last executing test programs: 3.534318431s ago: executing program 2 (id=10638): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018113f00", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, 0x0, 0x4000080) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.693687893s ago: executing program 4 (id=10645): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, 0x0, 0x4008804) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x5, &(0x7f0000000040), 0x4) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x1a, 0x0, 0xffffffffffffffd2) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r4, &(0x7f0000001e40)={&(0x7f00000006c0)=@nfc_llcp, 0x80, 0x0}, 0x4000a042) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x9, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e7", 0x4b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000080000000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0), 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000002880)=ANY=[@ANYBLOB="b4000000000b00007910000000000000db100003a10000009500740000000000079c69dc7ded5dbe11b62ac5ea9fca11027d19e93adb605feb92de3145e8ed7ac5b8902070213cdfdc646c4890cdeb50347c32060581172b94c6dd22a2b589b6cbad46ed6ef79f7468f5e603950c4f67581c92ef8a7e000017d5f1110ed29d3b2aaf153bcf69bebf18262352ba68d39942c3b567e06411d8879622f74cc431dabd332c4c4702e4c3d41bfb54b574e8947309c7503c3e8ea23e12e064f442e8cbeab77cdf1ebd8465593c0000000000000000000000000000006f429b14459ffd88bee4b9d894ddad0980af53a1feb155f1010400bfb5b81b73035fd5a76985d4710fb6fbfb2a933a09dd6317e77ca962327022fb34017197ff712a35c63cdd0dec053fdbc310f29c6b8be788b559a80135bb7369351b952ade2339eddde60eb16301b0f4640be5852e1cef861b861b7b19ea03dfc83f729d02e9e73db24dd5dfb09d4b1bbbd5dd5daa4615b0845f264f229f9806862e116612ade616b1769e97549d095b0a4d02801406491d77a65f"], &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x94) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0x1}, 0x80, &(0x7f0000000180)}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x123001, 0x0) ioctl$TUNGETFEATURES(r7, 0x5452, &(0x7f0000001740)) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x16, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001418030000120800040043000000a8001600a400014020000500036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="a7994d33f6b4ef0a105b904efdd7f8dfedacf3791cd08699a2a5762204a1bf0d3f2d62ba0ae4e7b7efad324e26f64538f512a7cacad9b397c5e46cdf584e700b24d197366f52b06c9e3d140d2c1693c9dd75c9619dea5130e94fdcf09f0e9c827bb6bafb4c86902f0e", 0x69}], 0x1}, 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 2.633116264s ago: executing program 3 (id=10646): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0x7}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001540)="f4000900062b3325fe80000000000000", 0x18}, {&(0x7f0000000240)="45f289a31a11d10c1101fb2cc62ff73459000ec82c600374", 0x18}], 0x2}, 0x20000884) 2.513616725s ago: executing program 3 (id=10648): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403214700001237153e370248018000f01700d1bd", 0x2e}], 0x1}, 0x0) 2.501376376s ago: executing program 2 (id=10649): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x10c002, 0x7}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9", 0x0, 0x0, 0x0}, 0x38) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40003c22) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000205e00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x4}, 0x94) 2.480491146s ago: executing program 1 (id=10651): r0 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001780)) recvmsg$kcm(r0, 0x0, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) 2.338862978s ago: executing program 0 (id=10653): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfff0000000000002, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40002010) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x200040c4) sendmsg$sock(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x91b0000, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.336978818s ago: executing program 3 (id=10654): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60100c034002bf0900053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x600300) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60100c034002bf0900053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x600300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c003", 0x31}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) (async) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r4}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r4, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r2}, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x531900, 0x0) ioctl$TUNGETVNETBE(r7, 0x800454df, &(0x7f0000000e80)) (async) ioctl$TUNGETVNETBE(r7, 0x800454df, &(0x7f0000000e80)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)=r2}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], 0x0, 0x78, &(0x7f0000000840)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x30, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], 0x0, 0x78, &(0x7f0000000840)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x30, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)=r3}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000bc0)={0xffffffffffffffff, 0x10, 0x18}, 0xc) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000bc0)={0xffffffffffffffff, 0x10, 0x18}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)=r3}, 0x20) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0x30280, 0x0) ioctl$TUNGETVNETLE(r14, 0x800454dd, &(0x7f0000000e00)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x23, &(0x7f0000000540)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_val={0x18, 0x2, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7ff}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @generic={0x40, 0x9, 0x3, 0x7f, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}], &(0x7f0000000680)='syzkaller\x00', 0x4, 0xbf, &(0x7f00000006c0)=""/191, 0x41100, 0x0, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x2, 0x3, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, r11, r12, 0x1, 0xffffffffffffffff, r13], 0x0, 0x10, 0x80000000}, 0x94) 2.304293908s ago: executing program 1 (id=10655): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x5}, 0x21, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff010003d018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f, '\x00', 0x0, 0xfeff}, 0x21) 2.293415708s ago: executing program 2 (id=10656): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)}], 0x1}, 0xe900) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 2.19194758s ago: executing program 4 (id=10657): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001780)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000100)=""/45, 0x2d}, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 1.42666763s ago: executing program 4 (id=10658): socket$kcm(0x2, 0x1, 0x84) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x826, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000001c0)) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305828, &(0x7f0000000040)=0x20000) perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x87, 0x9, 0xc3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2f0, 0xf72a}, 0x0, 0x3, 0xfffffff9, 0x3, 0x0, 0x9, 0xc, 0x0, 0x1, 0x0, 0x6}, r3, 0x10, 0xffffffffffffffff, 0x6) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="2d6e65745f7072696f20f53cc4127b47bf335ae5e85ff2608ea11ce6b86846db67b36ed32a03fb646517235f164784be7161400f2d9ce74afb07f2bb853950ff442559b39f23a886d7aec551c699c6557bf545ca0e72128301e65d9522d7676e9c5dd49b033dcd53f0dd759900fd62fa346ce4fd8d5b657151306c5c4d58c7dff52fe5c3b1d5a4bf65805b52ecd306559b9f18b7b81701de0e1b20ab81974dc6894b50ebc3327601"], 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x3, 0x39f, 0x6, 0x1901, 0xffffffffffffffff, 0x4, '\x00', 0x0, r3, 0x0, 0x5}, 0x50) 1.255641063s ago: executing program 0 (id=10659): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a1180015000600140003000012", 0x28}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x69c, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x40000120) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="070000000000000000000000180000001892c9c100000001000013040000000000000101000000ff010000002e000000000000"], &(0x7f00000005c0)=""/217, 0x33, 0xd9, 0x1}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, &(0x7f0000000080)) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, &(0x7f0000000000)={r0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2842, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1.255302383s ago: executing program 1 (id=10660): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x6, 0xfe, 0x0, 0x0, 0x4d35, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000240)}, 0x0, 0x80002, 0xfffffffe, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800d8158f89b51c0000000000000000000000000000020000000000"], 0x0, 0x1a}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)=""/67, 0x121, 0x43, 0x0, 0x6}, 0x28) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db701", 0x9e}, {&(0x7f0000000840)="4360f393060f378e001ca673ea57a426634c163af362c429485c6e48860849d5315196c06ee8c59789df1fbbcd313340d9675037e96958fa6849", 0x3a}], 0x2}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001680)=[{0x0}], 0x1}, 0x24004044) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe33) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x109a42, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x3, &(0x7f0000001240)=ANY=[@ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x3, 0xc2, &(0x7f0000000540)=""/194, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) close(r5) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000013"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 1.253410473s ago: executing program 3 (id=10661): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) (fail_nth: 33) 1.182407944s ago: executing program 2 (id=10662): socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x12, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5, 0x0, 0x7fff, 0xfffd, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x880000000000, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) r3 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000012020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001a00000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeee}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000692addc555e0a4a81969bcb67eb30898e6fe1360eaaf73e3ac2236af96aaf450ba471c0415c1c0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r7 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x5452, &(0x7f0000000100)) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x8ed9e90c1d4f2726, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x3, 0x6, 0x6, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d80000001e0081124e81f782db4cb9040a1d080006007c095dd2086518000a800de7ffff02600e120800", 0x2a}], 0x1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000f35ddf54c97ae1a1702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70301000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x1) 646.802911ms ago: executing program 3 (id=10663): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1b, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0xa, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x26}, 0x28) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x80, 0x0}, 0x0) sendmsg$sock(r0, &(0x7f00000009c0)={&(0x7f0000000380)=@sco, 0x80, &(0x7f0000000900)=[{&(0x7f0000000400)="f69b00a0af3dbb21e542000f0bf00cc5053980c3c51e1826ef9ee161a5", 0x1d}, {&(0x7f0000000680)="7fd030675c99ab79ac2e7a1aee251f0effbd0c4f09a23f22e90b0afbdd7bb9397bfff1823cd107c88e5a564ada44494ef0d7fb3585f3efff6ca33f7c98d3d52cbe2a540cb5d07140388afc974109f855c30256afe6faa84b386cb35de73a5fa0a881b3bdd7c25457ef2aa4bb896515c74462bde7fb3965284dc120b6a817c37af2f7bfcc9bbd393fb711a9478fa52197593d19724c2397a79af8", 0x9a}, {&(0x7f00000008c0)="aba5ed527d3f3c5ba9c2c3ea16e373e6a3e43f6c553e7a8673337fffda322929cd399e66b21d81fed743897d552732592651af337d5ff342050d6b58220413", 0x3f}], 0x3}, 0x20008000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb90402200800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b00)="93c6ebdcaba85ec173f6b65e62ed000324b85de2faec62bb877f7042aa17bc15045443f50594dbd88b199bc09cbb82b27067f982fa32f84a15b13c6a5735bcd4525819fc64747616df879b7eec2775945a4cac07eee0ec8d0ea1f221f2b5da69b3eab7d3fe561a24b1b637b6ffeaa257085d696759f12f66d110a602a78b979d7d45e2135fea13a25a99e7a228144a9ea658b247f9642eeaa5f2b11bc0ad8f15c761292a01ce4da4567c546cf922e5bd59c67cbc47be2844f28dd2fcbf90ef95808635eac869a0d89790db42c8be7c790b7b9bff69698f003d", 0xd9}], 0x1, &(0x7f0000000c40)=[{0xb0, 0x110, 0x0, "f628a18e6a959675877026bd974297a91aa5b53133dc497d4b93e51019616e153ade0388216660d62fbbfa7908ececb6996b8678303721280c192913573e439f1d4943b47f481029e8ec7c60eeef6eb2c255f27a3ebbce9b788e027a0939a4e43e0345f32cf6a3d234ae578f2920c5f2cfcc60bacce5ccddff71c9e0409b075b842b09a775c84eb1e02e7669ba281337e117bbf3bf300cc2ecf907"}], 0xb0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000007c0)={0x0, &(0x7f0000000500)=""/42, 0x0, &(0x7f0000000780)="95d21d0a96710298a8357aa0fc4ed979382837c1c1bd54d6963d695df54a", 0x6}, 0x38) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000020000040000000300000000000c000000000000"], 0xffffffffffffffff, 0x3e, 0xb2, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r2 = syz_clone(0x10100, 0x0, 0x0, &(0x7f0000001240), &(0x7f0000001280), &(0x7f00000012c0)) openat$tun(0xffffffffffffff9c, 0x0, 0x4000, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xa}, 0x4408, 0x100000000, 0x4800000, 0x0, 0xfffffffffff7bbfb, 0x0, 0x0, 0x0, 0x5ff, 0x0, 0x9}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0xe006, 0x0, 0xc2b8, 0x0, 0x3, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r3, 0x8, 0x0, 0x0, 0x14}, 0x94) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) 646.360241ms ago: executing program 0 (id=10664): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000040850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0xfffffffffffffcee, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 514.936303ms ago: executing program 1 (id=10665): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0x7}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001540)="f4000900062b3325fe80000000000000", 0x18}, {&(0x7f0000000240)="45f289a31a11d10c1101fb2cc62ff73459000ec82c600374", 0x18}], 0x2}, 0x20000884) 467.181693ms ago: executing program 0 (id=10666): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000100)=r1, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb2}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7, 0x0, 0x2000}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 454.884224ms ago: executing program 1 (id=10667): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, 0x0, 0x4008804) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x5, &(0x7f0000000040), 0x4) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x1a, 0x0, 0xffffffffffffffd2) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r4, &(0x7f0000001e40)={&(0x7f00000006c0)=@nfc_llcp, 0x80, 0x0}, 0x4000a042) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x9, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e7", 0x4b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000080000000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0), 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000002880)=ANY=[@ANYBLOB="b4000000000b00007910000000000000db100003a10000009500740000000000079c69dc7ded5dbe11b62ac5ea9fca11027d19e93adb605feb92de3145e8ed7ac5b8902070213cdfdc646c4890cdeb50347c32060581172b94c6dd22a2b589b6cbad46ed6ef79f7468f5e603950c4f67581c92ef8a7e000017d5f1110ed29d3b2aaf153bcf69bebf18262352ba68d39942c3b567e06411d8879622f74cc431dabd332c4c4702e4c3d41bfb54b574e8947309c7503c3e8ea23e12e064f442e8cbeab77cdf1ebd8465593c0000000000000000000000000000006f429b14459ffd88bee4b9d894ddad0980af53a1feb155f1010400bfb5b81b73035fd5a76985d4710fb6fbfb2a933a09dd6317e77ca962327022fb34017197ff712a35c63cdd0dec053fdbc310f29c6b8be788b559a80135bb7369351b952ade2339eddde60eb16301b0f4640be5852e1cef861b861b7b19ea03dfc83f729d02e9e73db24dd5dfb09d4b1bbbd5dd5daa4615b0845f264f229f9806862e116612ade616b1769e97549d095b0a4d02801406491d77a65f"], &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x94) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0x1}, 0x80, &(0x7f0000000180)}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x123001, 0x0) ioctl$TUNGETFEATURES(r7, 0x5452, &(0x7f0000001740)) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x16, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001418030000120800040043000000a8001600a400014020000500036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="a7994d33f6b4ef0a105b904efdd7f8dfedacf3791cd08699a2a5762204a1bf0d3f2d62ba0ae4e7b7efad324e26f64538f512a7cacad9b397c5e46cdf584e700b24d197366f52b06c9e3d140d2c1693c9dd75c9619dea5130e94fdcf09f0e9c827bb6bafb4c86902f0e", 0x69}], 0x1}, 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 441.854454ms ago: executing program 2 (id=10668): r0 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001780)) recvmsg$kcm(r0, 0x0, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) 313.480256ms ago: executing program 4 (id=10669): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x10c002, 0x7}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9", 0x0, 0x0, 0x0}, 0x38) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40003c22) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000645e00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x4}, 0x94) 229.645727ms ago: executing program 3 (id=10670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x7400}, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1bf274aa22d103000000ffffffff000000000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x14, &(0x7f0000000040), 0x3b) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x12, 0x2, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xe1, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702004054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3090000e1000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1003, &(0x7f0000003e80)=""/4099, 0x41100, 0xd}, 0x94) r4 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000001ec0)={&(0x7f0000001a00)=@isdn={0x22, 0x1, 0x2, 0x2, 0xa}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001a80)="1425002b7e8ce9c462a77df9700ad9337856264f8f5b34ef0f94f22e2e16c0ddb8c2b7a9302ba011ab5c200d9add4a452924a2ec812960bc89c0b7ce9cc5f4d233c1a4f041d07699cdb320858eda148a05ddfa49040e65d9dcf18f227875c57a9fc52148e8ee5da3517fc9fad729098768852767432e635381a94b57d663521e80befce9bc3a7052cd56ee30102e600ef7dbb47c783605888acc7362e74627016a7e025ffbea3d", 0xa7}, {&(0x7f0000001b40)="5145a1077c613b75ba53676ee38f742b1326aeec31e2da64a388f889fc09123b8d6570d53b52c5f873fa71c6bbbca9e486dc1b019cb78364ed760ac58deec22c636da51df0ad6687d32f45b39b0d2f3b72e792c37c50fbe0d6cdf8f7a21e0ff31a542ca5b4d7f38d31f4dff4a26d70ff8e1c2804cac4284ed9d8c73a827dc41545833fc0c0e20788467a0b8f6257bfe267596277b8e6ebab190e01e9aad9d65638edbeb126e448517bf61e2e26dd941100724620cb9f", 0xb6}, {&(0x7f0000001c40)="a045420460311f80168f2348d5f3c66f2d9ac4bd", 0x14}], 0x3, &(0x7f0000001cc0)=[{0x80, 0x10a, 0x101, "a0a23dcef34c81862ed8112371e284604338f6db7e5109d958f61eb83cb51892aa8de3c8c965212053830ca7c6a26b9c36d7ec2040271e4be10b3e29c77bde0bcaabae095c7fbdcf79457491206e454ee51f7e404e91dafd88721560cb82ad89d8fe25806017c26eedbcfe8b8910a9"}, {0x10, 0x29, 0x8}, {0x98, 0x109, 0x5, "597139e50170680ddf014888620adc8ef45f741d909bad6438fa171cdc9bc31710c7b394ee40f210d2b074db821ccb64837793eb9c4456391cb253398cb5ced9b7b66847e4e8fe93518cee44a7379901e2ac77baf283edb23c58d58ebc94d6e122a2b30698cc99f62e16587ff9b5425da32e77e73dad7d5e8751c7ee2eb766084dbafc"}], 0x128}, 0x40000) 204.476907ms ago: executing program 2 (id=10671): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x12, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20c8}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xba}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}, @alu={0x7, 0x0, 0x3, 0x9, 0x0, 0x10, 0x10}]}, &(0x7f0000000100)='syzkaller\x00', 0x80000000, 0x80, &(0x7f0000000140)=""/128, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x8, 0xb, 0xfffffff7}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000280)=[{0x2, 0x3, 0x5, 0x7}, {0x5, 0x5, 0x8, 0x6}, {0x4, 0x1, 0xd, 0x3}], 0x10, 0x6e61}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x4, 0x0}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000780)={0x4, 0x80, 0x3, 0x2, 0x31, 0x10, 0x0, 0x5, 0x8200, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000740), 0x6}, 0x0, 0x7, 0x7ff, 0x6, 0x7, 0x6, 0xfff7, 0x0, 0x4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) bpf$BPF_GET_MAP_INFO(0xf, 0xfffffffffffffffd, 0xf0) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x228000, 0x0) ioctl$TUNSETCARRIER(r9, 0x400454e2, &(0x7f0000000600)=0x1) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$sock_attach_bpf(r10, 0x6, 0x5, &(0x7f0000000000)=r11, 0x4) close(r7) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=r8, @ANYRES32=r2, @ANYBLOB='\v\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0f299972cdcd04dcecf8537463dfdfe230368fa5f8a26bf73bad210aef950786801c50171d1e6354be1309838364e58a75ee75d0f93e2664731df05f2bc2c6f7e25f54d64f6a4da62951490031e7ed52a647c6f855be305dee6f6daa1eae0d3f6c17bd7963e06a0694e8b687133e6d7272999be9ae5800322adb3a5449a04bfaa22764434263286350ca9174cc3078406fac647600b79c7689fb74e5b90e12bcd7f48c1da9e471ac71b5233d516e9e8209a258716f3cfdcf724fbb172a6feca90dc1f28b0600c754574a9f155ab6abe983fde80afe109a80e9214d18359f0a15982b1b38b83cf8a0c3f1659a301c40ac1a19bbd5b2753ce4bc1d40acc3d5155dc1dfb34a9d930f1b4926f4e2034b0033098ad7aac9581c6f8019c076f88514c3b0856a873272c4ff08fb75c696ccf13d5087fa7a2663d32ab8d8d969dbb27d1d87a31dbb56f0d5e0a6becf570cb633da9447799e2e6d02a788cd17f1ebcf9340ea39cf676931a562ad15764fd86c76aaecddd3f7cf3d6c85b4d6e64736fb3da8186f4b500e4a226177b129a9d26247159e3c1631a69f9bd0ac27d503ea087302da61c6a6085c827f8acba8ca3ad28db5dc545e75a75db36caaecd1bfdd383fca190d0fe5eaa4a699607fb72ff417d18005445ce021fe", @ANYRES64=0x0], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, r1, r0}, 0x94) 154.994508ms ago: executing program 0 (id=10672): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000540)=""/263, 0x107}, {&(0x7f0000000680)=""/222, 0xde}, {&(0x7f00000001c0)=""/230, 0xe6}, {&(0x7f0000000340)=""/321, 0x141}, {&(0x7f0000000e80)=""/4178, 0x1052}, {&(0x7f0000000780)=""/112, 0x70}], 0x6}, 0x2000) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r0, &(0x7f0000000e40)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/186, 0xba}, {&(0x7f00000009c0)=""/133, 0x85}, {&(0x7f0000000a80)=""/234, 0xea}, {&(0x7f0000000b80)=""/109, 0x6d}, {&(0x7f0000000c00)=""/142, 0x8e}], 0x5, &(0x7f0000000d40)=""/252, 0xfc}, 0x0) 154.664988ms ago: executing program 4 (id=10673): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a4000140040000f5026010fab94d86fe00000021000094007134cf6ee08000a1e408e8d8ef52a98516277ce06bbace8017cbec4c2ea4b84065bc074d4f9f77e5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9eb8ec0000ccd40dd6e4edef3d93", 0xd8}], 0x1}, 0x0) 111.503109ms ago: executing program 1 (id=10674): r0 = socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x25, 0x2008}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000a0000000000008001"], 0x50) ioctl$TUNSETOFFLOAD(r1, 0x80086601, 0x11) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001800)={@map=r1, 0xffffffffffffffff, 0x2c, 0x2000, 0x0, @value=r0}, 0x20) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xc3f6, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000600)={r3, &(0x7f0000000240), &(0x7f0000000580)=""/82, 0x4}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async, rerun: 32) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) (rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) close(0x3) (async, rerun: 64) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x80, 0x0}, 0x20000000) (async) sendmsg$kcm(r5, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x4000003, @empty}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) (async) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[], 0xfe33) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) (async) recvmsg$kcm(r8, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x10020) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000540)='(pu&00\t||') 11.78197ms ago: executing program 4 (id=10675): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a1180015000600140003000012", 0x28}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x69c, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x40000120) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="070000000000000000000000180000001892c9c100000001000013040000000000000101000000ff010000002e000000000000"], &(0x7f00000005c0)=""/217, 0x33, 0xd9, 0x1}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, &(0x7f0000000080)) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, &(0x7f0000000000)={r0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2842, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 0s ago: executing program 0 (id=10676): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfff0000000000002, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40002010) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x200040c4) sendmsg$sock(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x10000000, 0x0, '\x00', 0x0, @sk_msg}, 0x48) kernel console output (not intermixed with test programs): netlink: 128 bytes leftover after parsing attributes in process `syz.0.9580'. [ 1250.865174][ T1345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1250.964447][ T1345] netlink: 'syz.0.9580': attribute type 10 has an invalid length. [ 1251.296949][ T1358] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9595'. [ 1251.307652][ T1358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1251.327248][ T1360] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9585'. [ 1251.350739][ T1360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1251.384359][ T1358] netlink: 'syz.0.9595': attribute type 10 has an invalid length. [ 1252.627740][ T1402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1253.932856][ T1437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1253.993958][ T1437] validate_nla: 8 callbacks suppressed [ 1253.993990][ T1437] netlink: 'syz.4.9615': attribute type 10 has an invalid length. [ 1255.056322][ T1457] netlink: 'syz.4.9623': attribute type 10 has an invalid length. [ 1255.085838][ T1457] __nla_validate_parse: 4 callbacks suppressed [ 1255.085879][ T1457] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.9623'. [ 1255.503199][ T1469] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9629'. [ 1255.541478][ T1469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1255.594181][ T1476] netlink: 'syz.2.9629': attribute type 10 has an invalid length. [ 1256.188330][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 1256.785763][ T1504] netlink: 'syz.0.9638': attribute type 3 has an invalid length. [ 1256.817082][ T1504] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9638'. [ 1257.001837][ T1507] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9637'. [ 1257.058443][ T1507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1257.177296][ T1509] netlink: 'syz.4.9637': attribute type 10 has an invalid length. [ 1257.202690][ T1515] netlink: 'syz.0.9640': attribute type 10 has an invalid length. [ 1257.228573][ T1515] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.9640'. [ 1257.773710][ T1531] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9645'. [ 1257.794881][ T1531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1257.833628][ T1534] netlink: 'syz.0.9648': attribute type 21 has an invalid length. [ 1257.858750][ T1531] netlink: 'syz.2.9645': attribute type 10 has an invalid length. [ 1258.239622][ T1546] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9662'. [ 1258.281617][ T1546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1258.387411][ T1546] netlink: 'syz.2.9662': attribute type 10 has an invalid length. [ 1258.515907][ T1555] netlink: 'syz.4.9654': attribute type 10 has an invalid length. [ 1258.613612][ T1555] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.9654'. [ 1258.768590][ T1547] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.9652'. [ 1258.829221][ T1560] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9656'. [ 1258.849416][ T1560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1260.101305][ T1590] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9667'. [ 1260.135325][ T1590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1260.213053][ T1590] validate_nla: 2 callbacks suppressed [ 1260.213087][ T1590] netlink: 'syz.4.9667': attribute type 10 has an invalid length. [ 1260.494949][ T1605] netlink: 'syz.0.9673': attribute type 10 has an invalid length. [ 1260.520752][ T1605] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.9673'. [ 1260.848985][ T1616] IPv6: pim6reg1: Disabled Multicast RS [ 1260.916198][ T1618] device pim6reg1 entered promiscuous mode [ 1261.205924][ T1630] netlink: 'syz.2.9683': attribute type 21 has an invalid length. [ 1261.384920][ T1635] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9684'. [ 1261.645135][ T1645] netlink: 'syz.0.9689': attribute type 10 has an invalid length. [ 1261.680995][ T1645] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.9689'. [ 1262.623043][ T1669] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.9700'. [ 1262.656829][ T1675] netlink: 'syz.0.9702': attribute type 3 has an invalid length. [ 1262.665595][ T1675] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9702'. [ 1263.021355][ T1690] netlink: 'syz.4.9704': attribute type 10 has an invalid length. [ 1263.102375][ T1690] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.9704'. [ 1264.773601][ T1747] netlink: 'syz.4.9726': attribute type 10 has an invalid length. [ 1264.802312][ T1747] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.9726'. [ 1265.799313][ T1793] netlink: 'syz.4.9742': attribute type 10 has an invalid length. [ 1265.848446][ T1793] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.9742'. [ 1265.986004][ T1797] netlink: 'syz.0.9746': attribute type 21 has an invalid length. [ 1266.209260][ T1801] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1267.474893][ T1832] netlink: 'syz.3.9760': attribute type 10 has an invalid length. [ 1267.521328][ T1832] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.9760'. [ 1267.723716][ T1850] netlink: 'syz.2.9766': attribute type 21 has an invalid length. [ 1271.660297][ T1890] netlink: 'syz.2.9779': attribute type 10 has an invalid length. [ 1271.718360][ T1890] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.9779'. [ 1272.077409][ T1907] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1272.263019][ T1912] netlink: 'syz.0.9787': attribute type 10 has an invalid length. [ 1272.288555][ T1912] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.9787'. [ 1272.813841][ T1933] netlink: 'syz.3.9794': attribute type 10 has an invalid length. [ 1272.893431][ T1933] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.9794'. [ 1272.982802][ T1942] delete_channel: no stack [ 1273.485142][ T1960] netlink: 'syz.4.9807': attribute type 21 has an invalid length. [ 1273.495303][ T1961] netlink: 'syz.2.9808': attribute type 21 has an invalid length. [ 1274.023074][ T1973] netlink: 'syz.3.9812': attribute type 10 has an invalid length. [ 1274.098396][ T1973] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.9812'. [ 1274.788001][ T2005] __sock_release: fasync list not empty! [ 1274.830795][ T2006] netlink: 'syz.0.9822': attribute type 10 has an invalid length. [ 1275.040831][ T2006] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.9822'. [ 1275.263142][ T2019] netlink: 'syz.3.9827': attribute type 21 has an invalid length. [ 1275.287915][ T2019] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9827'. [ 1275.479995][ T2027] netlink: 'syz.3.9831': attribute type 21 has an invalid length. [ 1275.517661][ T2023] netlink: 'syz.4.9829': attribute type 10 has an invalid length. [ 1275.539929][ T2023] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.9829'. [ 1275.728498][ T2034] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9832'. [ 1275.828458][ T2034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1277.423142][ T2072] validate_nla: 3 callbacks suppressed [ 1277.423161][ T2072] netlink: 'syz.4.9841': attribute type 10 has an invalid length. [ 1277.676450][ T2072] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.9841'. [ 1277.707299][ T2074] netlink: 'syz.0.9844': attribute type 10 has an invalid length. [ 1277.748784][ T2074] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.9844'. [ 1277.922506][ T2082] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9847'. [ 1277.937807][ T2082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1277.979204][ T2084] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9849'. [ 1278.016784][ T2082] netlink: 'syz.3.9847': attribute type 10 has an invalid length. [ 1278.856880][ T2103] netlink: 'syz.0.9853': attribute type 29 has an invalid length. [ 1278.895378][ T2103] netlink: 'syz.0.9853': attribute type 29 has an invalid length. [ 1279.253967][ T2111] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1279.335374][ T2111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1279.497225][ T2114] netlink: 'syz.2.9859': attribute type 10 has an invalid length. [ 1279.531862][ T2114] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.9859'. [ 1279.673176][ T2120] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9861'. [ 1279.696750][ T2120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1279.766445][ T2120] netlink: 'syz.4.9861': attribute type 10 has an invalid length. [ 1280.876542][ T2155] netlink: 'syz.0.9873': attribute type 10 has an invalid length. [ 1280.965081][ T2155] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.9873'. [ 1281.349624][ T2166] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9875'. [ 1281.567269][ T2172] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9877'. [ 1281.633992][ T2172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1281.802397][ T2174] netlink: 'syz.0.9877': attribute type 10 has an invalid length. [ 1281.950195][ T2180] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1283.085946][ T2219] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9893'. [ 1283.191015][ T2219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1283.226444][ T2224] FAULT_INJECTION: forcing a failure. [ 1283.226444][ T2224] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.255891][ T2224] CPU: 0 PID: 2224 Comm: syz.3.9894 Not tainted syzkaller #0 [ 1283.263459][ T2224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1283.273621][ T2224] Call Trace: [ 1283.276908][ T2224] [ 1283.279864][ T2224] dump_stack_lvl+0x188/0x24e [ 1283.284556][ T2224] ? show_regs_print_info+0x12/0x12 [ 1283.289842][ T2224] ? load_image+0x410/0x410 [ 1283.295086][ T2224] ? __might_sleep+0xd0/0xd0 [ 1283.299869][ T2224] ? __lock_acquire+0x7bd0/0x7bd0 [ 1283.304918][ T2224] should_fail_ex+0x390/0x4c0 [ 1283.309686][ T2224] should_failslab+0x5/0x20 [ 1283.314209][ T2224] slab_pre_alloc_hook+0x59/0x300 [ 1283.319337][ T2224] ? sctp_association_new+0x86/0x2520 [ 1283.324888][ T2224] __kmem_cache_alloc_node+0x4f/0x270 [ 1283.330262][ T2224] ? sctp_has_association+0x8e/0x440 [ 1283.335542][ T2224] ? sctp_association_new+0x86/0x2520 [ 1283.340917][ T2224] kmalloc_trace+0x26/0xe0 [ 1283.345334][ T2224] sctp_association_new+0x86/0x2520 [ 1283.350541][ T2224] sctp_connect_new_asoc+0x2da/0x6a0 [ 1283.355923][ T2224] ? __sctp_connect+0xd80/0xd80 [ 1283.361083][ T2224] ? __local_bh_enable_ip+0x136/0x1c0 [ 1283.367141][ T2224] ? _local_bh_enable+0xa0/0xa0 [ 1283.371993][ T2224] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1283.377819][ T2224] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1283.383728][ T2224] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1283.389309][ T2224] ? security_sctp_bind_connect+0x85/0xb0 [ 1283.395028][ T2224] sctp_sendmsg+0x1686/0x2940 [ 1283.399715][ T2224] ? sctp_getsockopt+0x8a0/0x8a0 [ 1283.404669][ T2224] ? __might_fault+0xa6/0x120 [ 1283.409360][ T2224] ? aa_af_perm+0x340/0x340 [ 1283.413878][ T2224] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1283.420316][ T2224] ? inet_sendmsg+0x7a/0x2a0 [ 1283.424905][ T2224] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1283.430217][ T2224] ? inet_send_prepare+0x250/0x250 [ 1283.435335][ T2224] ____sys_sendmsg+0x5ed/0x9a0 [ 1283.440109][ T2224] ? __sys_sendmsg_sock+0x30/0x30 [ 1283.445227][ T2224] ? __import_iovec+0x306/0x510 [ 1283.450085][ T2224] ? import_iovec+0x6f/0xa0 [ 1283.454676][ T2224] ___sys_sendmsg+0x2a2/0x360 [ 1283.459354][ T2224] ? __sys_sendmsg+0x2a0/0x2a0 [ 1283.464230][ T2224] ? __lock_acquire+0x7bd0/0x7bd0 [ 1283.469276][ T2224] __se_sys_sendmsg+0x1c3/0x2b0 [ 1283.474325][ T2224] ? __x64_sys_sendmsg+0x80/0x80 [ 1283.479294][ T2224] ? lockdep_hardirqs_on+0x94/0x140 [ 1283.484499][ T2224] do_syscall_64+0x4c/0xa0 [ 1283.489000][ T2224] ? clear_bhb_loop+0x60/0xb0 [ 1283.493684][ T2224] ? clear_bhb_loop+0x60/0xb0 [ 1283.498370][ T2224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1283.504366][ T2224] RIP: 0033:0x7fe432f9ce59 [ 1283.508787][ T2224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1283.528657][ T2224] RSP: 002b:00007fe433d8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1283.537166][ T2224] RAX: ffffffffffffffda RBX: 00007fe433216090 RCX: 00007fe432f9ce59 [ 1283.545166][ T2224] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000004 [ 1283.553244][ T2224] RBP: 00007fe433d8e090 R08: 0000000000000000 R09: 0000000000000000 [ 1283.561582][ T2224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1283.569566][ T2224] R13: 00007fe433216128 R14: 00007fe433216090 R15: 00007ffcf6b48638 [ 1283.577723][ T2224] [ 1283.605389][ T2222] netlink: 'syz.1.9893': attribute type 10 has an invalid length. [ 1283.679694][ T2226] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9895'. [ 1284.693950][ T2250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9905'. [ 1285.556049][ T2263] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9910'. [ 1285.596084][ T2263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1285.672860][ T2263] netlink: 'syz.2.9910': attribute type 10 has an invalid length. [ 1286.949255][ T2307] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9921'. [ 1286.979131][ T2307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1287.039114][ T2309] netlink: 'syz.3.9921': attribute type 10 has an invalid length. [ 1287.184839][ T2317] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9925'. [ 1287.247461][ T2320] netlink: 'syz.3.9928': attribute type 29 has an invalid length. [ 1287.251220][ T2317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1287.318895][ T2320] netlink: 'syz.3.9928': attribute type 29 has an invalid length. [ 1287.332959][ T2322] netlink: 'syz.2.9925': attribute type 10 has an invalid length. [ 1287.355433][ T2320] netlink: 'syz.3.9928': attribute type 29 has an invalid length. [ 1288.071428][ T2353] netlink: 'syz.2.9939': attribute type 21 has an invalid length. [ 1288.346672][ T2361] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9941'. [ 1288.357963][ T2361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1288.382175][ T2361] netlink: 'syz.1.9941': attribute type 10 has an invalid length. [ 1288.562355][ T2373] FAULT_INJECTION: forcing a failure. [ 1288.562355][ T2373] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.593265][ T2373] CPU: 1 PID: 2373 Comm: syz.1.9945 Not tainted syzkaller #0 [ 1288.600803][ T2373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1288.611000][ T2373] Call Trace: [ 1288.614327][ T2373] [ 1288.617294][ T2373] dump_stack_lvl+0x188/0x24e [ 1288.622022][ T2373] ? show_regs_print_info+0x12/0x12 [ 1288.627344][ T2373] ? load_image+0x410/0x410 [ 1288.631883][ T2373] ? __lock_acquire+0x7bd0/0x7bd0 [ 1288.637309][ T2373] ? rcu_is_watching+0x11/0xa0 [ 1288.642221][ T2373] ? __alloc_pages+0x290/0x4f0 [ 1288.647225][ T2373] should_fail_ex+0x390/0x4c0 [ 1288.651980][ T2373] should_failslab+0x5/0x20 [ 1288.656528][ T2373] slab_pre_alloc_hook+0x59/0x300 [ 1288.661820][ T2373] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1288.667855][ T2373] __kmem_cache_alloc_node+0x4f/0x270 [ 1288.673292][ T2373] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1288.679241][ T2373] kmalloc_trace+0x26/0xe0 [ 1288.683728][ T2373] sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1288.689504][ T2373] ? sctp_stream_interleave_init+0x54/0x90 [ 1288.695402][ T2373] sctp_association_new+0x15d4/0x2520 [ 1288.700846][ T2373] sctp_connect_new_asoc+0x2da/0x6a0 [ 1288.706189][ T2373] ? __sctp_connect+0xd80/0xd80 [ 1288.711092][ T2373] ? __local_bh_enable_ip+0x136/0x1c0 [ 1288.716772][ T2373] ? _local_bh_enable+0xa0/0xa0 [ 1288.721668][ T2373] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1288.727520][ T2373] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1288.733468][ T2373] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1288.739073][ T2373] ? security_sctp_bind_connect+0x85/0xb0 [ 1288.744939][ T2373] sctp_sendmsg+0x1686/0x2940 [ 1288.749871][ T2373] ? sctp_getsockopt+0x8a0/0x8a0 [ 1288.754854][ T2373] ? __might_fault+0xa6/0x120 [ 1288.759588][ T2373] ? aa_af_perm+0x340/0x340 [ 1288.764149][ T2373] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1288.770642][ T2373] ? inet_sendmsg+0x7a/0x2a0 [ 1288.775281][ T2373] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1288.780622][ T2373] ? inet_send_prepare+0x250/0x250 [ 1288.786316][ T2373] ____sys_sendmsg+0x5ed/0x9a0 [ 1288.788590][ T2388] netlink: 'syz.4.9946': attribute type 39 has an invalid length. [ 1288.791561][ T2373] ? __sys_sendmsg_sock+0x30/0x30 [ 1288.804651][ T2373] ? __import_iovec+0x306/0x510 [ 1288.809574][ T2373] ? import_iovec+0x6f/0xa0 [ 1288.814131][ T2373] ___sys_sendmsg+0x2a2/0x360 [ 1288.818867][ T2373] ? __sys_sendmsg+0x2a0/0x2a0 [ 1288.823741][ T2373] ? __lock_acquire+0x7bd0/0x7bd0 [ 1288.829045][ T2373] __se_sys_sendmsg+0x1c3/0x2b0 [ 1288.834036][ T2373] ? __x64_sys_sendmsg+0x80/0x80 [ 1288.839225][ T2373] ? lockdep_hardirqs_on+0x94/0x140 [ 1288.844497][ T2373] do_syscall_64+0x4c/0xa0 [ 1288.849399][ T2373] ? clear_bhb_loop+0x60/0xb0 [ 1288.854127][ T2373] ? clear_bhb_loop+0x60/0xb0 [ 1288.859041][ T2373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1288.865155][ T2373] RIP: 0033:0x7f354199ce59 [ 1288.869615][ T2373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.889514][ T2373] RSP: 002b:00007f3542888028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1288.897973][ T2373] RAX: ffffffffffffffda RBX: 00007f3541c15fa0 RCX: 00007f354199ce59 [ 1288.906072][ T2373] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000004 [ 1288.914443][ T2373] RBP: 00007f3542888090 R08: 0000000000000000 R09: 0000000000000000 [ 1288.922551][ T2373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1288.930925][ T2373] R13: 00007f3541c16038 R14: 00007f3541c15fa0 R15: 00007ffdbf348388 [ 1288.939322][ T2373] [ 1289.146470][ T2417] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1289.460721][ T2425] netlink: 'syz.0.9953': attribute type 1 has an invalid length. [ 1289.469734][ T2425] netlink: 'syz.0.9953': attribute type 3 has an invalid length. [ 1289.477580][ T2425] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9953'. [ 1289.682988][ T2420] delete_channel: no stack [ 1289.800174][ T2432] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9955'. [ 1289.818505][ T2432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1289.853723][ T2432] netlink: 'syz.2.9955': attribute type 10 has an invalid length. [ 1290.215687][ T2446] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9959'. [ 1290.239776][ T2446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1290.263603][ T2446] netlink: 'syz.2.9959': attribute type 10 has an invalid length. [ 1290.494721][ T2455] netlink: 'syz.2.9963': attribute type 21 has an invalid length. [ 1292.090169][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 1292.121933][ T2484] netlink: 'syz.0.9970': attribute type 11 has an invalid length. [ 1292.136442][ T2484] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9970'. [ 1292.184466][ T2484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1292.194770][ T2483] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9969'. [ 1292.210422][ T2483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1292.310488][ T2489] netlink: 'syz.2.9969': attribute type 10 has an invalid length. [ 1292.797515][ T2403] tipc: Subscription rejected, illegal request [ 1293.990509][ T2545] syz.2.9989[2545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1294.004249][ T2545] TCP: TCP_TX_DELAY enabled [ 1294.781064][ T2584] netlink: 'syz.2.10000': attribute type 1 has an invalid length. [ 1294.818255][ T2584] netlink: 'syz.2.10000': attribute type 3 has an invalid length. [ 1294.848239][ T2584] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10000'. [ 1294.881443][ T2590] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1295.022216][ T2579] delete_channel: no stack [ 1295.409325][ T2611] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10012'. [ 1295.440423][ T2611] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10012'. [ 1295.472917][ T2611] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10012'. [ 1295.494389][ T2612] netlink: 'syz.4.10009': attribute type 11 has an invalid length. [ 1295.494903][ T2611] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10012'. [ 1295.535176][ T2612] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10009'. [ 1295.553178][ T2623] FAULT_INJECTION: forcing a failure. [ 1295.553178][ T2623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1295.571025][ T2623] CPU: 1 PID: 2623 Comm: syz.3.10015 Not tainted syzkaller #0 [ 1295.578544][ T2623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1295.588747][ T2623] Call Trace: [ 1295.592322][ T2623] [ 1295.595268][ T2623] dump_stack_lvl+0x188/0x24e [ 1295.599978][ T2623] ? show_regs_print_info+0x12/0x12 [ 1295.602532][ T2625] netlink: 'syz.3.10015': attribute type 29 has an invalid length. [ 1295.605446][ T2623] ? load_image+0x410/0x410 [ 1295.617874][ T2623] ? __lock_acquire+0x7bd0/0x7bd0 [ 1295.622946][ T2623] should_fail_ex+0x390/0x4c0 [ 1295.627679][ T2623] _copy_from_user+0x2c/0x170 [ 1295.632741][ T2623] ___sys_recvmsg+0x170/0x590 [ 1295.637534][ T2623] ? __sys_recvmsg+0x2a0/0x2a0 [ 1295.642327][ T2623] ? common_file_perm+0x171/0x1c0 [ 1295.647570][ T2623] ? __fget_files+0x3fc/0x460 [ 1295.652396][ T2623] __x64_sys_recvmsg+0x20d/0x2e0 [ 1295.657367][ T2623] ? ___sys_recvmsg+0x590/0x590 [ 1295.662296][ T2623] ? lockdep_hardirqs_on+0x94/0x140 [ 1295.667533][ T2623] do_syscall_64+0x4c/0xa0 [ 1295.672063][ T2623] ? clear_bhb_loop+0x60/0xb0 [ 1295.676765][ T2623] ? clear_bhb_loop+0x60/0xb0 [ 1295.681560][ T2623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1295.687491][ T2623] RIP: 0033:0x7fe432f9ce59 [ 1295.691911][ T2623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.711650][ T2623] RSP: 002b:00007fe433daf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1295.720073][ T2623] RAX: ffffffffffffffda RBX: 00007fe433215fa0 RCX: 00007fe432f9ce59 [ 1295.728055][ T2623] RDX: 0000000000002000 RSI: 0000200000000300 RDI: 0000000000000003 [ 1295.736112][ T2623] RBP: 00007fe433daf090 R08: 0000000000000000 R09: 0000000000000000 [ 1295.744180][ T2623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1295.752236][ T2623] R13: 00007fe433216038 R14: 00007fe433215fa0 R15: 00007ffcf6b48638 [ 1295.760307][ T2623] [ 1295.772733][ T2625] netlink: 'syz.3.10015': attribute type 29 has an invalid length. [ 1296.106055][ T2642] netlink: 'syz.2.10020': attribute type 21 has an invalid length. [ 1296.244920][ T2602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1296.626176][ T2657] netlink: 'syz.1.10024': attribute type 11 has an invalid length. [ 1296.913662][ T2671] netlink: 'syz.4.10028': attribute type 39 has an invalid length. [ 1297.143509][ T2682] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10033'. [ 1297.174282][ T2682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1297.239137][ T2688] netlink: 'syz.1.10034': attribute type 10 has an invalid length. [ 1297.247205][ T2688] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.10034'. [ 1297.348724][ T2682] netlink: 'syz.3.10033': attribute type 10 has an invalid length. [ 1297.854384][ T2719] FAULT_INJECTION: forcing a failure. [ 1297.854384][ T2719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1297.902783][ T2721] netlink: 'syz.1.10044': attribute type 29 has an invalid length. [ 1297.983492][ T2719] CPU: 0 PID: 2719 Comm: syz.1.10044 Not tainted syzkaller #0 [ 1297.991111][ T2719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1298.001517][ T2719] Call Trace: [ 1298.004813][ T2719] [ 1298.007771][ T2719] dump_stack_lvl+0x188/0x24e [ 1298.009983][ T2713] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10043'. [ 1298.012549][ T2719] ? show_regs_print_info+0x12/0x12 [ 1298.012579][ T2719] ? load_image+0x410/0x410 [ 1298.012610][ T2719] ? __lock_acquire+0x7bd0/0x7bd0 [ 1298.012641][ T2719] should_fail_ex+0x390/0x4c0 [ 1298.012668][ T2719] _copy_from_user+0x2c/0x170 [ 1298.012695][ T2719] iovec_from_user+0x143/0x360 [ 1298.012722][ T2719] __import_iovec+0x6c/0x510 [ 1298.012745][ T2719] ? __might_fault+0xa6/0x120 [ 1298.012770][ T2719] import_iovec+0x6f/0xa0 [ 1298.012794][ T2719] ___sys_recvmsg+0x4b2/0x590 [ 1298.012823][ T2719] ? __sys_recvmsg+0x2a0/0x2a0 [ 1298.012849][ T2719] ? common_file_perm+0x171/0x1c0 [ 1298.012883][ T2719] ? __fget_files+0x3fc/0x460 [ 1298.012924][ T2719] __x64_sys_recvmsg+0x20d/0x2e0 [ 1298.012948][ T2719] ? ___sys_recvmsg+0x590/0x590 [ 1298.012992][ T2719] ? lockdep_hardirqs_on+0x94/0x140 [ 1298.013025][ T2719] do_syscall_64+0x4c/0xa0 [ 1298.013044][ T2719] ? clear_bhb_loop+0x60/0xb0 [ 1298.013062][ T2719] ? clear_bhb_loop+0x60/0xb0 [ 1298.013083][ T2719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1298.013109][ T2719] RIP: 0033:0x7f354199ce59 [ 1298.013129][ T2719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.013146][ T2719] RSP: 002b:00007f3542888028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1298.013169][ T2719] RAX: ffffffffffffffda RBX: 00007f3541c15fa0 RCX: 00007f354199ce59 [ 1298.013184][ T2719] RDX: 0000000000002000 RSI: 0000200000000300 RDI: 0000000000000003 [ 1298.013198][ T2719] RBP: 00007f3542888090 R08: 0000000000000000 R09: 0000000000000000 [ 1298.013211][ T2719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1298.013224][ T2719] R13: 00007f3541c16038 R14: 00007f3541c15fa0 R15: 00007ffdbf348388 [ 1298.013255][ T2719] [ 1298.317569][ T2713] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10043'. [ 1298.621889][ T2740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1298.972669][ T2758] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1300.138764][ T2843] __nla_validate_parse: 2 callbacks suppressed [ 1300.138785][ T2843] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10067'. [ 1300.198616][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.204985][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.399715][ T2843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1300.967651][ T2852] validate_nla: 17 callbacks suppressed [ 1300.967705][ T2852] netlink: 'syz.1.10069': attribute type 10 has an invalid length. [ 1300.989618][ T2852] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.10069'. [ 1302.293433][ T2882] netlink: 'syz.4.10080': attribute type 21 has an invalid length. [ 1302.627327][ T2902] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1302.769670][ T2906] netlink: 'syz.1.10085': attribute type 21 has an invalid length. [ 1302.818189][ T2906] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10085'. [ 1302.905203][ T2906] netlink: 'syz.1.10085': attribute type 4 has an invalid length. [ 1303.199282][ T2906] netlink: 'syz.1.10085': attribute type 5 has an invalid length. [ 1303.336452][ T2906] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10085'. [ 1303.501299][ T2909] netlink: 'syz.4.10087': attribute type 10 has an invalid length. [ 1303.539328][ T2909] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.10087'. [ 1303.585805][ T2915] netlink: 'syz.0.10090': attribute type 10 has an invalid length. [ 1303.595055][ T2915] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.10090'. [ 1304.216156][ T2940] netlink: 'syz.3.10097': attribute type 39 has an invalid length. [ 1304.473898][ T2942] netlink: 'syz.4.10099': attribute type 10 has an invalid length. [ 1304.581911][ T2951] netlink: 'syz.0.10101': attribute type 29 has an invalid length. [ 1304.823785][ T2959] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.10104'. [ 1304.946381][ T2962] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.10106'. [ 1305.205787][ T2967] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10107'. [ 1305.318322][ T2967] netlink: 3 bytes leftover after parsing attributes in process `syz.4.10107'. [ 1305.619953][ T2983] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.10114'. [ 1305.907514][ T2998] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1305.967733][ T2997] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.10119'. [ 1306.012693][ T2999] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10122'. [ 1306.365498][ T3013] syz.4.10125 (3013) used obsolete PPPIOCDETACH ioctl [ 1306.464833][ T3016] validate_nla: 9 callbacks suppressed [ 1306.464852][ T3016] netlink: 'syz.3.10128': attribute type 10 has an invalid length. [ 1306.574790][ T3016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.582506][ T3016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.668801][ T3016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.676319][ T3016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.685849][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.693550][ T3016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.704310][ T3033] netlink: 'syz.4.10131': attribute type 29 has an invalid length. [ 1306.790465][ T3016] team0: Port device bridge0 added [ 1306.806041][ T3033] netlink: 'syz.4.10131': attribute type 29 has an invalid length. [ 1306.843915][ T3024] netlink: 'syz.4.10131': attribute type 29 has an invalid length. [ 1307.046414][ T3039] netlink: 'syz.0.10136': attribute type 21 has an invalid length. [ 1307.073566][ T3039] IPv6: NLM_F_CREATE should be specified when creating new route [ 1307.086327][ T3039] IPv6: Can't replace route, no match found [ 1307.115771][ T3039] netlink: 'syz.0.10136': attribute type 1 has an invalid length. [ 1307.156242][ T3039] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.10136'. [ 1307.198054][ T3047] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10137'. [ 1307.349198][ T3051] FAULT_INJECTION: forcing a failure. [ 1307.349198][ T3051] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.437669][ T3051] CPU: 0 PID: 3051 Comm: syz.3.10139 Not tainted syzkaller #0 [ 1307.445209][ T3051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1307.455403][ T3051] Call Trace: [ 1307.458806][ T3051] [ 1307.461775][ T3051] dump_stack_lvl+0x188/0x24e [ 1307.466590][ T3051] ? sctp_sendmsg+0x1686/0x2940 [ 1307.471515][ T3051] ? ___sys_sendmsg+0x2a2/0x360 [ 1307.476633][ T3051] ? show_regs_print_info+0x12/0x12 [ 1307.481946][ T3051] ? load_image+0x410/0x410 [ 1307.486537][ T3051] should_fail_ex+0x390/0x4c0 [ 1307.491277][ T3051] should_failslab+0x5/0x20 [ 1307.495820][ T3051] slab_pre_alloc_hook+0x59/0x300 [ 1307.500898][ T3051] ? sctp_add_bind_addr+0x89/0x350 [ 1307.506053][ T3051] __kmem_cache_alloc_node+0x4f/0x270 [ 1307.511480][ T3051] ? sctp_add_bind_addr+0x89/0x350 [ 1307.516724][ T3051] kmalloc_trace+0x26/0xe0 [ 1307.521201][ T3051] sctp_add_bind_addr+0x89/0x350 [ 1307.526221][ T3051] sctp_copy_local_addr_list+0x317/0x4d0 [ 1307.532010][ T3051] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1307.537873][ T3051] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1307.544266][ T3051] ? sctp_v4_is_any+0x31/0x50 [ 1307.549046][ T3051] ? sctp_copy_one_addr+0x93/0x660 [ 1307.554294][ T3051] sctp_bind_addr_copy+0x185/0x3c0 [ 1307.559473][ T3051] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1307.564808][ T3051] ? __sctp_connect+0xd80/0xd80 [ 1307.569717][ T3051] ? __local_bh_enable_ip+0x136/0x1c0 [ 1307.575466][ T3051] ? _local_bh_enable+0xa0/0xa0 [ 1307.580433][ T3051] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1307.586474][ T3051] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1307.592419][ T3051] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1307.598014][ T3051] ? security_sctp_bind_connect+0x85/0xb0 [ 1307.603894][ T3051] sctp_sendmsg+0x1686/0x2940 [ 1307.608727][ T3051] ? sctp_getsockopt+0x8a0/0x8a0 [ 1307.613741][ T3051] ? __might_fault+0xa6/0x120 [ 1307.618530][ T3051] ? aa_af_perm+0x340/0x340 [ 1307.623054][ T3051] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1307.629710][ T3051] ? inet_sendmsg+0x7a/0x2a0 [ 1307.634422][ T3051] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1307.639742][ T3051] ? inet_send_prepare+0x250/0x250 [ 1307.644972][ T3051] ____sys_sendmsg+0x5ed/0x9a0 [ 1307.649966][ T3051] ? __sys_sendmsg_sock+0x30/0x30 [ 1307.655018][ T3051] ? __import_iovec+0x306/0x510 [ 1307.660081][ T3051] ? import_iovec+0x6f/0xa0 [ 1307.664612][ T3051] ___sys_sendmsg+0x2a2/0x360 [ 1307.669498][ T3051] ? __sys_sendmsg+0x2a0/0x2a0 [ 1307.674415][ T3051] ? __lock_acquire+0x7bd0/0x7bd0 [ 1307.679515][ T3051] __se_sys_sendmsg+0x1c3/0x2b0 [ 1307.684408][ T3051] ? __x64_sys_sendmsg+0x80/0x80 [ 1307.689416][ T3051] ? lockdep_hardirqs_on+0x94/0x140 [ 1307.694820][ T3051] do_syscall_64+0x4c/0xa0 [ 1307.699437][ T3051] ? clear_bhb_loop+0x60/0xb0 [ 1307.704156][ T3051] ? clear_bhb_loop+0x60/0xb0 [ 1307.708861][ T3051] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1307.714792][ T3051] RIP: 0033:0x7fe432f9ce59 [ 1307.719257][ T3051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.738905][ T3051] RSP: 002b:00007fe433daf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1307.747466][ T3051] RAX: ffffffffffffffda RBX: 00007fe433215fa0 RCX: 00007fe432f9ce59 [ 1307.755637][ T3051] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000004 [ 1307.763637][ T3051] RBP: 00007fe433daf090 R08: 0000000000000000 R09: 0000000000000000 [ 1307.771855][ T3051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1307.779861][ T3051] R13: 00007fe433216038 R14: 00007fe433215fa0 R15: 00007ffcf6b48638 [ 1307.787990][ T3051] [ 1307.988998][ T3057] netlink: 'syz.1.10143': attribute type 10 has an invalid length. [ 1308.018805][ T3057] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.10143'. [ 1308.301913][ T3075] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1308.305789][ T3073] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10150'. [ 1308.438661][ T3073] openvswitch: netlink: Message has 6 unknown bytes. [ 1311.351675][ T3098] netlink: 'syz.4.10159': attribute type 21 has an invalid length. [ 1311.369112][ T3104] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10160'. [ 1311.607349][ T3108] netlink: 'syz.2.10162': attribute type 10 has an invalid length. [ 1311.645428][ T3114] sctp: [Deprecated]: syz.1.10165 (pid 3114) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1311.645428][ T3114] Use struct sctp_sack_info instead [ 1311.646954][ T3108] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.10162'. [ 1311.877127][ T3119] FAULT_INJECTION: forcing a failure. [ 1311.877127][ T3119] name failslab, interval 1, probability 0, space 0, times 0 [ 1311.910603][ T3119] CPU: 0 PID: 3119 Comm: syz.1.10167 Not tainted syzkaller #0 [ 1311.918140][ T3119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1311.928403][ T3119] Call Trace: [ 1311.931719][ T3119] [ 1311.934843][ T3119] dump_stack_lvl+0x188/0x24e [ 1311.939608][ T3119] ? sctp_sendmsg+0x1686/0x2940 [ 1311.944499][ T3119] ? ___sys_sendmsg+0x2a2/0x360 [ 1311.949393][ T3119] ? show_regs_print_info+0x12/0x12 [ 1311.954637][ T3119] ? load_image+0x410/0x410 [ 1311.959310][ T3119] should_fail_ex+0x390/0x4c0 [ 1311.964560][ T3119] should_failslab+0x5/0x20 [ 1311.969102][ T3119] slab_pre_alloc_hook+0x59/0x300 [ 1311.974163][ T3119] ? sctp_add_bind_addr+0x89/0x350 [ 1311.979310][ T3119] __kmem_cache_alloc_node+0x4f/0x270 [ 1311.984709][ T3119] ? sctp_add_bind_addr+0x89/0x350 [ 1311.989836][ T3119] kmalloc_trace+0x26/0xe0 [ 1311.994278][ T3119] sctp_add_bind_addr+0x89/0x350 [ 1311.999314][ T3119] sctp_copy_local_addr_list+0x317/0x4d0 [ 1312.004958][ T3119] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1312.010895][ T3119] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1312.017052][ T3119] ? sctp_v4_is_any+0x31/0x50 [ 1312.021740][ T3119] ? sctp_copy_one_addr+0x93/0x660 [ 1312.026863][ T3119] sctp_bind_addr_copy+0x185/0x3c0 [ 1312.032178][ T3119] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1312.037478][ T3119] ? __sctp_connect+0xd80/0xd80 [ 1312.042336][ T3119] ? __local_bh_enable_ip+0x136/0x1c0 [ 1312.047807][ T3119] ? _local_bh_enable+0xa0/0xa0 [ 1312.052777][ T3119] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1312.058606][ T3119] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1312.064532][ T3119] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1312.070620][ T3119] ? security_sctp_bind_connect+0x85/0xb0 [ 1312.076624][ T3119] sctp_sendmsg+0x1686/0x2940 [ 1312.081334][ T3119] ? sctp_getsockopt+0x8a0/0x8a0 [ 1312.086312][ T3119] ? __might_fault+0xa6/0x120 [ 1312.091188][ T3119] ? aa_af_perm+0x340/0x340 [ 1312.095821][ T3119] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1312.102348][ T3119] ? inet_sendmsg+0x7a/0x2a0 [ 1312.106949][ T3119] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1312.112246][ T3119] ? inet_send_prepare+0x250/0x250 [ 1312.117546][ T3119] ____sys_sendmsg+0x5ed/0x9a0 [ 1312.122444][ T3119] ? __sys_sendmsg_sock+0x30/0x30 [ 1312.127563][ T3119] ? __import_iovec+0x306/0x510 [ 1312.132444][ T3119] ? import_iovec+0x6f/0xa0 [ 1312.137224][ T3119] ___sys_sendmsg+0x2a2/0x360 [ 1312.141913][ T3119] ? __sys_sendmsg+0x2a0/0x2a0 [ 1312.146717][ T3119] ? __lock_acquire+0x7bd0/0x7bd0 [ 1312.151805][ T3119] __se_sys_sendmsg+0x1c3/0x2b0 [ 1312.156667][ T3119] ? __x64_sys_sendmsg+0x80/0x80 [ 1312.161716][ T3119] ? lockdep_hardirqs_on+0x94/0x140 [ 1312.166958][ T3119] do_syscall_64+0x4c/0xa0 [ 1312.171383][ T3119] ? clear_bhb_loop+0x60/0xb0 [ 1312.176100][ T3119] ? clear_bhb_loop+0x60/0xb0 [ 1312.180786][ T3119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1312.186685][ T3119] RIP: 0033:0x7f354199ce59 [ 1312.191104][ T3119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1312.210806][ T3119] RSP: 002b:00007f3542888028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1312.219324][ T3119] RAX: ffffffffffffffda RBX: 00007f3541c15fa0 RCX: 00007f354199ce59 [ 1312.227421][ T3119] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000004 [ 1312.235532][ T3119] RBP: 00007f3542888090 R08: 0000000000000000 R09: 0000000000000000 [ 1312.243693][ T3119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1312.251877][ T3119] R13: 00007f3541c16038 R14: 00007f3541c15fa0 R15: 00007ffdbf348388 [ 1312.260066][ T3119] [ 1312.358476][ T3136] netlink: 'syz.4.10171': attribute type 29 has an invalid length. [ 1312.384221][ T3135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.393042][ T3135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.457354][ T3136] netlink: 'syz.4.10171': attribute type 29 has an invalid length. [ 1312.483232][ T3130] FAULT_INJECTION: forcing a failure. [ 1312.483232][ T3130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1312.501427][ T3130] CPU: 0 PID: 3130 Comm: syz.4.10171 Not tainted syzkaller #0 [ 1312.508960][ T3130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1312.519232][ T3130] Call Trace: [ 1312.522551][ T3130] [ 1312.525507][ T3130] dump_stack_lvl+0x188/0x24e [ 1312.530306][ T3130] ? show_regs_print_info+0x12/0x12 [ 1312.535543][ T3130] ? load_image+0x410/0x410 [ 1312.540093][ T3130] ? __might_fault+0xa6/0x120 [ 1312.544906][ T3130] should_fail_ex+0x390/0x4c0 [ 1312.549629][ T3130] copyout+0x1b/0x120 [ 1312.553740][ T3130] _copy_to_iter+0x482/0x1050 [ 1312.558559][ T3130] ? iov_iter_init+0x1f0/0x1f0 [ 1312.563437][ T3130] ? __virt_addr_valid+0x188/0x540 [ 1312.568577][ T3130] ? __virt_addr_valid+0x467/0x540 [ 1312.573703][ T3130] ? __phys_addr_symbol+0x2b/0x70 [ 1312.578915][ T3130] ? __check_object_size+0x4f6/0xa70 [ 1312.584293][ T3130] __skb_datagram_iter+0xde/0x740 [ 1312.589585][ T3130] ? sock_load_diag_module+0x130/0x130 [ 1312.595131][ T3130] ? skb_copy_datagram_iter+0x290/0x290 [ 1312.600783][ T3130] skb_copy_datagram_iter+0xd7/0x290 [ 1312.606083][ T3130] netlink_recvmsg+0x2d0/0xe00 [ 1312.610869][ T3130] ? netlink_sendmsg+0xbd0/0xbd0 [ 1312.615815][ T3130] ? aa_af_perm+0x340/0x340 [ 1312.620436][ T3130] ? __might_fault+0xa6/0x120 [ 1312.625340][ T3130] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 1312.630734][ T3130] ? security_socket_recvmsg+0x85/0xb0 [ 1312.636198][ T3130] ? netlink_sendmsg+0xbd0/0xbd0 [ 1312.641221][ T3130] ____sys_recvmsg+0x2c8/0x5b0 [ 1312.646203][ T3130] ? __sys_recvmsg_sock+0x40/0x40 [ 1312.651306][ T3130] ? import_iovec+0x6f/0xa0 [ 1312.655929][ T3130] ___sys_recvmsg+0x210/0x590 [ 1312.660716][ T3130] ? __sys_recvmsg+0x2a0/0x2a0 [ 1312.665589][ T3130] ? common_file_perm+0x171/0x1c0 [ 1312.670651][ T3130] ? __fget_files+0x3fc/0x460 [ 1312.675445][ T3130] __x64_sys_recvmsg+0x20d/0x2e0 [ 1312.680518][ T3130] ? ___sys_recvmsg+0x590/0x590 [ 1312.685411][ T3130] ? lockdep_hardirqs_on+0x94/0x140 [ 1312.690815][ T3130] do_syscall_64+0x4c/0xa0 [ 1312.695246][ T3130] ? clear_bhb_loop+0x60/0xb0 [ 1312.700029][ T3130] ? clear_bhb_loop+0x60/0xb0 [ 1312.704723][ T3130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1312.710629][ T3130] RIP: 0033:0x7fb45bb9ce59 [ 1312.715045][ T3130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1312.735113][ T3130] RSP: 002b:00007fb45c9d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1312.743538][ T3130] RAX: ffffffffffffffda RBX: 00007fb45be15fa0 RCX: 00007fb45bb9ce59 [ 1312.751517][ T3130] RDX: 0000000000002000 RSI: 0000200000000300 RDI: 0000000000000003 [ 1312.759591][ T3130] RBP: 00007fb45c9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1312.767597][ T3130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1312.775669][ T3130] R13: 00007fb45be16038 R14: 00007fb45be15fa0 R15: 00007ffee2fc5538 [ 1312.783928][ T3130] [ 1312.833249][ T3130] netlink: 'syz.4.10171': attribute type 29 has an invalid length. [ 1313.175911][ T3155] netlink: 'syz.4.10178': attribute type 10 has an invalid length. [ 1313.237367][ T3155] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.10178'. [ 1313.263903][ T3163] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1313.277472][ T3158] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10179'. [ 1313.298675][ T3158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1313.352767][ T3165] netlink: 'syz.1.10179': attribute type 10 has an invalid length. [ 1313.384652][ T3162] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.10181'. [ 1313.413208][ T3162] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1313.627122][ T3170] netlink: 'syz.4.10183': attribute type 9 has an invalid length. [ 1313.670925][ T3170] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.10183'. [ 1313.804591][ T3176] netlink: 'syz.3.10185': attribute type 21 has an invalid length. [ 1314.692948][ T3199] netlink: 'syz.0.10193': attribute type 10 has an invalid length. [ 1314.731709][ T3199] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.10193'. [ 1314.897721][ T3203] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10195'. [ 1314.989342][ T3203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1315.096702][ T3207] netlink: 'syz.4.10195': attribute type 10 has an invalid length. [ 1315.138960][ T3205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1315.146315][ T3205] IPv6: NLM_F_CREATE should be set when creating new route [ 1315.153818][ T3205] IPv6: NLM_F_CREATE should be set when creating new route [ 1315.161158][ T3205] IPv6: NLM_F_CREATE should be set when creating new route [ 1315.327029][ T3212] FAULT_INJECTION: forcing a failure. [ 1315.327029][ T3212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1315.388654][ T3212] CPU: 0 PID: 3212 Comm: syz.3.10197 Not tainted syzkaller #0 [ 1315.396346][ T3212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1315.406602][ T3212] Call Trace: [ 1315.409891][ T3212] [ 1315.412827][ T3212] dump_stack_lvl+0x188/0x24e [ 1315.417514][ T3212] ? show_regs_print_info+0x12/0x12 [ 1315.422868][ T3212] ? load_image+0x410/0x410 [ 1315.427380][ T3212] ? __might_fault+0xa6/0x120 [ 1315.432058][ T3212] should_fail_ex+0x390/0x4c0 [ 1315.436748][ T3212] copyout+0x1b/0x120 [ 1315.440743][ T3212] _copy_to_iter+0x482/0x1050 [ 1315.445430][ T3212] ? iov_iter_init+0x1f0/0x1f0 [ 1315.450200][ T3212] ? __virt_addr_valid+0x188/0x540 [ 1315.455321][ T3212] ? __virt_addr_valid+0x467/0x540 [ 1315.460431][ T3212] ? __phys_addr_symbol+0x2b/0x70 [ 1315.465466][ T3212] ? __check_object_size+0x4f6/0xa70 [ 1315.470967][ T3212] __skb_datagram_iter+0xde/0x740 [ 1315.476082][ T3212] ? sock_load_diag_module+0x130/0x130 [ 1315.481671][ T3212] ? skb_copy_datagram_iter+0x290/0x290 [ 1315.487524][ T3212] skb_copy_datagram_iter+0xd7/0x290 [ 1315.492839][ T3212] netlink_recvmsg+0x2d0/0xe00 [ 1315.497629][ T3212] ? netlink_sendmsg+0xbd0/0xbd0 [ 1315.502575][ T3212] ? aa_af_perm+0x340/0x340 [ 1315.507094][ T3212] ? __might_fault+0xa6/0x120 [ 1315.511774][ T3212] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 1315.517128][ T3212] ? security_socket_recvmsg+0x85/0xb0 [ 1315.522616][ T3212] ? netlink_sendmsg+0xbd0/0xbd0 [ 1315.527653][ T3212] ____sys_recvmsg+0x2c8/0x5b0 [ 1315.532440][ T3212] ? __sys_recvmsg_sock+0x40/0x40 [ 1315.537592][ T3212] ? import_iovec+0x6f/0xa0 [ 1315.542298][ T3212] ___sys_recvmsg+0x210/0x590 [ 1315.546999][ T3212] ? __sys_recvmsg+0x2a0/0x2a0 [ 1315.551848][ T3212] ? common_file_perm+0x171/0x1c0 [ 1315.556988][ T3212] ? __fget_files+0x3fc/0x460 [ 1315.561687][ T3212] __x64_sys_recvmsg+0x20d/0x2e0 [ 1315.566720][ T3212] ? ___sys_recvmsg+0x590/0x590 [ 1315.571605][ T3212] ? lockdep_hardirqs_on+0x94/0x140 [ 1315.576917][ T3212] do_syscall_64+0x4c/0xa0 [ 1315.581356][ T3212] ? clear_bhb_loop+0x60/0xb0 [ 1315.586052][ T3212] ? clear_bhb_loop+0x60/0xb0 [ 1315.590873][ T3212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1315.596802][ T3212] RIP: 0033:0x7fe432f9ce59 [ 1315.601227][ T3212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1315.621028][ T3212] RSP: 002b:00007fe433daf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1315.629626][ T3212] RAX: ffffffffffffffda RBX: 00007fe433215fa0 RCX: 00007fe432f9ce59 [ 1315.637917][ T3212] RDX: 0000000000002000 RSI: 0000200000000300 RDI: 0000000000000003 [ 1315.645900][ T3212] RBP: 00007fe433daf090 R08: 0000000000000000 R09: 0000000000000000 [ 1315.654071][ T3212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1315.662311][ T3212] R13: 00007fe433216038 R14: 00007fe433215fa0 R15: 00007ffcf6b48638 [ 1315.670409][ T3212] [ 1315.722867][ T3213] team0: Device veth1_vlan is already a lower device of the team interface [ 1316.630063][ T3244] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.10206'. [ 1317.213593][ T3254] validate_nla: 5 callbacks suppressed [ 1317.213612][ T3254] netlink: 'syz.4.10208': attribute type 10 has an invalid length. [ 1317.258305][ T3254] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.10208'. [ 1317.551167][ T3262] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10210'. [ 1317.573872][ T3262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1317.675426][ T3264] netlink: 'syz.4.10210': attribute type 10 has an invalid length. [ 1318.262448][ T3285] FAULT_INJECTION: forcing a failure. [ 1318.262448][ T3285] name failslab, interval 1, probability 0, space 0, times 0 [ 1318.316655][ T3285] CPU: 0 PID: 3285 Comm: syz.3.10217 Not tainted syzkaller #0 [ 1318.324488][ T3285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1318.334776][ T3285] Call Trace: [ 1318.338092][ T3285] [ 1318.341052][ T3285] dump_stack_lvl+0x188/0x24e [ 1318.345760][ T3285] ? sctp_sendmsg+0x1686/0x2940 [ 1318.350652][ T3285] ? ___sys_sendmsg+0x2a2/0x360 [ 1318.355552][ T3285] ? show_regs_print_info+0x12/0x12 [ 1318.360894][ T3285] ? load_image+0x410/0x410 [ 1318.365567][ T3285] should_fail_ex+0x390/0x4c0 [ 1318.370491][ T3285] should_failslab+0x5/0x20 [ 1318.375010][ T3285] slab_pre_alloc_hook+0x59/0x300 [ 1318.380074][ T3285] ? sctp_add_bind_addr+0x89/0x350 [ 1318.385288][ T3285] __kmem_cache_alloc_node+0x4f/0x270 [ 1318.390679][ T3285] ? sctp_add_bind_addr+0x89/0x350 [ 1318.395799][ T3285] kmalloc_trace+0x26/0xe0 [ 1318.400234][ T3285] sctp_add_bind_addr+0x89/0x350 [ 1318.405233][ T3285] sctp_copy_local_addr_list+0x317/0x4d0 [ 1318.410881][ T3285] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1318.416650][ T3285] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1318.422992][ T3285] ? sctp_v4_is_any+0x31/0x50 [ 1318.427708][ T3285] ? sctp_copy_one_addr+0x93/0x660 [ 1318.432921][ T3285] sctp_bind_addr_copy+0x185/0x3c0 [ 1318.438146][ T3285] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1318.443536][ T3285] ? __sctp_connect+0xd80/0xd80 [ 1318.448489][ T3285] ? __local_bh_enable_ip+0x136/0x1c0 [ 1318.453952][ T3285] ? _local_bh_enable+0xa0/0xa0 [ 1318.459065][ T3285] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1318.464873][ T3285] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1318.470863][ T3285] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1318.476417][ T3285] ? security_sctp_bind_connect+0x85/0xb0 [ 1318.482148][ T3285] sctp_sendmsg+0x1686/0x2940 [ 1318.486857][ T3285] ? sctp_getsockopt+0x8a0/0x8a0 [ 1318.491804][ T3285] ? __might_fault+0xa6/0x120 [ 1318.496510][ T3285] ? aa_af_perm+0x340/0x340 [ 1318.501022][ T3285] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1318.507559][ T3285] ? inet_sendmsg+0x7a/0x2a0 [ 1318.512251][ T3285] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1318.517629][ T3285] ? inet_send_prepare+0x250/0x250 [ 1318.523209][ T3285] ____sys_sendmsg+0x5ed/0x9a0 [ 1318.528010][ T3285] ? __sys_sendmsg_sock+0x30/0x30 [ 1318.533132][ T3285] ? __import_iovec+0x306/0x510 [ 1318.538030][ T3285] ? import_iovec+0x6f/0xa0 [ 1318.542569][ T3285] ___sys_sendmsg+0x2a2/0x360 [ 1318.547275][ T3285] ? __sys_sendmsg+0x2a0/0x2a0 [ 1318.552081][ T3285] ? trace_call_bpf+0xbf/0x6b0 [ 1318.556928][ T3285] __se_sys_sendmsg+0x1c3/0x2b0 [ 1318.561984][ T3285] ? perf_trace_preemptirq_template+0x268/0x320 [ 1318.568253][ T3285] ? __x64_sys_sendmsg+0x80/0x80 [ 1318.573223][ T3285] ? lockdep_hardirqs_on+0x94/0x140 [ 1318.578528][ T3285] do_syscall_64+0x4c/0xa0 [ 1318.583045][ T3285] ? clear_bhb_loop+0x60/0xb0 [ 1318.587874][ T3285] ? clear_bhb_loop+0x60/0xb0 [ 1318.592561][ T3285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1318.598639][ T3285] RIP: 0033:0x7fe432f9ce59 [ 1318.603065][ T3285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1318.622721][ T3285] RSP: 002b:00007fe433daf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1318.631150][ T3285] RAX: ffffffffffffffda RBX: 00007fe433215fa0 RCX: 00007fe432f9ce59 [ 1318.639221][ T3285] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000004 [ 1318.647410][ T3285] RBP: 00007fe433daf090 R08: 0000000000000000 R09: 0000000000000000 [ 1318.655594][ T3285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1318.663591][ T3285] R13: 00007fe433216038 R14: 00007fe433215fa0 R15: 00007ffcf6b48638 [ 1318.671788][ T3285] [ 1319.269373][ T3299] netlink: 'syz.2.10220': attribute type 29 has an invalid length. [ 1319.366211][ T3299] netlink: 'syz.2.10220': attribute type 29 has an invalid length. [ 1319.490252][ T3304] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10224'. [ 1319.528406][ T3304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1319.695361][ T3295] netlink: 'syz.2.10220': attribute type 29 has an invalid length. [ 1319.709890][ T3306] netlink: 'syz.3.10221': attribute type 10 has an invalid length. [ 1319.741393][ T3306] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.10221'. [ 1319.767337][ T3309] netlink: 'syz.4.10224': attribute type 10 has an invalid length. [ 1319.826316][ T3314] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10226'. [ 1320.840598][ T3344] netlink: 'syz.0.10239': attribute type 10 has an invalid length. [ 1320.904991][ T3344] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.10239'. [ 1321.122081][ T3359] FAULT_INJECTION: forcing a failure. [ 1321.122081][ T3359] name failslab, interval 1, probability 0, space 0, times 0 [ 1321.178916][ T3359] CPU: 0 PID: 3359 Comm: syz.4.10242 Not tainted syzkaller #0 [ 1321.184103][ T3358] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10241'. [ 1321.186436][ T3359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1321.196116][ T3358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1321.205940][ T3359] Call Trace: [ 1321.205956][ T3359] [ 1321.205965][ T3359] dump_stack_lvl+0x188/0x24e [ 1321.205991][ T3359] ? sctp_sendmsg+0x1686/0x2940 [ 1321.206011][ T3359] ? ___sys_sendmsg+0x2a2/0x360 [ 1321.206031][ T3359] ? show_regs_print_info+0x12/0x12 [ 1321.206051][ T3359] ? load_image+0x410/0x410 [ 1321.206087][ T3359] should_fail_ex+0x390/0x4c0 [ 1321.229020][ T3358] netlink: 'syz.3.10241': attribute type 10 has an invalid length. [ 1321.232592][ T3359] should_failslab+0x5/0x20 [ 1321.232619][ T3359] slab_pre_alloc_hook+0x59/0x300 [ 1321.232644][ T3359] ? sctp_add_bind_addr+0x89/0x350 [ 1321.232666][ T3359] __kmem_cache_alloc_node+0x4f/0x270 [ 1321.285269][ T3359] ? sctp_add_bind_addr+0x89/0x350 [ 1321.290388][ T3359] kmalloc_trace+0x26/0xe0 [ 1321.294994][ T3359] sctp_add_bind_addr+0x89/0x350 [ 1321.300205][ T3359] sctp_copy_local_addr_list+0x317/0x4d0 [ 1321.305963][ T3359] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1321.311874][ T3359] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1321.318040][ T3359] ? sctp_v4_is_any+0x31/0x50 [ 1321.322735][ T3359] ? sctp_copy_one_addr+0x93/0x660 [ 1321.327955][ T3359] sctp_bind_addr_copy+0x185/0x3c0 [ 1321.333070][ T3359] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1321.338426][ T3359] ? __sctp_connect+0xd80/0xd80 [ 1321.343293][ T3359] ? __local_bh_enable_ip+0x136/0x1c0 [ 1321.348666][ T3359] ? _local_bh_enable+0xa0/0xa0 [ 1321.353544][ T3359] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1321.359614][ T3359] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1321.365682][ T3359] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1321.371764][ T3359] ? security_sctp_bind_connect+0x85/0xb0 [ 1321.377497][ T3359] sctp_sendmsg+0x1686/0x2940 [ 1321.382278][ T3359] ? sctp_getsockopt+0x8a0/0x8a0 [ 1321.387245][ T3359] ? __might_fault+0xa6/0x120 [ 1321.391923][ T3359] ? aa_af_perm+0x340/0x340 [ 1321.396423][ T3359] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1321.402855][ T3359] ? inet_sendmsg+0x7a/0x2a0 [ 1321.407538][ T3359] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1321.412823][ T3359] ? inet_send_prepare+0x250/0x250 [ 1321.417935][ T3359] ____sys_sendmsg+0x5ed/0x9a0 [ 1321.422819][ T3359] ? __sys_sendmsg_sock+0x30/0x30 [ 1321.427842][ T3359] ? __import_iovec+0x306/0x510 [ 1321.432699][ T3359] ? import_iovec+0x6f/0xa0 [ 1321.437293][ T3359] ___sys_sendmsg+0x2a2/0x360 [ 1321.441974][ T3359] ? __sys_sendmsg+0x2a0/0x2a0 [ 1321.446753][ T3359] ? __lock_acquire+0x7bd0/0x7bd0 [ 1321.451937][ T3359] __se_sys_sendmsg+0x1c3/0x2b0 [ 1321.456883][ T3359] ? __x64_sys_sendmsg+0x80/0x80 [ 1321.462007][ T3359] ? lockdep_hardirqs_on+0x94/0x140 [ 1321.467214][ T3359] do_syscall_64+0x4c/0xa0 [ 1321.471627][ T3359] ? clear_bhb_loop+0x60/0xb0 [ 1321.476298][ T3359] ? clear_bhb_loop+0x60/0xb0 [ 1321.481058][ T3359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1321.486955][ T3359] RIP: 0033:0x7fb45bb9ce59 [ 1321.491367][ T3359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1321.511236][ T3359] RSP: 002b:00007fb45c9b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1321.519654][ T3359] RAX: ffffffffffffffda RBX: 00007fb45be16090 RCX: 00007fb45bb9ce59 [ 1321.527621][ T3359] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000004 [ 1321.535674][ T3359] RBP: 00007fb45c9b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1321.543729][ T3359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1321.551716][ T3359] R13: 00007fb45be16128 R14: 00007fb45be16090 R15: 00007ffee2fc5538 [ 1321.559706][ T3359] [ 1321.846990][ T3370] netlink: 'syz.2.10246': attribute type 21 has an invalid length. [ 1322.637223][ T3408] netlink: 'syz.4.10254': attribute type 10 has an invalid length. [ 1322.705288][ T3408] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.10254'. [ 1322.785750][ T3410] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10258'. [ 1322.813414][ T3410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1322.845729][ T3410] netlink: 'syz.3.10258': attribute type 10 has an invalid length. [ 1322.920426][ T3416] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.10260'. [ 1323.034326][ T3420] FAULT_INJECTION: forcing a failure. [ 1323.034326][ T3420] name failslab, interval 1, probability 0, space 0, times 0 [ 1323.078270][ T3420] CPU: 0 PID: 3420 Comm: syz.1.10262 Not tainted syzkaller #0 [ 1323.086004][ T3420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1323.096068][ T3420] Call Trace: [ 1323.099364][ T3420] [ 1323.102308][ T3420] dump_stack_lvl+0x188/0x24e [ 1323.107021][ T3420] ? sctp_sendmsg+0x1686/0x2940 [ 1323.112114][ T3420] ? ___sys_sendmsg+0x2a2/0x360 [ 1323.117084][ T3420] ? show_regs_print_info+0x12/0x12 [ 1323.122288][ T3420] ? load_image+0x410/0x410 [ 1323.126937][ T3420] should_fail_ex+0x390/0x4c0 [ 1323.131651][ T3420] should_failslab+0x5/0x20 [ 1323.136287][ T3420] slab_pre_alloc_hook+0x59/0x300 [ 1323.141562][ T3420] ? sctp_add_bind_addr+0x89/0x350 [ 1323.146718][ T3420] __kmem_cache_alloc_node+0x4f/0x270 [ 1323.152231][ T3420] ? sctp_add_bind_addr+0x89/0x350 [ 1323.157390][ T3420] kmalloc_trace+0x26/0xe0 [ 1323.162108][ T3420] sctp_add_bind_addr+0x89/0x350 [ 1323.167068][ T3420] sctp_copy_local_addr_list+0x317/0x4d0 [ 1323.172736][ T3420] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1323.178463][ T3420] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1323.184540][ T3420] ? sctp_v4_is_any+0x31/0x50 [ 1323.189236][ T3420] ? sctp_copy_one_addr+0x93/0x660 [ 1323.194397][ T3420] sctp_bind_addr_copy+0x185/0x3c0 [ 1323.199539][ T3420] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1323.205138][ T3420] ? __sctp_connect+0xd80/0xd80 [ 1323.210025][ T3420] ? __local_bh_enable_ip+0x136/0x1c0 [ 1323.215417][ T3420] ? _local_bh_enable+0xa0/0xa0 [ 1323.220378][ T3420] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1323.226451][ T3420] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1323.232523][ T3420] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1323.238175][ T3420] ? security_sctp_bind_connect+0x85/0xb0 [ 1323.243910][ T3420] sctp_sendmsg+0x1686/0x2940 [ 1323.248622][ T3420] ? sctp_getsockopt+0x8a0/0x8a0 [ 1323.253827][ T3420] ? __might_fault+0xa6/0x120 [ 1323.258516][ T3420] ? aa_af_perm+0x340/0x340 [ 1323.263201][ T3420] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1323.269643][ T3420] ? inet_sendmsg+0x7a/0x2a0 [ 1323.274239][ T3420] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1323.279563][ T3420] ? inet_send_prepare+0x250/0x250 [ 1323.284729][ T3420] ____sys_sendmsg+0x5ed/0x9a0 [ 1323.289524][ T3420] ? __sys_sendmsg_sock+0x30/0x30 [ 1323.294706][ T3420] ? __import_iovec+0x306/0x510 [ 1323.299577][ T3420] ? import_iovec+0x6f/0xa0 [ 1323.304097][ T3420] ___sys_sendmsg+0x2a2/0x360 [ 1323.308796][ T3420] ? __sys_sendmsg+0x2a0/0x2a0 [ 1323.313600][ T3420] ? __lock_acquire+0x7bd0/0x7bd0 [ 1323.318693][ T3420] __se_sys_sendmsg+0x1c3/0x2b0 [ 1323.323733][ T3420] ? __x64_sys_sendmsg+0x80/0x80 [ 1323.328719][ T3420] ? lockdep_hardirqs_on+0x94/0x140 [ 1323.333941][ T3420] do_syscall_64+0x4c/0xa0 [ 1323.338453][ T3420] ? clear_bhb_loop+0x60/0xb0 [ 1323.343308][ T3420] ? clear_bhb_loop+0x60/0xb0 [ 1323.347990][ T3420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1323.354069][ T3420] RIP: 0033:0x7f354199ce59 [ 1323.358577][ T3420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1323.378456][ T3420] RSP: 002b:00007f3542888028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1323.387343][ T3420] RAX: ffffffffffffffda RBX: 00007f3541c15fa0 RCX: 00007f354199ce59 [ 1323.395341][ T3420] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000004 [ 1323.403526][ T3420] RBP: 00007f3542888090 R08: 0000000000000000 R09: 0000000000000000 [ 1323.411687][ T3420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1323.419692][ T3420] R13: 00007f3541c16038 R14: 00007f3541c15fa0 R15: 00007ffdbf348388 [ 1323.428050][ T3420] [ 1323.462565][ T3423] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.10263'. [ 1323.618113][ T3428] netlink: 'syz.4.10263': attribute type 10 has an invalid length. [ 1323.748739][ T3428] device hsr0 left promiscuous mode [ 1323.757677][ T3428] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1323.901664][ T3422] delete_channel: no stack [ 1324.451083][ T3451] netlink: 'syz.4.10272': attribute type 21 has an invalid length. [ 1324.741269][ T3459] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10274'. [ 1324.808177][ T3459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1324.828817][ T3453] netlink: 'syz.0.10273': attribute type 10 has an invalid length. [ 1324.837133][ T3453] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.10273'. [ 1324.879812][ T3454] netlink: 'syz.3.10274': attribute type 10 has an invalid length. [ 1325.630660][ T3498] FAULT_INJECTION: forcing a failure. [ 1325.630660][ T3498] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.655122][ T3499] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1325.767037][ T3498] CPU: 0 PID: 3498 Comm: syz.3.10286 Not tainted syzkaller #0 [ 1325.774594][ T3498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1325.784687][ T3498] Call Trace: [ 1325.788015][ T3498] [ 1325.790983][ T3498] dump_stack_lvl+0x188/0x24e [ 1325.795817][ T3498] ? sctp_sendmsg+0x1686/0x2940 [ 1325.800714][ T3498] ? ___sys_sendmsg+0x2a2/0x360 [ 1325.805601][ T3498] ? show_regs_print_info+0x12/0x12 [ 1325.811019][ T3498] ? load_image+0x410/0x410 [ 1325.815597][ T3498] should_fail_ex+0x390/0x4c0 [ 1325.820330][ T3498] should_failslab+0x5/0x20 [ 1325.825041][ T3498] slab_pre_alloc_hook+0x59/0x300 [ 1325.830107][ T3498] ? sctp_add_bind_addr+0x89/0x350 [ 1325.835268][ T3498] __kmem_cache_alloc_node+0x4f/0x270 [ 1325.840792][ T3498] ? sctp_add_bind_addr+0x89/0x350 [ 1325.846095][ T3498] kmalloc_trace+0x26/0xe0 [ 1325.850838][ T3498] sctp_add_bind_addr+0x89/0x350 [ 1325.855828][ T3498] sctp_copy_local_addr_list+0x317/0x4d0 [ 1325.861608][ T3498] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1325.867403][ T3498] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1325.873529][ T3498] ? sctp_v4_is_any+0x31/0x50 [ 1325.878245][ T3498] ? sctp_copy_one_addr+0x93/0x660 [ 1325.883417][ T3498] sctp_bind_addr_copy+0x185/0x3c0 [ 1325.888589][ T3498] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1325.893923][ T3498] ? __sctp_connect+0xd80/0xd80 [ 1325.898822][ T3498] ? __local_bh_enable_ip+0x136/0x1c0 [ 1325.904321][ T3498] ? _local_bh_enable+0xa0/0xa0 [ 1325.909214][ T3498] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1325.915143][ T3498] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1325.921193][ T3498] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1325.926860][ T3498] ? security_sctp_bind_connect+0x85/0xb0 [ 1325.932618][ T3498] sctp_sendmsg+0x1686/0x2940 [ 1325.937362][ T3498] ? sctp_getsockopt+0x8a0/0x8a0 [ 1325.942336][ T3498] ? __might_fault+0xa6/0x120 [ 1325.947130][ T3498] ? aa_af_perm+0x340/0x340 [ 1325.951659][ T3498] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1325.958124][ T3498] ? inet_sendmsg+0x7a/0x2a0 [ 1325.962739][ T3498] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1325.968052][ T3498] ? inet_send_prepare+0x250/0x250 [ 1325.973202][ T3498] ____sys_sendmsg+0x5ed/0x9a0 [ 1325.978020][ T3498] ? __sys_sendmsg_sock+0x30/0x30 [ 1325.983102][ T3498] ? __import_iovec+0x306/0x510 [ 1325.988006][ T3498] ? import_iovec+0x6f/0xa0 [ 1325.992549][ T3498] ___sys_sendmsg+0x2a2/0x360 [ 1325.997352][ T3498] ? __sys_sendmsg+0x2a0/0x2a0 [ 1326.002183][ T3498] ? __lock_acquire+0x7bd0/0x7bd0 [ 1326.007907][ T3498] __se_sys_sendmsg+0x1c3/0x2b0 [ 1326.012791][ T3498] ? __x64_sys_sendmsg+0x80/0x80 [ 1326.017962][ T3498] ? lockdep_hardirqs_on+0x94/0x140 [ 1326.023362][ T3498] do_syscall_64+0x4c/0xa0 [ 1326.027882][ T3498] ? clear_bhb_loop+0x60/0xb0 [ 1326.032580][ T3498] ? clear_bhb_loop+0x60/0xb0 [ 1326.037364][ T3498] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1326.043281][ T3498] RIP: 0033:0x7fe432f9ce59 [ 1326.047817][ T3498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1326.067456][ T3498] RSP: 002b:00007fe433daf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1326.075897][ T3498] RAX: ffffffffffffffda RBX: 00007fe433215fa0 RCX: 00007fe432f9ce59 [ 1326.084003][ T3498] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000004 [ 1326.092183][ T3498] RBP: 00007fe433daf090 R08: 0000000000000000 R09: 0000000000000000 [ 1326.100179][ T3498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1326.108255][ T3498] R13: 00007fe433216038 R14: 00007fe433215fa0 R15: 00007ffcf6b48638 [ 1326.116374][ T3498] [ 1326.249131][ T3505] netlink: 'syz.1.10290': attribute type 10 has an invalid length. [ 1326.257274][ T3505] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.10290'. [ 1326.450203][ T3509] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10292'. [ 1326.476793][ T3509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1326.506979][ T3519] netlink: 'syz.2.10292': attribute type 10 has an invalid length. [ 1326.529810][ T3516] netlink: 'syz.4.10294': attribute type 29 has an invalid length. [ 1326.568679][ T3516] netlink: 'syz.4.10294': attribute type 29 has an invalid length. [ 1327.174017][ T3547] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.10306'. [ 1327.784770][ T3557] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10309'. [ 1327.859665][ T3557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1327.892538][ T3563] FAULT_INJECTION: forcing a failure. [ 1327.892538][ T3563] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.981845][ T3557] validate_nla: 4 callbacks suppressed [ 1327.981940][ T3557] netlink: 'syz.4.10309': attribute type 10 has an invalid length. [ 1328.009816][ T3563] CPU: 0 PID: 3563 Comm: syz.2.10311 Not tainted syzkaller #0 [ 1328.017703][ T3563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1328.027980][ T3563] Call Trace: [ 1328.031554][ T3563] [ 1328.034601][ T3563] dump_stack_lvl+0x188/0x24e [ 1328.039390][ T3563] ? sctp_sendmsg+0x1686/0x2940 [ 1328.044415][ T3563] ? ___sys_sendmsg+0x2a2/0x360 [ 1328.049316][ T3563] ? show_regs_print_info+0x12/0x12 [ 1328.054646][ T3563] ? load_image+0x410/0x410 [ 1328.059218][ T3563] should_fail_ex+0x390/0x4c0 [ 1328.064129][ T3563] should_failslab+0x5/0x20 [ 1328.068676][ T3563] slab_pre_alloc_hook+0x59/0x300 [ 1328.073841][ T3563] ? sctp_add_bind_addr+0x89/0x350 [ 1328.079085][ T3563] __kmem_cache_alloc_node+0x4f/0x270 [ 1328.084593][ T3563] ? sctp_add_bind_addr+0x89/0x350 [ 1328.089938][ T3563] kmalloc_trace+0x26/0xe0 [ 1328.094424][ T3563] sctp_add_bind_addr+0x89/0x350 [ 1328.099517][ T3563] sctp_copy_local_addr_list+0x317/0x4d0 [ 1328.105210][ T3563] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1328.111068][ T3563] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1328.117189][ T3563] ? sctp_v4_is_any+0x31/0x50 [ 1328.122001][ T3563] ? sctp_copy_one_addr+0x93/0x660 [ 1328.127170][ T3563] sctp_bind_addr_copy+0x185/0x3c0 [ 1328.132421][ T3563] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1328.137846][ T3563] ? __sctp_connect+0xd80/0xd80 [ 1328.142910][ T3563] ? __local_bh_enable_ip+0x136/0x1c0 [ 1328.148410][ T3563] ? _local_bh_enable+0xa0/0xa0 [ 1328.153303][ T3563] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1328.159322][ T3563] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1328.165146][ T3563] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1328.170702][ T3563] ? security_sctp_bind_connect+0x85/0xb0 [ 1328.176438][ T3563] sctp_sendmsg+0x1686/0x2940 [ 1328.181147][ T3563] ? sctp_getsockopt+0x8a0/0x8a0 [ 1328.186179][ T3563] ? __might_fault+0xa6/0x120 [ 1328.190863][ T3563] ? aa_af_perm+0x340/0x340 [ 1328.195366][ T3563] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1328.201813][ T3563] ? inet_sendmsg+0x7a/0x2a0 [ 1328.206458][ T3563] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1328.211877][ T3563] ? inet_send_prepare+0x250/0x250 [ 1328.217009][ T3563] ____sys_sendmsg+0x5ed/0x9a0 [ 1328.221973][ T3563] ? __sys_sendmsg_sock+0x30/0x30 [ 1328.227176][ T3563] ? __import_iovec+0x306/0x510 [ 1328.232051][ T3563] ? import_iovec+0x6f/0xa0 [ 1328.236808][ T3563] ___sys_sendmsg+0x2a2/0x360 [ 1328.241508][ T3563] ? __sys_sendmsg+0x2a0/0x2a0 [ 1328.246312][ T3563] ? __lock_acquire+0x7bd0/0x7bd0 [ 1328.251388][ T3563] __se_sys_sendmsg+0x1c3/0x2b0 [ 1328.256249][ T3563] ? __x64_sys_sendmsg+0x80/0x80 [ 1328.261214][ T3563] ? lockdep_hardirqs_on+0x94/0x140 [ 1328.266545][ T3563] do_syscall_64+0x4c/0xa0 [ 1328.271060][ T3563] ? clear_bhb_loop+0x60/0xb0 [ 1328.275740][ T3563] ? clear_bhb_loop+0x60/0xb0 [ 1328.280602][ T3563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1328.286717][ T3563] RIP: 0033:0x7f605ef9ce59 [ 1328.291152][ T3563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1328.311123][ T3563] RSP: 002b:00007f605feaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1328.319550][ T3563] RAX: ffffffffffffffda RBX: 00007f605f215fa0 RCX: 00007f605ef9ce59 [ 1328.327721][ T3563] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000004 [ 1328.335784][ T3563] RBP: 00007f605feaf090 R08: 0000000000000000 R09: 0000000000000000 [ 1328.343775][ T3563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1328.351926][ T3563] R13: 00007f605f216038 R14: 00007f605f215fa0 R15: 00007ffd3b802b98 [ 1328.360021][ T3563] [ 1328.492669][ T3569] netlink: 10 bytes leftover after parsing attributes in process `syz.3.10313'. [ 1329.265892][ T3585] netlink: 'syz.1.10318': attribute type 10 has an invalid length. [ 1329.308691][ T3585] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.10318'. [ 1329.327613][ T3590] netlink: 'syz.2.10319': attribute type 21 has an invalid length. [ 1329.452750][ T3598] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.10321'. [ 1330.212825][ T3611] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10325'. [ 1330.267605][ T3611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1330.307377][ T3610] netlink: 'syz.4.10325': attribute type 10 has an invalid length. [ 1330.618426][ T3631] netlink: 'syz.1.10331': attribute type 21 has an invalid length. [ 1330.628643][ T3631] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10331'. [ 1330.891324][ T3636] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10331'. [ 1330.947148][ T3642] netlink: 'syz.0.10334': attribute type 10 has an invalid length. [ 1330.966446][ T3642] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.10334'. [ 1331.009714][ T3630] delete_channel: no stack [ 1331.295643][ T3664] netlink: 'syz.1.10339': attribute type 29 has an invalid length. [ 1331.305995][ T3664] netlink: 'syz.1.10339': attribute type 29 has an invalid length. [ 1331.314660][ T3655] netlink: 'syz.1.10339': attribute type 29 has an invalid length. [ 1331.377847][ T3660] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10341'. [ 1331.423417][ T3660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1331.475189][ T3665] netlink: 'syz.4.10341': attribute type 10 has an invalid length. [ 1331.676713][ T3668] netlink: 13951 bytes leftover after parsing attributes in process `syz.1.10343'. [ 1331.878308][T29218] wlan1: Trigger new scan to find an IBSS to join [ 1332.570607][ T3708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1332.998493][ T3722] validate_nla: 1 callbacks suppressed [ 1332.998519][ T3722] netlink: 'syz.0.10360': attribute type 21 has an invalid length. [ 1333.579934][ T3738] __nla_validate_parse: 1 callbacks suppressed [ 1333.579981][ T3738] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.10365'. [ 1333.815658][ T3750] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10370'. [ 1333.859957][ T3750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1334.016929][ T3760] netlink: 'syz.2.10372': attribute type 29 has an invalid length. [ 1334.045238][ T3760] netlink: 'syz.2.10372': attribute type 29 has an invalid length. [ 1334.242349][ T3768] FAULT_INJECTION: forcing a failure. [ 1334.242349][ T3768] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.279655][ T3768] CPU: 0 PID: 3768 Comm: syz.4.10377 Not tainted syzkaller #0 [ 1334.287187][ T3768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1334.297360][ T3768] Call Trace: [ 1334.300656][ T3768] [ 1334.303604][ T3768] dump_stack_lvl+0x188/0x24e [ 1334.308299][ T3768] ? sctp_sendmsg+0x1686/0x2940 [ 1334.313252][ T3768] ? ___sys_sendmsg+0x2a2/0x360 [ 1334.318115][ T3768] ? show_regs_print_info+0x12/0x12 [ 1334.323326][ T3768] ? load_image+0x410/0x410 [ 1334.327862][ T3768] should_fail_ex+0x390/0x4c0 [ 1334.332566][ T3768] should_failslab+0x5/0x20 [ 1334.337073][ T3768] slab_pre_alloc_hook+0x59/0x300 [ 1334.342200][ T3768] ? sctp_add_bind_addr+0x89/0x350 [ 1334.347326][ T3768] __kmem_cache_alloc_node+0x4f/0x270 [ 1334.352768][ T3768] ? sctp_add_bind_addr+0x89/0x350 [ 1334.357887][ T3768] kmalloc_trace+0x26/0xe0 [ 1334.362322][ T3768] sctp_add_bind_addr+0x89/0x350 [ 1334.367456][ T3768] sctp_copy_local_addr_list+0x317/0x4d0 [ 1334.373117][ T3768] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1334.378852][ T3768] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1334.384941][ T3768] ? sctp_v4_is_any+0x31/0x50 [ 1334.389716][ T3768] ? sctp_copy_one_addr+0x93/0x660 [ 1334.394846][ T3768] sctp_bind_addr_copy+0x185/0x3c0 [ 1334.399979][ T3768] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1334.405282][ T3768] ? __sctp_connect+0xd80/0xd80 [ 1334.410225][ T3768] ? __local_bh_enable_ip+0x136/0x1c0 [ 1334.415602][ T3768] ? _local_bh_enable+0xa0/0xa0 [ 1334.420463][ T3768] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1334.426373][ T3768] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1334.432184][ T3768] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1334.437739][ T3768] ? security_sctp_bind_connect+0x85/0xb0 [ 1334.443602][ T3768] sctp_sendmsg+0x1686/0x2940 [ 1334.448319][ T3768] ? sctp_getsockopt+0x8a0/0x8a0 [ 1334.453264][ T3768] ? __might_fault+0xa6/0x120 [ 1334.457948][ T3768] ? aa_af_perm+0x340/0x340 [ 1334.462460][ T3768] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1334.468902][ T3768] ? inet_sendmsg+0x7a/0x2a0 [ 1334.473504][ T3768] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1334.478797][ T3768] ? inet_send_prepare+0x250/0x250 [ 1334.483922][ T3768] ____sys_sendmsg+0x5ed/0x9a0 [ 1334.488799][ T3768] ? __sys_sendmsg_sock+0x30/0x30 [ 1334.493854][ T3768] ? __import_iovec+0x306/0x510 [ 1334.498753][ T3768] ? import_iovec+0x6f/0xa0 [ 1334.503272][ T3768] ___sys_sendmsg+0x2a2/0x360 [ 1334.507966][ T3768] ? __sys_sendmsg+0x2a0/0x2a0 [ 1334.512857][ T3768] ? __lock_acquire+0x7bd0/0x7bd0 [ 1334.518123][ T3768] __se_sys_sendmsg+0x1c3/0x2b0 [ 1334.522997][ T3768] ? __x64_sys_sendmsg+0x80/0x80 [ 1334.528055][ T3768] ? lockdep_hardirqs_on+0x94/0x140 [ 1334.533363][ T3768] do_syscall_64+0x4c/0xa0 [ 1334.537787][ T3768] ? clear_bhb_loop+0x60/0xb0 [ 1334.542467][ T3768] ? clear_bhb_loop+0x60/0xb0 [ 1334.547146][ T3768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1334.553056][ T3768] RIP: 0033:0x7fb45bb9ce59 [ 1334.557599][ T3768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1334.577238][ T3768] RSP: 002b:00007fb45c9d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1334.585692][ T3768] RAX: ffffffffffffffda RBX: 00007fb45be15fa0 RCX: 00007fb45bb9ce59 [ 1334.593894][ T3768] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000004 [ 1334.601991][ T3768] RBP: 00007fb45c9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1334.610085][ T3768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1334.618107][ T3768] R13: 00007fb45be16038 R14: 00007fb45be15fa0 R15: 00007ffee2fc5538 [ 1334.626318][ T3768] [ 1334.819903][ T3781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1334.888286][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1334.934988][ T3781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1334.957421][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.092598][ T3785] netlink: 'syz.3.10382': attribute type 21 has an invalid length. [ 1335.471461][ T3789] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.10384'. [ 1335.853025][ T3802] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10388'. [ 1335.886011][ T3802] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1335.937112][ T3807] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1335.973452][ T3802] netlink: 'syz.3.10388': attribute type 10 has an invalid length. [ 1336.664282][ T3835] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.10399'. [ 1336.676946][ T3840] FAULT_INJECTION: forcing a failure. [ 1336.676946][ T3840] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.776176][ T3840] CPU: 0 PID: 3840 Comm: syz.2.10402 Not tainted syzkaller #0 [ 1336.784257][ T3840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1336.794613][ T3840] Call Trace: [ 1336.797922][ T3840] [ 1336.800889][ T3840] dump_stack_lvl+0x188/0x24e [ 1336.805696][ T3840] ? sctp_sendmsg+0x1686/0x2940 [ 1336.810685][ T3840] ? ___sys_sendmsg+0x2a2/0x360 [ 1336.815766][ T3840] ? show_regs_print_info+0x12/0x12 [ 1336.821365][ T3840] ? load_image+0x410/0x410 [ 1336.826035][ T3840] should_fail_ex+0x390/0x4c0 [ 1336.830765][ T3840] should_failslab+0x5/0x20 [ 1336.835466][ T3840] slab_pre_alloc_hook+0x59/0x300 [ 1336.840523][ T3840] ? sctp_add_bind_addr+0x89/0x350 [ 1336.845836][ T3840] __kmem_cache_alloc_node+0x4f/0x270 [ 1336.851239][ T3840] ? sctp_add_bind_addr+0x89/0x350 [ 1336.856385][ T3840] kmalloc_trace+0x26/0xe0 [ 1336.860847][ T3840] sctp_add_bind_addr+0x89/0x350 [ 1336.865825][ T3840] sctp_copy_local_addr_list+0x317/0x4d0 [ 1336.871675][ T3840] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1336.877600][ T3840] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1336.883704][ T3840] ? sctp_v4_is_any+0x31/0x50 [ 1336.888728][ T3840] ? sctp_copy_one_addr+0x93/0x660 [ 1336.894149][ T3840] sctp_bind_addr_copy+0x185/0x3c0 [ 1336.899306][ T3840] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1336.904715][ T3840] ? __sctp_connect+0xd80/0xd80 [ 1336.909598][ T3840] ? __local_bh_enable_ip+0x136/0x1c0 [ 1336.914998][ T3840] ? _local_bh_enable+0xa0/0xa0 [ 1336.919889][ T3840] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1336.925903][ T3840] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1336.931841][ T3840] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1336.937419][ T3840] ? security_sctp_bind_connect+0x85/0xb0 [ 1336.943173][ T3840] sctp_sendmsg+0x1686/0x2940 [ 1336.947915][ T3840] ? sctp_getsockopt+0x8a0/0x8a0 [ 1336.952888][ T3840] ? __might_fault+0xa6/0x120 [ 1336.957604][ T3840] ? aa_af_perm+0x340/0x340 [ 1336.962134][ T3840] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1336.968692][ T3840] ? inet_sendmsg+0x7a/0x2a0 [ 1336.973464][ T3840] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1336.978788][ T3840] ? inet_send_prepare+0x250/0x250 [ 1336.984037][ T3840] ____sys_sendmsg+0x5ed/0x9a0 [ 1336.988876][ T3840] ? __sys_sendmsg_sock+0x30/0x30 [ 1336.994016][ T3840] ? __import_iovec+0x306/0x510 [ 1336.998922][ T3840] ? import_iovec+0x6f/0xa0 [ 1337.003464][ T3840] ___sys_sendmsg+0x2a2/0x360 [ 1337.008386][ T3840] ? __sys_sendmsg+0x2a0/0x2a0 [ 1337.013232][ T3840] ? __lock_acquire+0x7bd0/0x7bd0 [ 1337.018535][ T3840] __se_sys_sendmsg+0x1c3/0x2b0 [ 1337.023498][ T3840] ? ct_nmi_exit+0x145/0x1c0 [ 1337.028301][ T3840] ? __x64_sys_sendmsg+0x80/0x80 [ 1337.033300][ T3840] ? lockdep_hardirqs_on+0x94/0x140 [ 1337.038541][ T3840] do_syscall_64+0x4c/0xa0 [ 1337.042980][ T3840] ? clear_bhb_loop+0x60/0xb0 [ 1337.047764][ T3840] ? clear_bhb_loop+0x60/0xb0 [ 1337.052473][ T3840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1337.058663][ T3840] RIP: 0033:0x7f605ef9ce59 [ 1337.063162][ T3840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1337.083337][ T3840] RSP: 002b:00007f605feaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1337.091901][ T3840] RAX: ffffffffffffffda RBX: 00007f605f215fa0 RCX: 00007f605ef9ce59 [ 1337.099905][ T3840] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000004 [ 1337.108077][ T3840] RBP: 00007f605feaf090 R08: 0000000000000000 R09: 0000000000000000 [ 1337.116164][ T3840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1337.124259][ T3840] R13: 00007f605f216038 R14: 00007f605f215fa0 R15: 00007ffd3b802b98 [ 1337.132504][ T3840] [ 1337.217322][ T2387] wlan1: Trigger new scan to find an IBSS to join [ 1337.731499][ T3852] netlink: 'syz.0.10407': attribute type 21 has an invalid length. [ 1337.910576][ T3862] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1338.206385][ T3871] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.10413'. [ 1338.321645][ T2402] wlan1: Creating new IBSS network, BSSID be:b0:4b:19:3d:f3 [ 1339.004393][ T3906] FAULT_INJECTION: forcing a failure. [ 1339.004393][ T3906] name failslab, interval 1, probability 0, space 0, times 0 [ 1339.027379][ T3906] CPU: 0 PID: 3906 Comm: syz.0.10426 Not tainted syzkaller #0 [ 1339.035009][ T3906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1339.045257][ T3906] Call Trace: [ 1339.048567][ T3906] [ 1339.051529][ T3906] dump_stack_lvl+0x188/0x24e [ 1339.056323][ T3906] ? sctp_sendmsg+0x1686/0x2940 [ 1339.061207][ T3906] ? ___sys_sendmsg+0x2a2/0x360 [ 1339.066112][ T3906] ? show_regs_print_info+0x12/0x12 [ 1339.071439][ T3906] ? load_image+0x410/0x410 [ 1339.076034][ T3906] should_fail_ex+0x390/0x4c0 [ 1339.080761][ T3906] should_failslab+0x5/0x20 [ 1339.085296][ T3906] slab_pre_alloc_hook+0x59/0x300 [ 1339.090366][ T3906] ? sctp_add_bind_addr+0x89/0x350 [ 1339.095527][ T3906] __kmem_cache_alloc_node+0x4f/0x270 [ 1339.100963][ T3906] ? sctp_add_bind_addr+0x89/0x350 [ 1339.106123][ T3906] kmalloc_trace+0x26/0xe0 [ 1339.110590][ T3906] sctp_add_bind_addr+0x89/0x350 [ 1339.115662][ T3906] sctp_copy_local_addr_list+0x317/0x4d0 [ 1339.121433][ T3906] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1339.127245][ T3906] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1339.133343][ T3906] ? sctp_v4_is_any+0x31/0x50 [ 1339.138030][ T3906] ? sctp_copy_one_addr+0x93/0x660 [ 1339.143245][ T3906] sctp_bind_addr_copy+0x185/0x3c0 [ 1339.148376][ T3906] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1339.153676][ T3906] ? __sctp_connect+0xd80/0xd80 [ 1339.158621][ T3906] ? __local_bh_enable_ip+0x136/0x1c0 [ 1339.164004][ T3906] ? _local_bh_enable+0xa0/0xa0 [ 1339.168955][ T3906] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1339.174862][ T3906] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1339.180770][ T3906] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1339.186604][ T3906] ? security_sctp_bind_connect+0x85/0xb0 [ 1339.192621][ T3906] sctp_sendmsg+0x1686/0x2940 [ 1339.197331][ T3906] ? sctp_getsockopt+0x8a0/0x8a0 [ 1339.202277][ T3906] ? __might_fault+0xa6/0x120 [ 1339.206961][ T3906] ? aa_af_perm+0x340/0x340 [ 1339.211566][ T3906] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1339.218004][ T3906] ? inet_sendmsg+0x7a/0x2a0 [ 1339.222694][ T3906] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1339.228116][ T3906] ? inet_send_prepare+0x250/0x250 [ 1339.233406][ T3906] ____sys_sendmsg+0x5ed/0x9a0 [ 1339.238364][ T3906] ? __sys_sendmsg_sock+0x30/0x30 [ 1339.243391][ T3906] ? __import_iovec+0x306/0x510 [ 1339.248265][ T3906] ? import_iovec+0x6f/0xa0 [ 1339.252868][ T3906] ___sys_sendmsg+0x2a2/0x360 [ 1339.257561][ T3906] ? __sys_sendmsg+0x2a0/0x2a0 [ 1339.262456][ T3906] ? __lock_acquire+0x7bd0/0x7bd0 [ 1339.267706][ T3906] __se_sys_sendmsg+0x1c3/0x2b0 [ 1339.272572][ T3906] ? __x64_sys_sendmsg+0x80/0x80 [ 1339.277542][ T3906] ? lockdep_hardirqs_on+0x94/0x140 [ 1339.282762][ T3906] do_syscall_64+0x4c/0xa0 [ 1339.287423][ T3906] ? clear_bhb_loop+0x60/0xb0 [ 1339.292231][ T3906] ? clear_bhb_loop+0x60/0xb0 [ 1339.296937][ T3906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1339.302848][ T3906] RIP: 0033:0x7ffbcd39ce59 [ 1339.307281][ T3906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1339.327093][ T3906] RSP: 002b:00007ffbce1f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1339.335551][ T3906] RAX: ffffffffffffffda RBX: 00007ffbcd615fa0 RCX: 00007ffbcd39ce59 [ 1339.343536][ T3906] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000004 [ 1339.351632][ T3906] RBP: 00007ffbce1f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1339.359791][ T3906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1339.367861][ T3906] R13: 00007ffbcd616038 R14: 00007ffbcd615fa0 R15: 00007ffd3bf1ef28 [ 1339.375866][ T3906] [ 1339.726037][ T3913] netlink: 'syz.2.10429': attribute type 29 has an invalid length. [ 1339.734744][ T3913] netlink: 'syz.2.10429': attribute type 29 has an invalid length. [ 1340.013845][ T3921] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.10430'. [ 1340.557876][ T3929] netlink: 125520 bytes leftover after parsing attributes in process `syz.0.10434'. [ 1341.729229][ T3960] netlink: 'syz.3.10444': attribute type 10 has an invalid length. [ 1341.762035][ T3960] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10444'. [ 1341.762113][ T3964] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1341.792098][ T3960] device team0 entered promiscuous mode [ 1341.830603][ T3960] device team_slave_0 entered promiscuous mode [ 1341.870526][ T3960] device team_slave_1 entered promiscuous mode [ 1341.890166][ T3960] device macvlan0 entered promiscuous mode [ 1341.915679][ T3960] device bridge0 entered promiscuous mode [ 1341.970671][ T3960] bridge0: port 3(team0) entered blocking state [ 1342.002073][ T3960] bridge0: port 3(team0) entered disabled state [ 1342.132506][ T3960] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1342.226947][ T3967] netlink: 'syz.2.10447': attribute type 21 has an invalid length. [ 1342.545404][ T3985] netlink: 'syz.1.10452': attribute type 29 has an invalid length. [ 1342.551949][ T3980] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.10450'. [ 1342.601592][ T3985] netlink: 'syz.1.10452': attribute type 29 has an invalid length. [ 1342.626231][ T3984] netlink: 'syz.1.10452': attribute type 29 has an invalid length. [ 1342.720952][ T3988] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10453'. [ 1342.739879][ T3988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1342.813422][ T3988] netlink: 'syz.3.10453': attribute type 10 has an invalid length. [ 1343.077761][ T4000] netlink: 'syz.0.10458': attribute type 29 has an invalid length. [ 1343.103041][ T4000] netlink: 'syz.0.10458': attribute type 29 has an invalid length. [ 1343.229394][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 1343.953811][ T4036] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.10469'. [ 1343.968314][ T4034] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10470'. [ 1343.988286][ T4034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1344.225942][ T4046] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1344.322856][ T4028] delete_channel: no stack [ 1344.354867][ T4050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1344.366399][ T4050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1344.383747][ T4050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1344.395851][ T4050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1344.522045][ T4058] FAULT_INJECTION: forcing a failure. [ 1344.522045][ T4058] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.571277][ T4058] CPU: 0 PID: 4058 Comm: syz.2.10476 Not tainted syzkaller #0 [ 1344.579166][ T4058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1344.589435][ T4058] Call Trace: [ 1344.592763][ T4058] [ 1344.595909][ T4058] dump_stack_lvl+0x188/0x24e [ 1344.600692][ T4058] ? sctp_sendmsg+0x1686/0x2940 [ 1344.605562][ T4058] ? ___sys_sendmsg+0x2a2/0x360 [ 1344.610527][ T4058] ? show_regs_print_info+0x12/0x12 [ 1344.615747][ T4058] ? load_image+0x410/0x410 [ 1344.620535][ T4058] should_fail_ex+0x390/0x4c0 [ 1344.625259][ T4058] should_failslab+0x5/0x20 [ 1344.629889][ T4058] slab_pre_alloc_hook+0x59/0x300 [ 1344.634967][ T4058] ? sctp_add_bind_addr+0x89/0x350 [ 1344.640121][ T4058] __kmem_cache_alloc_node+0x4f/0x270 [ 1344.645632][ T4058] ? sctp_add_bind_addr+0x89/0x350 [ 1344.650799][ T4058] kmalloc_trace+0x26/0xe0 [ 1344.655281][ T4058] sctp_add_bind_addr+0x89/0x350 [ 1344.660269][ T4058] sctp_copy_local_addr_list+0x317/0x4d0 [ 1344.665951][ T4058] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1344.671824][ T4058] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1344.678131][ T4058] ? sctp_v4_is_any+0x31/0x50 [ 1344.683035][ T4058] ? sctp_copy_one_addr+0x93/0x660 [ 1344.688186][ T4058] sctp_bind_addr_copy+0x185/0x3c0 [ 1344.693317][ T4058] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1344.698619][ T4058] ? __sctp_connect+0xd80/0xd80 [ 1344.703484][ T4058] ? __local_bh_enable_ip+0x136/0x1c0 [ 1344.708887][ T4058] ? _local_bh_enable+0xa0/0xa0 [ 1344.713879][ T4058] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1344.719714][ T4058] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1344.725580][ T4058] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1344.731183][ T4058] ? security_sctp_bind_connect+0x85/0xb0 [ 1344.736973][ T4058] sctp_sendmsg+0x1686/0x2940 [ 1344.741738][ T4058] ? sctp_getsockopt+0x8a0/0x8a0 [ 1344.746833][ T4058] ? __might_fault+0xa6/0x120 [ 1344.751549][ T4058] ? aa_af_perm+0x340/0x340 [ 1344.756165][ T4058] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1344.762637][ T4058] ? inet_sendmsg+0x7a/0x2a0 [ 1344.767334][ T4058] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1344.772640][ T4058] ? inet_send_prepare+0x250/0x250 [ 1344.777856][ T4058] ____sys_sendmsg+0x5ed/0x9a0 [ 1344.782733][ T4058] ? __sys_sendmsg_sock+0x30/0x30 [ 1344.787924][ T4058] ? __import_iovec+0x306/0x510 [ 1344.792887][ T4058] ? import_iovec+0x6f/0xa0 [ 1344.797584][ T4058] ___sys_sendmsg+0x2a2/0x360 [ 1344.802290][ T4058] ? __sys_sendmsg+0x2a0/0x2a0 [ 1344.807103][ T4058] ? __lock_acquire+0x7bd0/0x7bd0 [ 1344.812215][ T4058] __se_sys_sendmsg+0x1c3/0x2b0 [ 1344.817089][ T4058] ? ct_nmi_exit+0x145/0x1c0 [ 1344.821782][ T4058] ? __x64_sys_sendmsg+0x80/0x80 [ 1344.826938][ T4058] ? lockdep_hardirqs_on+0x94/0x140 [ 1344.832158][ T4058] do_syscall_64+0x4c/0xa0 [ 1344.836583][ T4058] ? clear_bhb_loop+0x60/0xb0 [ 1344.841307][ T4058] ? clear_bhb_loop+0x60/0xb0 [ 1344.845992][ T4058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1344.851903][ T4058] RIP: 0033:0x7f605ef9ce59 [ 1344.856336][ T4058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1344.876046][ T4058] RSP: 002b:00007f605feaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1344.884824][ T4058] RAX: ffffffffffffffda RBX: 00007f605f215fa0 RCX: 00007f605ef9ce59 [ 1344.892991][ T4058] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000004 [ 1344.901083][ T4058] RBP: 00007f605feaf090 R08: 0000000000000000 R09: 0000000000000000 [ 1344.909084][ T4058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1344.917062][ T4058] R13: 00007f605f216038 R14: 00007f605f215fa0 R15: 00007ffd3b802b98 [ 1344.925245][ T4058] [ 1344.974289][ T4062] validate_nla: 2 callbacks suppressed [ 1344.974330][ T4062] netlink: 'syz.4.10478': attribute type 3 has an invalid length. [ 1344.998450][ T4056] netlink: 'syz.3.10475': attribute type 29 has an invalid length. [ 1345.008709][ T4054] netlink: 'syz.3.10475': attribute type 29 has an invalid length. [ 1345.266358][ T4071] netlink: 'syz.3.10481': attribute type 3 has an invalid length. [ 1345.296211][ T4071] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10481'. [ 1345.363048][ T4076] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10483'. [ 1345.388481][ T4076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1345.451112][ T4076] netlink: 'syz.1.10483': attribute type 10 has an invalid length. [ 1346.070095][ T4101] __sock_release: fasync list not empty! [ 1346.692263][ T4120] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.10498'. [ 1346.712743][ T4124] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1346.955948][ T4131] netlink: 'syz.0.10503': attribute type 10 has an invalid length. [ 1347.036929][ T4131] team0: Port device veth0_to_bond added [ 1347.059908][ T4128] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10501'. [ 1347.086913][ T4128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1347.107898][ T4135] netlink: 'syz.2.10501': attribute type 10 has an invalid length. [ 1347.259612][ T4143] FAULT_INJECTION: forcing a failure. [ 1347.259612][ T4143] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.290571][ T4143] CPU: 1 PID: 4143 Comm: syz.0.10508 Not tainted syzkaller #0 [ 1347.298121][ T4143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1347.308209][ T4143] Call Trace: [ 1347.311526][ T4143] [ 1347.314496][ T4143] dump_stack_lvl+0x188/0x24e [ 1347.319205][ T4143] ? sctp_sendmsg+0x1686/0x2940 [ 1347.324070][ T4143] ? ___sys_sendmsg+0x2a2/0x360 [ 1347.328934][ T4143] ? show_regs_print_info+0x12/0x12 [ 1347.334225][ T4143] ? load_image+0x410/0x410 [ 1347.338757][ T4143] should_fail_ex+0x390/0x4c0 [ 1347.343936][ T4143] should_failslab+0x5/0x20 [ 1347.348467][ T4143] slab_pre_alloc_hook+0x59/0x300 [ 1347.353503][ T4143] ? sctp_add_bind_addr+0x89/0x350 [ 1347.358799][ T4143] __kmem_cache_alloc_node+0x4f/0x270 [ 1347.364178][ T4143] ? sctp_add_bind_addr+0x89/0x350 [ 1347.369404][ T4143] kmalloc_trace+0x26/0xe0 [ 1347.374012][ T4143] sctp_add_bind_addr+0x89/0x350 [ 1347.379005][ T4143] sctp_copy_local_addr_list+0x317/0x4d0 [ 1347.384653][ T4143] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1347.390487][ T4143] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1347.396648][ T4143] ? sctp_v4_is_any+0x31/0x50 [ 1347.401498][ T4143] ? sctp_copy_one_addr+0x93/0x660 [ 1347.406822][ T4143] sctp_bind_addr_copy+0x185/0x3c0 [ 1347.412161][ T4143] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1347.417463][ T4143] ? __sctp_connect+0xd80/0xd80 [ 1347.422315][ T4143] ? __local_bh_enable_ip+0x136/0x1c0 [ 1347.427780][ T4143] ? _local_bh_enable+0xa0/0xa0 [ 1347.432815][ T4143] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1347.438804][ T4143] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1347.444620][ T4143] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1347.450185][ T4143] ? security_sctp_bind_connect+0x85/0xb0 [ 1347.455923][ T4143] sctp_sendmsg+0x1686/0x2940 [ 1347.460640][ T4143] ? sctp_getsockopt+0x8a0/0x8a0 [ 1347.465696][ T4143] ? __might_fault+0xa6/0x120 [ 1347.470392][ T4143] ? aa_af_perm+0x340/0x340 [ 1347.474933][ T4143] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1347.481524][ T4143] ? inet_sendmsg+0x7a/0x2a0 [ 1347.486146][ T4143] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1347.491455][ T4143] ? inet_send_prepare+0x250/0x250 [ 1347.496681][ T4143] ____sys_sendmsg+0x5ed/0x9a0 [ 1347.501677][ T4143] ? __sys_sendmsg_sock+0x30/0x30 [ 1347.506707][ T4143] ? __import_iovec+0x306/0x510 [ 1347.511578][ T4143] ? import_iovec+0x6f/0xa0 [ 1347.516102][ T4143] ___sys_sendmsg+0x2a2/0x360 [ 1347.520813][ T4143] ? __sys_sendmsg+0x2a0/0x2a0 [ 1347.525613][ T4143] ? __lock_acquire+0x7bd0/0x7bd0 [ 1347.530768][ T4143] __se_sys_sendmsg+0x1c3/0x2b0 [ 1347.535712][ T4143] ? __x64_sys_sendmsg+0x80/0x80 [ 1347.540710][ T4143] ? lockdep_hardirqs_on+0x94/0x140 [ 1347.545952][ T4143] do_syscall_64+0x4c/0xa0 [ 1347.550387][ T4143] ? clear_bhb_loop+0x60/0xb0 [ 1347.555092][ T4143] ? clear_bhb_loop+0x60/0xb0 [ 1347.559874][ T4143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1347.565784][ T4143] RIP: 0033:0x7ffbcd39ce59 [ 1347.570216][ T4143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.589924][ T4143] RSP: 002b:00007ffbce1f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1347.598647][ T4143] RAX: ffffffffffffffda RBX: 00007ffbcd615fa0 RCX: 00007ffbcd39ce59 [ 1347.606638][ T4143] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000004 [ 1347.614621][ T4143] RBP: 00007ffbce1f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1347.622812][ T4143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1347.630793][ T4143] R13: 00007ffbcd616038 R14: 00007ffbcd615fa0 R15: 00007ffd3bf1ef28 [ 1347.638796][ T4143] [ 1347.680164][ T4147] device syzkaller0 entered promiscuous mode [ 1350.654177][ T4186] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1350.721232][ T4184] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10521'. [ 1350.748991][ T4188] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.10523'. [ 1350.754562][ T4184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1350.800274][ T4190] netlink: 'syz.1.10524': attribute type 1 has an invalid length. [ 1350.825808][ T4190] netlink: 63743 bytes leftover after parsing attributes in process `syz.1.10524'. [ 1350.836774][ T4184] netlink: 'syz.2.10521': attribute type 10 has an invalid length. [ 1351.021549][ T4194] device syzkaller0 entered promiscuous mode [ 1353.921719][ T4200] netlink: 'syz.1.10527': attribute type 10 has an invalid length. [ 1353.930682][ T4200] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10527'. [ 1353.940364][ T4200] device team0 entered promiscuous mode [ 1353.945955][ T4200] device team_slave_0 entered promiscuous mode [ 1353.952671][ T4200] device team_slave_1 entered promiscuous mode [ 1353.959663][ T4200] device macvlan0 entered promiscuous mode [ 1353.966471][ T4200] bridge0: port 3(team0) entered blocking state [ 1353.973187][ T4200] bridge0: port 3(team0) entered disabled state [ 1353.990996][ T4200] bridge0: port 3(team0) entered blocking state [ 1353.997357][ T4200] bridge0: port 3(team0) entered forwarding state [ 1354.272257][ T4234] netlink: 'syz.4.10536': attribute type 21 has an invalid length. [ 1354.672352][ T4238] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10539'. [ 1354.721009][ T4238] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1354.802035][ T4243] netlink: 'syz.3.10539': attribute type 10 has an invalid length. [ 1355.983869][ T4267] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.10547'. [ 1356.568150][ T4291] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1356.607853][ T4288] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10554'. [ 1356.617463][ T4288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1356.645386][ T4288] netlink: 'syz.2.10554': attribute type 10 has an invalid length. [ 1357.536358][ T4304] device syzkaller0 entered promiscuous mode [ 1357.721542][ T4327] netlink: 'syz.2.10567': attribute type 21 has an invalid length. [ 1358.593388][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 1360.126393][ T4331] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10569'. [ 1360.138433][ T4331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1360.161095][ T4337] netlink: 'syz.3.10569': attribute type 10 has an invalid length. [ 1360.345579][ T4345] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.10581'. [ 1360.438360][ T4353] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1360.512599][ T4357] netlink: 'syz.2.10576': attribute type 29 has an invalid length. [ 1360.535898][ T4357] netlink: 'syz.2.10576': attribute type 29 has an invalid length. [ 1360.559239][ T4355] netlink: 'syz.2.10576': attribute type 29 has an invalid length. [ 1361.098446][ T4367] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10582'. [ 1361.152623][ T4367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1361.196495][ T4374] FAULT_INJECTION: forcing a failure. [ 1361.196495][ T4374] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.220412][ T4372] netlink: 'syz.0.10582': attribute type 10 has an invalid length. [ 1361.223282][ T4374] CPU: 1 PID: 4374 Comm: syz.2.10584 Not tainted syzkaller #0 [ 1361.236372][ T4374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1361.246555][ T4374] Call Trace: [ 1361.249881][ T4374] [ 1361.252831][ T4374] dump_stack_lvl+0x188/0x24e [ 1361.257544][ T4374] ? sctp_sendmsg+0x1686/0x2940 [ 1361.262526][ T4374] ? ___sys_sendmsg+0x2a2/0x360 [ 1361.267423][ T4374] ? show_regs_print_info+0x12/0x12 [ 1361.272667][ T4374] ? load_image+0x410/0x410 [ 1361.277231][ T4374] should_fail_ex+0x390/0x4c0 [ 1361.281957][ T4374] should_failslab+0x5/0x20 [ 1361.286572][ T4374] slab_pre_alloc_hook+0x59/0x300 [ 1361.291722][ T4374] ? sctp_add_bind_addr+0x89/0x350 [ 1361.296871][ T4374] __kmem_cache_alloc_node+0x4f/0x270 [ 1361.302274][ T4374] ? sctp_add_bind_addr+0x89/0x350 [ 1361.307494][ T4374] kmalloc_trace+0x26/0xe0 [ 1361.312017][ T4374] sctp_add_bind_addr+0x89/0x350 [ 1361.317055][ T4374] sctp_copy_local_addr_list+0x317/0x4d0 [ 1361.322964][ T4374] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1361.328840][ T4374] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1361.334940][ T4374] ? sctp_v4_is_any+0x31/0x50 [ 1361.339627][ T4374] ? sctp_copy_one_addr+0x93/0x660 [ 1361.344778][ T4374] sctp_bind_addr_copy+0x185/0x3c0 [ 1361.349995][ T4374] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1361.355298][ T4374] ? __sctp_connect+0xd80/0xd80 [ 1361.360170][ T4374] ? __local_bh_enable_ip+0x136/0x1c0 [ 1361.365549][ T4374] ? _local_bh_enable+0xa0/0xa0 [ 1361.370404][ T4374] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1361.376389][ T4374] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1361.382211][ T4374] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1361.387854][ T4374] ? security_sctp_bind_connect+0x85/0xb0 [ 1361.393683][ T4374] sctp_sendmsg+0x1686/0x2940 [ 1361.398404][ T4374] ? sctp_getsockopt+0x8a0/0x8a0 [ 1361.403463][ T4374] ? __might_fault+0xa6/0x120 [ 1361.408153][ T4374] ? aa_af_perm+0x340/0x340 [ 1361.412667][ T4374] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1361.419106][ T4374] ? inet_sendmsg+0x7a/0x2a0 [ 1361.423884][ T4374] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1361.429190][ T4374] ? inet_send_prepare+0x250/0x250 [ 1361.434319][ T4374] ____sys_sendmsg+0x5ed/0x9a0 [ 1361.439102][ T4374] ? __sys_sendmsg_sock+0x30/0x30 [ 1361.444132][ T4374] ? __import_iovec+0x306/0x510 [ 1361.449023][ T4374] ? import_iovec+0x6f/0xa0 [ 1361.453555][ T4374] ___sys_sendmsg+0x2a2/0x360 [ 1361.458253][ T4374] ? __sys_sendmsg+0x2a0/0x2a0 [ 1361.463052][ T4374] ? __lock_acquire+0x7bd0/0x7bd0 [ 1361.468217][ T4374] __se_sys_sendmsg+0x1c3/0x2b0 [ 1361.473197][ T4374] ? __x64_sys_sendmsg+0x80/0x80 [ 1361.478256][ T4374] ? lockdep_hardirqs_on+0x94/0x140 [ 1361.483486][ T4374] do_syscall_64+0x4c/0xa0 [ 1361.487908][ T4374] ? clear_bhb_loop+0x60/0xb0 [ 1361.492846][ T4374] ? clear_bhb_loop+0x60/0xb0 [ 1361.497575][ T4374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1361.503516][ T4374] RIP: 0033:0x7f605ef9ce59 [ 1361.507964][ T4374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1361.528042][ T4374] RSP: 002b:00007f605feaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1361.536558][ T4374] RAX: ffffffffffffffda RBX: 00007f605f215fa0 RCX: 00007f605ef9ce59 [ 1361.544793][ T4374] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000004 [ 1361.552842][ T4374] RBP: 00007f605feaf090 R08: 0000000000000000 R09: 0000000000000000 [ 1361.560841][ T4374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1361.568864][ T4374] R13: 00007f605f216038 R14: 00007f605f215fa0 R15: 00007ffd3b802b98 [ 1361.576967][ T4374] [ 1361.630688][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.637184][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.273160][ T4407] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10595'. [ 1362.297597][ T4407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1362.330040][ T4407] netlink: 'syz.2.10595': attribute type 10 has an invalid length. [ 1363.003975][ T4437] FAULT_INJECTION: forcing a failure. [ 1363.003975][ T4437] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.026005][ T4437] CPU: 0 PID: 4437 Comm: syz.0.10605 Not tainted syzkaller #0 [ 1363.033623][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1363.043688][ T4437] Call Trace: [ 1363.046972][ T4437] [ 1363.049905][ T4437] dump_stack_lvl+0x188/0x24e [ 1363.054595][ T4437] ? sctp_sendmsg+0x1686/0x2940 [ 1363.059450][ T4437] ? ___sys_sendmsg+0x2a2/0x360 [ 1363.064334][ T4437] ? show_regs_print_info+0x12/0x12 [ 1363.069550][ T4437] ? load_image+0x410/0x410 [ 1363.074082][ T4437] should_fail_ex+0x390/0x4c0 [ 1363.078793][ T4437] should_failslab+0x5/0x20 [ 1363.083342][ T4437] slab_pre_alloc_hook+0x59/0x300 [ 1363.088505][ T4437] ? sctp_add_bind_addr+0x89/0x350 [ 1363.093702][ T4437] __kmem_cache_alloc_node+0x4f/0x270 [ 1363.099114][ T4437] ? sctp_add_bind_addr+0x89/0x350 [ 1363.104244][ T4437] kmalloc_trace+0x26/0xe0 [ 1363.108709][ T4437] sctp_add_bind_addr+0x89/0x350 [ 1363.113667][ T4437] sctp_copy_local_addr_list+0x317/0x4d0 [ 1363.119324][ T4437] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1363.125071][ T4437] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1363.131234][ T4437] ? sctp_v4_is_any+0x31/0x50 [ 1363.135981][ T4437] ? sctp_copy_one_addr+0x93/0x660 [ 1363.141217][ T4437] sctp_bind_addr_copy+0x185/0x3c0 [ 1363.146531][ T4437] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1363.151833][ T4437] ? __sctp_connect+0xd80/0xd80 [ 1363.156706][ T4437] ? __local_bh_enable_ip+0x136/0x1c0 [ 1363.162104][ T4437] ? _local_bh_enable+0xa0/0xa0 [ 1363.166963][ T4437] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1363.172780][ T4437] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1363.178975][ T4437] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1363.184650][ T4437] ? security_sctp_bind_connect+0x85/0xb0 [ 1363.190651][ T4437] sctp_sendmsg+0x1686/0x2940 [ 1363.195354][ T4437] ? sctp_getsockopt+0x8a0/0x8a0 [ 1363.200393][ T4437] ? __might_fault+0xa6/0x120 [ 1363.205084][ T4437] ? aa_af_perm+0x340/0x340 [ 1363.209763][ T4437] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1363.216397][ T4437] ? inet_sendmsg+0x7a/0x2a0 [ 1363.221127][ T4437] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1363.226512][ T4437] ? inet_send_prepare+0x250/0x250 [ 1363.231755][ T4437] ____sys_sendmsg+0x5ed/0x9a0 [ 1363.236740][ T4437] ? __sys_sendmsg_sock+0x30/0x30 [ 1363.241905][ T4437] ? __import_iovec+0x306/0x510 [ 1363.246871][ T4437] ? import_iovec+0x6f/0xa0 [ 1363.251586][ T4437] ___sys_sendmsg+0x2a2/0x360 [ 1363.256272][ T4437] ? __sys_sendmsg+0x2a0/0x2a0 [ 1363.261073][ T4437] ? __lock_acquire+0x7bd0/0x7bd0 [ 1363.266133][ T4437] __se_sys_sendmsg+0x1c3/0x2b0 [ 1363.271009][ T4437] ? __x64_sys_sendmsg+0x80/0x80 [ 1363.276072][ T4437] ? lockdep_hardirqs_on+0x94/0x140 [ 1363.281290][ T4437] do_syscall_64+0x4c/0xa0 [ 1363.285903][ T4437] ? clear_bhb_loop+0x60/0xb0 [ 1363.290610][ T4437] ? clear_bhb_loop+0x60/0xb0 [ 1363.295294][ T4437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1363.301192][ T4437] RIP: 0033:0x7ffbcd39ce59 [ 1363.305612][ T4437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1363.325314][ T4437] RSP: 002b:00007ffbce1f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1363.333838][ T4437] RAX: ffffffffffffffda RBX: 00007ffbcd615fa0 RCX: 00007ffbcd39ce59 [ 1363.342003][ T4437] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000004 [ 1363.350005][ T4437] RBP: 00007ffbce1f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1363.357989][ T4437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1363.365978][ T4437] R13: 00007ffbcd616038 R14: 00007ffbcd615fa0 R15: 00007ffd3bf1ef28 [ 1363.373995][ T4437] [ 1363.394558][ T4439] netlink: 'syz.4.10606': attribute type 21 has an invalid length. [ 1363.607807][ T4448] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.10608'. [ 1363.776260][ T4450] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10611'. [ 1363.792555][ T4450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1363.862226][ T4450] netlink: 'syz.4.10611': attribute type 10 has an invalid length. [ 1363.954680][ T4452] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.10612'. [ 1364.322740][ T4473] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1367.878009][ T4485] netlink: 'syz.2.10625': attribute type 10 has an invalid length. [ 1367.886407][ T4485] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.10625'. [ 1367.896546][ T4489] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10626'. [ 1367.911057][ T4489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1367.930575][ T4492] netlink: 'syz.1.10626': attribute type 10 has an invalid length. [ 1368.039031][ T4507] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10633'. [ 1368.051340][ T4507] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10633'. [ 1368.079652][ T4513] netlink: 'syz.4.10636': attribute type 21 has an invalid length. [ 1368.206610][ T4515] netlink: 'syz.3.10637': attribute type 10 has an invalid length. [ 1368.218767][ T4515] netlink: 'syz.3.10637': attribute type 19 has an invalid length. [ 1368.247594][ T4515] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.10637'. [ 1368.273463][ T4521] FAULT_INJECTION: forcing a failure. [ 1368.273463][ T4521] name failslab, interval 1, probability 0, space 0, times 0 [ 1368.317147][ T4521] CPU: 0 PID: 4521 Comm: syz.1.10639 Not tainted syzkaller #0 [ 1368.324680][ T4521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1368.334770][ T4521] Call Trace: [ 1368.338251][ T4521] [ 1368.341218][ T4521] dump_stack_lvl+0x188/0x24e [ 1368.345940][ T4521] ? sctp_sendmsg+0x1686/0x2940 [ 1368.350829][ T4521] ? ___sys_sendmsg+0x2a2/0x360 [ 1368.355809][ T4521] ? show_regs_print_info+0x12/0x12 [ 1368.361063][ T4521] ? load_image+0x410/0x410 [ 1368.365814][ T4521] should_fail_ex+0x390/0x4c0 [ 1368.370554][ T4521] should_failslab+0x5/0x20 [ 1368.375266][ T4521] slab_pre_alloc_hook+0x59/0x300 [ 1368.380333][ T4521] ? sctp_add_bind_addr+0x89/0x350 [ 1368.385578][ T4521] __kmem_cache_alloc_node+0x4f/0x270 [ 1368.391167][ T4521] ? sctp_add_bind_addr+0x89/0x350 [ 1368.396292][ T4521] kmalloc_trace+0x26/0xe0 [ 1368.400896][ T4521] sctp_add_bind_addr+0x89/0x350 [ 1368.405865][ T4521] sctp_copy_local_addr_list+0x317/0x4d0 [ 1368.411543][ T4521] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1368.417468][ T4521] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1368.423652][ T4521] ? sctp_v4_is_any+0x31/0x50 [ 1368.428363][ T4521] ? sctp_copy_one_addr+0x93/0x660 [ 1368.433578][ T4521] sctp_bind_addr_copy+0x185/0x3c0 [ 1368.438843][ T4521] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1368.444236][ T4521] ? __sctp_connect+0xd80/0xd80 [ 1368.449105][ T4521] ? __local_bh_enable_ip+0x136/0x1c0 [ 1368.454484][ T4521] ? _local_bh_enable+0xa0/0xa0 [ 1368.459423][ T4521] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1368.465433][ T4521] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1368.471347][ T4521] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1368.476903][ T4521] ? security_sctp_bind_connect+0x85/0xb0 [ 1368.482754][ T4521] sctp_sendmsg+0x1686/0x2940 [ 1368.487473][ T4521] ? sctp_getsockopt+0x8a0/0x8a0 [ 1368.492509][ T4521] ? __might_fault+0xa6/0x120 [ 1368.497538][ T4521] ? aa_af_perm+0x340/0x340 [ 1368.502134][ T4521] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1368.508843][ T4521] ? inet_sendmsg+0x7a/0x2a0 [ 1368.513560][ T4521] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1368.518848][ T4521] ? inet_send_prepare+0x250/0x250 [ 1368.524263][ T4521] ____sys_sendmsg+0x5ed/0x9a0 [ 1368.529097][ T4521] ? __sys_sendmsg_sock+0x30/0x30 [ 1368.534119][ T4521] ? __import_iovec+0x306/0x510 [ 1368.538977][ T4521] ? import_iovec+0x6f/0xa0 [ 1368.543486][ T4521] ___sys_sendmsg+0x2a2/0x360 [ 1368.548265][ T4521] ? __sys_sendmsg+0x2a0/0x2a0 [ 1368.553146][ T4521] ? __lock_acquire+0x7bd0/0x7bd0 [ 1368.558214][ T4521] __se_sys_sendmsg+0x1c3/0x2b0 [ 1368.563183][ T4521] ? __x64_sys_sendmsg+0x80/0x80 [ 1368.568282][ T4521] ? lockdep_hardirqs_on+0x94/0x140 [ 1368.573521][ T4521] do_syscall_64+0x4c/0xa0 [ 1368.577965][ T4521] ? clear_bhb_loop+0x60/0xb0 [ 1368.582914][ T4521] ? clear_bhb_loop+0x60/0xb0 [ 1368.587631][ T4521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1368.593554][ T4521] RIP: 0033:0x7f354199ce59 [ 1368.598080][ T4521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.618236][ T4521] RSP: 002b:00007f3542888028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1368.626770][ T4521] RAX: ffffffffffffffda RBX: 00007f3541c15fa0 RCX: 00007f354199ce59 [ 1368.634835][ T4521] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000004 [ 1368.642815][ T4521] RBP: 00007f3542888090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.650810][ T4521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1368.658787][ T4521] R13: 00007f3541c16038 R14: 00007f3541c15fa0 R15: 00007ffdbf348388 [ 1368.666789][ T4521] [ 1368.675469][ T2402] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1368.971702][ T4537] netlink: 'syz.1.10643': attribute type 10 has an invalid length. [ 1369.004999][ T4537] netlink: 65023 bytes leftover after parsing attributes in process `syz.1.10643'. [ 1369.208069][ T4542] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10645'. [ 1369.260553][ T4542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1369.333912][ T4542] netlink: 'syz.4.10645': attribute type 10 has an invalid length. [ 1369.483258][ T4559] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.10654'. [ 1369.542841][ T4561] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.10654'. [ 1369.600462][ T4561] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1369.793204][ T4559] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1370.529161][ T4573] netlink: 'syz.1.10660': attribute type 2 has an invalid length. [ 1370.537230][ T4573] netlink: 'syz.1.10660': attribute type 1 has an invalid length. [ 1370.566014][ T4574] FAULT_INJECTION: forcing a failure. [ 1370.566014][ T4574] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.580094][ T4574] CPU: 0 PID: 4574 Comm: syz.3.10661 Not tainted syzkaller #0 [ 1370.587622][ T4574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1370.598500][ T4574] Call Trace: [ 1370.602079][ T4574] [ 1370.605031][ T4574] dump_stack_lvl+0x188/0x24e [ 1370.609733][ T4574] ? sctp_sendmsg+0x1686/0x2940 [ 1370.614602][ T4574] ? ___sys_sendmsg+0x2a2/0x360 [ 1370.619929][ T4574] ? show_regs_print_info+0x12/0x12 [ 1370.625142][ T4574] ? load_image+0x410/0x410 [ 1370.629681][ T4574] should_fail_ex+0x390/0x4c0 [ 1370.634460][ T4574] should_failslab+0x5/0x20 [ 1370.639227][ T4574] slab_pre_alloc_hook+0x59/0x300 [ 1370.644258][ T4574] ? sctp_add_bind_addr+0x89/0x350 [ 1370.649402][ T4574] __kmem_cache_alloc_node+0x4f/0x270 [ 1370.654995][ T4574] ? sctp_add_bind_addr+0x89/0x350 [ 1370.660120][ T4574] kmalloc_trace+0x26/0xe0 [ 1370.664638][ T4574] sctp_add_bind_addr+0x89/0x350 [ 1370.669584][ T4574] sctp_copy_local_addr_list+0x317/0x4d0 [ 1370.675310][ T4574] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1370.681120][ T4574] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1370.687293][ T4574] ? sctp_v4_is_any+0x31/0x50 [ 1370.691991][ T4574] ? sctp_copy_one_addr+0x93/0x660 [ 1370.697124][ T4574] sctp_bind_addr_copy+0x185/0x3c0 [ 1370.702247][ T4574] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1370.707712][ T4574] ? __sctp_connect+0xd80/0xd80 [ 1370.712675][ T4574] ? __local_bh_enable_ip+0x136/0x1c0 [ 1370.718073][ T4574] ? _local_bh_enable+0xa0/0xa0 [ 1370.722941][ T4574] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1370.729115][ T4574] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1370.734926][ T4574] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1370.740478][ T4574] ? security_sctp_bind_connect+0x85/0xb0 [ 1370.746217][ T4574] sctp_sendmsg+0x1686/0x2940 [ 1370.750927][ T4574] ? sctp_getsockopt+0x8a0/0x8a0 [ 1370.755867][ T4574] ? __might_fault+0xa6/0x120 [ 1370.760550][ T4574] ? aa_af_perm+0x340/0x340 [ 1370.765061][ T4574] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1370.771503][ T4574] ? inet_sendmsg+0x7a/0x2a0 [ 1370.776118][ T4574] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1370.781520][ T4574] ? inet_send_prepare+0x250/0x250 [ 1370.786657][ T4574] ____sys_sendmsg+0x5ed/0x9a0 [ 1370.791624][ T4574] ? __sys_sendmsg_sock+0x30/0x30 [ 1370.796654][ T4574] ? __import_iovec+0x306/0x510 [ 1370.801522][ T4574] ? import_iovec+0x6f/0xa0 [ 1370.806123][ T4574] ___sys_sendmsg+0x2a2/0x360 [ 1370.810818][ T4574] ? __sys_sendmsg+0x2a0/0x2a0 [ 1370.815632][ T4574] ? __lock_acquire+0x7bd0/0x7bd0 [ 1370.820705][ T4574] __se_sys_sendmsg+0x1c3/0x2b0 [ 1370.825554][ T4574] ? ct_nmi_exit+0x145/0x1c0 [ 1370.830157][ T4574] ? __x64_sys_sendmsg+0x80/0x80 [ 1370.835215][ T4574] ? lockdep_hardirqs_on+0x94/0x140 [ 1370.840436][ T4574] do_syscall_64+0x4c/0xa0 [ 1370.844967][ T4574] ? clear_bhb_loop+0x60/0xb0 [ 1370.849992][ T4574] ? clear_bhb_loop+0x60/0xb0 [ 1370.854674][ T4574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1370.860575][ T4574] RIP: 0033:0x7fe432f9ce59 [ 1370.864996][ T4574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1370.884746][ T4574] RSP: 002b:00007fe433daf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1370.893176][ T4574] RAX: ffffffffffffffda RBX: 00007fe433215fa0 RCX: 00007fe432f9ce59 [ 1370.901256][ T4574] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000004 [ 1370.909330][ T4574] RBP: 00007fe433daf090 R08: 0000000000000000 R09: 0000000000000000 [ 1370.917305][ T4574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1370.925579][ T4574] R13: 00007fe433216038 R14: 00007fe433215fa0 R15: 00007ffcf6b48638 [ 1370.933693][ T4574] [ 1371.035764][ T4578] netlink: 'syz.2.10662': attribute type 10 has an invalid length. [ 1371.065137][ T4578] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.10662'. [ 1371.417118][ T4593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1371.630766][ T4600] ================================================================== [ 1371.639230][ T4600] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 1371.647161][ T4600] Write of size 88 at addr ffff88804e873e90 by task syz.2.10671/4600 [ 1371.655250][ T4600] [ 1371.657611][ T4600] CPU: 1 PID: 4600 Comm: syz.2.10671 Not tainted syzkaller #0 [ 1371.665092][ T4600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1371.675260][ T4600] Call Trace: [ 1371.678652][ T4600] [ 1371.681687][ T4600] dump_stack_lvl+0x188/0x24e [ 1371.686404][ T4600] ? __lock_acquire+0x7bd0/0x7bd0 [ 1371.691983][ T4600] ? show_regs_print_info+0x12/0x12 [ 1371.697213][ T4600] ? load_image+0x410/0x410 [ 1371.701756][ T4600] ? __virt_addr_valid+0x467/0x540 [ 1371.706917][ T4600] ? __bpf_get_stackid+0x6c9/0x920 [ 1371.712063][ T4600] print_report+0xa8/0x210 [ 1371.716534][ T4600] kasan_report+0x10b/0x140 [ 1371.721093][ T4600] ? __bpf_get_stackid+0x6c9/0x920 [ 1371.726326][ T4600] kasan_check_range+0x235/0x290 [ 1371.731307][ T4600] ? __bpf_get_stackid+0x6c9/0x920 [ 1371.736809][ T4600] memcpy+0x3c/0x60 [ 1371.740659][ T4600] __bpf_get_stackid+0x6c9/0x920 [ 1371.745643][ T4600] bpf_get_stackid_pe+0x33f/0x400 [ 1371.750720][ T4600] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 1371.756311][ T4600] bpf_overflow_handler+0x50b/0x790 [ 1371.761551][ T4600] ? bpf_overflow_handler+0xd9/0x790 [ 1371.767045][ T4600] ? perf_swevent_overflow+0x230/0x230 [ 1371.772542][ T4600] ? __perf_event_account_interrupt+0x187/0x280 [ 1371.779017][ T4600] __perf_event_overflow+0x457/0x630 [ 1371.784339][ T4600] ? perf_swevent_event+0x1d5/0x570 [ 1371.789582][ T4600] perf_swevent_event+0x315/0x570 [ 1371.794914][ T4600] ? perf_tp_event+0xc10/0xc10 [ 1371.799731][ T4600] ___perf_sw_event+0x498/0x6d0 [ 1371.804722][ T4600] ? ___perf_sw_event+0x184/0x6d0 [ 1371.809800][ T4600] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1371.816339][ T4600] ? mark_lock+0x94/0x320 [ 1371.820814][ T4600] ? __kernel_text_address+0x9/0x30 [ 1371.826132][ T4600] ? verify_lock_unused+0x140/0x140 [ 1371.831456][ T4600] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1371.837475][ T4600] ? lock_chain_count+0x20/0x20 [ 1371.842459][ T4600] __perf_sw_event+0x135/0x260 [ 1371.847272][ T4600] do_user_addr_fault+0x497/0xb20 [ 1371.852340][ T4600] ? trace_hardirqs_off_finish+0x86/0x180 [ 1371.858196][ T4600] exc_page_fault+0x60/0x100 [ 1371.862834][ T4600] asm_exc_page_fault+0x22/0x30 [ 1371.867724][ T4600] RIP: 0010:copy_user_short_string+0xd/0x40 [ 1371.873658][ T4600] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1371.893823][ T4600] RSP: 0018:ffffc9000f6972a8 EFLAGS: 00050202 [ 1371.900185][ T4600] RAX: ffffffff840ff201 RBX: 000000000000000b RCX: 0000000000000001 [ 1371.908186][ T4600] RDX: 0000000000000003 RSI: ffff88808225466c RDI: 000020000000cf3d [ 1371.916360][ T4600] RBP: 0000000000000000 R08: 40203023636e7566 R09: 1ffff1101044a8ce [ 1371.924482][ T4600] R10: dffffc0000000000 R11: ffffed101044a8cf R12: 00007fffffffeff5 [ 1371.932770][ T4600] R13: 000000000000000b R14: 000020000000cf3d R15: ffff88808225466c [ 1371.940776][ T4600] ? _copy_to_user+0x81/0x130 [ 1371.945502][ T4600] _copy_to_user+0xea/0x130 [ 1371.950182][ T4600] bpf_verifier_vlog+0x172/0x3a0 [ 1371.955457][ T4600] verbose+0x1f0/0x2b0 [ 1371.959921][ T4600] ? check_func_arg_reg_off+0x280/0x280 [ 1371.965507][ T4600] ? kvmalloc_node+0x6c/0x180 [ 1371.970394][ T4600] ? bpf_lsm_capable+0x5/0x10 [ 1371.975190][ T4600] ? security_capable+0x85/0xb0 [ 1371.980083][ T4600] bpf_check+0x2f48/0x11000 [ 1371.984734][ T4600] ? mark_lock+0x94/0x320 [ 1371.989113][ T4600] ? mark_lock+0x94/0x320 [ 1371.993574][ T4600] ? bpf_get_btf_vmlinux+0x10/0x10 [ 1371.998718][ T4600] ? __lock_acquire+0x13e3/0x7bd0 [ 1372.003792][ T4600] ? mark_lock+0x94/0x320 [ 1372.008321][ T4600] ? __lock_acquire+0x130c/0x7bd0 [ 1372.013587][ T4600] ? mark_lock+0x94/0x320 [ 1372.018130][ T4600] ? __lock_acquire+0x13e3/0x7bd0 [ 1372.023211][ T4600] ? verify_lock_unused+0x140/0x140 [ 1372.028456][ T4600] ? verify_lock_unused+0x140/0x140 [ 1372.033693][ T4600] ? verify_lock_unused+0x140/0x140 [ 1372.039022][ T4600] ? pcpu_memcg_post_alloc_hook+0xe6/0x490 [ 1372.044880][ T4600] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1372.051021][ T4600] ? __lock_acquire+0x7bd0/0x7bd0 [ 1372.056174][ T4600] ? lock_chain_count+0x20/0x20 [ 1372.061156][ T4600] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1372.067439][ T4600] ? lockdep_hardirqs_on+0x94/0x140 [ 1372.072677][ T4600] ? ktime_get_with_offset+0xff/0x320 [ 1372.078171][ T4600] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1372.084464][ T4600] ? ktime_get_real_ts64+0x440/0x440 [ 1372.089875][ T4600] ? do_raw_spin_unlock+0x11d/0x230 [ 1372.095285][ T4600] ? __might_fault+0xc2/0x120 [ 1372.100003][ T4600] ? memset+0x1e/0x40 [ 1372.104013][ T4600] ? bpf_obj_name_cpy+0x190/0x1d0 [ 1372.109072][ T4600] bpf_prog_load+0x100e/0x1530 [ 1372.113977][ T4600] ? map_freeze+0x390/0x390 [ 1372.118522][ T4600] ? __might_fault+0xa6/0x120 [ 1372.123327][ T4600] ? __might_fault+0xa6/0x120 [ 1372.128036][ T4600] ? __might_fault+0xc2/0x120 [ 1372.132830][ T4600] ? __might_fault+0xa6/0x120 [ 1372.137535][ T4600] ? bpf_lsm_bpf+0x5/0x10 [ 1372.141896][ T4600] ? security_bpf+0x7a/0xa0 [ 1372.146618][ T4600] __sys_bpf+0x5b8/0x780 [ 1372.150902][ T4600] ? bpf_link_show_fdinfo+0x380/0x380 [ 1372.156413][ T4600] ? lock_chain_count+0x20/0x20 [ 1372.161305][ T4600] __x64_sys_bpf+0x78/0x90 [ 1372.165762][ T4600] do_syscall_64+0x4c/0xa0 [ 1372.170242][ T4600] ? clear_bhb_loop+0x60/0xb0 [ 1372.174948][ T4600] ? clear_bhb_loop+0x60/0xb0 [ 1372.179654][ T4600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1372.185593][ T4600] RIP: 0033:0x7f605ef9ce59 [ 1372.190217][ T4600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1372.210036][ T4600] RSP: 002b:00007f605feaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1372.219000][ T4600] RAX: ffffffffffffffda RBX: 00007f605f215fa0 RCX: 00007f605ef9ce59 [ 1372.227092][ T4600] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 1372.235098][ T4600] RBP: 00007f605f032e6f R08: 0000000000000000 R09: 0000000000000000 [ 1372.243100][ T4600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1372.251191][ T4600] R13: 00007f605f216038 R14: 00007f605f215fa0 R15: 00007ffd3b802b98 [ 1372.259286][ T4600] [ 1372.262326][ T4600] [ 1372.264931][ T4600] Allocated by task 4600: [ 1372.269278][ T4600] kasan_set_track+0x4b/0x70 [ 1372.273904][ T4600] __kasan_kmalloc+0x8e/0xa0 [ 1372.278524][ T4600] __kmalloc_node+0xb2/0x240 [ 1372.283237][ T4600] bpf_map_area_alloc+0x47/0xe0 [ 1372.288558][ T4600] prealloc_elems_and_freelist+0x86/0x1c0 [ 1372.294399][ T4600] stack_map_alloc+0x386/0x510 [ 1372.299289][ T4600] map_create+0x524/0xff0 [ 1372.303654][ T4600] __sys_bpf+0x38b/0x780 [ 1372.307935][ T4600] __x64_sys_bpf+0x78/0x90 [ 1372.312379][ T4600] do_syscall_64+0x4c/0xa0 [ 1372.316845][ T4600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1372.322827][ T4600] [ 1372.325162][ T4600] The buggy address belongs to the object at ffff88804e873e80 [ 1372.325162][ T4600] which belongs to the cache kmalloc-cg-64 of size 64 [ 1372.339408][ T4600] The buggy address is located 16 bytes inside of [ 1372.339408][ T4600] 64-byte region [ffff88804e873e80, ffff88804e873ec0) [ 1372.352714][ T4600] [ 1372.355060][ T4600] The buggy address belongs to the physical page: [ 1372.361588][ T4600] page:ffffea00013a1cc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4e873 [ 1372.372126][ T4600] memcg:ffff888075819e01 [ 1372.376375][ T4600] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1372.383988][ T4600] raw: 00fff00000000200 ffffea0001e374c0 dead000000000003 ffff888017442780 [ 1372.392594][ T4600] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888075819e01 [ 1372.401342][ T4600] page dumped because: kasan: bad access detected [ 1372.407787][ T4600] page_owner tracks the page as allocated [ 1372.413526][ T4600] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 2359, tgid 2358 (syz.3.9942), ts 1288601450556, free_ts 1281391407040 [ 1372.432488][ T4600] post_alloc_hook+0x173/0x1a0 [ 1372.437289][ T4600] get_page_from_freelist+0x206b/0x2180 [ 1372.442962][ T4600] __alloc_pages+0x1ec/0x4f0 [ 1372.447763][ T4600] alloc_slab_page+0x5d/0x180 [ 1372.452496][ T4600] new_slab+0x87/0x2d0 [ 1372.456683][ T4600] ___slab_alloc+0xbc5/0x1240 [ 1372.461556][ T4600] __kmem_cache_alloc_node+0x126/0x270 [ 1372.467315][ T4600] __kmalloc_node+0xa2/0x240 [ 1372.472037][ T4600] kvmalloc_node+0x6c/0x180 [ 1372.476579][ T4600] nf_hook_entries_grow+0x31a/0x760 [ 1372.481882][ T4600] __nf_register_net_hook+0x2c9/0x910 [ 1372.487284][ T4600] nf_register_net_hook+0xae/0x190 [ 1372.492517][ T4600] nf_register_net_hooks+0x40/0x1a0 [ 1372.497836][ T4600] nf_defrag_ipv6_enable+0x83/0x110 [ 1372.503221][ T4600] nf_ct_netns_do_get+0x1e4/0x5b0 [ 1372.508516][ T4600] nf_ct_netns_inet_get+0x3b/0x150 [ 1372.513662][ T4600] page last free stack trace: [ 1372.518844][ T4600] free_unref_page_prepare+0x8e5/0x9e0 [ 1372.524352][ T4600] free_unref_page+0x2e/0x3f0 [ 1372.529246][ T4600] kasan_depopulate_vmalloc_pte+0x67/0x80 [ 1372.535178][ T4600] __apply_to_page_range+0x98d/0xd10 [ 1372.540502][ T4600] kasan_release_vmalloc+0x93/0xb0 [ 1372.545648][ T4600] __purge_vmap_area_lazy+0xf72/0x1920 [ 1372.551238][ T4600] drain_vmap_area_work+0x3c/0xd0 [ 1372.556309][ T4600] process_one_work+0x8ab/0x1160 [ 1372.561282][ T4600] worker_thread+0xaf5/0x12a0 [ 1372.565993][ T4600] kthread+0x29d/0x330 [ 1372.570179][ T4600] ret_from_fork+0x1f/0x30 [ 1372.574665][ T4600] [ 1372.577009][ T4600] Memory state around the buggy address: [ 1372.582750][ T4600] ffff88804e873d80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1372.591333][ T4600] ffff88804e873e00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1372.599593][ T4600] >ffff88804e873e80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1372.607679][ T4600] ^ [ 1372.613177][ T4600] ffff88804e873f00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1372.621351][ T4600] ffff88804e873f80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1372.629698][ T4600] ================================================================== [ 1372.637838][ T4600] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1372.645126][ T4600] CPU: 1 PID: 4600 Comm: syz.2.10671 Not tainted syzkaller #0 [ 1372.652705][ T4600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1372.662811][ T4600] Call Trace: [ 1372.666114][ T4600] [ 1372.669095][ T4600] dump_stack_lvl+0x188/0x24e [ 1372.673813][ T4600] ? memcpy+0x3c/0x60 [ 1372.677920][ T4600] ? show_regs_print_info+0x12/0x12 [ 1372.683167][ T4600] ? load_image+0x410/0x410 [ 1372.687765][ T4600] panic+0x2d3/0x710 [ 1372.691698][ T4600] ? bpf_jit_dump+0xd0/0xd0 [ 1372.696417][ T4600] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1372.702389][ T4600] ? _raw_spin_unlock+0x40/0x40 [ 1372.707360][ T4600] ? print_memory_metadata+0x314/0x400 [ 1372.712866][ T4600] check_panic_on_warn+0x80/0xa0 [ 1372.717996][ T4600] ? __bpf_get_stackid+0x6c9/0x920 [ 1372.723127][ T4600] end_report+0x66/0x110 [ 1372.727408][ T4600] kasan_report+0x118/0x140 [ 1372.731943][ T4600] ? __bpf_get_stackid+0x6c9/0x920 [ 1372.737261][ T4600] kasan_check_range+0x235/0x290 [ 1372.742228][ T4600] ? __bpf_get_stackid+0x6c9/0x920 [ 1372.747374][ T4600] memcpy+0x3c/0x60 [ 1372.751215][ T4600] __bpf_get_stackid+0x6c9/0x920 [ 1372.756365][ T4600] bpf_get_stackid_pe+0x33f/0x400 [ 1372.761517][ T4600] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 1372.767280][ T4600] bpf_overflow_handler+0x50b/0x790 [ 1372.772604][ T4600] ? bpf_overflow_handler+0xd9/0x790 [ 1372.778009][ T4600] ? perf_swevent_overflow+0x230/0x230 [ 1372.783500][ T4600] ? __perf_event_account_interrupt+0x187/0x280 [ 1372.789878][ T4600] __perf_event_overflow+0x457/0x630 [ 1372.795439][ T4600] ? perf_swevent_event+0x1d5/0x570 [ 1372.800820][ T4600] perf_swevent_event+0x315/0x570 [ 1372.805934][ T4600] ? perf_tp_event+0xc10/0xc10 [ 1372.811058][ T4600] ___perf_sw_event+0x498/0x6d0 [ 1372.816001][ T4600] ? ___perf_sw_event+0x184/0x6d0 [ 1372.821226][ T4600] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1372.827738][ T4600] ? mark_lock+0x94/0x320 [ 1372.832215][ T4600] ? __kernel_text_address+0x9/0x30 [ 1372.837433][ T4600] ? verify_lock_unused+0x140/0x140 [ 1372.842956][ T4600] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1372.848994][ T4600] ? lock_chain_count+0x20/0x20 [ 1372.853939][ T4600] __perf_sw_event+0x135/0x260 [ 1372.858723][ T4600] do_user_addr_fault+0x497/0xb20 [ 1372.863847][ T4600] ? trace_hardirqs_off_finish+0x86/0x180 [ 1372.869656][ T4600] exc_page_fault+0x60/0x100 [ 1372.874246][ T4600] asm_exc_page_fault+0x22/0x30 [ 1372.879104][ T4600] RIP: 0010:copy_user_short_string+0xd/0x40 [ 1372.885010][ T4600] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1372.904963][ T4600] RSP: 0018:ffffc9000f6972a8 EFLAGS: 00050202 [ 1372.911122][ T4600] RAX: ffffffff840ff201 RBX: 000000000000000b RCX: 0000000000000001 [ 1372.919437][ T4600] RDX: 0000000000000003 RSI: ffff88808225466c RDI: 000020000000cf3d [ 1372.927671][ T4600] RBP: 0000000000000000 R08: 40203023636e7566 R09: 1ffff1101044a8ce [ 1372.935748][ T4600] R10: dffffc0000000000 R11: ffffed101044a8cf R12: 00007fffffffeff5 [ 1372.943815][ T4600] R13: 000000000000000b R14: 000020000000cf3d R15: ffff88808225466c [ 1372.951989][ T4600] ? _copy_to_user+0x81/0x130 [ 1372.956678][ T4600] _copy_to_user+0xea/0x130 [ 1372.961189][ T4600] bpf_verifier_vlog+0x172/0x3a0 [ 1372.966152][ T4600] verbose+0x1f0/0x2b0 [ 1372.970242][ T4600] ? check_func_arg_reg_off+0x280/0x280 [ 1372.975967][ T4600] ? kvmalloc_node+0x6c/0x180 [ 1372.980674][ T4600] ? bpf_lsm_capable+0x5/0x10 [ 1372.985722][ T4600] ? security_capable+0x85/0xb0 [ 1372.990823][ T4600] bpf_check+0x2f48/0x11000 [ 1372.995429][ T4600] ? mark_lock+0x94/0x320 [ 1372.999833][ T4600] ? mark_lock+0x94/0x320 [ 1373.004320][ T4600] ? bpf_get_btf_vmlinux+0x10/0x10 [ 1373.009628][ T4600] ? __lock_acquire+0x13e3/0x7bd0 [ 1373.014931][ T4600] ? mark_lock+0x94/0x320 [ 1373.019536][ T4600] ? __lock_acquire+0x130c/0x7bd0 [ 1373.025021][ T4600] ? mark_lock+0x94/0x320 [ 1373.029357][ T4600] ? __lock_acquire+0x13e3/0x7bd0 [ 1373.034429][ T4600] ? verify_lock_unused+0x140/0x140 [ 1373.039833][ T4600] ? verify_lock_unused+0x140/0x140 [ 1373.045160][ T4600] ? verify_lock_unused+0x140/0x140 [ 1373.050372][ T4600] ? pcpu_memcg_post_alloc_hook+0xe6/0x490 [ 1373.056268][ T4600] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1373.062533][ T4600] ? __lock_acquire+0x7bd0/0x7bd0 [ 1373.067649][ T4600] ? lock_chain_count+0x20/0x20 [ 1373.072507][ T4600] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1373.079024][ T4600] ? lockdep_hardirqs_on+0x94/0x140 [ 1373.084242][ T4600] ? ktime_get_with_offset+0xff/0x320 [ 1373.089610][ T4600] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1373.096040][ T4600] ? ktime_get_real_ts64+0x440/0x440 [ 1373.101530][ T4600] ? do_raw_spin_unlock+0x11d/0x230 [ 1373.106813][ T4600] ? __might_fault+0xc2/0x120 [ 1373.111575][ T4600] ? memset+0x1e/0x40 [ 1373.115573][ T4600] ? bpf_obj_name_cpy+0x190/0x1d0 [ 1373.120630][ T4600] bpf_prog_load+0x100e/0x1530 [ 1373.125399][ T4600] ? map_freeze+0x390/0x390 [ 1373.129914][ T4600] ? __might_fault+0xa6/0x120 [ 1373.134598][ T4600] ? __might_fault+0xa6/0x120 [ 1373.139461][ T4600] ? __might_fault+0xc2/0x120 [ 1373.144258][ T4600] ? __might_fault+0xa6/0x120 [ 1373.149030][ T4600] ? bpf_lsm_bpf+0x5/0x10 [ 1373.153381][ T4600] ? security_bpf+0x7a/0xa0 [ 1373.158055][ T4600] __sys_bpf+0x5b8/0x780 [ 1373.162311][ T4600] ? bpf_link_show_fdinfo+0x380/0x380 [ 1373.167703][ T4600] ? lock_chain_count+0x20/0x20 [ 1373.172571][ T4600] __x64_sys_bpf+0x78/0x90 [ 1373.177001][ T4600] do_syscall_64+0x4c/0xa0 [ 1373.181599][ T4600] ? clear_bhb_loop+0x60/0xb0 [ 1373.186296][ T4600] ? clear_bhb_loop+0x60/0xb0 [ 1373.191294][ T4600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1373.197308][ T4600] RIP: 0033:0x7f605ef9ce59 [ 1373.201832][ T4600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1373.221715][ T4600] RSP: 002b:00007f605feaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1373.230141][ T4600] RAX: ffffffffffffffda RBX: 00007f605f215fa0 RCX: 00007f605ef9ce59 [ 1373.238169][ T4600] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 1373.246155][ T4600] RBP: 00007f605f032e6f R08: 0000000000000000 R09: 0000000000000000 [ 1373.254212][ T4600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1373.262438][ T4600] R13: 00007f605f216038 R14: 00007f605f215fa0 R15: 00007ffd3b802b98 [ 1373.270501][ T4600] [ 1373.273978][ T4600] Kernel Offset: disabled [ 1373.278388][ T4600] Rebooting in 86400 seconds..