfo+0x390/0x390 [ 287.166169][ T8788] ? lock_chain_count+0x20/0x20 [ 287.171081][ T8788] __x64_sys_bpf+0x7c/0x90 [ 287.175548][ T8788] do_syscall_64+0x55/0xb0 [ 287.180019][ T8788] ? clear_bhb_loop+0x40/0x90 [ 287.184742][ T8788] ? clear_bhb_loop+0x40/0x90 [ 287.189474][ T8788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.195423][ T8788] RIP: 0033:0x7f040e39de59 [ 287.199893][ T8788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.219549][ T8788] RSP: 002b:00007f040c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 287.228019][ T8788] RAX: ffffffffffffffda RBX: 00007f040e625fa0 RCX: 00007f040e39de59 [ 287.236048][ T8788] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 287.244072][ T8788] RBP: 00007f040c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 287.252099][ T8788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.260120][ T8788] R13: 00007f040e626038 R14: 00007f040e625fa0 R15: 00007ffda8b08b68 [ 287.268172][ T8788] [ 287.294926][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 287.331343][ T8788] Mem-Info: [ 287.388566][ T8788] active_anon:9820 inactive_anon:0 isolated_anon:0 [ 287.388566][ T8788] active_file:19130 inactive_file:40025 isolated_file:0 [ 287.388566][ T8788] unevictable:768 dirty:46 writeback:0 [ 287.388566][ T8788] slab_reclaimable:10457 slab_unreclaimable:93290 [ 287.388566][ T8788] mapped:26188 shmem:4597 pagetables:530 [ 287.388566][ T8788] sec_pagetables:0 bounce:0 [ 287.388566][ T8788] kernel_misc_reclaimable:0 [ 287.388566][ T8788] free:1337586 free_pcp:14579 free_cma:0 [ 287.446994][ T8788] Node 0 active_anon:37980kB inactive_anon:0kB active_file:76520kB inactive_file:159900kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104752kB dirty:184kB writeback:0kB shmem:15252kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10404kB pagetables:2220kB sec_pagetables:0kB all_unreclaimable? no [ 287.513329][ T8795] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1008'. [ 287.554031][ T8795] netlink: 'syz.1.1008': attribute type 12 has an invalid length. [ 287.568595][ T8788] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 287.618921][ T8795] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1008'. [ 287.629290][ T8788] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 287.731425][ T8788] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 287.737296][ T8788] Node 0 DMA32 free:1462720kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:27840kB inactive_anon:0kB active_file:76520kB inactive_file:159080kB unevictable:1536kB writepending:184kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:27400kB local_pcp:21600kB free_cma:0kB [ 287.843343][ T8788] lowmem_reserve[]: 0 0 0 0 0 [ 287.860821][ T8804] ref_ctr_offset mismatch. inode: 0x56e offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8000000 [ 287.899692][ T8788] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 287.943200][ T8805] netlink: 668 bytes leftover after parsing attributes in process `syz.1.1012'. [ 287.962444][ T8788] lowmem_reserve[]: 0 0 0 0 0 [ 287.967331][ T8788] Node 1 Normal free:3895048kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20132kB local_pcp:9956kB free_cma:0kB [ 288.041530][ T8805] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 288.058727][ T8788] lowmem_reserve[]: 0 0 0 0 0 [ 288.063666][ T8788] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 288.084841][ T8805] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 288.102431][ T8788] Node 0 DMA32: 1394*4kB (UME) 1063*8kB (UME) 1108*16kB (UME) 1891*32kB (UME) 774*64kB (UME) 159*128kB (UME) 48*256kB (UME) 13*512kB (UM) 4*1024kB (UM) 3*2048kB (UM) 315*4096kB (UM) = 1481632kB [ 288.122312][ T8788] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 288.140072][ T8788] Node 1 Normal: 220*4kB (UM) 49*8kB (UME) 37*16kB (UME) 48*32kB (UME) 13*64kB (UE) 3*128kB (UME) 1*256kB (U) 2*512kB (UM) 0*1024kB 1*2048kB (U) 949*4096kB (ME) = 3895048kB [ 288.159288][ T8788] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 288.171564][ T8788] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 288.198607][ T8788] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 288.208233][ T8788] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 288.236065][ T8788] 60528 total pagecache pages [ 288.244831][ T8788] 0 pages in swap cache [ 288.249423][ T8788] Free swap = 124996kB [ 288.253720][ T8788] Total swap = 124996kB [ 288.258292][ T8788] 2097051 pages RAM [ 288.262239][ T8788] 0 pages HighMem/MovableOnly [ 288.267042][ T8788] 416953 pages reserved [ 288.309979][ T8788] 0 pages cma reserved [ 289.147007][ T8838] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 289.160720][ T8838] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 289.651805][ T8848] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 289.661683][ T8848] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 289.918832][ T8860] netlink: 'syz.1.1031': attribute type 39 has an invalid length. [ 290.302167][ T8871] bridge_slave_1: left allmulticast mode [ 290.308449][ T8871] bridge_slave_1: left promiscuous mode [ 290.317100][ T8871] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.330021][ T8871] bridge_slave_0: left allmulticast mode [ 290.335723][ T8871] bridge_slave_0: left promiscuous mode [ 290.352124][ T8871] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.396970][ T8871] team0: Port device bridge0 removed [ 290.909284][ T8883] __nla_validate_parse: 5 callbacks suppressed [ 290.909353][ T8883] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1041'. [ 291.061321][ T8883] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 291.072772][ T8883] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 291.244354][ T8889] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1044'. [ 292.405000][ T8911] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1053'. [ 292.704528][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1054'. [ 293.056440][ T8920] netlink: 'syz.2.1055': attribute type 9 has an invalid length. [ 293.064842][ T8920] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1055'. [ 293.108370][ T8923] netlink: 'syz.0.1056': attribute type 4 has an invalid length. [ 293.127739][ T8923] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1056'. [ 293.185025][ T8924] netlink: 'syz.2.1055': attribute type 9 has an invalid length. [ 293.193384][ T8924] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1055'. [ 293.506218][ T8932] netlink: 'syz.3.1059': attribute type 3 has an invalid length. [ 293.515617][ T8932] netlink: 'syz.3.1059': attribute type 1 has an invalid length. [ 293.525403][ T8932] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1059'. [ 293.692428][ T8934] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1060'. [ 293.770347][ T8938] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.1062'. [ 294.177544][ T8944] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 294.187937][ T8944] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 294.760747][ T8942] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 294.899127][ T8957] FAULT_INJECTION: forcing a failure. [ 294.899127][ T8957] name failslab, interval 1, probability 0, space 0, times 0 [ 294.918723][ T8957] CPU: 0 PID: 8957 Comm: syz.3.1070 Not tainted syzkaller #0 [ 294.926177][ T8957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 294.936279][ T8957] Call Trace: [ 294.939619][ T8957] [ 294.942590][ T8957] dump_stack_lvl+0x18c/0x250 [ 294.947342][ T8957] ? sctp_sendmsg+0x1519/0x27b0 [ 294.952257][ T8957] ? ___sys_sendmsg+0x2a6/0x360 [ 294.957193][ T8957] ? show_regs_print_info+0x20/0x20 [ 294.962481][ T8957] ? load_image+0x420/0x420 [ 294.967073][ T8957] should_fail_ex+0x394/0x4c0 [ 294.971825][ T8957] should_failslab+0x9/0x20 [ 294.976397][ T8957] slab_pre_alloc_hook+0x59/0x300 [ 294.981502][ T8957] ? sctp_add_bind_addr+0x8c/0x360 [ 294.986677][ T8957] __kmem_cache_alloc_node+0x53/0x250 [ 294.992130][ T8957] ? sctp_add_bind_addr+0x8c/0x360 [ 294.997295][ T8957] kmalloc_trace+0x2a/0xe0 [ 295.001780][ T8957] sctp_add_bind_addr+0x8c/0x360 [ 295.006788][ T8957] sctp_copy_local_addr_list+0x31b/0x4e0 [ 295.012490][ T8957] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 295.018269][ T8957] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 295.024427][ T8957] ? sctp_v6_is_any+0x64/0x70 [ 295.029172][ T8957] ? sctp_copy_one_addr+0x8c/0x350 [ 295.034341][ T8957] sctp_bind_addr_copy+0xb3/0x3c0 [ 295.039407][ T8957] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 295.045783][ T8957] sctp_connect_new_asoc+0x2f9/0x6a0 [ 295.051126][ T8957] ? __sctp_connect+0xd80/0xd80 [ 295.056012][ T8957] ? __local_bh_enable_ip+0x13a/0x1c0 [ 295.061423][ T8957] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 295.067007][ T8957] ? security_sctp_bind_connect+0x89/0xb0 [ 295.072768][ T8957] sctp_sendmsg+0x1519/0x27b0 [ 295.077503][ T8957] ? sctp_getsockopt+0xb60/0xb60 [ 295.082494][ T8957] ? aa_af_perm+0x330/0x330 [ 295.087042][ T8957] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 295.093505][ T8957] ? sock_rps_record_flow+0x19/0x3f0 [ 295.098829][ T8957] ? inet_sendmsg+0xce/0x2a0 [ 295.103459][ T8957] ? inet_send_prepare+0x250/0x250 [ 295.108615][ T8957] ____sys_sendmsg+0x61b/0x980 [ 295.113429][ T8957] ? __asan_memset+0x22/0x40 [ 295.118073][ T8957] ? __sys_sendmsg_sock+0x30/0x30 [ 295.123149][ T8957] ? __import_iovec+0x5f2/0x850 [ 295.128048][ T8957] ? import_iovec+0x73/0xa0 [ 295.132604][ T8957] ___sys_sendmsg+0x2a6/0x360 [ 295.137332][ T8957] ? get_pid_task+0x20/0x1e0 [ 295.141969][ T8957] ? __sys_sendmsg+0x2b0/0x2b0 [ 295.146802][ T8957] ? __lock_acquire+0x7d80/0x7d80 [ 295.151888][ T8957] __se_sys_sendmsg+0x1d0/0x2c0 [ 295.156789][ T8957] ? __x64_sys_sendmsg+0x80/0x80 [ 295.161794][ T8957] ? lockdep_hardirqs_on+0x98/0x150 [ 295.167035][ T8957] do_syscall_64+0x55/0xb0 [ 295.171505][ T8957] ? clear_bhb_loop+0x40/0x90 [ 295.176215][ T8957] ? clear_bhb_loop+0x40/0x90 [ 295.180933][ T8957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.186874][ T8957] RIP: 0033:0x7fc7c4f9de59 [ 295.191323][ T8957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.210969][ T8957] RSP: 002b:00007fc7c5dbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.219432][ T8957] RAX: ffffffffffffffda RBX: 00007fc7c5225fa0 RCX: 00007fc7c4f9de59 [ 295.227451][ T8957] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 295.235460][ T8957] RBP: 00007fc7c5dbc090 R08: 0000000000000000 R09: 0000000000000000 [ 295.243473][ T8957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 295.251473][ T8957] R13: 00007fc7c5226038 R14: 00007fc7c5225fa0 R15: 00007fff2684aa08 [ 295.259503][ T8957] [ 295.342446][ T8963] netlink: 'syz.0.1071': attribute type 13 has an invalid length. [ 295.354086][ T8961] netlink: 'syz.1.1069': attribute type 3 has an invalid length. [ 295.380841][ T8961] netlink: 'syz.1.1069': attribute type 1 has an invalid length. [ 295.389186][ T8963] erspan0: refused to change device tx_queue_len [ 295.821233][ T8974] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 295.839391][ T8974] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 296.133638][ T8985] __nla_validate_parse: 8 callbacks suppressed [ 296.133679][ T8985] netlink: 668 bytes leftover after parsing attributes in process `syz.1.1076'. [ 296.169672][ T8985] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 296.178980][ T8985] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 296.358209][ T8991] syzkaller0: entered promiscuous mode [ 296.382087][ T8991] syzkaller0: entered allmulticast mode [ 296.524636][ T8994] netlink: 'syz.2.1082': attribute type 3 has an invalid length. [ 296.533976][ T8994] netlink: 'syz.2.1082': attribute type 1 has an invalid length. [ 296.543258][ T8994] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1082'. [ 296.904468][ T9001] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1084'. [ 298.198410][ T9006] netlink: 63747 bytes leftover after parsing attributes in process `syz.2.1086'. [ 298.289408][ T9007] netlink: 668 bytes leftover after parsing attributes in process `syz.1.1085'. [ 298.312840][ T9007] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 298.325217][ T9007] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 298.484712][ T9015] netlink: 'syz.0.1090': attribute type 29 has an invalid length. [ 298.504716][ T9015] netlink: 'syz.0.1090': attribute type 29 has an invalid length. [ 298.620850][ T9019] netlink: 'syz.0.1090': attribute type 29 has an invalid length. [ 298.707925][ T9021] FAULT_INJECTION: forcing a failure. [ 298.707925][ T9021] name failslab, interval 1, probability 0, space 0, times 0 [ 298.728260][ T9015] netlink: 'syz.0.1090': attribute type 29 has an invalid length. [ 298.738336][ T9021] CPU: 0 PID: 9021 Comm: syz.1.1091 Not tainted syzkaller #0 [ 298.745791][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 298.755908][ T9021] Call Trace: [ 298.759251][ T9021] [ 298.762232][ T9021] dump_stack_lvl+0x18c/0x250 [ 298.766973][ T9021] ? sctp_sendmsg+0x1519/0x27b0 [ 298.771881][ T9021] ? ___sys_sendmsg+0x2a6/0x360 [ 298.776796][ T9021] ? show_regs_print_info+0x20/0x20 [ 298.782056][ T9021] ? load_image+0x420/0x420 [ 298.786634][ T9021] should_fail_ex+0x394/0x4c0 [ 298.791378][ T9021] should_failslab+0x9/0x20 [ 298.795948][ T9021] slab_pre_alloc_hook+0x59/0x300 [ 298.801038][ T9021] ? sctp_add_bind_addr+0x8c/0x360 [ 298.806204][ T9021] __kmem_cache_alloc_node+0x53/0x250 [ 298.811648][ T9021] ? sctp_add_bind_addr+0x8c/0x360 [ 298.816821][ T9021] kmalloc_trace+0x2a/0xe0 [ 298.821313][ T9021] sctp_add_bind_addr+0x8c/0x360 [ 298.826304][ T9021] sctp_copy_local_addr_list+0x31b/0x4e0 [ 298.831999][ T9021] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 298.837777][ T9021] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 298.843902][ T9021] ? sctp_v4_is_any+0x35/0x60 [ 298.848642][ T9021] ? sctp_copy_one_addr+0x8c/0x350 [ 298.853822][ T9021] sctp_bind_addr_copy+0xb3/0x3c0 [ 298.858902][ T9021] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 298.865293][ T9021] sctp_connect_new_asoc+0x2f9/0x6a0 [ 298.869812][ T9018] netlink: 'syz.0.1090': attribute type 29 has an invalid length. [ 298.870616][ T9021] ? __sctp_connect+0xd80/0xd80 [ 298.883335][ T9021] ? __local_bh_enable_ip+0x13a/0x1c0 [ 298.888769][ T9021] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 298.894378][ T9021] ? security_sctp_bind_connect+0x89/0xb0 [ 298.900164][ T9021] sctp_sendmsg+0x1519/0x27b0 [ 298.904912][ T9021] ? sctp_getsockopt+0xb60/0xb60 [ 298.909920][ T9021] ? aa_af_perm+0x330/0x330 [ 298.914493][ T9021] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 298.920976][ T9021] ? sock_rps_record_flow+0x19/0x3f0 [ 298.926326][ T9021] ? inet_sendmsg+0xce/0x2a0 [ 298.930972][ T9021] ? inet_send_prepare+0x250/0x250 [ 298.936147][ T9021] ____sys_sendmsg+0x61b/0x980 [ 298.940977][ T9021] ? __asan_memset+0x22/0x40 [ 298.945623][ T9021] ? __sys_sendmsg_sock+0x30/0x30 [ 298.950701][ T9021] ? __import_iovec+0x5f2/0x850 [ 298.955620][ T9021] ? import_iovec+0x73/0xa0 [ 298.960181][ T9021] ___sys_sendmsg+0x2a6/0x360 [ 298.964928][ T9021] ? __sys_sendmsg+0x2b0/0x2b0 [ 298.969789][ T9021] ? __lock_acquire+0x7d80/0x7d80 [ 298.974898][ T9021] __se_sys_sendmsg+0x1d0/0x2c0 [ 298.979822][ T9021] ? __x64_sys_sendmsg+0x80/0x80 [ 298.984845][ T9021] ? lockdep_hardirqs_on+0x98/0x150 [ 298.990110][ T9021] do_syscall_64+0x55/0xb0 [ 298.994582][ T9021] ? clear_bhb_loop+0x40/0x90 [ 298.999308][ T9021] ? clear_bhb_loop+0x40/0x90 [ 299.004033][ T9021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.009979][ T9021] RIP: 0033:0x7f078379de59 [ 299.014438][ T9021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.034096][ T9021] RSP: 002b:00007f078459a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.042562][ T9021] RAX: ffffffffffffffda RBX: 00007f0783a25fa0 RCX: 00007f078379de59 [ 299.050582][ T9021] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000004 [ 299.058585][ T9021] RBP: 00007f078459a090 R08: 0000000000000000 R09: 0000000000000000 [ 299.066594][ T9021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 299.074600][ T9021] R13: 00007f0783a26038 R14: 00007f0783a25fa0 R15: 00007ffd959f13b8 [ 299.082652][ T9021] [ 299.193029][ T9016] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1089'. [ 299.414577][ T9030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1093'. [ 299.671024][ T9037] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1095'. [ 300.071840][ T9047] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1099'. [ 300.083733][ T9046] syzkaller0: entered promiscuous mode [ 300.098576][ T9047] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 300.115330][ T9046] syzkaller0: entered allmulticast mode [ 300.121338][ T9047] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 304.319091][ T9066] validate_nla: 1 callbacks suppressed [ 304.319111][ T9066] netlink: 'syz.1.1104': attribute type 29 has an invalid length. [ 304.388905][ T9066] netlink: 'syz.1.1104': attribute type 29 has an invalid length. [ 304.520392][ T9071] netlink: 'syz.2.1107': attribute type 33 has an invalid length. [ 304.530673][ T9071] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1107'. [ 304.544527][ T9071] `: renamed from ip6tnl0 (while UP) [ 304.586135][ T9071] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 304.610649][ T9074] netlink: 'syz.1.1108': attribute type 39 has an invalid length. [ 304.710315][ T9073] netlink: 185272 bytes leftover after parsing attributes in process `syz.2.1107'. [ 304.885690][ T9073] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 305.093756][ T9091] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1113'. [ 305.485575][ T9099] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1116'. [ 305.497166][ T9099] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.1116'. [ 305.507400][ T9099] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1116'. [ 305.516909][ T9099] tc_dump_action: action bad kind [ 305.683125][ T9103] netlink: 'syz.3.1118': attribute type 10 has an invalid length. [ 305.705680][ T9105] tap0: tun_chr_ioctl cmd 2147767511 [ 305.724181][ T9105] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1119'. [ 305.742956][ T9105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.884331][ T9109] netlink: 'syz.1.1121': attribute type 21 has an invalid length. [ 305.894361][ T9109] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1121'. [ 306.442941][ T9123] netlink: 'syz.3.1127': attribute type 9 has an invalid length. [ 306.470726][ T9123] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1127'. [ 306.950872][ T9142] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1134'. [ 307.419197][ T9155] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 307.458983][ T9155] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 308.583015][ T9170] FAULT_INJECTION: forcing a failure. [ 308.583015][ T9170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.692357][ T9170] CPU: 0 PID: 9170 Comm: syz.0.1144 Not tainted syzkaller #0 [ 308.699831][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 308.709949][ T9170] Call Trace: [ 308.713307][ T9170] [ 308.716288][ T9170] dump_stack_lvl+0x18c/0x250 [ 308.721050][ T9170] ? show_regs_print_info+0x20/0x20 [ 308.726326][ T9170] ? load_image+0x420/0x420 [ 308.730948][ T9170] ? __might_fault+0xaa/0x120 [ 308.735695][ T9170] ? __lock_acquire+0x7d80/0x7d80 [ 308.740783][ T9170] ? __virt_addr_valid+0x10c/0x380 [ 308.746036][ T9170] should_fail_ex+0x394/0x4c0 [ 308.750804][ T9170] _copy_from_user+0x2f/0xe0 [ 308.755463][ T9170] generic_map_update_batch+0x53e/0x800 [ 308.761100][ T9170] ? rcu_read_unlock+0xa0/0xa0 [ 308.765936][ T9170] ? __fdget+0x180/0x210 [ 308.770248][ T9170] ? rcu_read_unlock+0xa0/0xa0 [ 308.775069][ T9170] bpf_map_do_batch+0x3f2/0x600 [ 308.779998][ T9170] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 308.786431][ T9170] __sys_bpf+0x381/0x890 [ 308.790766][ T9170] ? bpf_link_show_fdinfo+0x390/0x390 [ 308.796241][ T9170] ? lock_chain_count+0x20/0x20 [ 308.801183][ T9170] __x64_sys_bpf+0x7c/0x90 [ 308.805686][ T9170] do_syscall_64+0x55/0xb0 [ 308.810176][ T9170] ? clear_bhb_loop+0x40/0x90 [ 308.814908][ T9170] ? clear_bhb_loop+0x40/0x90 [ 308.819656][ T9170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.825647][ T9170] RIP: 0033:0x7f040e39de59 [ 308.830128][ T9170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.849802][ T9170] RSP: 002b:00007f040c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.858311][ T9170] RAX: ffffffffffffffda RBX: 00007f040e625fa0 RCX: 00007f040e39de59 [ 308.866349][ T9170] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 308.874380][ T9170] RBP: 00007f040c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 308.882407][ T9170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.890427][ T9170] R13: 00007f040e626038 R14: 00007f040e625fa0 R15: 00007ffda8b08b68 [ 308.898496][ T9170] [ 309.092319][ T9172] netlink: 'syz.2.1143': attribute type 10 has an invalid length. [ 310.020581][ T9187] __nla_validate_parse: 4 callbacks suppressed [ 310.020635][ T9187] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1150'. [ 310.255700][ T9199] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1152'. [ 310.292026][ T9199] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 310.305465][ T9199] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 310.713298][ T9209] FAULT_INJECTION: forcing a failure. [ 310.713298][ T9209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.773581][ T9209] CPU: 0 PID: 9209 Comm: syz.3.1158 Not tainted syzkaller #0 [ 310.781062][ T9209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 310.791181][ T9209] Call Trace: [ 310.794556][ T9209] [ 310.797543][ T9209] dump_stack_lvl+0x18c/0x250 [ 310.802309][ T9209] ? show_regs_print_info+0x20/0x20 [ 310.807581][ T9209] ? load_image+0x420/0x420 [ 310.812173][ T9209] ? __might_fault+0xaa/0x120 [ 310.816917][ T9209] ? __lock_acquire+0x7d80/0x7d80 [ 310.822007][ T9209] ? __virt_addr_valid+0x10c/0x380 [ 310.827193][ T9209] should_fail_ex+0x394/0x4c0 [ 310.831979][ T9209] _copy_from_user+0x2f/0xe0 [ 310.836643][ T9209] generic_map_update_batch+0x53e/0x800 [ 310.842270][ T9209] ? rcu_read_unlock+0xa0/0xa0 [ 310.847102][ T9209] ? __fdget+0x180/0x210 [ 310.851410][ T9209] ? rcu_read_unlock+0xa0/0xa0 [ 310.856235][ T9209] bpf_map_do_batch+0x3f2/0x600 [ 310.861171][ T9209] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 310.867589][ T9209] __sys_bpf+0x381/0x890 [ 310.871905][ T9209] ? bpf_link_show_fdinfo+0x390/0x390 [ 310.877365][ T9209] ? lock_chain_count+0x20/0x20 [ 310.882293][ T9209] __x64_sys_bpf+0x7c/0x90 [ 310.886784][ T9209] do_syscall_64+0x55/0xb0 [ 310.891272][ T9209] ? clear_bhb_loop+0x40/0x90 [ 310.896021][ T9209] ? clear_bhb_loop+0x40/0x90 [ 310.900762][ T9209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.906720][ T9209] RIP: 0033:0x7fc7c4f9de59 [ 310.911196][ T9209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.930884][ T9209] RSP: 002b:00007fc7c5dbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.939368][ T9209] RAX: ffffffffffffffda RBX: 00007fc7c5225fa0 RCX: 00007fc7c4f9de59 [ 310.947398][ T9209] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 310.955426][ T9209] RBP: 00007fc7c5dbc090 R08: 0000000000000000 R09: 0000000000000000 [ 310.963462][ T9209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 310.971496][ T9209] R13: 00007fc7c5226038 R14: 00007fc7c5225fa0 R15: 00007fff2684aa08 [ 310.979552][ T9209] [ 311.443674][ T5783] Bluetooth: hci3: ISO packet for unknown connection handle 4 [ 312.518490][ T9234] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1163'. [ 313.333928][ T9243] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1165'. [ 313.360600][ T9243] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 313.392822][ T9243] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 314.017321][ T9252] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1170'. [ 314.081021][ T9254] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1169'. [ 314.158123][ T9259] hsr0: entered allmulticast mode [ 314.198696][ T9259] hsr_slave_0: entered allmulticast mode [ 314.221890][ T9259] hsr_slave_1: entered allmulticast mode [ 314.396639][ T9266] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1174'. [ 314.621842][ T9271] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1176'. [ 315.228131][ T9277] netlink: 668 bytes leftover after parsing attributes in process `syz.0.1177'. [ 315.264009][ T9277] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 315.293273][ T9277] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 315.402481][ T9279] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1178'. [ 316.042347][ T9299] hsr0: entered allmulticast mode [ 316.047462][ T9299] hsr_slave_0: entered allmulticast mode [ 316.117067][ T9299] hsr_slave_1: entered allmulticast mode [ 316.165242][ T9295] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1184'. [ 316.411937][ T9311] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1187'. [ 316.546627][ T9309] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1190'. [ 316.555300][ T9313] sock: sock_timestamping_bind_phc: sock not bind to device [ 317.071068][ T9327] netlink: 'syz.3.1196': attribute type 12 has an invalid length. [ 317.145719][ T9327] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.1196'. [ 317.184626][ T9331] netlink: 668 bytes leftover after parsing attributes in process `syz.0.1195'. [ 317.199049][ T9331] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 317.209826][ T9331] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 317.354244][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.363210][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.682299][ T9342] hsr0: entered allmulticast mode [ 317.687556][ T9342] hsr_slave_0: entered allmulticast mode [ 317.693943][ T9342] hsr_slave_1: entered allmulticast mode [ 317.702288][ T9337] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1200'. [ 317.717154][ T9339] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1201'. [ 318.113597][ T9348] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1203'. [ 318.969669][ T9365] syzkaller0: entered promiscuous mode [ 318.976858][ T9365] syzkaller0: entered allmulticast mode [ 319.102145][ T9371] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 319.115247][ T9371] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 321.365050][ T9392] __nla_validate_parse: 1 callbacks suppressed [ 321.365071][ T9392] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1217'. [ 321.472000][ T9397] netlink: 'syz.1.1219': attribute type 21 has an invalid length. [ 321.489611][ T9397] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1219'. [ 321.743305][ T9406] FAULT_INJECTION: forcing a failure. [ 321.743305][ T9406] name failslab, interval 1, probability 0, space 0, times 0 [ 321.791276][ T9406] CPU: 0 PID: 9406 Comm: syz.0.1223 Not tainted syzkaller #0 [ 321.798735][ T9406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 321.808839][ T9406] Call Trace: [ 321.812174][ T9406] [ 321.815146][ T9406] dump_stack_lvl+0x18c/0x250 [ 321.819897][ T9406] ? sctp_sendmsg+0x1519/0x27b0 [ 321.824804][ T9406] ? ___sys_sendmsg+0x2a6/0x360 [ 321.829716][ T9406] ? show_regs_print_info+0x20/0x20 [ 321.834970][ T9406] ? load_image+0x420/0x420 [ 321.839541][ T9406] should_fail_ex+0x394/0x4c0 [ 321.844279][ T9406] should_failslab+0x9/0x20 [ 321.848839][ T9406] slab_pre_alloc_hook+0x59/0x300 [ 321.853926][ T9406] ? sctp_add_bind_addr+0x8c/0x360 [ 321.859082][ T9406] __kmem_cache_alloc_node+0x53/0x250 [ 321.864518][ T9406] ? sctp_add_bind_addr+0x8c/0x360 [ 321.869675][ T9406] kmalloc_trace+0x2a/0xe0 [ 321.874146][ T9406] sctp_add_bind_addr+0x8c/0x360 [ 321.879142][ T9406] sctp_copy_local_addr_list+0x31b/0x4e0 [ 321.884823][ T9406] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 321.890590][ T9406] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 321.896710][ T9406] ? sctp_v4_is_any+0x35/0x60 [ 321.901430][ T9406] ? sctp_copy_one_addr+0x8c/0x350 [ 321.906601][ T9406] sctp_bind_addr_copy+0xb3/0x3c0 [ 321.911697][ T9406] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 321.918074][ T9406] sctp_connect_new_asoc+0x2f9/0x6a0 [ 321.923425][ T9406] ? __sctp_connect+0xd80/0xd80 [ 321.928320][ T9406] ? __local_bh_enable_ip+0x13a/0x1c0 [ 321.933733][ T9406] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 321.939331][ T9406] ? security_sctp_bind_connect+0x89/0xb0 [ 321.945095][ T9406] sctp_sendmsg+0x1519/0x27b0 [ 321.949836][ T9406] ? sctp_getsockopt+0xb60/0xb60 [ 321.954852][ T9406] ? aa_af_perm+0x330/0x330 [ 321.959414][ T9406] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 321.965884][ T9406] ? sock_rps_record_flow+0x19/0x3f0 [ 321.971222][ T9406] ? inet_sendmsg+0xce/0x2a0 [ 321.975857][ T9406] ? inet_send_prepare+0x250/0x250 [ 321.981040][ T9406] ____sys_sendmsg+0x61b/0x980 [ 321.985883][ T9406] ? __asan_memset+0x22/0x40 [ 321.990539][ T9406] ? __sys_sendmsg_sock+0x30/0x30 [ 321.995617][ T9406] ? __import_iovec+0x5f2/0x850 [ 322.000536][ T9406] ? import_iovec+0x73/0xa0 [ 322.005113][ T9406] ___sys_sendmsg+0x2a6/0x360 [ 322.009865][ T9406] ? get_pid_task+0x20/0x1e0 [ 322.014531][ T9406] ? __sys_sendmsg+0x2b0/0x2b0 [ 322.019373][ T9406] ? __lock_acquire+0x7d80/0x7d80 [ 322.024469][ T9406] __se_sys_sendmsg+0x1d0/0x2c0 [ 322.029377][ T9406] ? __x64_sys_sendmsg+0x80/0x80 [ 322.034382][ T9406] ? lockdep_hardirqs_on+0x98/0x150 [ 322.039626][ T9406] do_syscall_64+0x55/0xb0 [ 322.044101][ T9406] ? clear_bhb_loop+0x40/0x90 [ 322.048835][ T9406] ? clear_bhb_loop+0x40/0x90 [ 322.053568][ T9406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.059532][ T9406] RIP: 0033:0x7f040e39de59 [ 322.064009][ T9406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.083688][ T9406] RSP: 002b:00007f040c5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.092152][ T9406] RAX: ffffffffffffffda RBX: 00007f040e625fa0 RCX: 00007f040e39de59 [ 322.100170][ T9406] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000005 [ 322.108183][ T9406] RBP: 00007f040c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 322.116204][ T9406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 322.124213][ T9406] R13: 00007f040e626038 R14: 00007f040e625fa0 R15: 00007ffda8b08b68 [ 322.132253][ T9406] [ 322.165067][ T9411] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1224'. [ 322.176893][ T9411] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 322.187013][ T9411] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 322.291634][ T9413] FAULT_INJECTION: forcing a failure. [ 322.291634][ T9413] name failslab, interval 1, probability 0, space 0, times 0 [ 322.304376][ T9413] CPU: 0 PID: 9413 Comm: syz.0.1227 Not tainted syzkaller #0 [ 322.311803][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 322.321897][ T9413] Call Trace: [ 322.325202][ T9413] [ 322.328155][ T9413] dump_stack_lvl+0x18c/0x250 [ 322.332878][ T9413] ? show_regs_print_info+0x20/0x20 [ 322.338116][ T9413] ? load_image+0x420/0x420 [ 322.342698][ T9413] ? netdev_core_pick_tx+0x370/0x370 [ 322.348019][ T9413] should_fail_ex+0x394/0x4c0 [ 322.352726][ T9413] should_failslab+0x9/0x20 [ 322.357261][ T9413] slab_pre_alloc_hook+0x59/0x300 [ 322.362335][ T9413] kmem_cache_alloc+0x5a/0x2c0 [ 322.367145][ T9413] ? skb_clone+0x1eb/0x370 [ 322.371592][ T9413] skb_clone+0x1eb/0x370 [ 322.375862][ T9413] bpf_clone_redirect+0x16d/0x4a0 [ 322.380961][ T9413] bpf_prog_6893982b85ceadf7+0x5e/0x63 [ 322.386464][ T9413] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 322.392484][ T9413] ? preempt_schedule+0xc0/0xd0 [ 322.397373][ T9413] ? perf_trace_preemptirq_template+0xac/0x330 [ 322.403579][ T9413] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 322.409599][ T9413] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 322.414920][ T9413] ? lock_chain_count+0x20/0x20 [ 322.419811][ T9413] ? __local_bh_disable_ip+0x108/0x1a0 [ 322.425312][ T9413] ? __cant_sleep+0x220/0x220 [ 322.430043][ T9413] ? __local_bh_enable_ip+0x13a/0x1c0 [ 322.435435][ T9413] ? _local_bh_enable+0xa0/0xa0 [ 322.440314][ T9413] ? bpf_test_timer_continue+0x135/0x380 [ 322.445979][ T9413] ? bpf_test_run+0x174/0x870 [ 322.450690][ T9413] bpf_test_run+0x2df/0x870 [ 322.455235][ T9413] ? bpf_test_run+0x174/0x870 [ 322.459946][ T9413] ? dst_hold+0x70/0x70 [ 322.464144][ T9413] ? eth_get_headlen+0x210/0x210 [ 322.469127][ T9413] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 322.474554][ T9413] ? cpu_online+0x60/0x60 [ 322.478911][ T9413] bpf_prog_test_run+0x31f/0x390 [ 322.483884][ T9413] __sys_bpf+0x49d/0x890 [ 322.488183][ T9413] ? bpf_link_show_fdinfo+0x390/0x390 [ 322.493605][ T9413] ? lock_chain_count+0x20/0x20 [ 322.498495][ T9413] __x64_sys_bpf+0x7c/0x90 [ 322.502938][ T9413] do_syscall_64+0x55/0xb0 [ 322.507386][ T9413] ? clear_bhb_loop+0x40/0x90 [ 322.512122][ T9413] ? clear_bhb_loop+0x40/0x90 [ 322.516846][ T9413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.522782][ T9413] RIP: 0033:0x7f040e39de59 [ 322.527256][ T9413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.546891][ T9413] RSP: 002b:00007f040c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 322.555334][ T9413] RAX: ffffffffffffffda RBX: 00007f040e625fa0 RCX: 00007f040e39de59 [ 322.563341][ T9413] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 322.571360][ T9413] RBP: 00007f040c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 322.579369][ T9413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 322.587369][ T9413] R13: 00007f040e626038 R14: 00007f040e625fa0 R15: 00007ffda8b08b68 [ 322.595389][ T9413] [ 322.682437][ T9415] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1226'. [ 323.225944][ T9438] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1238'. [ 324.062261][ T9444] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1236'. [ 324.085938][ T9444] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 324.108887][ T9444] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 325.005786][ T9458] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1242'. [ 325.327561][ T9467] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1245'. [ 325.372426][ T9469] netlink: 'syz.0.1251': attribute type 21 has an invalid length. [ 325.389427][ T9469] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1251'. [ 325.656033][ T9476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 325.720509][ T9474] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1247'. [ 325.759862][ T9476] netlink: 'syz.1.1248': attribute type 9 has an invalid length. [ 325.768839][ T9474] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 325.777744][ T9474] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 326.161352][ T9481] netlink: 'syz.1.1248': attribute type 9 has an invalid length. [ 326.550994][ T9504] FAULT_INJECTION: forcing a failure. [ 326.550994][ T9504] name failslab, interval 1, probability 0, space 0, times 0 [ 326.571126][ T9504] CPU: 0 PID: 9504 Comm: syz.0.1260 Not tainted syzkaller #0 [ 326.578627][ T9504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 326.588739][ T9504] Call Trace: [ 326.592068][ T9504] [ 326.595054][ T9504] dump_stack_lvl+0x18c/0x250 [ 326.599798][ T9504] ? sctp_sendmsg+0x1519/0x27b0 [ 326.604707][ T9504] ? ___sys_sendmsg+0x2a6/0x360 [ 326.609620][ T9504] ? show_regs_print_info+0x20/0x20 [ 326.614895][ T9504] ? load_image+0x420/0x420 [ 326.619476][ T9504] should_fail_ex+0x394/0x4c0 [ 326.624222][ T9504] should_failslab+0x9/0x20 [ 326.628781][ T9504] slab_pre_alloc_hook+0x59/0x300 [ 326.633890][ T9504] ? sctp_add_bind_addr+0x8c/0x360 [ 326.639085][ T9504] __kmem_cache_alloc_node+0x53/0x250 [ 326.644531][ T9504] ? sctp_add_bind_addr+0x8c/0x360 [ 326.649705][ T9504] kmalloc_trace+0x2a/0xe0 [ 326.654250][ T9504] sctp_add_bind_addr+0x8c/0x360 [ 326.659454][ T9504] sctp_copy_local_addr_list+0x31b/0x4e0 [ 326.665179][ T9504] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 326.670978][ T9504] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 326.677113][ T9504] ? sctp_v6_is_any+0x64/0x70 [ 326.681862][ T9504] ? sctp_copy_one_addr+0x8c/0x350 [ 326.687028][ T9504] sctp_bind_addr_copy+0xb3/0x3c0 [ 326.692135][ T9504] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 326.698524][ T9504] sctp_connect_new_asoc+0x2f9/0x6a0 [ 326.703878][ T9504] ? __sctp_connect+0xd80/0xd80 [ 326.708769][ T9504] ? __local_bh_enable_ip+0x13a/0x1c0 [ 326.714191][ T9504] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 326.719788][ T9504] ? security_sctp_bind_connect+0x89/0xb0 [ 326.725551][ T9504] sctp_sendmsg+0x1519/0x27b0 [ 326.730290][ T9504] ? sctp_getsockopt+0xb60/0xb60 [ 326.735277][ T9504] ? aa_af_perm+0x330/0x330 [ 326.739825][ T9504] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 326.746289][ T9504] ? sock_rps_record_flow+0x19/0x3f0 [ 326.751622][ T9504] ? inet_sendmsg+0xce/0x2a0 [ 326.756268][ T9504] ? inet_send_prepare+0x250/0x250 [ 326.761439][ T9504] ____sys_sendmsg+0x61b/0x980 [ 326.766270][ T9504] ? __asan_memset+0x22/0x40 [ 326.770915][ T9504] ? __sys_sendmsg_sock+0x30/0x30 [ 326.775986][ T9504] ? __import_iovec+0x5f2/0x850 [ 326.780890][ T9504] ? import_iovec+0x73/0xa0 [ 326.785450][ T9504] ___sys_sendmsg+0x2a6/0x360 [ 326.790178][ T9504] ? get_pid_task+0x20/0x1e0 [ 326.794818][ T9504] ? __sys_sendmsg+0x2b0/0x2b0 [ 326.799650][ T9504] ? __lock_acquire+0x7d80/0x7d80 [ 326.804746][ T9504] __se_sys_sendmsg+0x1d0/0x2c0 [ 326.809645][ T9504] ? __x64_sys_sendmsg+0x80/0x80 [ 326.814649][ T9504] ? lockdep_hardirqs_on+0x98/0x150 [ 326.819896][ T9504] do_syscall_64+0x55/0xb0 [ 326.824355][ T9504] ? clear_bhb_loop+0x40/0x90 [ 326.829062][ T9504] ? clear_bhb_loop+0x40/0x90 [ 326.833764][ T9504] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.839697][ T9504] RIP: 0033:0x7f040e39de59 [ 326.844151][ T9504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.863794][ T9504] RSP: 002b:00007f040c5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.872256][ T9504] RAX: ffffffffffffffda RBX: 00007f040e625fa0 RCX: 00007f040e39de59 [ 326.880269][ T9504] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 326.888284][ T9504] RBP: 00007f040c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 326.896305][ T9504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 326.904310][ T9504] R13: 00007f040e626038 R14: 00007f040e625fa0 R15: 00007ffda8b08b68 [ 326.912342][ T9504] [ 327.122044][ T9510] __nla_validate_parse: 3 callbacks suppressed [ 327.122089][ T9510] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1261'. [ 327.153440][ T9510] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 327.174295][ T9510] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 327.412305][ T9516] netlink: 'syz.0.1263': attribute type 2 has an invalid length. [ 327.451770][ T9516] netlink: 'syz.0.1263': attribute type 1 has an invalid length. [ 327.473671][ T9516] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1263'. [ 327.542018][ T9520] syzkaller0: entered promiscuous mode [ 327.549239][ T9520] syzkaller0: entered allmulticast mode [ 328.048103][ T9534] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1268'. [ 328.241522][ T9543] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1273'. [ 378.799482][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.811506][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 437.478461][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 437.485123][ C1] rcu: 1-....: (1 GPs behind) idle=1ffc/1/0x4000000000000000 softirq=31346/31347 fqs=5228 [ 437.495946][ C1] rcu: hardirqs softirqs csw/system [ 437.502361][ C1] rcu: number: 1426023 0 0 [ 437.508788][ C1] rcu: cputime: 16553 35946 63 ==> 52510(ms) [ 437.516626][ C1] rcu: (t=10502 jiffies g=41793 q=990 ncpus=2) [ 437.522912][ C1] CPU: 1 PID: 9558 Comm: syz.1.1279 Not tainted syzkaller #0 [ 437.530400][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 437.540513][ C1] RIP: 0010:alloc_covered_contains+0x43/0xe0 [ 437.546651][ C1] Code: 25 ff 01 00 00 4c 8d 34 85 a0 46 35 97 4c 89 f7 be 04 00 00 00 e8 5d d6 ff ff 4c 89 f0 48 c1 e8 03 42 0f b6 04 38 84 c0 75 63 <41> 8b 2e 31 ff 89 ee e8 51 60 a7 ff 85 ed 74 45 e8 98 5c a7 ff 69 [ 437.566295][ C1] RSP: 0018:ffffc900001f04b8 EFLAGS: 00000246 [ 437.572366][ C1] RAX: 0000000000000000 RBX: 0000000056a069d2 RCX: ffffffff81df88b3 [ 437.580347][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff97354de8 [ 437.588341][ C1] RBP: ffffc900001f07a8 R08: ffffffff97354deb R09: 1ffffffff2e6a9bd [ 437.596330][ C1] R10: dffffc0000000000 R11: fffffbfff2e6a9be R12: 00000000000000d6 [ 437.604306][ C1] R13: 00000000000000bf R14: ffffffff97354de8 R15: dffffc0000000000 [ 437.612279][ C1] FS: 00007f078459a6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 437.621233][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.627822][ C1] CR2: 0000000100000000 CR3: 000000005edc9000 CR4: 00000000003506e0 [ 437.635798][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 437.643768][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 437.651761][ C1] Call Trace: [ 437.655124][ C1] [ 437.658068][ C1] __kfence_alloc+0x340/0x3d0 [ 437.662825][ C1] ? kfence_guarded_free+0x4b0/0x4b0 [ 437.668177][ C1] ? sched_clock_cpu+0x75/0x430 [ 437.673068][ C1] ? __kfence_alloc+0x2d7/0x3d0 [ 437.677936][ C1] ? __kmem_cache_alloc_node+0x1f2/0x250 [ 437.683645][ C1] ? kmalloc_trace+0x2a/0xe0 [ 437.688296][ C1] ? dst_cow_metrics_generic+0x56/0x1b0 [ 437.693925][ C1] ? icmp6_dst_alloc+0x237/0x400 [ 437.698916][ C1] ? ndisc_send_skb+0x422/0x1480 [ 437.703879][ C1] ? addrconf_rs_timer+0x36b/0x640 [ 437.708992][ C1] ? call_timer_fn+0x189/0x540 [ 437.713771][ C1] ? __run_timers+0x570/0x810 [ 437.718451][ C1] ? run_timer_softirq+0x67/0xf0 [ 437.723396][ C1] ? handle_softirqs+0x27d/0x820 [ 437.728346][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 437.733114][ C1] ? irq_exit_rcu+0x9/0x20 [ 437.737534][ C1] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 437.743424][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 437.749704][ C1] ? finish_task_switch+0x267/0x8f0 [ 437.754932][ C1] ? __schedule+0x15b6/0x4660 [ 437.759656][ C1] ? preempt_schedule_common+0x82/0xc0 [ 437.765125][ C1] ? preempt_schedule+0xc0/0xd0 [ 437.769999][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 437.775421][ C1] ? smp_call_function_single+0x48d/0x5a0 [ 437.781170][ C1] ? perf_install_in_context+0x5bb/0x920 [ 437.786841][ C1] ? __se_sys_perf_event_open+0x1841/0x1c60 [ 437.792751][ C1] ? do_syscall_64+0x55/0xb0 [ 437.797371][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.803498][ C1] ? __kfence_alloc+0x5/0x3d0 [ 437.808202][ C1] ? dst_cow_metrics_generic+0x56/0x1b0 [ 437.813773][ C1] __kmem_cache_alloc_node+0x1f2/0x250 [ 437.819262][ C1] ? dst_cow_metrics_generic+0x56/0x1b0 [ 437.824823][ C1] ? dst_cow_metrics_generic+0x56/0x1b0 [ 437.830406][ C1] kmalloc_trace+0x2a/0xe0 [ 437.834846][ C1] dst_cow_metrics_generic+0x56/0x1b0 [ 437.840275][ C1] icmp6_dst_alloc+0x237/0x400 [ 437.845059][ C1] ndisc_send_skb+0x422/0x1480 [ 437.849833][ C1] ? ndisc_send_skb+0x201/0x1480 [ 437.854784][ C1] ? ndisc_alloc_skb+0x18c/0x450 [ 437.859732][ C1] ? ndisc_mc_map+0x680/0x680 [ 437.864422][ C1] ? __build_skb_around+0x245/0x3c0 [ 437.869746][ C1] addrconf_rs_timer+0x36b/0x640 [ 437.874703][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 437.880787][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 437.886787][ C1] call_timer_fn+0x189/0x540 [ 437.891400][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 437.897474][ C1] ? call_timer_fn+0xd2/0x540 [ 437.902159][ C1] ? __run_timers+0x810/0x810 [ 437.906873][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 437.912946][ C1] __run_timers+0x570/0x810 [ 437.917467][ C1] ? detach_timer+0x2b0/0x2b0 [ 437.922174][ C1] run_timer_softirq+0x67/0xf0 [ 437.926964][ C1] handle_softirqs+0x27d/0x820 [ 437.931747][ C1] ? read_tsc+0x9/0x20 [ 437.935847][ C1] ? ktime_get+0x24b/0x280 [ 437.940277][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 437.945052][ C1] ? do_softirq+0x1a0/0x1a0 [ 437.949569][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 437.954786][ C1] __irq_exit_rcu+0xd3/0x190 [ 437.959388][ C1] ? irq_exit_rcu+0x20/0x20 [ 437.963906][ C1] irq_exit_rcu+0x9/0x20 [ 437.968243][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 437.973886][ C1] [ 437.976822][ C1] [ 437.979806][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 437.985802][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 437.991619][ C1] Code: 2e 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 43 32 38 09 e8 8e 0a 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 438.011247][ C1] RSP: 0018:ffffc90004b5f760 EFLAGS: 00000286 [ 438.017323][ C1] RAX: 31d06accb73af800 RBX: 0000000000000000 RCX: 31d06accb73af800 [ 438.025297][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacb60 RDI: ffffffff8b1cfa20 [ 438.033277][ C1] RBP: ffffc90004b5f7b0 R08: ffffffff911e75ff R09: 1ffffffff223cebf [ 438.041252][ C1] R10: dffffc0000000000 R11: fffffbfff223cec0 R12: ffff888078a79e00 [ 438.049232][ C1] R13: 1ffff110171e79a9 R14: dffffc0000000000 R15: ffff8880b8f3cd48 [ 438.057238][ C1] __schedule+0x15b6/0x4660 [ 438.061765][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 438.068994][ C1] ? lock_chain_count+0x20/0x20 [ 438.073850][ C1] ? asan.module_dtor+0x20/0x20 [ 438.078704][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 438.084870][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 438.090088][ C1] ? preempt_schedule+0xc0/0xd0 [ 438.094946][ C1] preempt_schedule_common+0x82/0xc0 [ 438.100238][ C1] preempt_schedule+0xc0/0xd0 [ 438.104929][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 438.110565][ C1] ? event_function+0x300/0x300 [ 438.115441][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 438.121170][ C1] preempt_schedule_thunk+0x1a/0x30 [ 438.126380][ C1] ? smp_call_function_single+0x488/0x5a0 [ 438.132105][ C1] smp_call_function_single+0x48d/0x5a0 [ 438.137660][ C1] ? event_function+0x300/0x300 [ 438.142521][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 438.148679][ C1] ? event_function+0x300/0x300 [ 438.153546][ C1] perf_install_in_context+0x5bb/0x920 [ 438.159017][ C1] ? alloc_file_pseudo+0x1ae/0x210 [ 438.164131][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 438.170114][ C1] ? add_event_to_ctx+0x1170/0x1170 [ 438.175328][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 438.180557][ C1] ? perf_event__header_size+0x165/0x220 [ 438.186198][ C1] __se_sys_perf_event_open+0x1841/0x1c60 [ 438.191940][ C1] ? __fget_files+0x28/0x460 [ 438.196546][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 438.202190][ C1] ? lock_chain_count+0x20/0x20 [ 438.207053][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 438.212267][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 438.217904][ C1] do_syscall_64+0x55/0xb0 [ 438.222330][ C1] ? clear_bhb_loop+0x40/0x90 [ 438.227008][ C1] ? clear_bhb_loop+0x40/0x90 [ 438.231687][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.237598][ C1] RIP: 0033:0x7f078379de59 [ 438.242019][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.261624][ C1] RSP: 002b:00007f078459a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 438.270043][ C1] RAX: ffffffffffffffda RBX: 00007f0783a25fa0 RCX: 00007f078379de59 [ 438.278049][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 438.286026][ C1] RBP: 00007f0783833e6f R08: 000000000000000a R09: 0000000000000000 [ 438.294010][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 438.301992][ C1] R13: 00007f0783a26038 R14: 00007f0783a25fa0 R15: 00007ffd959f13b8 [ 438.309981][ C1] [ 440.235876][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.242407][ T1286] ieee802154 phy1 wpan1: encryption failed: -22