last executing test programs: 6.118167387s ago: executing program 2 (id=1548): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_freezer_state(r0, &(0x7f00000002c0)='FREEZING\x00', 0x9) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x88202, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0xfffffffffffffff9}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x230}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000580)="1bf91073b76dc5c6fcba66812f23c0c60ec892ae3009f81865b169f3f9e54f4884f8bca28c9587e2a9e4239e36326c738674d8a2cc7159647a1636e2c73b54c2b0b0dd55062858c57cd91226357f09a224cf495f59e59aded86fd8fd3e042dd171826db071e97e30edf732b6d39d0cd0d1f21ed13ff7f7623214d236198c1c7baed808936a26e808c83887cbab9f06edd61869469ca5da9f668375c0cac9537f211ecf4a57f2c15ef2d5b02d946a36c9153ac575b4c532d06b62ee2fa20c89e09b3c70a048d0da6472508814cd61e1d712ef3b33aeec8ca6e36c9a1ff8e315baa97ec5af82cece395c0e40fc3fdfb2e084b987ad", 0x800, r1}, 0x38) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000001100)={0x0, &(0x7f0000001180)=""/127, &(0x7f0000001200), &(0x7f0000000580), 0x6e, r1}, 0x38) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x1000, 0x0, 0x1, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4001000}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x90, 0x2, 0x0, 0x0, 0x0, 0x0, 0x181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, @perf_config_ext={0x0, 0x772}, 0x108500, 0xe9a, 0x7baf376b, 0x8, 0x5, 0x0, 0x4}, 0x0, 0xfffffffc00000000, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 5.747383317s ago: executing program 1 (id=1551): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88f5d9965ff4a40, @perf_bp={0x0, 0x7}, 0x10000, 0xca, 0x0, 0x2, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x400100}, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffbe}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3e971d"], 0x9a) 5.212635521s ago: executing program 1 (id=1554): perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d28", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24b8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866207d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb96a9acd5261df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccced13468a188df7ab4840b9961e2a8b5202c9d9b00ee912572eea15d13abdf3b21ad680c88a513021c1d3a7b30d64960c03a01364b2324966bd89d917b15dcb4f8cbacfe05ddcc213d14189edcd9f8b828ebaaab4f56470d3abef47b6d88dc438c9b0a253c26c386464754e76c0d7bfbc1dfa7248982ec26bd725eb623bb12f96e63eb5d1a0030e58a6653247c986c7ca9f15fd84d5eb1cd5ee35c4f464dc1a789b06c6c7074fc927680eac8546b2aee2f8867d6bf36b88a99ff67c7b2dd68ae3380622653efcad276a0f4b446091b80653014e67629dfde0091c7f090a22b5c427d03ddbc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 4.469242471s ago: executing program 2 (id=1556): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x6, 0xa8, &(0x7f0000001ec0)=""/168, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 4.327011035s ago: executing program 0 (id=1557): r0 = syz_clone(0x40188100, &(0x7f00000001c0), 0x0, &(0x7f0000000240), &(0x7f0000000140), &(0x7f00000002c0)="03a882b1fe815d0082d2307b0667d802680063646302be0f0c382350e5ca13cf2d2e075ed680b163274b501a3aaf3478b8241b08c2ffa8d890cbea3fceecf76fae8ee0f0cd218f32674f4c852961c164a97d87603dec1f2b752e407615a3d59751da4c498c3915d973a1589f61deac72e98337053b44c5f69833dde8cbac09f2902b236b49c207fcf261586b983938a631f42090f8668f90ee8aca57684a2b42c29f98e3ce0aa666dbe7f7cd28e0c019d6e448") r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000001b00)={&(0x7f0000000600)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000019c0)}, 0x5) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@ifindex=0x0, 0x1, 0x0, 0x0, &(0x7f00000005c0)=[0x0], 0x1, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@fallback=r1, r3, 0x0, 0x0, r4, @void, @value=r7, @void, @void, r6}, 0x20) setsockopt$sock_attach_bpf(r2, 0x84, 0x65, 0x0, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r10}, 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x2, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB], 0x0, 0x4, 0x100d, &(0x7f0000002c40)=""/4109, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000100)=r11, 0x120) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000080), 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x100000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = openat$cgroup(r3, &(0x7f0000000780)='syz1\x00', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f00000007c0)='memory.stat\x00', 0x0, 0x0) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x11, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="00000000000000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], 0x0, 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x28, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfe89}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, @generic={0xf9, 0x8, 0xd, 0x2, 0x3562}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000940)='syzkaller\x00', 0x5, 0xeb, &(0x7f0000000980)=""/235, 0x41000, 0x10, '\x00', r5, 0x0, r3, 0x8, &(0x7f0000000a80)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000ac0)=[r3, 0xffffffffffffffff, r3, r13, r13, r3, r3, r14, r3], &(0x7f0000000b00)=[{0x5, 0x5, 0x5, 0xc}, {0x2, 0x1, 0xf, 0x4}], 0x10, 0x29}, 0x94) r15 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x24000084) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x31, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000000000)=@caif, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000080)=""/77, 0x4d}, {&(0x7f0000000380)=""/143, 0x8f}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0x3, &(0x7f0000002b80)=""/121, 0x79}, 0x101) 4.306404085s ago: executing program 1 (id=1558): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x1}, {0x1}]}]}, {0x0, [0x61]}}, 0x0, 0x3f, 0x0, 0xa}, 0x20) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r0, &(0x7f0000001bc0)={&(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}, 0x4000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x20000000000000ad, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x25, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.657263293s ago: executing program 2 (id=1560): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@ifindex, 0xffffffffffffffff, 0x16, 0x2034}, 0x20) 3.562211875s ago: executing program 1 (id=1561): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r5) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 3.497137807s ago: executing program 3 (id=1562): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.463761718s ago: executing program 2 (id=1563): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000ffffffff00000000fdfffdff850000002800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r2, 0x12) r5 = openat$cgroup_ro(r4, 0x0, 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg(r8, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, 0x0) close(r8) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703320000001f00000000000000040014000d000a0014153b009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000091102f000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 3.38513664s ago: executing program 0 (id=1564): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x1}, {0x1}]}]}, {0x0, [0x61]}}, 0x0, 0x3f, 0x0, 0xa}, 0x20) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r0, &(0x7f0000001bc0)={&(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}, 0x4000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x20000000000000ad, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x25, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.301939032s ago: executing program 3 (id=1565): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) (fail_nth: 75) 2.114654604s ago: executing program 3 (id=1566): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000340), 0x4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x69, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffe7d9f527}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r0, 0x3a, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.953030828s ago: executing program 1 (id=1567): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="260a00000000000061114800000000001800000000000000000000000000000095000000001d0000"], &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0xfffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @initr0, @exit, @alu={0x7, 0x0, 0xa, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x3a, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000580), 0x8, 0x2f, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32, @ANYBLOB="03000000000000c1b62b91cd2800400000000000000000000000eb9a87e9a48c9e61f556cbcefdd551953e95a608b802992dd75c8b1cc8e8a9cf492205d33db79371e00e6a4b4df2d1eb52ea431d357b8cf4ed75a3a694cd0d5da3c771c0e323e24e23f307bfd2bf85040930c16bea4b3e7d9979c1b9a0b5463bcb9fb79cb73ec59716df824e8ab63e3f8fca899ab47463f94a98b2321c8c95f2f2dadc53178930", @ANYRES32=r3, @ANYRES32, @ANYBLOB="feffffff0500"/28], 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x4}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0x123001, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000711021000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) recvmsg$kcm(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1}, 0x10000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000b00)={0x0, 0x52, &(0x7f0000000180)=[{0x0}], 0x1000001f, &(0x7f0000000100)=[@ip_tos_u8={{0x11, 0x2}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x9}}], 0x30}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="3e0000003a000511d25a80453a07a2ff0024fc602f6e35400c000200001e800037153e370a000b80dc861d3e000000000500006ccdfb0a8259104247f3d89ff4b68f2e6c6a050c97382e96081b2cbd4bd9ed575da08e2c4c574b1bda6dce5ac64d20222f29b75587bea791cafce2c6e70c416017cea9c70d72199b9ef2ffe5b8db56a1ceb3e3ff0000000000000010baaab909005ff39cf0185a5bb01e5851fa9d213ae3737e9b5e5949f7f04221b06ad859909fd3e3827c96fb9b5b36e262655a5a5051a2e1b0048841066ef256878da34448f465cacc98c3a66546296002cd01fabdb70c240b1c48e483cc0cb3519805fe02bf", 0xf4}], 0x1, 0x0, 0x0, 0x39c}, 0x8005) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.487875291s ago: executing program 2 (id=1568): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x6, 0xa8, &(0x7f0000001ec0)=""/168, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 1.229026098s ago: executing program 2 (id=1569): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x1}, {0x1}]}]}, {0x0, [0x61]}}, 0x0, 0x3f, 0x0, 0xa}, 0x20) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r0, &(0x7f0000001bc0)={&(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}, 0x4000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x20000000000000ad, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x25, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.14759095s ago: executing program 3 (id=1570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="4e25591e58e706a96e4e90cd7265cf116a9a5e4a0ea4a1acf317a4fe047c4390b36873a3105201847d6da63e853bce21d1863d02", @ANYRESDEC, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$kcm(r2, &(0x7f0000000940)={&(0x7f00000002c0)=@phonet={0x23, 0x7, 0x79, 0x7}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)="126113f6e2b4cb0365ac4c72cff43341318b773f6fc0fe3bdd52d9e9ce79b05d37a6277d5fa5eeb583531f13c44739f28a82b0366b009a2863e8d1247c714d86e563e2b90e8ca66f7bcc60945b353e8e0d714715b93c0186c644f7b21a2dc0b3b338de276aeb5d51a8dc807f8acee5dd1b129752002b2eb272af16742a6fc7fa9d3054c6af6ebf0f3926485a12b7aef636d6634a4ff76a4d9a5a988767d66280778a85cbb09a053261566efc943d82f9c1a5a840d6dc06", 0xb7}, {0x0}, {&(0x7f0000000840)="605f9451060d5c241cc6158d8e018f0aac00e8612fe23386d3bf269a68be470ec4b9c831d79e5716067073fa94d7222eda542bf5fa65f0236be42ca7e2dde6db79e1c20d37988dd61df22922c6c98e301a59345cd8b6c85454e873bf2521ff3f3de9ddb8699b70dcc337d50ebb20c8046777626d62042cf34fea040a8b27e1e99468fb42ce3085a85708594e87d2758773466c06c8d4ab9d1277b3977aac", 0x9e}], 0x3}, 0x4000014) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000003, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x203) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x35, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff20002f0000000000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 1.1238605s ago: executing program 0 (id=1571): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@ifindex, 0xffffffffffffffff, 0x16, 0x2034}, 0x20) 746.6ms ago: executing program 1 (id=1572): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}}, 0x80, &(0x7f0000000840)=[{0x0, 0x55}, {&(0x7f0000000440)="495bb4d8379fd36a26b300088c007d9f97ce2a31951a49427754a4ca6d692b1d690154ecfbffc95adce65b9dda0ed4864a9b3af06f81c3e2a1927565625326d65e6dbe2ae1f3c5befac6b5bef16dd86ad140f1908b"}, {&(0x7f00000004c0)="26bb7c3986b4e1c1dc15cc4e93f79fe8402e127d168fecc13d872f2bd6c60af82748bd59487a3bae4f325e776b893e29030dcf1794fd7a399566daaeb988177b64a6d4ffa42eebce44690e01f429c89359475d6ef17f"}, {&(0x7f0000000540)="7bccc625b34f5db6e9ff8f54939db292ce4af60317fde51d40dd08fe7aab6669a8939dca89114dc7c4e7ec932acf4a87d3a6fdf27f07ad51b7f6"}, {&(0x7f0000000a80)="4ded0d2fcaf737dc6b1a84101660a7a6301eca15488366bf3dbf255d3979f1e9773c0f327e23de80e195ca15a28cdff44ac6a013baffe234595a2f748622ad7013e3448743eec8fb0983febecf12c5e0c0c531b1c081fd65eb5c4bbcc1a1b607bf7d0621f932a3351a9f062d44631dd4f745e84e8bfd69772ed876b890a6e7dac164007f956bd069f92835af21326946c492df50c6b9dc9ca80420e33b3c89f888c9002338cf4f3bcfb88bc6ab71d9db167058f323ce895da1a7d04f69"}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec76064bef2f000000fb71caef932f3889d1fdda5b57000000860f5878437ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110700000094412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) (fail_nth: 8) 746.33411ms ago: executing program 3 (id=1573): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) 685.325012ms ago: executing program 0 (id=1574): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000480)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002", 0x2b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000010006fb0a0002000a0ada1b40d80320000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 264.820703ms ago: executing program 0 (id=1575): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000040)) (async) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000040)) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000080)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)="48133192217966e7498bb445243e03e23e9b2fdc27222d289c3c7c7fd16f4ad97db65601984d4b54531febf11315fc4be1b02b65f9fe5054783f60743172680a79b967863e090106dfa04b7c6e77e47753b9a899d287ae27274e21961a1dc4221835e3a351c53c62558708a2a8d6581bb7256719e1caf7f040e13b062cdd89cd250b2ad32aedc61c499bdd9545f6dc311573c71dae89892d322821eae5623b5b21509bb219388706e1a2290be4f18ee81ada2bd2a5194664872c7ffa829cc756049a1af47a7af7f0e9d8e3076a3d52f7fdec8faf02d0aea6"}, 0x20) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x26, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x61, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000580)={'gretap0\x00'}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.procs\x00', 0x2, 0x0) (async) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.procs\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f0000000600)=r5, 0x12) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x4}, 0xc) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x4}, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=r3, 0x4) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=r3, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x0, '\x00', r2, r7, 0x5, 0x3, 0x5}, 0x50) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x0, '\x00', r2, r7, 0x5, 0x3, 0x5}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', r8}, 0x18) syz_open_procfs$namespace(r5, &(0x7f00000007c0)='ns/pid_for_children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x17, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x81}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @alu={0x7, 0x1, 0x3, 0xa, 0x1, 0x6, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x797, 0x0, 0x0, 0x0, 0x9d}, @ldst={0x1, 0x0, 0x1, 0x8, 0x4, 0x68ec446449cc964e, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x1, 0x8, 0xa, 0xa, 0x10, 0xffffffffffffffff}]}, &(0x7f00000008c0)='syzkaller\x00', 0x200, 0x32, &(0x7f0000000900)=""/50, 0x40f00, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x5, 0x7, 0xe, 0x6}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000009c0)=[r6], &(0x7f0000000a00)=[{0x4, 0x2, 0x3, 0x7}, {0x0, 0x4, 0xf, 0x9}, {0x1, 0x4, 0x4, 0x3}, {0x1, 0x3, 0xd, 0xb}, {0x0, 0x5, 0x3, 0x8}, {0x5, 0x2, 0x2, 0x8}, {0x4, 0x3, 0x7, 0x1}, {0x5, 0x1, 0x3}, {0x1, 0x2, 0x4, 0x5}, {0x0, 0x5, 0xd, 0x3}], 0x10, 0x7fffffff}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c80)={@map=r9, 0x35, 0x0, 0x7, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000bc0)=[0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0]}, 0x40) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d00)={0xffffffffffffffff, 0x101, 0x10}, 0xc) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x100, '\x00', r2, r7, 0x1, 0x2, 0x5}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0x8, 0x0, r11, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) (async) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0x8, 0x0, r11, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002080)={0x6, 0x10, &(0x7f0000000e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@jmp={0x5, 0x1, 0x9, 0x5, 0x3, 0xffffffffffffffc0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ec0)='syzkaller\x00', 0x67, 0x1000, &(0x7f0000000f00)=""/4096, 0x41100, 0x38, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001f00)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001f40)={0x0, 0xe, 0x7fffffff, 0x25}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001f80)=[r9], &(0x7f0000001fc0)=[{0x4, 0x3, 0x4}, {0x2, 0x5, 0x8, 0xc}, {0x2, 0x2, 0x8, 0x9}, {0x5, 0x3, 0x8, 0x1}, {0x1, 0x4, 0xe, 0xa}, {0x2, 0x5, 0xe, 0x2}, {0x4, 0x4, 0x10, 0x7}, {0x2, 0x4, 0x7, 0x5}, {0x1, 0x4, 0x8, 0x1}], 0x10, 0x8}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000023c0)={&(0x7f0000002140)="dca83748c01da5a5ab9d69225759465b6c45831bc117c9b229a0c2d6dced54c0999015432625d3cbdfdb0a296eea419ba62f7512f76cd2219fe0e1b79a448cfa2d3276748acfe12dd03a7d73f0b35767604492a17cd20e6080264bd47cd2f9f7b0f727d0389cb752b76d0ada6b0a550bbb3b565639b32c9e8b7879836f0b98fadc60b6a9b95c83039d658af084594b8d858a042339930f6d930cced2161348d906fcf72e7a5948c50461692fcca25a9e992c8373e04043dadc711381e45ef9037025d5", &(0x7f0000002240)=""/176, &(0x7f0000002300)="083f6e32058703a7ef4a814d59217c5724cc1883b09971cd0204d75d28c6dc6a2020286fa2eacfd5b441ba811eec4a77c8dfbd6b06673079907ce09875b1fd6d16c963e2cbaa1b24c8a6fe621839d9f9", &(0x7f0000002380)="0f2a5e46b213c05c23e3f04094efe93ed96b768cc0483e36cec4429edcb9bd228551db0b69e6585b2edf17018c010d", 0x7, r8}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000023c0)={&(0x7f0000002140)="dca83748c01da5a5ab9d69225759465b6c45831bc117c9b229a0c2d6dced54c0999015432625d3cbdfdb0a296eea419ba62f7512f76cd2219fe0e1b79a448cfa2d3276748acfe12dd03a7d73f0b35767604492a17cd20e6080264bd47cd2f9f7b0f727d0389cb752b76d0ada6b0a550bbb3b565639b32c9e8b7879836f0b98fadc60b6a9b95c83039d658af084594b8d858a042339930f6d930cced2161348d906fcf72e7a5948c50461692fcca25a9e992c8373e04043dadc711381e45ef9037025d5", &(0x7f0000002240)=""/176, &(0x7f0000002300)="083f6e32058703a7ef4a814d59217c5724cc1883b09971cd0204d75d28c6dc6a2020286fa2eacfd5b441ba811eec4a77c8dfbd6b06673079907ce09875b1fd6d16c963e2cbaa1b24c8a6fe621839d9f9", &(0x7f0000002380)="0f2a5e46b213c05c23e3f04094efe93ed96b768cc0483e36cec4429edcb9bd228551db0b69e6585b2edf17018c010d", 0x7, r8}, 0x38) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002480)={{r6}, &(0x7f0000002400), &(0x7f0000002440)='%pi6 \x00'}, 0x20) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000002500)={0x4, &(0x7f00000024c0)=[{0x1, 0xe3, 0x80, 0xffffffff}, {0x7, 0x7, 0xa, 0x7}, {0x0, 0x22, 0x8, 0x8000}, {0x0, 0x2, 0x0, 0xfba}]}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000002500)={0x4, &(0x7f00000024c0)=[{0x1, 0xe3, 0x80, 0xffffffff}, {0x7, 0x7, 0xa, 0x7}, {0x0, 0x22, 0x8, 0x8000}, {0x0, 0x2, 0x0, 0xfba}]}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000002540), 0x20000, 0x0) ioctl$TUNSETQUEUE(r13, 0x400454d9, &(0x7f0000002580)={'dvmrp1\x00', 0x500}) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002680)={&(0x7f00000025c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xa, [@typedef={0x3, 0x0, 0x0, 0x8, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xb}]}, @union={0x6, 0x1, 0x0, 0x5, 0x1, 0x7, [{0x1, 0x5, 0x9}]}]}, {0x0, [0x61, 0x0, 0x5f, 0x61, 0x30, 0x2e, 0x2e, 0x1e7fb28558240cf0]}}, &(0x7f0000002640)=""/25, 0x5a, 0x19, 0x1, 0x80000000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002840)={r14, 0x20, &(0x7f0000002800)={&(0x7f00000026c0)=""/37, 0x25, 0x0, &(0x7f0000002700)=""/230, 0xe6}}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002880)={'ip6_vti0\x00'}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002880)={'ip6_vti0\x00'}) 264.651913ms ago: executing program 3 (id=1576): socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4880) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f008004000000e00001100630277", 0x0, 0x100, 0x2000000, 0xc302, 0x0, &(0x7f0000000440)}, 0x28) 0s ago: executing program 0 (id=1577): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e6bd03cbe773a938f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c90c79726d5e73dfe741de35498842cf51a4f09b97b1c14d33213705b95e84a8853fab4e1ced6faecea9d9203b038594bceb202a9d47f862c4f1853db9a0a7bf98ed9d2e3012358b38d092bd1ed7efb1a9e582ac5ef30c9b476e185f537f40ae8189528b480436122a939967e8d862e01172245ebced9f5251dd302e7e974c1db40be1e9e79799c27384caf6485e7c469b77cd6b28f71e39f84d2adbe074dd2bed6636e6853655adc3d1a47eff697e8edba53e6b281aea94798d82da7d3e86d09d869e5e345316eeeced4e15fc39234a0b0104e0b205c95eda632d0e86b095b284f441a62cb0e7262bc1967ee75f5c2d459011b0c15f4c85b02150a8834eda7f84cc96dde04e4abbdf5985a9c7218797820251b5804cae80c9a726afddf36793ae52cfb38e4e19740d6e07e4ed7c01001ab87b7fb12d5b70a75938d234c83d863b1763aec37b41d204fc319c6e802734ed681ea179fe6cad4857c3ca0e236e7b9867688d8bd7749e919f2d4f57f2249c9ccaf76a23760569b0fbde2db12ca0169e74982c1f4f0494aae13f4838b3f50d9ab0f6e328250d6fc34c0156e4b754c5c648b4ef8af32c91859f9706048f029634cefd0d767e8b7743262cb8a468ad37dfa47a745495e3f03cfa1d4ed71af55453c0a25fa1122a9054bcc4d9960c9a54f36b6db55154ab7dd19890d9f8ff3549e0fbd5a655319566b7f9c72be0242e7ffb59020356c3ffb5b9c43858e69d7b677a9bc5b8a64721a51b75a254e07199a73726834bea05901455ad53b38116b953c970b2002d0d1f91deb73ccb7266fbb21aa8555599daed7585575ef3efbd737f2523018ba4645d862889d5c3d91b12f04166db8bffecde54ee278d0d5351f3bf1f8902ff3f4c24a8c0c8a4e6addc9baadc471813589324d3128a1b193137c15c01be9f367317b1c885301ff8e9df728efa37df27f65eb0464055091f2ed469fdab48f413e3978f73ff9dffeb85453e841f86594612ac91b50add8d14910748bfa903033662f3e735ce6d299ce52338a96035aa89f63bd59d151fb20c38125236cbc0d795ac6f8da4cafc74714ed62a23b017e15adcaade58385b78c6945fb30a2539c42b1e415879433b9fb6966c6d19ed19f9f90cbd360d936a8b9f8e03bca5a83c063651b4636a7783bbda6417c83e470a16dfb115344a527436242ace9341432b5816b5e6609d97d600e142ca3cf74cbc00e1d9ee203cdfad339ce460b294f3931c5bd8ae6da8fc14d66a01bae4a212ef3d914e58c13217c8ad91628636b56257c7ca41b404cc2d4b5d50e26ebefc74656c62b1b4e9b6c5b6cc8d79101460f719d95925630bf99e042018439c50026513d680ea573620132ded57dea9e2da4e16f17dbc171642b1e80a3f41311ee73441302285668792160db6614fdb30d25a5719d2ae03ab98ea167597c48dd8197e7faf6189d801134462027901506c5ff1ae2558d96722217f65131d2f429693ae9fae19c101319473608976d08cc1c0d98f789b0c364e8aca574321ab2857af1015f1588afd313503085db4d99961a9391db06c10477ceb44199f1648594e8f9b452fafdab49b1962d02ee77ebd31b7931174a729fa943cb18102130e7e08eaba77df066069c2c3564fc85881ba0dad12c4f06a9e6dea9fea53931ff85e38505eb7ad60a52e2a8a248b3f4d0d55eee31f75f110c70e3b12409a79a5a98b0156c6d2a5d94604b8fa202b12746a365c708c671316cc0ffff6e9b7139b337953be22672a4910e1eb28cccc023b77028e20a6d377a339372f0dc235069f41c2692b0a3a7e0f315f4aebeef435a46b2e8b8462739293f9184c01b1434e87bf3fd48be54bf437056a1d2cff0c7aa52578013f96b1d5100ca936ff029cfd6f9a093621f684196ed7e1d363a97c647c34fe5f2370e7ab9dc718a1fc317779ab8a04bc12c01b778d17eea0b546bce03475fc6373c860714df0322dde550186c553ebd61ed18c0b80655f0827a63d209117ca23b026c1ad30bac4d43a4611292c7049f855b829a3a17fd2b83c142078beed8ca07b7cb7cd624705ccc160246c81174a4d3a9f2057caffe84b1ac073375e065c1ff4e9e22e7d87b3adb40ff796132e4ed86e5fc9f9616f8e4116be96497621692fb516e9316cfd15ad01742a1de4aa35fe02861236295823edf4c48fc37faf55226044e393a3733d58e8ef0f0c7941bc30f09739f37dea2f395f2e9e9b2c31a11923a2d6c9b14f1bacce15094cbbd6445f3581c6d45b76943b4d0db8fd4d4acbdb91780f57c872827abd7a1f13290a0d17dda220493476c92ce65e33f07afcf763aec0e67450f547101f1a5ada0f760c8f12137679324e22c7a13fdf78575115acb0ae4a2818b7b3ead27eea5eccba6f7a34c61819382eebfad742a3c603c6d2f332726996b3e8fcbdfd56b436c1173b1b3bc1ab66a717e31f2f918f0bea3f4801e04c14c881c59324fd9bc38745dd0e47da6bc8e98fe74a760304d74f17cd3cfceb33503397cf592d2b6a51b641d559ba8d6dc449e19b289fd1a4b3772b3998181e787723fe3893362d8f3e346c0ab0abe933e9bdd9a82b377914018377af9d2cbc58ab4fc08cea2623174239cea585603b8acd20da923a44799b1745c3bd65640508f96a0d92a6a2fd8314573f10b4f6e6cbf61e8828bd6e69b1b0c47f5795917a5035b3424dc3cadd2aadbbafb9d18349fab41d79ba13660f2c9400ff87784b26c3e88785db8522c93d3d4f12608736a235c8b9fff98a17934fe36792cb1992ea1b72b5e151cfe82b4ebc4f510882e4b34ee9f6ada188b104ba36e8acbd7bafe39b32f957da45c2743017545fd61667d36d58952de0cdbacb3abc549e1001bf6d9b19f9a353bb84bd152e04c061c691b514d6f1b36a8895424ce210a4cd75d537443a2791dc68e9fff510358f7586d3b73ed04223e683adf6a1c79d3bc92aa595cc6167", 0xa91}], 0x3}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [ 75.548803][ T5761] cgroup: Unknown subsys name 'net' [ 75.684768][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.458747][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.052871][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.096197][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.106619][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.115902][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.117384][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.130876][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.133822][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.147365][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.147998][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.155386][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.163053][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.169990][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.176696][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.184344][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.190618][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.197768][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.204837][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.220226][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.220422][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.237377][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.238362][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.244902][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.267853][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.276381][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.684118][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 79.785480][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 79.901116][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.908610][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.918783][ T5772] bridge_slave_0: entered allmulticast mode [ 79.925823][ T5772] bridge_slave_0: entered promiscuous mode [ 79.934553][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 79.945075][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 79.967981][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.975400][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.983320][ T5772] bridge_slave_1: entered allmulticast mode [ 79.990627][ T5772] bridge_slave_1: entered promiscuous mode [ 80.068797][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.076370][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.083764][ T5774] bridge_slave_0: entered allmulticast mode [ 80.091092][ T5774] bridge_slave_0: entered promiscuous mode [ 80.113644][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.132887][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.140426][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.147833][ T5774] bridge_slave_1: entered allmulticast mode [ 80.154698][ T5774] bridge_slave_1: entered promiscuous mode [ 80.169400][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.237997][ T5772] team0: Port device team_slave_0 added [ 80.247282][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.272545][ T5772] team0: Port device team_slave_1 added [ 80.281058][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.361605][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.369406][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.376820][ T5776] bridge_slave_0: entered allmulticast mode [ 80.383874][ T5776] bridge_slave_0: entered promiscuous mode [ 80.404126][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.411566][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.438284][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.452602][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.460546][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.467958][ T5773] bridge_slave_0: entered allmulticast mode [ 80.474910][ T5773] bridge_slave_0: entered promiscuous mode [ 80.483287][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.491205][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.498578][ T5776] bridge_slave_1: entered allmulticast mode [ 80.505772][ T5776] bridge_slave_1: entered promiscuous mode [ 80.516321][ T5774] team0: Port device team_slave_0 added [ 80.523333][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.533563][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.560349][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.579792][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.589216][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.597678][ T5773] bridge_slave_1: entered allmulticast mode [ 80.605022][ T5773] bridge_slave_1: entered promiscuous mode [ 80.642589][ T5774] team0: Port device team_slave_1 added [ 80.682903][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.690009][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.720360][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.734951][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.756274][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.779827][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.792611][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.799951][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.826797][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.854005][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.901420][ T5772] hsr_slave_0: entered promiscuous mode [ 80.908863][ T5772] hsr_slave_1: entered promiscuous mode [ 80.942669][ T5773] team0: Port device team_slave_0 added [ 80.984984][ T5773] team0: Port device team_slave_1 added [ 80.993900][ T5776] team0: Port device team_slave_0 added [ 81.003952][ T5776] team0: Port device team_slave_1 added [ 81.020485][ T5774] hsr_slave_0: entered promiscuous mode [ 81.027609][ T5774] hsr_slave_1: entered promiscuous mode [ 81.033768][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.041881][ T5774] Cannot create hsr debugfs directory [ 81.141477][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.149706][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.179059][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.191629][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.198961][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.225448][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.239440][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.246551][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.247185][ T5085] Bluetooth: hci2: command tx timeout [ 81.272841][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.296850][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.304053][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.326379][ T5085] Bluetooth: hci3: command tx timeout [ 81.330479][ T5779] Bluetooth: hci0: command tx timeout [ 81.336379][ T5783] Bluetooth: hci1: command tx timeout [ 81.341923][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.418361][ T5773] hsr_slave_0: entered promiscuous mode [ 81.425712][ T5773] hsr_slave_1: entered promiscuous mode [ 81.432188][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.440285][ T5773] Cannot create hsr debugfs directory [ 81.597212][ T5776] hsr_slave_0: entered promiscuous mode [ 81.607449][ T5776] hsr_slave_1: entered promiscuous mode [ 81.613691][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.622601][ T5776] Cannot create hsr debugfs directory [ 81.812534][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.841944][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.851863][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.873953][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.967180][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.984049][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.997321][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.013970][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.092617][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.127324][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.138771][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.191900][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.239876][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.250980][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.262936][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.274599][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.378409][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.429424][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.451291][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.475318][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.492730][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.500177][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.526609][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.533762][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.561326][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.590028][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.609588][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.617082][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.648873][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.656377][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.668555][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.675734][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.708001][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.715186][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.780152][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.820325][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.856905][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.864428][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.903148][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.910545][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.295439][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.327811][ T5783] Bluetooth: hci2: command tx timeout [ 83.410556][ T5772] veth0_vlan: entered promiscuous mode [ 83.417666][ T5783] Bluetooth: hci1: command tx timeout [ 83.423140][ T5783] Bluetooth: hci0: command tx timeout [ 83.429507][ T5085] Bluetooth: hci3: command tx timeout [ 83.455287][ T5772] veth1_vlan: entered promiscuous mode [ 83.574995][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.590430][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.608779][ T5772] veth0_macvtap: entered promiscuous mode [ 83.634498][ T5772] veth1_macvtap: entered promiscuous mode [ 83.673249][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.698072][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.734998][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.768739][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.779543][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.791834][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.801129][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.837130][ T5776] veth0_vlan: entered promiscuous mode [ 83.860241][ T5773] veth0_vlan: entered promiscuous mode [ 83.897441][ T5776] veth1_vlan: entered promiscuous mode [ 83.914177][ T5774] veth0_vlan: entered promiscuous mode [ 83.955529][ T5774] veth1_vlan: entered promiscuous mode [ 83.981357][ T5773] veth1_vlan: entered promiscuous mode [ 84.024396][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.049012][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.099383][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.101934][ T5776] veth0_macvtap: entered promiscuous mode [ 84.113505][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.156304][ T5774] veth0_macvtap: entered promiscuous mode [ 84.169645][ T5774] veth1_macvtap: entered promiscuous mode [ 84.181872][ T5776] veth1_macvtap: entered promiscuous mode [ 84.190192][ T5773] veth0_macvtap: entered promiscuous mode [ 84.221738][ T5773] veth1_macvtap: entered promiscuous mode [ 84.252160][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.263609][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.277608][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.285633][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.297608][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.308142][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.319198][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.330889][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.358609][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.386486][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.412292][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.452918][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.466039][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.477628][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.488498][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.499300][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.510422][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.530443][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.547404][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.558752][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.568970][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.579672][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.594305][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.605444][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.627073][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.641089][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.653532][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.669884][ C1] hrtimer: interrupt took 66259 ns [ 84.672521][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.694921][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.707676][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.717666][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.726933][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.735850][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.748165][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.775020][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.784184][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.793327][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.803251][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.822947][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.832412][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.841772][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.852983][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.099062][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.114727][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.164205][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.177185][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.231378][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.239958][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.302378][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.315267][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.402300][ T5841] netlink: 'syz.0.5': attribute type 10 has an invalid length. [ 85.424615][ T5783] Bluetooth: hci2: command tx timeout [ 85.492757][ T5783] Bluetooth: hci0: command tx timeout [ 85.498669][ T5085] Bluetooth: hci3: command tx timeout [ 85.498895][ T5779] Bluetooth: hci1: command tx timeout [ 85.564729][ T5841] team0: Port device geneve1 added [ 85.604879][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.622175][ T5845] netlink: 'syz.3.4': attribute type 29 has an invalid length. [ 85.630722][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.646924][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.659931][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.864074][ T5841] syz.0.5 (5841) used greatest stack depth: 18792 bytes left [ 86.044491][ T5845] IPv6: Can't replace route, no match found [ 86.114737][ T5851] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.147660][ T5844] netlink: 'syz.3.4': attribute type 6 has an invalid length. [ 86.166379][ T5844] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4'. [ 86.490820][ T5853] Zero length message leads to an empty skb [ 86.527553][ T5852] delete_channel: no stack [ 86.642736][ T5856] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3'. [ 86.689577][ T5856] hsr_slave_0: left promiscuous mode [ 86.728408][ T5856] hsr_slave_1: left promiscuous mode [ 86.977013][ T5851] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.997565][ T5864] delete_channel: no stack [ 87.004386][ T5864] delete_channel: no stack [ 87.024633][ T5865] netlink: 'syz.3.7': attribute type 10 has an invalid length. [ 87.048865][ T5866] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9'. [ 87.289973][ T5865] team0: Port device geneve1 added [ 87.475703][ T5865] syz.3.7 (5865) used greatest stack depth: 18536 bytes left [ 87.488488][ T5779] Bluetooth: hci2: command tx timeout [ 87.566479][ T5779] Bluetooth: hci0: command tx timeout [ 87.567125][ T5783] Bluetooth: hci3: command tx timeout [ 87.572203][ T5779] Bluetooth: hci1: command tx timeout [ 87.574009][ T5873] netlink: 'syz.0.10': attribute type 10 has an invalid length. [ 87.930069][ T5881] netlink: 'syz.2.12': attribute type 1 has an invalid length. [ 87.960999][ T5881] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.12'. [ 88.708215][ T5887] netlink: 'syz.1.14': attribute type 11 has an invalid length. [ 88.750256][ T5887] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.14'. [ 89.156898][ T5895] netlink: 'syz.2.16': attribute type 29 has an invalid length. [ 89.468104][ T5893] netlink: 'syz.2.16': attribute type 6 has an invalid length. [ 89.518380][ T5893] netlink: 140 bytes leftover after parsing attributes in process `syz.2.16'. [ 89.562125][ T5901] netlink: 'syz.0.25': attribute type 1 has an invalid length. [ 89.569457][ T5894] IPv6: Can't replace route, no match found [ 89.575780][ T5901] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.25'. [ 90.341968][ T5896] delete_channel: no stack [ 91.138004][ T5910] netlink: 'syz.1.28': attribute type 10 has an invalid length. [ 91.503332][ T5910] team0: Port device geneve1 added [ 91.576544][ T5924] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 91.613370][ T5920] netlink: 14 bytes leftover after parsing attributes in process `syz.3.21'. [ 91.644770][ T5920] hsr_slave_0: left promiscuous mode [ 91.690463][ T5926] delete_channel: no stack [ 91.693997][ T5926] delete_channel: no stack [ 91.867452][ T5920] hsr_slave_1: left promiscuous mode [ 91.882079][ T5926] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.23'. [ 92.345531][ T5926] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 92.449428][ T788] cfg80211: failed to load regulatory.db [ 92.476654][ T5935] netlink: 'syz.1.24': attribute type 10 has an invalid length. [ 92.928074][ T5943] delete_channel: no stack [ 92.944753][ T5947] netlink: 'syz.3.31': attribute type 1 has an invalid length. [ 92.945101][ T5943] delete_channel: no stack [ 92.995453][ T5947] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.31'. [ 93.011483][ T5952] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.39'. [ 93.107013][ T5952] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 93.619386][ T5963] FAULT_INJECTION: forcing a failure. [ 93.619386][ T5963] name failslab, interval 1, probability 0, space 0, times 1 [ 93.676783][ T5963] CPU: 1 PID: 5963 Comm: syz.0.36 Not tainted syzkaller #0 [ 93.684085][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 93.694294][ T5963] Call Trace: [ 93.697710][ T5963] [ 93.700676][ T5963] dump_stack_lvl+0x18c/0x250 [ 93.703479][ T5962] netlink: 'syz.1.35': attribute type 10 has an invalid length. [ 93.705433][ T5963] ? sctp_sendmsg+0x1575/0x28c0 [ 93.705499][ T5963] ? ___sys_sendmsg+0x2a6/0x360 [ 93.705523][ T5963] ? show_regs_print_info+0x20/0x20 [ 93.728635][ T5963] ? load_image+0x420/0x420 [ 93.733223][ T5963] should_fail_ex+0x39d/0x4d0 [ 93.738067][ T5963] should_failslab+0x9/0x20 [ 93.742623][ T5963] slab_pre_alloc_hook+0x59/0x310 [ 93.747682][ T5963] ? sctp_add_bind_addr+0x8c/0x360 [ 93.752812][ T5963] __kmem_cache_alloc_node+0x53/0x250 [ 93.758445][ T5963] ? sctp_add_bind_addr+0x8c/0x360 [ 93.763567][ T5963] kmalloc_trace+0x2a/0xe0 [ 93.768010][ T5963] sctp_add_bind_addr+0x8c/0x360 [ 93.773057][ T5963] sctp_copy_local_addr_list+0x315/0x4f0 [ 93.778976][ T5963] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 93.784928][ T5963] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 93.791044][ T5963] ? sctp_v4_is_any+0x35/0x60 [ 93.795857][ T5963] ? sctp_copy_one_addr+0x8c/0x350 [ 93.801023][ T5963] sctp_bind_addr_copy+0xb3/0x3c0 [ 93.806169][ T5963] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 93.812521][ T5963] sctp_connect_new_asoc+0x2f9/0x6a0 [ 93.817844][ T5963] ? __sctp_connect+0xd80/0xd80 [ 93.822719][ T5963] ? __local_bh_enable_ip+0x13a/0x1c0 [ 93.828112][ T5963] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 93.833766][ T5963] ? security_sctp_bind_connect+0x89/0xb0 [ 93.839510][ T5963] sctp_sendmsg+0x1575/0x28c0 [ 93.844400][ T5963] ? sctp_getsockopt+0xb60/0xb60 [ 93.849412][ T5963] ? aa_sk_perm+0x83c/0x970 [ 93.854036][ T5963] ? aa_af_perm+0x330/0x330 [ 93.858563][ T5963] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 93.865172][ T5963] ? sock_rps_record_flow+0x19/0x3f0 [ 93.870476][ T5963] ? inet_sendmsg+0xe9/0x2f0 [ 93.875087][ T5963] ? inet_send_prepare+0x260/0x260 [ 93.880223][ T5963] ____sys_sendmsg+0x5ba/0x960 [ 93.885026][ T5963] ? __lock_acquire+0x7d40/0x7d40 [ 93.890151][ T5963] ? __sys_sendmsg_sock+0x30/0x30 [ 93.895190][ T5963] ? __import_iovec+0x5f2/0x850 [ 93.900100][ T5963] ? import_iovec+0x73/0xa0 [ 93.904661][ T5963] ___sys_sendmsg+0x2a6/0x360 [ 93.909389][ T5963] ? get_pid_task+0x20/0x1e0 [ 93.914017][ T5963] ? __sys_sendmsg+0x2a0/0x2a0 [ 93.918826][ T5963] ? __lock_acquire+0x7d40/0x7d40 [ 93.924018][ T5963] __se_sys_sendmsg+0x1c2/0x2b0 [ 93.928910][ T5963] ? __x64_sys_sendmsg+0x80/0x80 [ 93.933894][ T5963] ? lockdep_hardirqs_on+0x98/0x150 [ 93.939133][ T5963] do_syscall_64+0x55/0xa0 [ 93.943577][ T5963] ? clear_bhb_loop+0x40/0x90 [ 93.948278][ T5963] ? clear_bhb_loop+0x40/0x90 [ 93.953067][ T5963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.958997][ T5963] RIP: 0033:0x7fcf85f9cdd9 [ 93.963430][ T5963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.983320][ T5963] RSP: 002b:00007fcf86e98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.991939][ T5963] RAX: ffffffffffffffda RBX: 00007fcf86215fa0 RCX: 00007fcf85f9cdd9 [ 94.000013][ T5963] RDX: 000000000000088c RSI: 0000200000004bc0 RDI: 0000000000000004 [ 94.008110][ T5963] RBP: 00007fcf86e98090 R08: 0000000000000000 R09: 0000000000000000 [ 94.016196][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 94.024421][ T5963] R13: 00007fcf86216038 R14: 00007fcf86215fa0 R15: 00007ffca307ffe8 [ 94.032428][ T5963] [ 94.480685][ T5969] netlink: 'syz.3.48': attribute type 10 has an invalid length. [ 94.699316][ T5980] netlink: 14 bytes leftover after parsing attributes in process `syz.0.40'. [ 97.286246][ T5980] hsr_slave_0: left promiscuous mode [ 97.331110][ T5980] hsr_slave_1: left promiscuous mode [ 97.684425][ T5991] netlink: 'syz.3.42': attribute type 10 has an invalid length. [ 98.107761][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'. [ 98.556543][ T6003] netlink: 'syz.1.51': attribute type 10 has an invalid length. [ 98.591458][ T6003] netlink: 40 bytes leftover after parsing attributes in process `syz.1.51'. [ 99.058613][ T6020] netlink: 'syz.2.56': attribute type 10 has an invalid length. [ 99.419649][ T6020] team0: Port device geneve1 added [ 99.457752][ T6011] netlink: 'syz.0.54': attribute type 10 has an invalid length. [ 99.488140][ T6027] netlink: 'syz.1.57': attribute type 25 has an invalid length. [ 99.526116][ T6027] netlink: 'syz.1.57': attribute type 9 has an invalid length. [ 100.012328][ T6037] netlink: 'syz.3.61': attribute type 25 has an invalid length. [ 100.056077][ T6037] netlink: 'syz.3.61': attribute type 9 has an invalid length. [ 100.186242][ T6039] netlink: 14 bytes leftover after parsing attributes in process `syz.1.58'. [ 100.460617][ T6039] hsr_slave_0: left promiscuous mode [ 100.511605][ T6039] hsr_slave_1: left promiscuous mode [ 100.694358][ T6048] FAULT_INJECTION: forcing a failure. [ 100.694358][ T6048] name failslab, interval 1, probability 0, space 0, times 0 [ 100.772971][ T6048] CPU: 0 PID: 6048 Comm: syz.2.65 Not tainted syzkaller #0 [ 100.780359][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 100.790632][ T6048] Call Trace: [ 100.793953][ T6048] [ 100.796924][ T6048] dump_stack_lvl+0x18c/0x250 [ 100.801658][ T6048] ? show_regs_print_info+0x20/0x20 [ 100.806910][ T6048] ? load_image+0x420/0x420 [ 100.811470][ T6048] ? verify_lock_unused+0x140/0x140 [ 100.816723][ T6048] should_fail_ex+0x39d/0x4d0 [ 100.821501][ T6048] should_failslab+0x9/0x20 [ 100.826060][ T6048] slab_pre_alloc_hook+0x59/0x310 [ 100.826710][ T6046] netlink: 'syz.3.63': attribute type 11 has an invalid length. [ 100.831244][ T6048] kmem_cache_alloc+0x5a/0x2d0 [ 100.831305][ T6048] ? skb_clone+0x1eb/0x370 [ 100.831334][ T6048] skb_clone+0x1eb/0x370 [ 100.831358][ T6048] __netlink_deliver_tap+0x41c/0x830 [ 100.831402][ T6048] ? netlink_deliver_tap+0x2e/0x1b0 [ 100.831430][ T6048] netlink_deliver_tap+0x19c/0x1b0 [ 100.831458][ T6048] netlink_sendskb+0x68/0x130 [ 100.831488][ T6048] netlink_ack+0xce1/0x1180 [ 100.831515][ T6048] ? __inet_diag_dump+0x380/0x380 [ 100.831570][ T6048] ? netlink_dump+0xe50/0xe50 [ 100.831597][ T6048] ? __inet_diag_dump+0x380/0x380 [ 100.831632][ T6048] ? sock_diag_rcv_msg+0x402/0x600 [ 100.831664][ T6048] netlink_rcv_skb+0x2c5/0x4d0 [ 100.831692][ T6048] ? sock_diag_bind+0xb0/0xb0 [ 100.831717][ T6048] ? netlink_ack+0x1180/0x1180 [ 100.831758][ T6048] ? __lock_acquire+0x7d40/0x7d40 [ 100.831789][ T6048] ? netlink_deliver_tap+0x2e/0x1b0 [ 100.831820][ T6048] sock_diag_rcv+0x2a/0x40 [ 100.831843][ T6048] netlink_unicast+0x751/0x8d0 [ 100.831882][ T6048] netlink_sendmsg+0x8d0/0xbf0 [ 100.831920][ T6048] ? netlink_getsockopt+0x590/0x590 [ 100.831950][ T6048] ? aa_sock_msg_perm+0x94/0x150 [ 100.831978][ T6048] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 100.832003][ T6048] ? security_socket_sendmsg+0x80/0xa0 [ 100.832023][ T6048] ? netlink_getsockopt+0x590/0x590 [ 100.832052][ T6048] ____sys_sendmsg+0x5ba/0x960 [ 100.832079][ T6048] ? __asan_memset+0x22/0x40 [ 100.832105][ T6048] ? __sys_sendmsg_sock+0x30/0x30 [ 100.832122][ T6048] ? __import_iovec+0x5f2/0x850 [ 100.832153][ T6048] ? import_iovec+0x73/0xa0 [ 100.832176][ T6048] ___sys_sendmsg+0x2a6/0x360 [ 100.832203][ T6048] ? __sys_sendmsg+0x2a0/0x2a0 [ 100.832247][ T6048] ? trace_call_bpf+0xc3/0x6c0 [ 100.832303][ T6048] __se_sys_sendmsg+0x1c2/0x2b0 [ 100.832328][ T6048] ? __x64_sys_sendmsg+0x80/0x80 [ 100.868797][ T6046] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.63'. [ 100.869971][ T6048] ? lockdep_hardirqs_on+0x98/0x150 [ 100.870010][ T6048] do_syscall_64+0x55/0xa0 [ 100.870031][ T6048] ? clear_bhb_loop+0x40/0x90 [ 100.870056][ T6048] ? clear_bhb_loop+0x40/0x90 [ 100.870089][ T6048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.870114][ T6048] RIP: 0033:0x7f55fa19cdd9 [ 100.870135][ T6048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.870151][ T6048] RSP: 002b:00007f55fb0c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.870175][ T6048] RAX: ffffffffffffffda RBX: 00007f55fa415fa0 RCX: 00007f55fa19cdd9 [ 100.870188][ T6048] RDX: 0000000000040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 100.870202][ T6048] RBP: 00007f55fb0c5090 R08: 0000000000000000 R09: 0000000000000000 [ 100.870214][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.870227][ T6048] R13: 00007f55fa416038 R14: 00007f55fa415fa0 R15: 00007ffe2f86ab58 [ 100.870258][ T6048] [ 101.653365][ T6041] delete_channel: no stack [ 101.670075][ T6046] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 102.290273][ T6064] netlink: 'syz.3.69': attribute type 10 has an invalid length. [ 102.819718][ T6082] netlink: 'syz.0.76': attribute type 12 has an invalid length. [ 102.865295][ T6082] netlink: 188816 bytes leftover after parsing attributes in process `syz.0.76'. [ 102.968870][ T6091] netlink: 'syz.3.80': attribute type 10 has an invalid length. [ 104.357943][ T6091] team0 (unregistering): Port device team_slave_0 removed [ 104.520086][ T6091] team0 (unregistering): Port device team_slave_1 removed [ 104.637106][ T6091] team0 (unregistering): Port device geneve1 removed [ 105.110221][ T6111] netlink: 'syz.0.88': attribute type 17 has an invalid length. [ 105.136136][ T6111] netlink: 152 bytes leftover after parsing attributes in process `syz.0.88'. [ 105.167994][ T6111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.843439][ T6127] netlink: 'syz.2.89': attribute type 10 has an invalid length. [ 105.926051][ T6129] netlink: 'syz.3.90': attribute type 21 has an invalid length. [ 105.971444][ T6129] netlink: 128 bytes leftover after parsing attributes in process `syz.3.90'. [ 105.986918][ T6129] netlink: 'syz.3.90': attribute type 4 has an invalid length. [ 105.994835][ T6129] netlink: 'syz.3.90': attribute type 3 has an invalid length. [ 106.011672][ T6129] netlink: 3 bytes leftover after parsing attributes in process `syz.3.90'. [ 106.485949][ T6143] FAULT_INJECTION: forcing a failure. [ 106.485949][ T6143] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.505137][ T6144] Driver unsupported XDP return value 0 on prog (id 74) dev N/A, expect packet loss! [ 106.542082][ T6142] syz.2.97 uses obsolete (PF_INET,SOCK_PACKET) [ 106.549043][ T6143] CPU: 1 PID: 6143 Comm: syz.3.96 Not tainted syzkaller #0 [ 106.556603][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.567414][ T6143] Call Trace: [ 106.570828][ T6143] [ 106.573815][ T6143] dump_stack_lvl+0x18c/0x250 [ 106.578828][ T6143] ? show_regs_print_info+0x20/0x20 [ 106.584183][ T6143] ? load_image+0x420/0x420 [ 106.588788][ T6143] ? __might_fault+0xaa/0x120 [ 106.593514][ T6143] should_fail_ex+0x39d/0x4d0 [ 106.598409][ T6143] copyin+0x1a/0x90 [ 106.602549][ T6143] _copy_from_iter+0x404/0x12e0 [ 106.607692][ T6143] ? slab_post_alloc_hook+0x8a/0x4b0 [ 106.613125][ T6143] ? __virt_addr_valid+0x18c/0x540 [ 106.618309][ T6143] ? __lock_acquire+0x7d40/0x7d40 [ 106.623648][ T6143] ? copyout_mc+0x70/0x70 [ 106.628028][ T6143] ? __virt_addr_valid+0x18c/0x540 [ 106.633390][ T6143] ? __virt_addr_valid+0x18c/0x540 [ 106.638587][ T6143] ? __virt_addr_valid+0x469/0x540 [ 106.643936][ T6143] ? __check_object_size+0x506/0xa20 [ 106.649295][ T6143] netlink_sendmsg+0x76b/0xbf0 [ 106.654127][ T6143] ? netlink_getsockopt+0x590/0x590 [ 106.659392][ T6143] ? aa_sock_msg_perm+0x94/0x150 [ 106.664407][ T6143] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 106.670195][ T6143] ? security_socket_sendmsg+0x80/0xa0 [ 106.675732][ T6143] ? netlink_getsockopt+0x590/0x590 [ 106.681178][ T6143] ____sys_sendmsg+0x5ba/0x960 [ 106.686002][ T6143] ? __asan_memset+0x22/0x40 [ 106.690649][ T6143] ? __sys_sendmsg_sock+0x30/0x30 [ 106.695905][ T6143] ? __import_iovec+0x3fa/0x850 [ 106.700937][ T6143] ? import_iovec+0x73/0xa0 [ 106.705501][ T6143] ___sys_sendmsg+0x2a6/0x360 [ 106.710235][ T6143] ? get_pid_task+0x20/0x1e0 [ 106.715668][ T6143] ? __sys_sendmsg+0x2a0/0x2a0 [ 106.720684][ T6143] ? __lock_acquire+0x7d40/0x7d40 [ 106.725783][ T6143] __se_sys_sendmsg+0x1c2/0x2b0 [ 106.730782][ T6143] ? __x64_sys_sendmsg+0x80/0x80 [ 106.735799][ T6143] ? lockdep_hardirqs_on+0x98/0x150 [ 106.741177][ T6143] do_syscall_64+0x55/0xa0 [ 106.746172][ T6143] ? clear_bhb_loop+0x40/0x90 [ 106.751074][ T6143] ? clear_bhb_loop+0x40/0x90 [ 106.755804][ T6143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.761836][ T6143] RIP: 0033:0x7f01c799cdd9 [ 106.766305][ T6143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.786323][ T6143] RSP: 002b:00007f01c8928028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.794802][ T6143] RAX: ffffffffffffffda RBX: 00007f01c7c16090 RCX: 00007f01c799cdd9 [ 106.803051][ T6143] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 106.811164][ T6143] RBP: 00007f01c8928090 R08: 0000000000000000 R09: 0000000000000000 [ 106.819265][ T6143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.827378][ T6143] R13: 00007f01c7c16128 R14: 00007f01c7c16090 R15: 00007ffee1123d78 [ 106.835902][ T6143] [ 107.032983][ T6152] netlink: 'syz.2.100': attribute type 33 has an invalid length. [ 107.041807][ T6152] netlink: 152 bytes leftover after parsing attributes in process `syz.2.100'. [ 107.124816][ T6154] FAULT_INJECTION: forcing a failure. [ 107.124816][ T6154] name failslab, interval 1, probability 0, space 0, times 0 [ 107.149245][ T6154] CPU: 0 PID: 6154 Comm: syz.0.101 Not tainted syzkaller #0 [ 107.157449][ T6154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 107.167597][ T6154] Call Trace: [ 107.170929][ T6154] [ 107.174002][ T6154] dump_stack_lvl+0x18c/0x250 [ 107.178891][ T6154] ? show_regs_print_info+0x20/0x20 [ 107.184121][ T6154] ? load_image+0x420/0x420 [ 107.188742][ T6154] ? __might_sleep+0xe0/0xe0 [ 107.193441][ T6154] ? __lock_acquire+0x7d40/0x7d40 [ 107.198484][ T6154] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 107.204320][ T6154] should_fail_ex+0x39d/0x4d0 [ 107.209024][ T6154] should_failslab+0x9/0x20 [ 107.213671][ T6154] slab_pre_alloc_hook+0x59/0x310 [ 107.218850][ T6154] ? sctp_transport_new+0x7e/0x630 [ 107.224161][ T6154] __kmem_cache_alloc_node+0x53/0x250 [ 107.229598][ T6154] ? sctp_transport_new+0x7e/0x630 [ 107.234840][ T6154] kmalloc_trace+0x2a/0xe0 [ 107.239381][ T6154] sctp_transport_new+0x7e/0x630 [ 107.244572][ T6154] sctp_assoc_add_peer+0x259/0x1390 [ 107.250009][ T6154] ? sctp_bind_addr_copy+0x37b/0x3c0 [ 107.255417][ T6154] sctp_connect_new_asoc+0x323/0x6a0 [ 107.260752][ T6154] ? __sctp_connect+0xd80/0xd80 [ 107.265639][ T6154] ? sctp_sendmsg+0x140f/0x28c0 [ 107.270678][ T6154] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 107.276253][ T6154] ? security_sctp_bind_connect+0x89/0xb0 [ 107.281990][ T6154] sctp_sendmsg+0x1575/0x28c0 [ 107.286692][ T6154] ? sctp_getsockopt+0xb60/0xb60 [ 107.291647][ T6154] ? lock_chain_count+0x20/0x20 [ 107.296534][ T6154] ? inet_send_prepare+0x260/0x260 [ 107.301759][ T6154] ? sock_rps_record_flow+0x19/0x3f0 [ 107.307151][ T6154] ? inet_sendmsg+0xe9/0x2f0 [ 107.311942][ T6154] ? inet_send_prepare+0x260/0x260 [ 107.317283][ T6154] ____sys_sendmsg+0x5ba/0x960 [ 107.322154][ T6154] ? __lock_acquire+0x7d40/0x7d40 [ 107.327195][ T6154] ? __asan_memset+0x22/0x40 [ 107.331816][ T6154] ? __sys_sendmsg_sock+0x30/0x30 [ 107.337125][ T6154] ? __import_iovec+0x5f2/0x850 [ 107.342100][ T6154] ? import_iovec+0x73/0xa0 [ 107.346972][ T6154] ___sys_sendmsg+0x2a6/0x360 [ 107.351685][ T6154] ? __sys_sendmsg+0x2a0/0x2a0 [ 107.356574][ T6154] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 107.362989][ T6154] __se_sys_sendmsg+0x1c2/0x2b0 [ 107.367862][ T6154] ? __x64_sys_sendmsg+0x80/0x80 [ 107.373090][ T6154] ? lockdep_hardirqs_on+0x98/0x150 [ 107.378316][ T6154] do_syscall_64+0x55/0xa0 [ 107.383447][ T6154] ? clear_bhb_loop+0x40/0x90 [ 107.388144][ T6154] ? clear_bhb_loop+0x40/0x90 [ 107.392932][ T6154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.398960][ T6154] RIP: 0033:0x7fcf85f9cdd9 [ 107.403394][ T6154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.423186][ T6154] RSP: 002b:00007fcf86e98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.431630][ T6154] RAX: ffffffffffffffda RBX: 00007fcf86215fa0 RCX: 00007fcf85f9cdd9 [ 107.439798][ T6154] RDX: 0000000004000810 RSI: 0000200000000980 RDI: 0000000000000005 [ 107.448056][ T6154] RBP: 00007fcf86e98090 R08: 0000000000000000 R09: 0000000000000000 [ 107.456388][ T6154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.464394][ T6154] R13: 00007fcf86216038 R14: 00007fcf86215fa0 R15: 00007ffca307ffe8 [ 107.472394][ T6154] [ 107.824393][ T6164] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.104'. [ 109.311911][ T6186] netlink: 'syz.0.110': attribute type 10 has an invalid length. [ 109.328355][ T6186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.110'. [ 109.356593][ T6186] bridge0: port 3(team0) entered blocking state [ 109.366365][ T6186] bridge0: port 3(team0) entered disabled state [ 109.417006][ T6186] team0: entered allmulticast mode [ 109.422364][ T6186] team_slave_0: entered allmulticast mode [ 109.456380][ T6186] team_slave_1: entered allmulticast mode [ 109.467185][ T6186] geneve1: entered allmulticast mode [ 109.485530][ T6186] team0: entered promiscuous mode [ 109.516413][ T6186] team_slave_0: entered promiscuous mode [ 109.522727][ T6186] team_slave_1: entered promiscuous mode [ 109.559712][ T6186] geneve1: entered promiscuous mode [ 109.575471][ T6186] bridge0: port 3(team0) entered blocking state [ 109.583534][ T6186] bridge0: port 3(team0) entered forwarding state [ 110.033713][ T6206] netlink: 'syz.3.118': attribute type 21 has an invalid length. [ 110.063672][ T6206] netlink: 14522 bytes leftover after parsing attributes in process `syz.3.118'. [ 110.783911][ T6223] netlink: 'syz.0.126': attribute type 21 has an invalid length. [ 111.152777][ T6229] netlink: 'syz.1.127': attribute type 2 has an invalid length. [ 111.190535][ T6229] netlink: 132 bytes leftover after parsing attributes in process `syz.1.127'. [ 111.310173][ T6230] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.127'. [ 111.447080][ T6232] netlink: 'syz.0.129': attribute type 29 has an invalid length. [ 111.457938][ T6232] netlink: 'syz.0.129': attribute type 29 has an invalid length. [ 111.485023][ T6232] netlink: 'syz.0.129': attribute type 29 has an invalid length. [ 112.231070][ T6242] netlink: 'syz.1.131': attribute type 39 has an invalid length. [ 112.248558][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 112.401132][ T6244] netlink: 'syz.3.132': attribute type 11 has an invalid length. [ 112.463509][ T6244] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.132'. [ 115.752093][ T6281] netlink: 'syz.0.143': attribute type 21 has an invalid length. [ 115.792100][ T6281] IPv6: NLM_F_CREATE should be specified when creating new route [ 115.803872][ T6281] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 115.812097][ T6281] IPv6: NLM_F_CREATE should be set when creating new route [ 115.820933][ T6281] IPv6: NLM_F_CREATE should be set when creating new route [ 115.829145][ T6281] IPv6: NLM_F_CREATE should be set when creating new route [ 115.996823][ T6287] FAULT_INJECTION: forcing a failure. [ 115.996823][ T6287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.019119][ T6287] CPU: 1 PID: 6287 Comm: syz.1.145 Not tainted syzkaller #0 [ 116.026501][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 116.036926][ T6287] Call Trace: [ 116.040247][ T6287] [ 116.043223][ T6287] dump_stack_lvl+0x18c/0x250 [ 116.048145][ T6287] ? show_regs_print_info+0x20/0x20 [ 116.053455][ T6287] ? load_image+0x420/0x420 [ 116.058201][ T6287] ? __might_fault+0xaa/0x120 [ 116.062951][ T6287] ? __lock_acquire+0x7d40/0x7d40 [ 116.068295][ T6287] should_fail_ex+0x39d/0x4d0 [ 116.073052][ T6287] _copy_to_user+0x2f/0xa0 [ 116.077609][ T6287] bpf_test_finish+0x19f/0x650 [ 116.082413][ T6287] ? convert___skb_to_skb+0x590/0x590 [ 116.087804][ T6287] ? convert_skb_to___skb+0x420/0x420 [ 116.093203][ T6287] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 116.098605][ T6287] ? cpu_online+0x60/0x60 [ 116.103321][ T6287] bpf_prog_test_run+0x321/0x390 [ 116.108305][ T6287] __sys_bpf+0x49d/0x890 [ 116.112572][ T6287] ? bpf_link_show_fdinfo+0x390/0x390 [ 116.117986][ T6287] ? lock_chain_count+0x20/0x20 [ 116.122865][ T6287] __x64_sys_bpf+0x7c/0x90 [ 116.127529][ T6287] do_syscall_64+0x55/0xa0 [ 116.131979][ T6287] ? clear_bhb_loop+0x40/0x90 [ 116.136698][ T6287] ? clear_bhb_loop+0x40/0x90 [ 116.141447][ T6287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.147471][ T6287] RIP: 0033:0x7fa867b9cdd9 [ 116.151913][ T6287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.171825][ T6287] RSP: 002b:00007fa8689f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.180286][ T6287] RAX: ffffffffffffffda RBX: 00007fa867e15fa0 RCX: 00007fa867b9cdd9 [ 116.188284][ T6287] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 116.196532][ T6287] RBP: 00007fa8689f5090 R08: 0000000000000000 R09: 0000000000000000 [ 116.204528][ T6287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.212599][ T6287] R13: 00007fa867e16038 R14: 00007fa867e15fa0 R15: 00007ffca966cfe8 [ 116.221037][ T6287] [ 116.830388][ T6307] netlink: 'syz.3.153': attribute type 19 has an invalid length. [ 116.844462][ T6307] netlink: 40 bytes leftover after parsing attributes in process `syz.3.153'. [ 117.519757][ T6320] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.156'. [ 117.579160][ T6320] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 117.610760][ T6320] CPU: 1 PID: 6320 Comm: syz.0.156 Not tainted syzkaller #0 [ 117.618326][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.628632][ T6320] Call Trace: [ 117.631956][ T6320] [ 117.634931][ T6320] dump_stack_lvl+0x18c/0x250 [ 117.639674][ T6320] ? show_regs_print_info+0x20/0x20 [ 117.645200][ T6320] ? load_image+0x420/0x420 [ 117.649888][ T6320] sysfs_warn_dup+0x8e/0xa0 [ 117.654720][ T6320] sysfs_do_create_link_sd+0xc0/0x110 [ 117.660250][ T6320] device_add_class_symlinks+0x1cf/0x240 [ 117.665947][ T6320] device_add+0x507/0xc20 [ 117.670492][ T6320] wiphy_register+0x1dad/0x2ae0 [ 117.675515][ T6320] ? cfg80211_event_work+0x40/0x40 [ 117.680685][ T6320] ? minstrel_ht_alloc+0x88a/0x990 [ 117.686040][ T6320] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 117.692181][ T6320] ieee80211_register_hw+0x3464/0x4250 [ 117.698087][ T6320] ? ieee80211_tasklet_handler+0x20/0x20 [ 117.703789][ T6320] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 117.709893][ T6320] ? __debug_object_init+0xec/0x450 [ 117.715182][ T6320] ? __asan_memset+0x22/0x40 [ 117.719941][ T6320] ? __hrtimer_init+0x186/0x270 [ 117.724883][ T6320] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 117.730807][ T6320] ? mac80211_hwsim_free+0x220/0x220 [ 117.736422][ T6320] ? rcu_is_watching+0x15/0xb0 [ 117.741350][ T6320] ? kstrndup+0xbd/0x140 [ 117.745767][ T6320] hwsim_new_radio_nl+0xdc9/0x1a90 [ 117.751032][ T6320] ? __nla_validate+0x50/0x50 [ 117.755775][ T6320] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 117.762193][ T6320] ? __nla_parse+0x40/0x50 [ 117.766675][ T6320] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 117.773056][ T6320] genl_family_rcv_msg_doit+0x211/0x310 [ 117.778642][ T6320] ? end_current_label_crit_section+0x170/0x170 [ 117.785001][ T6320] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 117.791020][ T6320] ? bpf_lsm_capable+0x9/0x10 [ 117.795806][ T6320] ? security_capable+0x89/0xb0 [ 117.800772][ T6320] genl_rcv_msg+0x619/0x7a0 [ 117.805304][ T6320] ? genl_bind+0x360/0x360 [ 117.809735][ T6320] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 117.816289][ T6320] ? ref_tracker_free+0x690/0x840 [ 117.821345][ T6320] netlink_rcv_skb+0x241/0x4d0 [ 117.826145][ T6320] ? genl_bind+0x360/0x360 [ 117.830843][ T6320] ? netlink_ack+0x1180/0x1180 [ 117.835823][ T6320] ? __lock_acquire+0x7d40/0x7d40 [ 117.841152][ T6320] ? down_read+0x1ac/0x2e0 [ 117.845655][ T6320] genl_rcv+0x28/0x40 [ 117.849683][ T6320] netlink_unicast+0x751/0x8d0 [ 117.854671][ T6320] netlink_sendmsg+0x8d0/0xbf0 [ 117.859671][ T6320] ? netlink_getsockopt+0x590/0x590 [ 117.865224][ T6320] ? aa_sock_msg_perm+0x94/0x150 [ 117.870467][ T6320] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 117.876053][ T6320] ? security_socket_sendmsg+0x80/0xa0 [ 117.881701][ T6320] ? netlink_getsockopt+0x590/0x590 [ 117.887101][ T6320] ____sys_sendmsg+0x5ba/0x960 [ 117.892022][ T6320] ? __asan_memset+0x22/0x40 [ 117.896845][ T6320] ? __sys_sendmsg_sock+0x30/0x30 [ 117.902575][ T6320] ? __import_iovec+0x5f2/0x850 [ 117.907500][ T6320] ? import_iovec+0x73/0xa0 [ 117.912253][ T6320] ___sys_sendmsg+0x2a6/0x360 [ 117.916998][ T6320] ? __sys_sendmsg+0x2a0/0x2a0 [ 117.921973][ T6320] __se_sys_sendmsg+0x1c2/0x2b0 [ 117.927015][ T6320] ? __x64_sys_sendmsg+0x80/0x80 [ 117.932015][ T6320] ? lockdep_hardirqs_on+0x98/0x150 [ 117.937279][ T6320] do_syscall_64+0x55/0xa0 [ 117.941917][ T6320] ? clear_bhb_loop+0x40/0x90 [ 117.946629][ T6320] ? clear_bhb_loop+0x40/0x90 [ 117.951426][ T6320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.957513][ T6320] RIP: 0033:0x7fcf85f9cdd9 [ 117.961957][ T6320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.981880][ T6320] RSP: 002b:00007fcf86e98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.990387][ T6320] RAX: ffffffffffffffda RBX: 00007fcf86215fa0 RCX: 00007fcf85f9cdd9 [ 117.999008][ T6320] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 118.007101][ T6320] RBP: 00007fcf86032d69 R08: 0000000000000000 R09: 0000000000000000 [ 118.015126][ T6320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.023323][ T6320] R13: 00007fcf86216038 R14: 00007fcf86215fa0 R15: 00007ffca307ffe8 [ 118.031452][ T6320] [ 118.095372][ T6313] netlink: 'syz.1.154': attribute type 9 has an invalid length. [ 118.109691][ T6313] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.154'. [ 118.946872][ T6332] tap0: tun_chr_ioctl cmd 1074025675 [ 118.992949][ T6332] tap0: persist enabled [ 119.020796][ T6338] tap0: tun_chr_ioctl cmd 21731 [ 119.743127][ T6347] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.161'. [ 119.766094][ T6347] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 122.081298][ T6357] netlink: 'syz.1.165': attribute type 9 has an invalid length. [ 122.118673][ T6357] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.165'. [ 122.388494][ T6368] netlink: 'syz.0.169': attribute type 29 has an invalid length. [ 122.547279][ T6370] netlink: 'syz.3.168': attribute type 3 has an invalid length. [ 122.555268][ T6370] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.168'. [ 122.557210][ T6369] netlink: 'syz.0.169': attribute type 6 has an invalid length. [ 122.596458][ T6369] netlink: 140 bytes leftover after parsing attributes in process `syz.0.169'. [ 122.621508][ T6371] IPv6: Can't replace route, no match found [ 123.180615][ T6387] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.174'. [ 124.100996][ T6411] netlink: 'syz.3.182': attribute type 29 has an invalid length. [ 124.189187][ T6411] netlink: 'syz.3.182': attribute type 6 has an invalid length. [ 124.218407][ T6411] netlink: 140 bytes leftover after parsing attributes in process `syz.3.182'. [ 124.262173][ T6412] IPv6: Can't replace route, no match found [ 124.890134][ T6420] delete_channel: no stack [ 125.736191][ T6438] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.191'. [ 125.827450][ T6438] netlink: 'syz.3.191': attribute type 12 has an invalid length. [ 125.835285][ T6438] netlink: 112 bytes leftover after parsing attributes in process `syz.3.191'. [ 126.349680][ T6449] netlink: 'syz.1.195': attribute type 29 has an invalid length. [ 126.370992][ T6451] netlink: 'syz.2.197': attribute type 3 has an invalid length. [ 126.447685][ T6449] netlink: 'syz.1.195': attribute type 6 has an invalid length. [ 126.456553][ T6449] netlink: 140 bytes leftover after parsing attributes in process `syz.1.195'. [ 126.476522][ T6451] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.197'. [ 126.512113][ T6454] IPv6: Can't replace route, no match found [ 126.784705][ T6464] netlink: 40 bytes leftover after parsing attributes in process `syz.0.200'. [ 126.817320][ T6464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.577466][ T6485] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.212'. [ 127.624817][ T6487] validate_nla: 2 callbacks suppressed [ 127.624843][ T6487] netlink: 'syz.3.211': attribute type 8 has an invalid length. [ 127.653903][ T6487] netlink: 182936 bytes leftover after parsing attributes in process `syz.3.211'. [ 128.354621][ T6501] netlink: 'syz.0.215': attribute type 1 has an invalid length. [ 128.602152][ T6504] netlink: 'syz.3.216': attribute type 12 has an invalid length. [ 128.630866][ T6504] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.216'. [ 129.038875][ T6514] netlink: 'syz.1.218': attribute type 10 has an invalid length. [ 130.266856][ T6534] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 130.585147][ T6548] FAULT_INJECTION: forcing a failure. [ 130.585147][ T6548] name failslab, interval 1, probability 0, space 0, times 0 [ 130.611434][ T6548] CPU: 1 PID: 6548 Comm: syz.2.230 Not tainted syzkaller #0 [ 130.618943][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 130.629502][ T6548] Call Trace: [ 130.632917][ T6548] [ 130.636082][ T6548] dump_stack_lvl+0x18c/0x250 [ 130.640916][ T6548] ? show_regs_print_info+0x20/0x20 [ 130.646463][ T6548] ? load_image+0x420/0x420 [ 130.651131][ T6548] ? __might_sleep+0xe0/0xe0 [ 130.655784][ T6548] ? __lock_acquire+0x7d40/0x7d40 [ 130.660890][ T6548] should_fail_ex+0x39d/0x4d0 [ 130.665648][ T6548] should_failslab+0x9/0x20 [ 130.670472][ T6548] slab_pre_alloc_hook+0x59/0x310 [ 130.675641][ T6548] kmem_cache_alloc+0x5a/0x2d0 [ 130.680524][ T6548] ? sk_prot_alloc+0x57/0x210 [ 130.685357][ T6548] sk_prot_alloc+0x57/0x210 [ 130.689972][ T6548] ? sk_alloc+0x24/0x360 [ 130.694269][ T6548] sk_alloc+0x3a/0x360 [ 130.698483][ T6548] inet6_create+0x7f0/0x11d0 [ 130.704646][ T6548] ? inet6_create+0x83/0x11d0 [ 130.709563][ T6548] __sock_create+0x4a6/0x940 [ 130.714357][ T6548] udp_sock_create6+0xd7/0x6b0 [ 130.719259][ T6548] ? inet6_hash+0x80/0x80 [ 130.723724][ T6548] ? __phys_addr+0xba/0x170 [ 130.728256][ T6548] ? __kmalloc_large_node+0x13d/0x1e0 [ 130.734230][ T6548] geneve_sock_add+0x3aa/0x970 [ 130.739719][ T6548] ? geneve_fill_metadata_dst+0x960/0x960 [ 130.745543][ T6548] ? ib_device_get_by_netdev+0x481/0x4f0 [ 130.751203][ T6548] ? ib_device_get_netdev+0x3a0/0x3a0 [ 130.756680][ T6548] ? vxlan_netdevice_event+0x2aa/0x320 [ 130.762282][ T6548] ? ip6_route_dev_notify+0x9a/0x5b0 [ 130.767771][ T6548] ? notifier_call_chain+0x36b/0x380 [ 130.773094][ T6548] geneve_open+0x8c/0x140 [ 130.777546][ T6548] __dev_open+0x2cb/0x430 [ 130.781897][ T6548] ? dev_open+0x190/0x190 [ 130.786252][ T6548] __dev_change_flags+0x211/0x6a0 [ 130.791740][ T6548] ? dev_get_flags+0x1c0/0x1c0 [ 130.796800][ T6548] ? mutex_lock_nested+0x20/0x20 [ 130.801761][ T6548] dev_change_flags+0x88/0x1a0 [ 130.806725][ T6548] dev_ioctl+0x7b4/0x1140 [ 130.811264][ T6548] sock_do_ioctl+0x239/0x310 [ 130.815893][ T6548] ? sock_show_fdinfo+0xb0/0xb0 [ 130.820785][ T6548] sock_ioctl+0x5ba/0x7e0 [ 130.825139][ T6548] ? sock_poll+0x3e0/0x3e0 [ 130.829589][ T6548] ? bpf_lsm_file_ioctl+0x9/0x10 [ 130.834543][ T6548] ? security_file_ioctl+0x80/0xa0 [ 130.839681][ T6548] ? sock_poll+0x3e0/0x3e0 [ 130.844117][ T6548] __se_sys_ioctl+0xfd/0x170 [ 130.848733][ T6548] do_syscall_64+0x55/0xa0 [ 130.853266][ T6548] ? clear_bhb_loop+0x40/0x90 [ 130.858406][ T6548] ? clear_bhb_loop+0x40/0x90 [ 130.863120][ T6548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.869041][ T6548] RIP: 0033:0x7f55fa19cdd9 [ 130.873563][ T6548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.893972][ T6548] RSP: 002b:00007f55fb0c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.902404][ T6548] RAX: ffffffffffffffda RBX: 00007f55fa415fa0 RCX: 00007f55fa19cdd9 [ 130.910911][ T6548] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 0000000000000004 [ 130.919244][ T6548] RBP: 00007f55fb0c5090 R08: 0000000000000000 R09: 0000000000000000 [ 130.927319][ T6548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.935429][ T6548] R13: 00007f55fa416038 R14: 00007f55fa415fa0 R15: 00007ffe2f86ab58 [ 130.943726][ T6548] [ 131.042773][ T6548] geneve1: entered promiscuous mode [ 131.061645][ T6548] geneve1: entered allmulticast mode [ 131.087266][ T6540] netlink: 'syz.0.227': attribute type 10 has an invalid length. [ 132.370585][ T6585] netlink: 'syz.0.238': attribute type 14 has an invalid length. [ 132.408929][ T6585] netlink: 164 bytes leftover after parsing attributes in process `syz.0.238'. [ 133.141020][ T6586] netlink: 'syz.2.242': attribute type 10 has an invalid length. [ 133.172854][ T6586] geneve1: left promiscuous mode [ 133.193785][ T6586] geneve1: left allmulticast mode [ 133.380858][ T6592] FAULT_INJECTION: forcing a failure. [ 133.380858][ T6592] name failslab, interval 1, probability 0, space 0, times 0 [ 133.414237][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.422698][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.462131][ T6592] CPU: 0 PID: 6592 Comm: syz.1.243 Not tainted syzkaller #0 [ 133.469711][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 133.479814][ T6592] Call Trace: [ 133.483143][ T6592] [ 133.486115][ T6592] dump_stack_lvl+0x18c/0x250 [ 133.490856][ T6592] ? show_regs_print_info+0x20/0x20 [ 133.496121][ T6592] ? load_image+0x420/0x420 [ 133.500792][ T6592] ? __might_sleep+0xe0/0xe0 [ 133.505517][ T6592] ? __lock_acquire+0x7d40/0x7d40 [ 133.510937][ T6592] ? trace_raw_output_contention_end+0xd0/0xd0 [ 133.517269][ T6592] should_fail_ex+0x39d/0x4d0 [ 133.522027][ T6592] should_failslab+0x9/0x20 [ 133.526598][ T6592] slab_pre_alloc_hook+0x59/0x310 [ 133.531683][ T6592] ? xdp_umem_create+0x58/0x7a0 [ 133.536681][ T6592] __kmem_cache_alloc_node+0x53/0x250 [ 133.542182][ T6592] ? xdp_umem_create+0x58/0x7a0 [ 133.547057][ T6592] kmalloc_trace+0x2a/0xe0 [ 133.551504][ T6592] xdp_umem_create+0x58/0x7a0 [ 133.556289][ T6592] ? __might_fault+0xc6/0x120 [ 133.561049][ T6592] ? __might_fault+0xaa/0x120 [ 133.565801][ T6592] xsk_setsockopt+0x68c/0x760 [ 133.570524][ T6592] ? xsk_poll+0x680/0x680 [ 133.574891][ T6592] ? __fget_files+0x28/0x4b0 [ 133.579511][ T6592] ? __fget_files+0x28/0x4b0 [ 133.584164][ T6592] ? aa_sock_opt_perm+0x74/0x100 [ 133.589217][ T6592] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 133.594895][ T6592] ? security_socket_setsockopt+0x7e/0xa0 [ 133.600932][ T6592] ? xsk_poll+0x680/0x680 [ 133.606175][ T6592] do_sock_setsockopt+0x175/0x1a0 [ 133.611322][ T6592] ? __fdget+0x180/0x210 [ 133.615588][ T6592] __x64_sys_setsockopt+0x182/0x200 [ 133.620806][ T6592] do_syscall_64+0x55/0xa0 [ 133.626029][ T6592] ? clear_bhb_loop+0x40/0x90 [ 133.630989][ T6592] ? clear_bhb_loop+0x40/0x90 [ 133.635828][ T6592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.641852][ T6592] RIP: 0033:0x7fa867b9cdd9 [ 133.646415][ T6592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.666327][ T6592] RSP: 002b:00007fa8689f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 133.674779][ T6592] RAX: ffffffffffffffda RBX: 00007fa867e15fa0 RCX: 00007fa867b9cdd9 [ 133.682887][ T6592] RDX: 0000000000000004 RSI: 000000000000011b RDI: 000000000000000c [ 133.690877][ T6592] RBP: 00007fa8689f5090 R08: 0000000000000018 R09: 0000000000000000 [ 133.698862][ T6592] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.706939][ T6592] R13: 00007fa867e16038 R14: 00007fa867e15fa0 R15: 00007ffca966cfe8 [ 133.714985][ T6592] [ 133.979649][ T6606] netlink: 180 bytes leftover after parsing attributes in process `syz.3.247'. [ 134.345683][ T6618] geneve1: entered promiscuous mode [ 134.366497][ T6618] geneve1: entered allmulticast mode [ 134.393747][ T6616] netlink: 'syz.1.250': attribute type 16 has an invalid length. [ 134.427131][ T6616] netlink: 168 bytes leftover after parsing attributes in process `syz.1.250'. [ 136.122569][ T6637] netlink: 'syz.3.254': attribute type 10 has an invalid length. [ 137.520733][ T6637] geneve1: left promiscuous mode [ 137.527218][ T6637] geneve1: left allmulticast mode [ 138.229266][ T6645] bridge0: port 3(ip6gretap0) entered blocking state [ 138.254509][ T6645] bridge0: port 3(ip6gretap0) entered disabled state [ 138.293670][ T6645] ip6gretap0: entered allmulticast mode [ 138.331524][ T6645] ip6gretap0: entered promiscuous mode [ 138.353801][ T6645] bridge0: port 3(ip6gretap0) entered blocking state [ 138.362364][ T6645] bridge0: port 3(ip6gretap0) entered forwarding state [ 138.473995][ T6654] ip6gretap0: left allmulticast mode [ 138.480279][ T6654] ip6gretap0: left promiscuous mode [ 138.498441][ T6654] bridge0: port 3(ip6gretap0) entered disabled state [ 138.550176][ T6663] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.264'. [ 141.963564][ T6684] FAULT_INJECTION: forcing a failure. [ 141.963564][ T6684] name failslab, interval 1, probability 0, space 0, times 0 [ 141.976470][ T6684] CPU: 0 PID: 6684 Comm: syz.1.269 Not tainted syzkaller #0 [ 141.983901][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 141.994167][ T6684] Call Trace: [ 141.997587][ T6684] [ 142.000574][ T6684] dump_stack_lvl+0x18c/0x250 [ 142.005412][ T6684] ? show_regs_print_info+0x20/0x20 [ 142.010919][ T6684] ? load_image+0x420/0x420 [ 142.016184][ T6684] ? netdev_core_pick_tx+0x340/0x340 [ 142.021518][ T6684] ? rcu_is_watching+0x15/0xb0 [ 142.026523][ T6684] should_fail_ex+0x39d/0x4d0 [ 142.031418][ T6684] should_failslab+0x9/0x20 [ 142.035991][ T6684] slab_pre_alloc_hook+0x59/0x310 [ 142.041170][ T6684] kmem_cache_alloc+0x5a/0x2d0 [ 142.046073][ T6684] ? skb_clone+0x1eb/0x370 [ 142.050657][ T6684] skb_clone+0x1eb/0x370 [ 142.054949][ T6684] bpf_clone_redirect+0x167/0x4a0 [ 142.060083][ T6684] bpf_prog_b36a1f39e2fdd4f4+0x5e/0x63 [ 142.065675][ T6684] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 142.071806][ T6684] ? perf_trace_preemptirq_template+0xac/0x330 [ 142.078033][ T6684] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 142.084045][ T6684] ? lockdep_softirqs_on+0x580/0x580 [ 142.089371][ T6684] ? lock_chain_count+0x20/0x20 [ 142.094256][ T6684] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 142.100567][ T6684] ? __local_bh_disable_ip+0x108/0x1a0 [ 142.106284][ T6684] ? __cant_sleep+0x220/0x220 [ 142.111297][ T6684] ? __local_bh_enable_ip+0x13a/0x1c0 [ 142.116805][ T6684] ? _local_bh_enable+0xa0/0xa0 [ 142.121788][ T6684] ? bpf_test_timer_continue+0x135/0x380 [ 142.127506][ T6684] ? bpf_test_run+0x174/0x870 [ 142.132385][ T6684] bpf_test_run+0x2df/0x870 [ 142.137160][ T6684] ? bpf_test_run+0x174/0x870 [ 142.141913][ T6684] ? convert___skb_to_skb+0x590/0x590 [ 142.147470][ T6684] ? eth_get_headlen+0x210/0x210 [ 142.152648][ T6684] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 142.158382][ T6684] ? convert___skb_to_skb+0x3d/0x590 [ 142.163817][ T6684] bpf_prog_test_run_skb+0xad2/0x12b0 [ 142.169368][ T6684] ? cpu_online+0x60/0x60 [ 142.173787][ T6684] bpf_prog_test_run+0x321/0x390 [ 142.178825][ T6684] __sys_bpf+0x49d/0x890 [ 142.183208][ T6684] ? bpf_link_show_fdinfo+0x390/0x390 [ 142.189096][ T6684] ? lock_chain_count+0x20/0x20 [ 142.194041][ T6684] __x64_sys_bpf+0x7c/0x90 [ 142.198550][ T6684] do_syscall_64+0x55/0xa0 [ 142.203028][ T6684] ? clear_bhb_loop+0x40/0x90 [ 142.207837][ T6684] ? clear_bhb_loop+0x40/0x90 [ 142.212644][ T6684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.218749][ T6684] RIP: 0033:0x7fa867b9cdd9 [ 142.223209][ T6684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.243031][ T6684] RSP: 002b:00007fa8689f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.251555][ T6684] RAX: ffffffffffffffda RBX: 00007fa867e15fa0 RCX: 00007fa867b9cdd9 [ 142.259667][ T6684] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a [ 142.267684][ T6684] RBP: 00007fa8689f5090 R08: 0000000000000000 R09: 0000000000000000 [ 142.275779][ T6684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.283789][ T6684] R13: 00007fa867e16038 R14: 00007fa867e15fa0 R15: 00007ffca966cfe8 [ 142.291958][ T6684] [ 142.354150][ T6677] netlink: 'syz.3.267': attribute type 10 has an invalid length. [ 142.789237][ T6696] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.273'. [ 142.839820][ T6696] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 142.855765][ T6696] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 142.885382][ T6696] netlink: 'syz.2.273': attribute type 1 has an invalid length. [ 142.923716][ T6696] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.273'. [ 143.336208][ T6703] netlink: 'syz.2.275': attribute type 29 has an invalid length. [ 143.558918][ T6701] netlink: 'syz.2.275': attribute type 6 has an invalid length. [ 143.570620][ T6701] netlink: 140 bytes leftover after parsing attributes in process `syz.2.275'. [ 143.616589][ T6703] IPv6: Can't replace route, no match found [ 144.661492][ T6715] netlink: 'syz.3.279': attribute type 10 has an invalid length. [ 145.283173][ T6717] netlink: 'syz.3.280': attribute type 10 has an invalid length. [ 146.732051][ T6723] netlink: 206468 bytes leftover after parsing attributes in process `syz.2.282'. [ 146.765320][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 147.995842][ T6747] netlink: 'syz.0.289': attribute type 29 has an invalid length. [ 148.084111][ T6752] netlink: 'syz.1.291': attribute type 10 has an invalid length. [ 148.249147][ T6752] team0 (unregistering): Port device team_slave_0 removed [ 148.273178][ T6752] team0 (unregistering): Port device team_slave_1 removed [ 148.285083][ T6752] team0 (unregistering): Port device geneve1 removed [ 148.308467][ T6744] netlink: 'syz.0.289': attribute type 6 has an invalid length. [ 148.329925][ T6744] netlink: 140 bytes leftover after parsing attributes in process `syz.0.289'. [ 148.342260][ T6745] netlink: 'syz.2.288': attribute type 10 has an invalid length. [ 148.529691][ T6757] netlink: 822 bytes leftover after parsing attributes in process `syz.3.292'. [ 148.546089][ T6757] veth0_to_bond: invalid flags given to default FDB implementation [ 148.586574][ T6747] IPv6: Can't replace route, no match found [ 148.934981][ T6766] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.295'. [ 152.486340][ T6782] netlink: 'syz.2.302': attribute type 10 has an invalid length. [ 152.509114][ T6782] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 152.561040][ T6783] netlink: 'syz.0.300': attribute type 10 has an invalid length. [ 152.671189][ T6783] bridge0: port 3(team0) entered disabled state [ 152.678490][ T6783] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.686710][ T6783] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.768241][ T6783] bridge0: port 3(team0) entered blocking state [ 152.774831][ T6783] bridge0: port 3(team0) entered forwarding state [ 152.781876][ T6783] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.789126][ T6783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.796955][ T6783] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.804350][ T6783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.874015][ T6783] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 152.941706][ T6786] netlink: 'syz.1.303': attribute type 29 has an invalid length. [ 152.998152][ T6792] netlink: 'syz.1.303': attribute type 6 has an invalid length. [ 153.018781][ T6792] netlink: 140 bytes leftover after parsing attributes in process `syz.1.303'. [ 153.089504][ T6788] IPv6: Can't replace route, no match found [ 153.208698][ T6796] netlink: 'syz.3.301': attribute type 10 has an invalid length. [ 153.840400][ T6803] netlink: 'syz.2.307': attribute type 29 has an invalid length. [ 154.024056][ T6803] netlink: 'syz.2.307': attribute type 6 has an invalid length. [ 154.062517][ T6803] netlink: 140 bytes leftover after parsing attributes in process `syz.2.307'. [ 154.105484][ T6805] IPv6: Can't replace route, no match found [ 154.379067][ T6810] netlink: 'syz.0.310': attribute type 29 has an invalid length. [ 154.602033][ T6810] netlink: 'syz.0.310': attribute type 6 has an invalid length. [ 154.641544][ T6810] netlink: 140 bytes leftover after parsing attributes in process `syz.0.310'. [ 154.665516][ T6811] IPv6: Can't replace route, no match found [ 154.747786][ T6817] FAULT_INJECTION: forcing a failure. [ 154.747786][ T6817] name failslab, interval 1, probability 0, space 0, times 0 [ 154.761367][ T6817] CPU: 1 PID: 6817 Comm: syz.2.312 Not tainted syzkaller #0 [ 154.768796][ T6817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 154.778898][ T6817] Call Trace: [ 154.782299][ T6817] [ 154.785266][ T6817] dump_stack_lvl+0x18c/0x250 [ 154.790005][ T6817] ? show_regs_print_info+0x20/0x20 [ 154.795255][ T6817] ? load_image+0x420/0x420 [ 154.799816][ T6817] ? __kmem_cache_alloc_node+0x13a/0x250 [ 154.805590][ T6817] ? netdev_core_pick_tx+0x340/0x340 [ 154.811286][ T6817] should_fail_ex+0x39d/0x4d0 [ 154.816127][ T6817] should_failslab+0x9/0x20 [ 154.820868][ T6817] slab_pre_alloc_hook+0x59/0x310 [ 154.825952][ T6817] kmem_cache_alloc+0x5a/0x2d0 [ 154.830776][ T6817] ? skb_clone+0x1eb/0x370 [ 154.835418][ T6817] skb_clone+0x1eb/0x370 [ 154.839715][ T6817] bpf_clone_redirect+0x167/0x4a0 [ 154.844920][ T6817] bpf_prog_5e3b4e18def6d727+0x5e/0x63 [ 154.850515][ T6817] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 154.856637][ T6817] ? perf_trace_preemptirq_template+0xac/0x330 [ 154.863182][ T6817] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 154.869293][ T6817] ? lockdep_softirqs_on+0x580/0x580 [ 154.874699][ T6817] ? lock_chain_count+0x20/0x20 [ 154.879571][ T6817] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 154.885863][ T6817] ? __local_bh_disable_ip+0x108/0x1a0 [ 154.891357][ T6817] ? __cant_sleep+0x220/0x220 [ 154.896085][ T6817] ? __local_bh_enable_ip+0x13a/0x1c0 [ 154.901471][ T6817] ? _local_bh_enable+0xa0/0xa0 [ 154.906349][ T6817] ? bpf_test_timer_continue+0x135/0x380 [ 154.912202][ T6817] ? bpf_test_run+0x174/0x870 [ 154.917261][ T6817] bpf_test_run+0x2df/0x870 [ 154.921824][ T6817] ? bpf_test_run+0x174/0x870 [ 154.926872][ T6817] ? convert___skb_to_skb+0x590/0x590 [ 154.932371][ T6817] ? eth_get_headlen+0x210/0x210 [ 154.937342][ T6817] ? slab_build_skb+0x25f/0x3f0 [ 154.942205][ T6817] ? convert___skb_to_skb+0x3d/0x590 [ 154.947560][ T6817] bpf_prog_test_run_skb+0xad2/0x12b0 [ 154.953149][ T6817] ? cpu_online+0x60/0x60 [ 154.957758][ T6817] bpf_prog_test_run+0x321/0x390 [ 154.963002][ T6817] __sys_bpf+0x49d/0x890 [ 154.967380][ T6817] ? bpf_link_show_fdinfo+0x390/0x390 [ 154.972990][ T6817] ? lock_chain_count+0x20/0x20 [ 154.978037][ T6817] __x64_sys_bpf+0x7c/0x90 [ 154.982465][ T6817] do_syscall_64+0x55/0xa0 [ 154.986904][ T6817] ? clear_bhb_loop+0x40/0x90 [ 154.991869][ T6817] ? clear_bhb_loop+0x40/0x90 [ 154.996675][ T6817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.002757][ T6817] RIP: 0033:0x7f55fa19cdd9 [ 155.007194][ T6817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.027152][ T6817] RSP: 002b:00007f55fb0a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.035694][ T6817] RAX: ffffffffffffffda RBX: 00007f55fa416090 RCX: 00007f55fa19cdd9 [ 155.043882][ T6817] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 155.052328][ T6817] RBP: 00007f55fb0a4090 R08: 0000000000000000 R09: 0000000000000000 [ 155.060324][ T6817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.068401][ T6817] R13: 00007f55fa416128 R14: 00007f55fa416090 R15: 00007ffe2f86ab58 [ 155.076759][ T6817] [ 157.020127][ T6824] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.314'. [ 157.040553][ T6821] netlink: 'syz.1.313': attribute type 4 has an invalid length. [ 157.064715][ T6821] netlink: 132 bytes leftover after parsing attributes in process `syz.1.313'. [ 157.281140][ T6820] delete_channel: no stack [ 157.994218][ T6848] netlink: 830 bytes leftover after parsing attributes in process `syz.3.323'. [ 158.202869][ T6850] netlink: 'syz.2.324': attribute type 29 has an invalid length. [ 158.505785][ T6845] netlink: 'syz.2.324': attribute type 6 has an invalid length. [ 158.546135][ T6845] netlink: 140 bytes leftover after parsing attributes in process `syz.2.324'. [ 158.577552][ T6854] FAULT_INJECTION: forcing a failure. [ 158.577552][ T6854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.609243][ T6850] IPv6: Can't replace route, no match found [ 158.616621][ T6854] CPU: 1 PID: 6854 Comm: syz.3.325 Not tainted syzkaller #0 [ 158.623990][ T6854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 158.634256][ T6854] Call Trace: [ 158.637575][ T6854] [ 158.640544][ T6854] dump_stack_lvl+0x18c/0x250 [ 158.645280][ T6854] ? show_regs_print_info+0x20/0x20 [ 158.650629][ T6854] ? load_image+0x420/0x420 [ 158.655351][ T6854] ? __might_fault+0xaa/0x120 [ 158.660155][ T6854] ? __lock_acquire+0x7d40/0x7d40 [ 158.665231][ T6854] should_fail_ex+0x39d/0x4d0 [ 158.670129][ T6854] _copy_from_user+0x2f/0xe0 [ 158.674974][ T6854] ___sys_sendmsg+0x1c7/0x360 [ 158.679876][ T6854] ? get_pid_task+0x20/0x1e0 [ 158.684521][ T6854] ? __sys_sendmsg+0x2a0/0x2a0 [ 158.689386][ T6854] ? __lock_acquire+0x7d40/0x7d40 [ 158.694536][ T6854] __se_sys_sendmsg+0x1c2/0x2b0 [ 158.699540][ T6854] ? __x64_sys_sendmsg+0x80/0x80 [ 158.704647][ T6854] ? lockdep_hardirqs_on+0x98/0x150 [ 158.709982][ T6854] do_syscall_64+0x55/0xa0 [ 158.714517][ T6854] ? clear_bhb_loop+0x40/0x90 [ 158.719548][ T6854] ? clear_bhb_loop+0x40/0x90 [ 158.724441][ T6854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.730457][ T6854] RIP: 0033:0x7f01c799cdd9 [ 158.734993][ T6854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.755183][ T6854] RSP: 002b:00007f01c8949028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.763734][ T6854] RAX: ffffffffffffffda RBX: 00007f01c7c15fa0 RCX: 00007f01c799cdd9 [ 158.771915][ T6854] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000005 [ 158.779929][ T6854] RBP: 00007f01c8949090 R08: 0000000000000000 R09: 0000000000000000 [ 158.788024][ T6854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.796127][ T6854] R13: 00007f01c7c16038 R14: 00007f01c7c15fa0 R15: 00007ffee1123d78 [ 158.804353][ T6854] [ 158.882999][ T6842] netlink: 'syz.1.321': attribute type 10 has an invalid length. [ 158.910656][ T6842] netlink: 40 bytes leftover after parsing attributes in process `syz.1.321'. [ 158.952595][ T6842] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 158.982545][ T6842] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.060870][ T6842] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 159.446655][ T6860] netlink: 'syz.3.326': attribute type 21 has an invalid length. [ 159.454740][ T6860] netlink: 'syz.3.326': attribute type 1 has an invalid length. [ 159.509142][ T6859] netlink: 'syz.2.327': attribute type 39 has an invalid length. [ 159.932238][ T6872] netlink: 'syz.0.330': attribute type 29 has an invalid length. [ 160.106261][ T6871] netlink: 'syz.0.330': attribute type 6 has an invalid length. [ 160.119712][ T6871] netlink: 140 bytes leftover after parsing attributes in process `syz.0.330'. [ 160.213980][ T6872] IPv6: Can't replace route, no match found [ 161.215255][ T6885] netlink: 16182 bytes leftover after parsing attributes in process `syz.1.335'. [ 161.317925][ T6885] netlink: 'syz.1.335': attribute type 3 has an invalid length. [ 161.329058][ T6885] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.335'. [ 161.603111][ T6894] netlink: 'syz.1.336': attribute type 29 has an invalid length. [ 161.864459][ T6896] netlink: 14 bytes leftover after parsing attributes in process `syz.3.339'. [ 161.900709][ T6889] netlink: 140 bytes leftover after parsing attributes in process `syz.1.336'. [ 162.016298][ T6889] IPv6: Can't replace route, no match found [ 162.670604][ T6893] netlink: 40 bytes leftover after parsing attributes in process `syz.0.338'. [ 162.774637][ T6893] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 162.824157][ T6893] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.953492][ T6893] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 163.695930][ T6922] validate_nla: 4 callbacks suppressed [ 163.695954][ T6922] netlink: 'syz.3.346': attribute type 29 has an invalid length. [ 163.766361][ T6922] netlink: 'syz.3.346': attribute type 29 has an invalid length. [ 164.052040][ T6922] netlink: 'syz.3.346': attribute type 29 has an invalid length. [ 164.427980][ T6923] netlink: 'syz.3.346': attribute type 29 has an invalid length. [ 164.452858][ T6924] netlink: 'syz.1.344': attribute type 29 has an invalid length. [ 164.477002][ T6925] netlink: 'syz.1.344': attribute type 6 has an invalid length. [ 164.485637][ T6925] netlink: 140 bytes leftover after parsing attributes in process `syz.1.344'. [ 164.531585][ T6924] IPv6: Can't replace route, no match found [ 164.687736][ T6922] netlink: 830 bytes leftover after parsing attributes in process `syz.3.346'. [ 164.763587][ T6923] netlink: 'syz.3.346': attribute type 29 has an invalid length. [ 166.419275][ T6936] netlink: 'syz.1.351': attribute type 3 has an invalid length. [ 166.435392][ T6936] netlink: 132 bytes leftover after parsing attributes in process `syz.1.351'. [ 166.798658][ T6943] netlink: 'syz.0.353': attribute type 21 has an invalid length. [ 166.809452][ T6943] netlink: 'syz.0.353': attribute type 1 has an invalid length. [ 167.525722][ T6946] netlink: 16182 bytes leftover after parsing attributes in process `syz.3.355'. [ 167.594897][ T6951] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.355'. [ 167.666660][ T6938] netlink: 40 bytes leftover after parsing attributes in process `syz.2.352'. [ 167.692557][ T6938] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 167.714377][ T6938] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.755228][ T6938] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 168.371439][ T6954] netlink: 140 bytes leftover after parsing attributes in process `syz.1.356'. [ 168.397092][ T6954] IPv6: Can't replace route, no match found [ 172.797473][ T6990] validate_nla: 5 callbacks suppressed [ 172.797495][ T6990] netlink: 'syz.2.367': attribute type 21 has an invalid length. [ 172.941616][ T6990] netlink: 'syz.2.367': attribute type 1 has an invalid length. [ 173.219655][ T6986] netlink: 'syz.3.368': attribute type 10 has an invalid length. [ 173.305291][ T6986] netlink: 40 bytes leftover after parsing attributes in process `syz.3.368'. [ 173.407061][ T6986] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 173.490545][ T6986] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.568012][ T6986] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 174.050272][ T7004] netlink: 'syz.3.371': attribute type 29 has an invalid length. [ 174.915704][ T7001] netlink: 'syz.3.371': attribute type 6 has an invalid length. [ 174.967111][ T7001] netlink: 140 bytes leftover after parsing attributes in process `syz.3.371'. [ 175.019380][ T7004] IPv6: Can't replace route, no match found [ 175.154513][ T7015] netlink: 'syz.0.377': attribute type 10 has an invalid length. [ 175.174574][ T7015] netlink: 40 bytes leftover after parsing attributes in process `syz.0.377'. [ 175.414205][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.379'. [ 177.559422][ T7048] netlink: 'syz.0.389': attribute type 29 has an invalid length. [ 177.717483][ T7048] netlink: 'syz.0.389': attribute type 6 has an invalid length. [ 177.786809][ T7048] netlink: 140 bytes leftover after parsing attributes in process `syz.0.389'. [ 177.862085][ T7052] IPv6: Can't replace route, no match found [ 178.965402][ T7064] netlink: 'syz.0.393': attribute type 4 has an invalid length. [ 178.991161][ T7065] sctp: [Deprecated]: syz.1.396 (pid 7065) Use of int in max_burst socket option deprecated. [ 178.991161][ T7065] Use struct sctp_assoc_value instead [ 179.019988][ T7064] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.393'. [ 180.336243][ T7085] netlink: 'syz.3.401': attribute type 17 has an invalid length. [ 180.360443][ T7085] netlink: 152 bytes leftover after parsing attributes in process `syz.3.401'. [ 180.394761][ T7085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.884219][ T7099] netlink: 'syz.2.406': attribute type 3 has an invalid length. [ 180.936057][ T7099] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.406'. [ 181.317504][ T7109] netlink: 'syz.3.409': attribute type 21 has an invalid length. [ 181.374459][ T7109] netlink: 128 bytes leftover after parsing attributes in process `syz.3.409'. [ 181.615312][ T7109] netlink: 3 bytes leftover after parsing attributes in process `syz.3.409'. [ 181.755765][ T7116] netlink: 'syz.2.411': attribute type 33 has an invalid length. [ 181.793417][ T7116] netlink: 152 bytes leftover after parsing attributes in process `syz.2.411'. [ 183.764870][ T7128] FAULT_INJECTION: forcing a failure. [ 183.764870][ T7128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.781182][ T7128] CPU: 1 PID: 7128 Comm: syz.1.413 Not tainted syzkaller #0 [ 183.788734][ T7128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 183.798950][ T7128] Call Trace: [ 183.802259][ T7128] [ 183.805298][ T7128] dump_stack_lvl+0x18c/0x250 [ 183.810105][ T7128] ? show_regs_print_info+0x20/0x20 [ 183.815414][ T7128] ? load_image+0x420/0x420 [ 183.819952][ T7128] ? __might_fault+0xaa/0x120 [ 183.824656][ T7128] should_fail_ex+0x39d/0x4d0 [ 183.829847][ T7128] copyin+0x1a/0x90 [ 183.834279][ T7128] _copy_from_iter+0x54f/0x12e0 [ 183.839349][ T7128] ? slab_post_alloc_hook+0x8a/0x4b0 [ 183.844757][ T7128] ? __virt_addr_valid+0x18c/0x540 [ 183.850522][ T7128] ? copyout_mc+0x70/0x70 [ 183.854887][ T7128] ? __virt_addr_valid+0x18c/0x540 [ 183.860523][ T7128] ? __virt_addr_valid+0x18c/0x540 [ 183.865682][ T7128] ? __virt_addr_valid+0x469/0x540 [ 183.870964][ T7128] ? __check_object_size+0x506/0xa20 [ 183.876504][ T7128] netlink_sendmsg+0x76b/0xbf0 [ 183.881560][ T7128] ? netlink_getsockopt+0x590/0x590 [ 183.886963][ T7128] ? aa_sock_msg_perm+0x94/0x150 [ 183.892098][ T7128] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 183.897507][ T7128] ? security_socket_sendmsg+0x80/0xa0 [ 183.903156][ T7128] ? netlink_getsockopt+0x590/0x590 [ 183.909168][ T7128] ____sys_sendmsg+0x5ba/0x960 [ 183.913954][ T7128] ? __asan_memset+0x22/0x40 [ 183.918739][ T7128] ? __sys_sendmsg_sock+0x30/0x30 [ 183.923782][ T7128] ? __import_iovec+0x3fa/0x850 [ 183.929087][ T7128] ? import_iovec+0x73/0xa0 [ 183.934149][ T7128] ___sys_sendmsg+0x2a6/0x360 [ 183.938934][ T7128] ? get_pid_task+0x20/0x1e0 [ 183.943901][ T7128] ? __sys_sendmsg+0x2a0/0x2a0 [ 183.948796][ T7128] ? __lock_acquire+0x7d40/0x7d40 [ 183.953947][ T7128] __se_sys_sendmsg+0x1c2/0x2b0 [ 183.959089][ T7128] ? __x64_sys_sendmsg+0x80/0x80 [ 183.964219][ T7128] ? lockdep_hardirqs_on+0x98/0x150 [ 183.969486][ T7128] do_syscall_64+0x55/0xa0 [ 183.974042][ T7128] ? clear_bhb_loop+0x40/0x90 [ 183.978749][ T7128] ? clear_bhb_loop+0x40/0x90 [ 183.983545][ T7128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.989669][ T7128] RIP: 0033:0x7fa867b9cdd9 [ 183.994111][ T7128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.014269][ T7128] RSP: 002b:00007fa8689d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.022798][ T7128] RAX: ffffffffffffffda RBX: 00007fa867e16090 RCX: 00007fa867b9cdd9 [ 184.031251][ T7128] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 184.039498][ T7128] RBP: 00007fa8689d4090 R08: 0000000000000000 R09: 0000000000000000 [ 184.047488][ T7128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.055780][ T7128] R13: 00007fa867e16128 R14: 00007fa867e16090 R15: 00007ffca966cfe8 [ 184.063793][ T7128] [ 184.631582][ T7136] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 184.741530][ T7141] FAULT_INJECTION: forcing a failure. [ 184.741530][ T7141] name failslab, interval 1, probability 0, space 0, times 0 [ 184.757953][ T7141] CPU: 1 PID: 7141 Comm: syz.1.417 Not tainted syzkaller #0 [ 184.766019][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 184.776222][ T7141] Call Trace: [ 184.779536][ T7141] [ 184.782659][ T7141] dump_stack_lvl+0x18c/0x250 [ 184.787368][ T7141] ? show_regs_print_info+0x20/0x20 [ 184.792614][ T7141] ? load_image+0x420/0x420 [ 184.797159][ T7141] ? __lock_acquire+0x7d40/0x7d40 [ 184.802213][ T7141] should_fail_ex+0x39d/0x4d0 [ 184.807009][ T7141] should_failslab+0x9/0x20 [ 184.811620][ T7141] slab_pre_alloc_hook+0x59/0x310 [ 184.816939][ T7141] ? sctp_stream_init_ext+0x57/0x170 [ 184.822415][ T7141] __kmem_cache_alloc_node+0x53/0x250 [ 184.827848][ T7141] ? sctp_stream_init_ext+0x57/0x170 [ 184.833236][ T7141] kmalloc_trace+0x2a/0xe0 [ 184.838053][ T7141] sctp_stream_init_ext+0x57/0x170 [ 184.843223][ T7141] sctp_sendmsg_to_asoc+0x1324/0x1830 [ 184.848670][ T7141] ? __asan_memcpy+0x40/0x70 [ 184.853291][ T7141] ? sctp_assoc_set_primary+0x249/0x340 [ 184.859436][ T7141] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 184.865194][ T7141] ? sctp_connect_new_asoc+0x404/0x6a0 [ 184.870802][ T7141] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 184.876656][ T7141] ? __sctp_connect+0xd80/0xd80 [ 184.881616][ T7141] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 184.887225][ T7141] ? security_sctp_bind_connect+0x89/0xb0 [ 184.892976][ T7141] sctp_sendmsg+0x1b83/0x28c0 [ 184.897779][ T7141] ? sctp_getsockopt+0xb60/0xb60 [ 184.902908][ T7141] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 184.909259][ T7141] ? lockdep_hardirqs_on+0x98/0x150 [ 184.914660][ T7141] ? sock_rps_record_flow+0x19/0x3f0 [ 184.919967][ T7141] ? inet_sendmsg+0xe9/0x2f0 [ 184.924680][ T7141] ? inet_send_prepare+0x260/0x260 [ 184.929820][ T7141] ____sys_sendmsg+0x5ba/0x960 [ 184.934650][ T7141] ? __asan_memset+0x22/0x40 [ 184.939576][ T7141] ? __sys_sendmsg_sock+0x30/0x30 [ 184.944612][ T7141] ? __import_iovec+0x5f2/0x850 [ 184.949663][ T7141] ? import_iovec+0x73/0xa0 [ 184.954464][ T7141] ___sys_sendmsg+0x2a6/0x360 [ 184.959623][ T7141] ? __sys_sendmsg+0x2a0/0x2a0 [ 184.964633][ T7141] __se_sys_sendmsg+0x1c2/0x2b0 [ 184.969861][ T7141] ? __x64_sys_sendmsg+0x80/0x80 [ 184.975095][ T7141] ? syscall_enter_from_user_mode+0x2e/0x80 [ 184.981303][ T7141] do_syscall_64+0x55/0xa0 [ 184.985733][ T7141] ? clear_bhb_loop+0x40/0x90 [ 184.990605][ T7141] ? clear_bhb_loop+0x40/0x90 [ 184.995507][ T7141] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.001417][ T7141] RIP: 0033:0x7fa867b9cdd9 [ 185.005981][ T7141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.026224][ T7141] RSP: 002b:00007fa8689f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.034929][ T7141] RAX: ffffffffffffffda RBX: 00007fa867e15fa0 RCX: 00007fa867b9cdd9 [ 185.043212][ T7141] RDX: 0000000004000810 RSI: 0000200000000980 RDI: 0000000000000005 [ 185.051327][ T7141] RBP: 00007fa8689f5090 R08: 0000000000000000 R09: 0000000000000000 [ 185.059328][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.067413][ T7141] R13: 00007fa867e16038 R14: 00007fa867e15fa0 R15: 00007ffca966cfe8 [ 185.075479][ T7141] [ 185.667988][ T7151] netlink: 'syz.2.419': attribute type 21 has an invalid length. [ 186.365389][ T7161] netlink: 'syz.1.424': attribute type 10 has an invalid length. [ 186.407127][ T7161] netlink: 40 bytes leftover after parsing attributes in process `syz.1.424'. [ 187.173420][ T7174] netlink: 60 bytes leftover after parsing attributes in process `syz.2.428'. [ 187.291539][ T7174] netlink: 60 bytes leftover after parsing attributes in process `syz.2.428'. [ 187.439979][ T7193] netlink: 60 bytes leftover after parsing attributes in process `syz.2.428'. [ 190.434797][ T7219] netlink: 830 bytes leftover after parsing attributes in process `syz.1.443'. [ 191.938235][ T7235] netlink: 'syz.1.448': attribute type 29 has an invalid length. [ 192.040990][ T7235] IPv6: Can't replace route, no match found [ 192.440420][ T7238] netlink: 'syz.2.441': attribute type 21 has an invalid length. [ 192.467334][ T7238] netlink: 128 bytes leftover after parsing attributes in process `syz.2.441'. [ 192.493302][ T7238] netlink: 3 bytes leftover after parsing attributes in process `syz.2.441'. [ 194.524139][ T7258] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 194.844973][ T7271] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.459'. [ 194.937161][ T7271] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 194.965322][ T7271] CPU: 0 PID: 7271 Comm: syz.0.459 Not tainted syzkaller #0 [ 194.972890][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.983076][ T7271] Call Trace: [ 194.986407][ T7271] [ 194.989758][ T7271] dump_stack_lvl+0x18c/0x250 [ 194.994528][ T7271] ? show_regs_print_info+0x20/0x20 [ 194.999932][ T7271] ? load_image+0x420/0x420 [ 195.004779][ T7271] sysfs_warn_dup+0x8e/0xa0 [ 195.009531][ T7271] sysfs_do_create_link_sd+0xc0/0x110 [ 195.014990][ T7271] device_add_class_symlinks+0x1cf/0x240 [ 195.020703][ T7271] device_add+0x507/0xc20 [ 195.025086][ T7271] wiphy_register+0x1dad/0x2ae0 [ 195.030337][ T7271] ? cfg80211_event_work+0x40/0x40 [ 195.035485][ T7271] ? minstrel_ht_alloc+0x88a/0x990 [ 195.040748][ T7271] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 195.046953][ T7271] ieee80211_register_hw+0x3464/0x4250 [ 195.052473][ T7271] ? ieee80211_tasklet_handler+0x20/0x20 [ 195.058399][ T7271] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 195.064556][ T7271] ? __debug_object_init+0xec/0x450 [ 195.070027][ T7271] ? __asan_memset+0x22/0x40 [ 195.074662][ T7271] ? __hrtimer_init+0x186/0x270 [ 195.079568][ T7271] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 195.085361][ T7271] ? mac80211_hwsim_free+0x220/0x220 [ 195.090679][ T7271] ? rcu_is_watching+0x15/0xb0 [ 195.095498][ T7271] ? kstrndup+0xbd/0x140 [ 195.099964][ T7271] hwsim_new_radio_nl+0xdc9/0x1a90 [ 195.105256][ T7271] ? __nla_validate+0x50/0x50 [ 195.110244][ T7271] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 195.116624][ T7271] ? __nla_parse+0x40/0x50 [ 195.121081][ T7271] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 195.127456][ T7271] genl_family_rcv_msg_doit+0x211/0x310 [ 195.133128][ T7271] ? end_current_label_crit_section+0x170/0x170 [ 195.139416][ T7271] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 195.145453][ T7271] ? bpf_lsm_capable+0x9/0x10 [ 195.150169][ T7271] ? security_capable+0x89/0xb0 [ 195.155155][ T7271] genl_rcv_msg+0x619/0x7a0 [ 195.159785][ T7271] ? genl_bind+0x360/0x360 [ 195.164420][ T7271] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 195.171019][ T7271] ? ref_tracker_free+0x690/0x840 [ 195.176116][ T7271] netlink_rcv_skb+0x241/0x4d0 [ 195.181016][ T7271] ? genl_bind+0x360/0x360 [ 195.185464][ T7271] ? netlink_ack+0x1180/0x1180 [ 195.190280][ T7271] ? __lock_acquire+0x7d40/0x7d40 [ 195.195465][ T7271] ? down_read+0x1ac/0x2e0 [ 195.199961][ T7271] genl_rcv+0x28/0x40 [ 195.204095][ T7271] netlink_unicast+0x751/0x8d0 [ 195.208928][ T7271] netlink_sendmsg+0x8d0/0xbf0 [ 195.213846][ T7271] ? netlink_getsockopt+0x590/0x590 [ 195.219192][ T7271] ? aa_sock_msg_perm+0x94/0x150 [ 195.224351][ T7271] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 195.229835][ T7271] ? security_socket_sendmsg+0x80/0xa0 [ 195.235332][ T7271] ? netlink_getsockopt+0x590/0x590 [ 195.240580][ T7271] ____sys_sendmsg+0x5ba/0x960 [ 195.245486][ T7271] ? __asan_memset+0x22/0x40 [ 195.250208][ T7271] ? __sys_sendmsg_sock+0x30/0x30 [ 195.255348][ T7271] ? __import_iovec+0x5f2/0x850 [ 195.260360][ T7271] ? import_iovec+0x73/0xa0 [ 195.265000][ T7271] ___sys_sendmsg+0x2a6/0x360 [ 195.269987][ T7271] ? __sys_sendmsg+0x2a0/0x2a0 [ 195.274913][ T7271] ? debug_mutex_init+0x38/0x70 [ 195.279838][ T7271] __se_sys_sendmsg+0x1c2/0x2b0 [ 195.284908][ T7271] ? __x64_sys_sendmsg+0x80/0x80 [ 195.290089][ T7271] ? lockdep_hardirqs_on+0x98/0x150 [ 195.295343][ T7271] do_syscall_64+0x55/0xa0 [ 195.297471][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.300230][ T7271] ? clear_bhb_loop+0x40/0x90 [ 195.306849][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.311252][ T7271] ? clear_bhb_loop+0x40/0x90 [ 195.322384][ T7271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.328365][ T7271] RIP: 0033:0x7fcf85f9cdd9 [ 195.332953][ T7271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.353381][ T7271] RSP: 002b:00007fcf86e98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.361878][ T7271] RAX: ffffffffffffffda RBX: 00007fcf86215fa0 RCX: 00007fcf85f9cdd9 [ 195.369921][ T7271] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 195.378034][ T7271] RBP: 00007fcf86032d69 R08: 0000000000000000 R09: 0000000000000000 [ 195.386091][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.394129][ T7271] R13: 00007fcf86216038 R14: 00007fcf86215fa0 R15: 00007ffca307ffe8 [ 195.402365][ T7271] [ 195.523789][ T7272] netlink: 'syz.2.458': attribute type 29 has an invalid length. [ 195.543366][ T7275] IPv6: Can't replace route, no match found [ 195.933524][ T7278] netlink: 'syz.0.461': attribute type 29 has an invalid length. [ 196.035492][ T7278] netlink: 'syz.0.461': attribute type 6 has an invalid length. [ 196.044258][ T7278] netlink: 140 bytes leftover after parsing attributes in process `syz.0.461'. [ 196.057357][ T7278] IPv6: Can't replace route, no match found [ 198.219484][ T7286] netlink: 'syz.3.463': attribute type 21 has an invalid length. [ 198.263001][ T7286] netlink: 132 bytes leftover after parsing attributes in process `syz.3.463'. [ 200.462767][ T7304] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.470'. [ 201.133172][ T7310] netlink: 'syz.1.472': attribute type 10 has an invalid length. [ 201.142351][ T7310] netlink: 2 bytes leftover after parsing attributes in process `syz.1.472'. [ 202.047090][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 202.053412][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 202.059726][ T5085] Bluetooth: hci1: command 0x0406 tx timeout [ 202.061432][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 202.464271][ T7312] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 206.490882][ T7346] netlink: 'syz.3.482': attribute type 1 has an invalid length. [ 208.464618][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 211.822759][ T7381] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 211.842960][ T7381] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 211.933786][ T7383] netlink: 'syz.3.496': attribute type 9 has an invalid length. [ 212.097147][ T7397] netlink: 'syz.2.500': attribute type 29 has an invalid length. [ 212.269516][ T7397] netlink: 'syz.2.500': attribute type 6 has an invalid length. [ 212.304243][ T7397] netlink: 140 bytes leftover after parsing attributes in process `syz.2.500'. [ 212.318007][ T7399] netlink: 'syz.1.499': attribute type 6 has an invalid length. [ 212.325834][ T7399] netlink: 140 bytes leftover after parsing attributes in process `syz.1.499'. [ 212.408350][ T7398] IPv6: Can't replace route, no match found [ 212.603575][ T7397] IPv6: Can't replace route, no match found [ 216.021807][ T7438] netlink: 'syz.0.512': attribute type 29 has an invalid length. [ 216.194609][ T7438] netlink: 'syz.0.512': attribute type 6 has an invalid length. [ 216.204589][ T7438] netlink: 140 bytes leftover after parsing attributes in process `syz.0.512'. [ 216.222713][ T7438] IPv6: Can't replace route, no match found [ 216.772948][ T7451] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.518'. [ 219.703359][ T7470] netlink: 'syz.2.522': attribute type 29 has an invalid length. [ 219.810941][ T7469] IPv6: Can't replace route, no match found [ 221.575629][ T7499] IPv6: Can't replace route, no match found [ 224.240255][ T7515] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.538'. [ 224.287067][ T7517] lo: entered allmulticast mode [ 225.295749][ T7530] lo: entered promiscuous mode [ 225.301325][ T7530] lo: left allmulticast mode [ 225.713838][ T7539] netlink: 'syz.1.545': attribute type 29 has an invalid length. [ 225.893415][ T7539] IPv6: Can't replace route, no match found [ 228.911058][ T7558] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 229.746547][ T7564] lo: entered allmulticast mode [ 231.890346][ T7564] lo: entered promiscuous mode [ 231.904075][ T7564] lo: left allmulticast mode [ 232.330797][ T7580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.347984][ T7580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.359679][ T7580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.368199][ T7580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.379726][ T7580] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 232.387692][ T7580] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 234.868123][ T7595] netlink: 'syz.2.563': attribute type 10 has an invalid length. [ 235.344217][ T7602] netlink: 830 bytes leftover after parsing attributes in process `syz.3.564'. [ 235.651910][ T7611] tap0: tun_chr_ioctl cmd 2147767517 [ 235.842159][ T7615] netlink: 60 bytes leftover after parsing attributes in process `syz.1.569'. [ 235.956247][ T7615] netlink: 60 bytes leftover after parsing attributes in process `syz.1.569'. [ 236.121075][ T7619] netlink: 60 bytes leftover after parsing attributes in process `syz.1.569'. [ 236.135505][ T7615] netlink: 60 bytes leftover after parsing attributes in process `syz.1.569'. [ 236.867946][ T7633] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 239.884549][ T7642] delete_channel: no stack [ 239.928398][ T7642] delete_channel: no stack [ 240.106882][ T65] tipc: Subscription rejected, illegal request [ 240.823508][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'. [ 243.769097][ T7684] netlink: 'syz.1.595': attribute type 21 has an invalid length. [ 243.813781][ T7684] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.595'. [ 244.642856][ T7703] netlink: 'syz.3.602': attribute type 10 has an invalid length. [ 244.665540][ T7703] macvlan1: entered allmulticast mode [ 245.067788][ T7707] syzkaller0: entered promiscuous mode [ 245.073372][ T7707] syzkaller0: entered allmulticast mode [ 251.044032][ T7760] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.616'. [ 251.061134][ T7760] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 251.266831][ T7764] netlink: 'syz.1.617': attribute type 10 has an invalid length. [ 251.430987][ T7768] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 251.749223][ T7780] syz.2.622[7780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.749494][ T7780] syz.2.622[7780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.857921][ T7782] netlink: 'syz.1.628': attribute type 10 has an invalid length. [ 252.762452][ T7790] netlink: 'syz.2.622': attribute type 10 has an invalid length. [ 252.772252][ T7790] netlink: 'syz.2.622': attribute type 10 has an invalid length. [ 252.784872][ T7790] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.622'. [ 252.795188][ T7790] openvswitch: netlink: Message has 4 unknown bytes. [ 253.927653][ T7814] netlink: 'syz.3.629': attribute type 21 has an invalid length. [ 253.963074][ T7814] netlink: 128 bytes leftover after parsing attributes in process `syz.3.629'. [ 253.997215][ T7814] netlink: 'syz.3.629': attribute type 4 has an invalid length. [ 254.009881][ T7814] netlink: 'syz.3.629': attribute type 3 has an invalid length. [ 254.039833][ T7814] netlink: 3 bytes leftover after parsing attributes in process `syz.3.629'. [ 254.966969][ T7823] netlink: 'syz.2.633': attribute type 10 has an invalid length. [ 256.056234][ T7833] netlink: 'syz.1.638': attribute type 10 has an invalid length. [ 256.074642][ T7833] netlink: 40 bytes leftover after parsing attributes in process `syz.1.638'. [ 256.657104][ T7838] syzkaller0: entered promiscuous mode [ 256.701307][ T7838] syzkaller0: entered allmulticast mode [ 256.726780][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.733583][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.373148][ T7857] netlink: 'syz.3.647': attribute type 10 has an invalid length. [ 262.259203][ T7883] netlink: 'syz.3.652': attribute type 9 has an invalid length. [ 262.298653][ T7883] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.652'. [ 263.568380][ T7902] netlink: 'syz.0.660': attribute type 10 has an invalid length. [ 263.824288][ T7909] netlink: 'syz.1.662': attribute type 9 has an invalid length. [ 263.836445][ T7909] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.662'. [ 264.596212][ T7920] netlink: 'syz.0.666': attribute type 29 has an invalid length. [ 264.723720][ T7919] netlink: 'syz.0.666': attribute type 6 has an invalid length. [ 264.743523][ T7919] netlink: 140 bytes leftover after parsing attributes in process `syz.0.666'. [ 264.754326][ T7921] IPv6: Can't replace route, no match found [ 264.774631][ T7925] netlink: 'syz.2.667': attribute type 10 has an invalid length. [ 264.801878][ T7925] macvlan1: entered allmulticast mode [ 264.827714][ T7925] veth1_vlan: entered allmulticast mode [ 264.877063][ T7925] team0: Port device macvlan1 added [ 265.184120][ T7925] syzkaller0: entered promiscuous mode [ 265.196284][ T7925] syzkaller0: entered allmulticast mode [ 265.203462][ T7936] netlink: 'syz.3.670': attribute type 39 has an invalid length. [ 267.064676][ T7957] FAULT_INJECTION: forcing a failure. [ 267.064676][ T7957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.078460][ T7957] CPU: 1 PID: 7957 Comm: syz.1.677 Not tainted syzkaller #0 [ 267.086038][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 267.096419][ T7957] Call Trace: [ 267.099722][ T7957] [ 267.102671][ T7957] dump_stack_lvl+0x18c/0x250 [ 267.107395][ T7957] ? show_regs_print_info+0x20/0x20 [ 267.112615][ T7957] ? load_image+0x420/0x420 [ 267.117150][ T7957] ? __might_fault+0xaa/0x120 [ 267.121943][ T7957] ? __lock_acquire+0x7d40/0x7d40 [ 267.127095][ T7957] should_fail_ex+0x39d/0x4d0 [ 267.131803][ T7957] _copy_to_user+0x2f/0xa0 [ 267.136249][ T7957] bpf_test_finish+0x4e7/0x650 [ 267.141054][ T7957] ? convert___skb_to_skb+0x590/0x590 [ 267.146531][ T7957] ? convert_skb_to___skb+0x420/0x420 [ 267.151941][ T7957] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 267.157348][ T7957] ? cpu_online+0x60/0x60 [ 267.161766][ T7957] bpf_prog_test_run+0x321/0x390 [ 267.166947][ T7957] __sys_bpf+0x49d/0x890 [ 267.171335][ T7957] ? bpf_link_show_fdinfo+0x390/0x390 [ 267.176743][ T7957] ? lock_chain_count+0x20/0x20 [ 267.181797][ T7957] __x64_sys_bpf+0x7c/0x90 [ 267.186230][ T7957] do_syscall_64+0x55/0xa0 [ 267.190802][ T7957] ? clear_bhb_loop+0x40/0x90 [ 267.195602][ T7957] ? clear_bhb_loop+0x40/0x90 [ 267.200319][ T7957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.206236][ T7957] RIP: 0033:0x7fa867b9cdd9 [ 267.210682][ T7957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.230490][ T7957] RSP: 002b:00007fa8689f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 267.239017][ T7957] RAX: ffffffffffffffda RBX: 00007fa867e15fa0 RCX: 00007fa867b9cdd9 [ 267.247041][ T7957] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 267.255033][ T7957] RBP: 00007fa8689f5090 R08: 0000000000000000 R09: 0000000000000000 [ 267.263021][ T7957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.271018][ T7957] R13: 00007fa867e16038 R14: 00007fa867e15fa0 R15: 00007ffca966cfe8 [ 267.279212][ T7957] [ 268.743818][ T7951] netlink: 'syz.0.674': attribute type 10 has an invalid length. [ 269.034068][ T7963] netlink: 'syz.3.679': attribute type 29 has an invalid length. [ 269.201731][ T7963] netlink: 'syz.3.679': attribute type 6 has an invalid length. [ 269.227511][ T7963] netlink: 140 bytes leftover after parsing attributes in process `syz.3.679'. [ 269.280929][ T7969] IPv6: Can't replace route, no match found [ 273.055356][ T7993] netlink: 'syz.0.689': attribute type 10 has an invalid length. [ 273.121281][ T8000] netlink: 'syz.1.691': attribute type 10 has an invalid length. [ 273.139148][ T8000] macvlan1: entered allmulticast mode [ 273.631712][ T8005] syzkaller0: entered promiscuous mode [ 273.682423][ T8005] syzkaller0: entered allmulticast mode [ 274.424158][ T8023] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.699'. [ 276.459670][ T8023] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 276.485624][ T8024] netlink: 'syz.2.698': attribute type 9 has an invalid length. [ 276.493722][ T8024] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.698'. [ 278.214350][ T8046] netlink: 'syz.0.705': attribute type 10 has an invalid length. [ 281.016991][ T8056] delete_channel: no stack [ 281.968155][ T8069] netlink: 'syz.0.711': attribute type 9 has an invalid length. [ 282.023881][ T8069] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.711'. [ 282.497818][ T8085] netlink: 'syz.3.716': attribute type 10 has an invalid length. [ 284.151231][ T8091] netlink: 'syz.2.718': attribute type 9 has an invalid length. [ 284.187674][ T8091] netlink: 399 bytes leftover after parsing attributes in process `syz.2.718'. [ 284.531216][ T8097] netlink: 'syz.3.722': attribute type 10 has an invalid length. [ 284.550289][ T8097] netlink: 40 bytes leftover after parsing attributes in process `syz.3.722'. [ 284.561754][ T8097] veth0_vlan: entered allmulticast mode [ 284.574011][ T8101] netlink: 'syz.1.721': attribute type 3 has an invalid length. [ 284.579218][ T8097] bridge0: port 3(veth0_vlan) entered blocking state [ 284.581973][ T8101] netlink: 'syz.1.721': attribute type 6 has an invalid length. [ 284.595448][ T8097] bridge0: port 3(veth0_vlan) entered disabled state [ 284.601008][ T8101] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.721'. [ 284.609112][ T8097] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 285.492697][ T8123] netlink: 'syz.1.727': attribute type 39 has an invalid length. [ 288.940223][ T8140] geneve1: entered promiscuous mode [ 288.951250][ T8140] geneve1: entered allmulticast mode [ 289.627500][ T8161] FAULT_INJECTION: forcing a failure. [ 289.627500][ T8161] name failslab, interval 1, probability 0, space 0, times 0 [ 289.644735][ T8161] CPU: 0 PID: 8161 Comm: syz.3.741 Not tainted syzkaller #0 [ 289.652197][ T8161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.662326][ T8161] Call Trace: [ 289.665652][ T8161] [ 289.668648][ T8161] dump_stack_lvl+0x18c/0x250 [ 289.673389][ T8161] ? sctp_sendmsg+0x1575/0x28c0 [ 289.678389][ T8161] ? ___sys_sendmsg+0x2a6/0x360 [ 289.683484][ T8161] ? show_regs_print_info+0x20/0x20 [ 289.689030][ T8161] ? load_image+0x420/0x420 [ 289.693592][ T8161] should_fail_ex+0x39d/0x4d0 [ 289.698402][ T8161] should_failslab+0x9/0x20 [ 289.702950][ T8161] slab_pre_alloc_hook+0x59/0x310 [ 289.708018][ T8161] ? sctp_add_bind_addr+0x8c/0x360 [ 289.713273][ T8161] __kmem_cache_alloc_node+0x53/0x250 [ 289.718783][ T8161] ? sctp_add_bind_addr+0x8c/0x360 [ 289.724083][ T8161] kmalloc_trace+0x2a/0xe0 [ 289.728620][ T8161] sctp_add_bind_addr+0x8c/0x360 [ 289.733682][ T8161] sctp_copy_local_addr_list+0x315/0x4f0 [ 289.739378][ T8161] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 289.745229][ T8161] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 289.751689][ T8161] ? sctp_v4_is_any+0x35/0x60 [ 289.756405][ T8161] ? sctp_copy_one_addr+0x8c/0x350 [ 289.761726][ T8161] sctp_bind_addr_copy+0xb3/0x3c0 [ 289.766775][ T8161] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 289.773218][ T8161] sctp_connect_new_asoc+0x2f9/0x6a0 [ 289.778570][ T8161] ? __sctp_connect+0xd80/0xd80 [ 289.783953][ T8161] ? __local_bh_enable_ip+0x13a/0x1c0 [ 289.789432][ T8161] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 289.795001][ T8161] ? security_sctp_bind_connect+0x89/0xb0 [ 289.800751][ T8161] sctp_sendmsg+0x1575/0x28c0 [ 289.805544][ T8161] ? sctp_getsockopt+0xb60/0xb60 [ 289.810690][ T8161] ? aa_sk_perm+0x83c/0x970 [ 289.815344][ T8161] ? aa_af_perm+0x330/0x330 [ 289.820096][ T8161] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 289.826771][ T8161] ? sock_rps_record_flow+0x19/0x3f0 [ 289.832114][ T8161] ? inet_sendmsg+0xe9/0x2f0 [ 289.836757][ T8161] ? inet_send_prepare+0x260/0x260 [ 289.842160][ T8161] ____sys_sendmsg+0x5ba/0x960 [ 289.847127][ T8161] ? __lock_acquire+0x7d40/0x7d40 [ 289.852206][ T8161] ? __asan_memset+0x22/0x40 [ 289.856834][ T8161] ? __sys_sendmsg_sock+0x30/0x30 [ 289.862133][ T8161] ? __import_iovec+0x5f2/0x850 [ 289.867108][ T8161] ? import_iovec+0x73/0xa0 [ 289.871721][ T8161] ___sys_sendmsg+0x2a6/0x360 [ 289.876547][ T8161] ? get_pid_task+0x20/0x1e0 [ 289.881186][ T8161] ? __sys_sendmsg+0x2a0/0x2a0 [ 289.886109][ T8161] ? __lock_acquire+0x7d40/0x7d40 [ 289.891175][ T8161] __se_sys_sendmsg+0x1c2/0x2b0 [ 289.896214][ T8161] ? __x64_sys_sendmsg+0x80/0x80 [ 289.901285][ T8161] ? lockdep_hardirqs_on+0x98/0x150 [ 289.906508][ T8161] do_syscall_64+0x55/0xa0 [ 289.911153][ T8161] ? clear_bhb_loop+0x40/0x90 [ 289.915859][ T8161] ? clear_bhb_loop+0x40/0x90 [ 289.920559][ T8161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.926557][ T8161] RIP: 0033:0x7f01c799cdd9 [ 289.931000][ T8161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.950716][ T8161] RSP: 002b:00007f01c8949028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.959480][ T8161] RAX: ffffffffffffffda RBX: 00007f01c7c15fa0 RCX: 00007f01c799cdd9 [ 289.967508][ T8161] RDX: 00000000000040f0 RSI: 0000200000000240 RDI: 0000000000000003 [ 289.975521][ T8161] RBP: 00007f01c8949090 R08: 0000000000000000 R09: 0000000000000000 [ 289.983540][ T8161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 289.991558][ T8161] R13: 00007f01c7c16038 R14: 00007f01c7c15fa0 R15: 00007ffee1123d78 [ 290.000119][ T8161] [ 290.264562][ T8164] netlink: 'syz.0.740': attribute type 10 has an invalid length. [ 290.316815][ T8167] geneve1: entered promiscuous mode [ 290.325620][ T8167] geneve1: entered allmulticast mode [ 292.496058][ T8172] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 293.151325][ T8185] netlink: 144 bytes leftover after parsing attributes in process `syz.2.749'. [ 293.376251][ T8185] team0: Port device team_slave_0 removed [ 293.397748][ T8185] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 293.627262][ T8189] netlink: 'syz.3.751': attribute type 6 has an invalid length. [ 293.635416][ T8189] netlink: 140 bytes leftover after parsing attributes in process `syz.3.751'. [ 293.705799][ T8191] IPv6: Can't replace route, no match found [ 294.154226][ T8206] netlink: 'syz.1.756': attribute type 7 has an invalid length. [ 294.189948][ T8206] netlink: 'syz.1.756': attribute type 6 has an invalid length. [ 295.030920][ T8222] netlink: 'syz.3.761': attribute type 4 has an invalid length. [ 295.503050][ T8229] netlink: 'syz.0.763': attribute type 29 has an invalid length. [ 295.995690][ T8231] IPv6: Can't replace route, no match found [ 297.469030][ T8238] FAULT_INJECTION: forcing a failure. [ 297.469030][ T8238] name failslab, interval 1, probability 0, space 0, times 0 [ 297.578978][ T8238] CPU: 1 PID: 8238 Comm: syz.3.765 Not tainted syzkaller #0 [ 297.586455][ T8238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.596742][ T8238] Call Trace: [ 297.600096][ T8238] [ 297.603450][ T8238] dump_stack_lvl+0x18c/0x250 [ 297.608545][ T8238] ? show_regs_print_info+0x20/0x20 [ 297.613841][ T8238] ? load_image+0x420/0x420 [ 297.618525][ T8238] ? __might_sleep+0xe0/0xe0 [ 297.623184][ T8238] ? __lock_acquire+0x7d40/0x7d40 [ 297.628445][ T8238] should_fail_ex+0x39d/0x4d0 [ 297.633389][ T8238] should_failslab+0x9/0x20 [ 297.638021][ T8238] slab_pre_alloc_hook+0x59/0x310 [ 297.643181][ T8238] ? ioam6_genl_dumpns_start+0xfe/0x150 [ 297.648778][ T8238] __kmem_cache_alloc_node+0x53/0x250 [ 297.654275][ T8238] ? ioam6_genl_dumpns_start+0xfe/0x150 [ 297.659848][ T8238] kmalloc_trace+0x2a/0xe0 [ 297.664392][ T8238] ioam6_genl_dumpns_start+0xfe/0x150 [ 297.669791][ T8238] genl_start+0x4b6/0x6b0 [ 297.674175][ T8238] __netlink_dump_start+0x4a9/0x810 [ 297.679448][ T8238] genl_family_rcv_msg_dumpit+0x214/0x310 [ 297.685686][ T8238] ? genl_rcv_msg+0x7a0/0x7a0 [ 297.690575][ T8238] ? genl_get_cmd+0x7f1/0x920 [ 297.695509][ T8238] ? genl_family_rcv_msg_doit+0x310/0x310 [ 297.701649][ T8238] ? genl_start+0x6b0/0x6b0 [ 297.706209][ T8238] ? genl_dumpit+0x1a0/0x1a0 [ 297.711056][ T8238] ? bpf_lsm_capable+0x9/0x10 [ 297.715806][ T8238] ? security_capable+0x89/0xb0 [ 297.720795][ T8238] genl_rcv_msg+0x5e5/0x7a0 [ 297.725663][ T8238] ? genl_bind+0x360/0x360 [ 297.730211][ T8238] ? ioam6_genl_delns+0x370/0x370 [ 297.735488][ T8238] ? ioam6_genl_dumpns_start+0x150/0x150 [ 297.741272][ T8238] ? ioam6_genl_dumpns+0x910/0x910 [ 297.746420][ T8238] ? ref_tracker_free+0x690/0x840 [ 297.751585][ T8238] netlink_rcv_skb+0x241/0x4d0 [ 297.756389][ T8238] ? genl_bind+0x360/0x360 [ 297.760977][ T8238] ? netlink_ack+0x1180/0x1180 [ 297.765890][ T8238] ? __lock_acquire+0x7d40/0x7d40 [ 297.770938][ T8238] ? down_read+0x1ac/0x2e0 [ 297.775415][ T8238] genl_rcv+0x28/0x40 [ 297.779526][ T8238] netlink_unicast+0x751/0x8d0 [ 297.784405][ T8238] netlink_sendmsg+0x8d0/0xbf0 [ 297.789214][ T8238] ? netlink_getsockopt+0x590/0x590 [ 297.794439][ T8238] ? aa_sock_msg_perm+0x94/0x150 [ 297.799487][ T8238] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 297.804880][ T8238] ? security_socket_sendmsg+0x80/0xa0 [ 297.810371][ T8238] ? netlink_getsockopt+0x590/0x590 [ 297.815682][ T8238] ____sys_sendmsg+0x5ba/0x960 [ 297.820667][ T8238] ? __asan_memset+0x22/0x40 [ 297.825362][ T8238] ? __sys_sendmsg_sock+0x30/0x30 [ 297.830486][ T8238] ? __import_iovec+0x5f2/0x850 [ 297.835365][ T8238] ? import_iovec+0x73/0xa0 [ 297.839893][ T8238] ___sys_sendmsg+0x2a6/0x360 [ 297.844622][ T8238] ? get_pid_task+0x20/0x1e0 [ 297.849328][ T8238] ? __sys_sendmsg+0x2a0/0x2a0 [ 297.854140][ T8238] ? __lock_acquire+0x7d40/0x7d40 [ 297.859382][ T8238] __se_sys_sendmsg+0x1c2/0x2b0 [ 297.864480][ T8238] ? __x64_sys_sendmsg+0x80/0x80 [ 297.869632][ T8238] ? lockdep_hardirqs_on+0x98/0x150 [ 297.874883][ T8238] do_syscall_64+0x55/0xa0 [ 297.879610][ T8238] ? clear_bhb_loop+0x40/0x90 [ 297.884417][ T8238] ? clear_bhb_loop+0x40/0x90 [ 297.889140][ T8238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.895253][ T8238] RIP: 0033:0x7f01c799cdd9 [ 297.899749][ T8238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.920106][ T8238] RSP: 002b:00007f01c8928028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.928551][ T8238] RAX: ffffffffffffffda RBX: 00007f01c7c16090 RCX: 00007f01c799cdd9 [ 297.936541][ T8238] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 297.944613][ T8238] RBP: 00007f01c8928090 R08: 0000000000000000 R09: 0000000000000000 [ 297.952860][ T8238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.961278][ T8238] R13: 00007f01c7c16128 R14: 00007f01c7c16090 R15: 00007ffee1123d78 [ 297.969282][ T8238] [ 298.240897][ T8247] netlink: 'syz.3.770': attribute type 17 has an invalid length. [ 298.259659][ T8247] netlink: 148 bytes leftover after parsing attributes in process `syz.3.770'. [ 298.490249][ T8253] mac80211_hwsim hwsim9 ..ãc¤±: renamed from wlan1 [ 299.075903][ T8259] netlink: 'syz.0.773': attribute type 21 has an invalid length. [ 299.143263][ T8259] netlink: 132 bytes leftover after parsing attributes in process `syz.0.773'. [ 299.157016][ T8259] netlink: 'syz.0.773': attribute type 1 has an invalid length. [ 299.170984][ T8261] netlink: 132 bytes leftover after parsing attributes in process `syz.0.773'. [ 299.260935][ T8259] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.773'. [ 299.308364][ T8259] netlink: 'syz.0.773': attribute type 1 has an invalid length. [ 299.369811][ T8259] netlink: 21820 bytes leftover after parsing attributes in process `syz.0.773'. [ 299.460604][ T8265] netlink: 'syz.2.775': attribute type 29 has an invalid length. [ 299.606268][ T8269] netlink: 'syz.2.775': attribute type 6 has an invalid length. [ 299.615267][ T8269] netlink: 140 bytes leftover after parsing attributes in process `syz.2.775'. [ 299.707138][ T8272] IPv6: Can't replace route, no match found [ 306.711481][ T8312] netlink: 'syz.2.789': attribute type 29 has an invalid length. [ 306.903322][ T8312] netlink: 'syz.2.789': attribute type 6 has an invalid length. [ 306.928555][ T8312] netlink: 140 bytes leftover after parsing attributes in process `syz.2.789'. [ 307.059103][ T8321] IPv6: Can't replace route, no match found [ 307.221952][ T8326] FAULT_INJECTION: forcing a failure. [ 307.221952][ T8326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.259584][ T8326] CPU: 1 PID: 8326 Comm: syz.0.792 Not tainted syzkaller #0 [ 307.267063][ T8326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.277314][ T8326] Call Trace: [ 307.280832][ T8326] [ 307.284075][ T8326] dump_stack_lvl+0x18c/0x250 [ 307.288898][ T8326] ? show_regs_print_info+0x20/0x20 [ 307.294235][ T8326] ? load_image+0x420/0x420 [ 307.298904][ T8326] ? __might_fault+0xaa/0x120 [ 307.303900][ T8326] ? __lock_acquire+0x7d40/0x7d40 [ 307.309149][ T8326] should_fail_ex+0x39d/0x4d0 [ 307.314142][ T8326] _copy_from_iter+0x1d9/0x12e0 [ 307.319125][ T8326] ? rep_movs_alternative+0x4a/0x90 [ 307.324373][ T8326] ? _copy_from_iter+0x24e/0x12e0 [ 307.329792][ T8326] ? __virt_addr_valid+0x18c/0x540 [ 307.335161][ T8326] ? __lock_acquire+0x7d40/0x7d40 [ 307.340501][ T8326] ? copyout_mc+0x70/0x70 [ 307.344980][ T8326] ? copyout_mc+0x70/0x70 [ 307.349924][ T8326] ? __virt_addr_valid+0x18c/0x540 [ 307.355450][ T8326] ? page_copy_sane+0x16a/0x270 [ 307.360551][ T8326] copy_page_from_iter+0x7b/0x100 [ 307.365948][ T8326] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 307.372173][ T8326] unix_stream_sendmsg+0x562/0xbf0 [ 307.377347][ T8326] ? unix_show_fdinfo+0x270/0x270 [ 307.382434][ T8326] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 307.389176][ T8326] ? __might_fault+0xaa/0x120 [ 307.393989][ T8326] ? aa_sock_msg_perm+0x94/0x150 [ 307.398987][ T8326] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 307.404330][ T8326] ? security_socket_sendmsg+0x80/0xa0 [ 307.409837][ T8326] ? unix_show_fdinfo+0x270/0x270 [ 307.414969][ T8326] ____sys_sendmsg+0x5ba/0x960 [ 307.419877][ T8326] ? __sys_sendmsg_sock+0x30/0x30 [ 307.425079][ T8326] ? __import_iovec+0x5f2/0x850 [ 307.429983][ T8326] ? import_iovec+0x73/0xa0 [ 307.434549][ T8326] ___sys_sendmsg+0x2a6/0x360 [ 307.439282][ T8326] ? get_pid_task+0x20/0x1e0 [ 307.444032][ T8326] ? __sys_sendmsg+0x2a0/0x2a0 [ 307.448966][ T8326] ? __lock_acquire+0x7d40/0x7d40 [ 307.454264][ T8326] __se_sys_sendmsg+0x1c2/0x2b0 [ 307.459247][ T8326] ? __x64_sys_sendmsg+0x80/0x80 [ 307.464351][ T8326] ? lockdep_hardirqs_on+0x98/0x150 [ 307.469619][ T8326] do_syscall_64+0x55/0xa0 [ 307.474189][ T8326] ? clear_bhb_loop+0x40/0x90 [ 307.479104][ T8326] ? clear_bhb_loop+0x40/0x90 [ 307.483842][ T8326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.490066][ T8326] RIP: 0033:0x7fcf85f9cdd9 [ 307.494706][ T8326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.514823][ T8326] RSP: 002b:00007fcf86e98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.523567][ T8326] RAX: ffffffffffffffda RBX: 00007fcf86215fa0 RCX: 00007fcf85f9cdd9 [ 307.532219][ T8326] RDX: 0000000000008841 RSI: 0000200000000500 RDI: 0000000000000004 [ 307.540334][ T8326] RBP: 00007fcf86e98090 R08: 0000000000000000 R09: 0000000000000000 [ 307.548724][ T8326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 307.556761][ T8326] R13: 00007fcf86216038 R14: 00007fcf86215fa0 R15: 00007ffca307ffe8 [ 307.564782][ T8326] [ 307.947376][ T8338] netlink: 'syz.0.795': attribute type 29 has an invalid length. [ 308.106976][ T8344] netlink: 'syz.3.796': attribute type 10 has an invalid length. [ 308.605205][ T8338] netlink: 'syz.0.795': attribute type 6 has an invalid length. [ 308.636007][ T8338] netlink: 140 bytes leftover after parsing attributes in process `syz.0.795'. [ 309.029044][ T8343] IPv6: Can't replace route, no match found [ 311.400146][ T8354] syzkaller0: entered promiscuous mode [ 311.416748][ T8354] syzkaller0: entered allmulticast mode [ 311.672299][ T8367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.812113][ T8369] netlink: 'syz.2.801': attribute type 29 has an invalid length. [ 313.821464][ T8373] netlink: 'syz.2.801': attribute type 6 has an invalid length. [ 313.829856][ T8373] netlink: 140 bytes leftover after parsing attributes in process `syz.2.801'. [ 313.843155][ T8377] IPv6: Can't replace route, no match found [ 313.852088][ T8380] netlink: 'syz.3.803': attribute type 10 has an invalid length. [ 313.877527][ T8380] veth1_vlan: left promiscuous mode [ 314.106993][ T8385] FAULT_INJECTION: forcing a failure. [ 314.106993][ T8385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.127457][ T8386] netlink: 168 bytes leftover after parsing attributes in process `syz.1.804'. [ 314.137619][ T8385] CPU: 0 PID: 8385 Comm: syz.0.805 Not tainted syzkaller #0 [ 314.145205][ T8385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 314.155358][ T8385] Call Trace: [ 314.158708][ T8385] [ 314.161817][ T8385] dump_stack_lvl+0x18c/0x250 [ 314.166762][ T8385] ? show_regs_print_info+0x20/0x20 [ 314.172081][ T8385] ? load_image+0x420/0x420 [ 314.176683][ T8385] ? __might_fault+0xaa/0x120 [ 314.181444][ T8385] ? __lock_acquire+0x7d40/0x7d40 [ 314.186604][ T8385] should_fail_ex+0x39d/0x4d0 [ 314.191430][ T8385] _copy_from_user+0x2f/0xe0 [ 314.196112][ T8385] bpf_prog_test_run_skb+0x266/0x12b0 [ 314.201569][ T8385] ? __fget_files+0x28/0x4b0 [ 314.206232][ T8385] ? __fget_files+0x28/0x4b0 [ 314.211284][ T8385] ? __fget_files+0x43d/0x4b0 [ 314.216103][ T8385] ? cpu_online+0x60/0x60 [ 314.220778][ T8385] bpf_prog_test_run+0x321/0x390 [ 314.225986][ T8385] __sys_bpf+0x49d/0x890 [ 314.230319][ T8385] ? bpf_link_show_fdinfo+0x390/0x390 [ 314.236062][ T8385] ? lock_chain_count+0x20/0x20 [ 314.241210][ T8385] __x64_sys_bpf+0x7c/0x90 [ 314.245993][ T8385] do_syscall_64+0x55/0xa0 [ 314.250493][ T8385] ? clear_bhb_loop+0x40/0x90 [ 314.255316][ T8385] ? clear_bhb_loop+0x40/0x90 [ 314.260078][ T8385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.266195][ T8385] RIP: 0033:0x7fcf85f9cdd9 [ 314.270689][ T8385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.290444][ T8385] RSP: 002b:00007fcf86e98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 314.299167][ T8385] RAX: ffffffffffffffda RBX: 00007fcf86215fa0 RCX: 00007fcf85f9cdd9 [ 314.307246][ T8385] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 314.315274][ T8385] RBP: 00007fcf86e98090 R08: 0000000000000000 R09: 0000000000000000 [ 314.323541][ T8385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.331581][ T8385] R13: 00007fcf86216038 R14: 00007fcf86215fa0 R15: 00007ffca307ffe8 [ 314.339962][ T8385] [ 314.358973][ T8390] netlink: 'syz.3.807': attribute type 29 has an invalid length. [ 314.632212][ T8392] netlink: 'syz.3.807': attribute type 6 has an invalid length. [ 314.662502][ T8392] netlink: 140 bytes leftover after parsing attributes in process `syz.3.807'. [ 314.710089][ T8400] FAULT_INJECTION: forcing a failure. [ 314.710089][ T8400] name failslab, interval 1, probability 0, space 0, times 0 [ 314.724850][ T8400] CPU: 1 PID: 8400 Comm: syz.0.809 Not tainted syzkaller #0 [ 314.732214][ T8400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 314.742374][ T8400] Call Trace: [ 314.745768][ T8400] [ 314.748800][ T8400] dump_stack_lvl+0x18c/0x250 [ 314.753506][ T8400] ? show_regs_print_info+0x20/0x20 [ 314.758743][ T8400] ? load_image+0x420/0x420 [ 314.763283][ T8400] should_fail_ex+0x39d/0x4d0 [ 314.767995][ T8400] should_failslab+0x9/0x20 [ 314.772528][ T8400] slab_pre_alloc_hook+0x59/0x310 [ 314.777579][ T8400] ? __build_skb_around+0x255/0x3d0 [ 314.782792][ T8400] kmem_cache_alloc+0x5a/0x2d0 [ 314.787691][ T8400] ? _sctp_make_chunk+0x14e/0x420 [ 314.793037][ T8400] _sctp_make_chunk+0x14e/0x420 [ 314.797928][ T8400] sctp_make_init+0x5f3/0xfc0 [ 314.802726][ T8400] ? sctp_addto_chunk+0x230/0x230 [ 314.807780][ T8400] ? kernel_text_address+0xa0/0xd0 [ 314.813039][ T8400] ? __kernel_text_address+0xd/0x30 [ 314.818455][ T8400] ? stack_trace_save+0x100/0x100 [ 314.823509][ T8400] ? arch_stack_walk+0x160/0x190 [ 314.828648][ T8400] sctp_sf_do_prm_asoc+0xd2/0x3e0 [ 314.833788][ T8400] sctp_do_sm+0x23a/0x5a60 [ 314.838395][ T8400] ? sctp_cname+0x110/0x110 [ 314.842999][ T8400] ? __stack_depot_save+0x1f/0x630 [ 314.848514][ T8400] ? kasan_set_track+0x4e/0x70 [ 314.853358][ T8400] ? __kasan_kmalloc+0x8f/0xa0 [ 314.858165][ T8400] ? sctp_stream_init_ext+0x57/0x170 [ 314.863563][ T8400] ? sctp_sendmsg_to_asoc+0x1324/0x1830 [ 314.869152][ T8400] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 314.875152][ T8400] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 314.880302][ T8400] ? do_syscall_64+0x55/0xa0 [ 314.885183][ T8400] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.891308][ T8400] ? __sk_mem_raise_allocated+0xa29/0x1340 [ 314.897255][ T8400] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 314.902987][ T8400] sctp_sendmsg_to_asoc+0x10a6/0x1830 [ 314.908642][ T8400] ? __asan_memcpy+0x40/0x70 [ 314.913365][ T8400] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 314.918766][ T8400] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 314.924593][ T8400] ? __sctp_connect+0xd80/0xd80 [ 314.929459][ T8400] ? __local_bh_enable_ip+0x13a/0x1c0 [ 314.935134][ T8400] ? _local_bh_enable+0xa0/0xa0 [ 314.940088][ T8400] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 314.946005][ T8400] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 314.951843][ T8400] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 314.957440][ T8400] ? security_sctp_bind_connect+0x89/0xb0 [ 314.963282][ T8400] sctp_sendmsg+0x1b83/0x28c0 [ 314.968176][ T8400] ? sctp_getsockopt+0xb60/0xb60 [ 314.973245][ T8400] ? aa_sk_perm+0x83c/0x970 [ 314.977793][ T8400] ? aa_af_perm+0x330/0x330 [ 314.982319][ T8400] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 314.988853][ T8400] ? sock_rps_record_flow+0x19/0x3f0 [ 314.994165][ T8400] ? inet_sendmsg+0x7c/0x2f0 [ 314.998974][ T8400] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 315.004280][ T8400] ? security_socket_sendmsg+0x80/0xa0 [ 315.009753][ T8400] ? inet_send_prepare+0x260/0x260 [ 315.014879][ T8400] ____sys_sendmsg+0x5ba/0x960 [ 315.019711][ T8400] ? __lock_acquire+0x7d40/0x7d40 [ 315.024755][ T8400] ? __asan_memset+0x22/0x40 [ 315.029454][ T8400] ? __sys_sendmsg_sock+0x30/0x30 [ 315.034502][ T8400] ? __import_iovec+0x5f2/0x850 [ 315.039385][ T8400] ? import_iovec+0x73/0xa0 [ 315.043923][ T8400] ___sys_sendmsg+0x2a6/0x360 [ 315.048790][ T8400] ? get_pid_task+0x20/0x1e0 [ 315.053489][ T8400] ? __sys_sendmsg+0x2a0/0x2a0 [ 315.058388][ T8400] ? __lock_acquire+0x7d40/0x7d40 [ 315.063729][ T8400] __se_sys_sendmsg+0x1c2/0x2b0 [ 315.068602][ T8400] ? __x64_sys_sendmsg+0x80/0x80 [ 315.073671][ T8400] ? lockdep_hardirqs_on+0x98/0x150 [ 315.078979][ T8400] do_syscall_64+0x55/0xa0 [ 315.083563][ T8400] ? clear_bhb_loop+0x40/0x90 [ 315.088373][ T8400] ? clear_bhb_loop+0x40/0x90 [ 315.093085][ T8400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.099177][ T8400] RIP: 0033:0x7fcf85f9cdd9 [ 315.103802][ T8400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.123535][ T8400] RSP: 002b:00007fcf86e98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.132094][ T8400] RAX: ffffffffffffffda RBX: 00007fcf86215fa0 RCX: 00007fcf85f9cdd9 [ 315.140091][ T8400] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 315.148257][ T8400] RBP: 00007fcf86e98090 R08: 0000000000000000 R09: 0000000000000000 [ 315.156415][ T8400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 315.164399][ T8400] R13: 00007fcf86216038 R14: 00007fcf86215fa0 R15: 00007ffca307ffe8 [ 315.172425][ T8400] [ 315.478193][ T8406] netlink: 'syz.0.812': attribute type 22 has an invalid length. [ 315.523391][ T8406] netlink: 'syz.0.812': attribute type 1 has an invalid length. [ 315.535041][ T8406] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.812'. [ 315.584488][ T8410] FAULT_INJECTION: forcing a failure. [ 315.584488][ T8410] name failslab, interval 1, probability 0, space 0, times 0 [ 315.597586][ T8410] CPU: 1 PID: 8410 Comm: syz.1.814 Not tainted syzkaller #0 [ 315.605701][ T8410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 315.616257][ T8410] Call Trace: [ 315.619752][ T8410] [ 315.622734][ T8410] dump_stack_lvl+0x18c/0x250 [ 315.627665][ T8410] ? show_regs_print_info+0x20/0x20 [ 315.633111][ T8410] ? load_image+0x420/0x420 [ 315.637694][ T8410] ? __kmem_cache_alloc_node+0x13a/0x250 [ 315.643400][ T8410] ? netdev_core_pick_tx+0x340/0x340 [ 315.648885][ T8410] should_fail_ex+0x39d/0x4d0 [ 315.653736][ T8410] should_failslab+0x9/0x20 [ 315.658499][ T8410] slab_pre_alloc_hook+0x59/0x310 [ 315.663705][ T8410] kmem_cache_alloc+0x5a/0x2d0 [ 315.668615][ T8410] ? skb_clone+0x1eb/0x370 [ 315.673183][ T8410] skb_clone+0x1eb/0x370 [ 315.677493][ T8410] bpf_clone_redirect+0x167/0x4a0 [ 315.682626][ T8410] bpf_prog_5e3b4e18def6d727+0x5e/0x63 [ 315.688339][ T8410] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 315.694573][ T8410] ? perf_trace_preemptirq_template+0xac/0x330 [ 315.700821][ T8410] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 315.700918][ T8412] netlink: 'syz.2.815': attribute type 29 has an invalid length. [ 315.706843][ T8410] ? lockdep_softirqs_on+0x580/0x580 [ 315.706879][ T8410] ? lock_chain_count+0x20/0x20 [ 315.706899][ T8410] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 315.706944][ T8410] ? __local_bh_disable_ip+0x108/0x1a0 [ 315.706968][ T8410] ? __cant_sleep+0x220/0x220 [ 315.706993][ T8410] ? __local_bh_enable_ip+0x13a/0x1c0 [ 315.707017][ T8410] ? _local_bh_enable+0xa0/0xa0 [ 315.707052][ T8410] ? bpf_test_timer_continue+0x135/0x380 [ 315.707082][ T8410] ? bpf_test_run+0x174/0x870 [ 315.707113][ T8410] bpf_test_run+0x2df/0x870 [ 315.707170][ T8410] ? bpf_test_run+0x174/0x870 [ 315.707202][ T8410] ? convert___skb_to_skb+0x590/0x590 [ 315.707237][ T8410] ? eth_get_headlen+0x210/0x210 [ 315.707278][ T8410] ? slab_build_skb+0x25f/0x3f0 [ 315.707301][ T8410] ? convert___skb_to_skb+0x3d/0x590 [ 315.707344][ T8410] bpf_prog_test_run_skb+0xad2/0x12b0 [ 315.707409][ T8410] ? cpu_online+0x60/0x60 [ 315.707439][ T8410] bpf_prog_test_run+0x321/0x390 [ 315.707474][ T8410] __sys_bpf+0x49d/0x890 [ 315.707508][ T8410] ? bpf_link_show_fdinfo+0x390/0x390 [ 315.707572][ T8410] ? lock_chain_count+0x20/0x20 [ 315.707622][ T8410] __x64_sys_bpf+0x7c/0x90 [ 315.707648][ T8410] do_syscall_64+0x55/0xa0 [ 315.707668][ T8410] ? clear_bhb_loop+0x40/0x90 [ 315.707694][ T8410] ? clear_bhb_loop+0x40/0x90 [ 315.707727][ T8410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.707752][ T8410] RIP: 0033:0x7fa867b9cdd9 [ 315.707777][ T8410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.707797][ T8410] RSP: 002b:00007fa8689f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 315.707827][ T8410] RAX: ffffffffffffffda RBX: 00007fa867e15fa0 RCX: 00007fa867b9cdd9 [ 315.707844][ T8410] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 315.707859][ T8410] RBP: 00007fa8689f5090 R08: 0000000000000000 R09: 0000000000000000 [ 315.707874][ T8410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 315.707888][ T8410] R13: 00007fa867e16038 R14: 00007fa867e15fa0 R15: 00007ffca966cfe8 [ 315.707943][ T8410] [ 316.085614][ T8412] netlink: 'syz.2.815': attribute type 6 has an invalid length. [ 316.094903][ T8412] netlink: 140 bytes leftover after parsing attributes in process `syz.2.815'. [ 316.148141][ T8412] IPv6: Can't replace route, no match found [ 316.233148][ T8424] FAULT_INJECTION: forcing a failure. [ 316.233148][ T8424] name failslab, interval 1, probability 0, space 0, times 0 [ 316.260848][ T8424] CPU: 0 PID: 8424 Comm: syz.1.819 Not tainted syzkaller #0 [ 316.268244][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 316.278444][ T8424] Call Trace: [ 316.281730][ T8424] [ 316.284680][ T8424] dump_stack_lvl+0x18c/0x250 [ 316.289418][ T8424] ? show_regs_print_info+0x20/0x20 [ 316.294667][ T8424] ? load_image+0x420/0x420 [ 316.299402][ T8424] ? __might_sleep+0xe0/0xe0 [ 316.304065][ T8424] ? __lock_acquire+0x7d40/0x7d40 [ 316.309122][ T8424] ? trace_contention_end+0x39/0xe0 [ 316.314381][ T8424] should_fail_ex+0x39d/0x4d0 [ 316.319105][ T8424] should_failslab+0x9/0x20 [ 316.323632][ T8424] slab_pre_alloc_hook+0x59/0x310 [ 316.328783][ T8424] ? mutex_lock_nested+0x20/0x20 [ 316.333935][ T8424] ? rxrpc_lookup_local+0x579/0x1610 [ 316.339272][ T8424] __kmem_cache_alloc_node+0x53/0x250 [ 316.344773][ T8424] ? rxrpc_lookup_local+0x579/0x1610 [ 316.350090][ T8424] kmalloc_trace+0x2a/0xe0 [ 316.354620][ T8424] rxrpc_lookup_local+0x579/0x1610 [ 316.359871][ T8424] ? rxrpc_local_dont_fragment+0x70/0x70 [ 316.365879][ T8424] ? __local_bh_enable_ip+0x13a/0x1c0 [ 316.371366][ T8424] ? lockdep_hardirqs_on+0x98/0x150 [ 316.376594][ T8424] ? __local_bh_enable_ip+0x13a/0x1c0 [ 316.382068][ T8424] ? _local_bh_enable+0xa0/0xa0 [ 316.386942][ T8424] rxrpc_sendmsg+0x30a/0x5b0 [ 316.391558][ T8424] ? rxrpc_getsockopt+0x150/0x150 [ 316.396700][ T8424] ____sys_sendmsg+0x5ba/0x960 [ 316.401640][ T8424] ? __lock_acquire+0x7d40/0x7d40 [ 316.406690][ T8424] ? __sys_sendmsg_sock+0x30/0x30 [ 316.411747][ T8424] ? __import_iovec+0x5f2/0x850 [ 316.416795][ T8424] ? import_iovec+0x73/0xa0 [ 316.421669][ T8424] ___sys_sendmsg+0x2a6/0x360 [ 316.426716][ T8424] ? get_pid_task+0x20/0x1e0 [ 316.431349][ T8424] ? __sys_sendmsg+0x2a0/0x2a0 [ 316.436160][ T8424] ? __lock_acquire+0x7d40/0x7d40 [ 316.441267][ T8424] __se_sys_sendmsg+0x1c2/0x2b0 [ 316.446259][ T8424] ? __x64_sys_sendmsg+0x80/0x80 [ 316.451644][ T8424] ? lockdep_hardirqs_on+0x98/0x150 [ 316.457298][ T8424] do_syscall_64+0x55/0xa0 [ 316.461833][ T8424] ? clear_bhb_loop+0x40/0x90 [ 316.466541][ T8424] ? clear_bhb_loop+0x40/0x90 [ 316.471520][ T8424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.477442][ T8424] RIP: 0033:0x7fa867b9cdd9 [ 316.481883][ T8424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.501682][ T8424] RSP: 002b:00007fa8689f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.510392][ T8424] RAX: ffffffffffffffda RBX: 00007fa867e15fa0 RCX: 00007fa867b9cdd9 [ 316.518554][ T8424] RDX: 000000000000ff00 RSI: 0000200000000000 RDI: 0000000000000003 [ 316.526657][ T8424] RBP: 00007fa8689f5090 R08: 0000000000000000 R09: 0000000000000000 [ 316.534762][ T8424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.542944][ T8424] R13: 00007fa867e16038 R14: 00007fa867e15fa0 R15: 00007ffca966cfe8 [ 316.550950][ T8424] [ 316.722723][ T8430] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.821'. [ 316.932104][ T8432] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.823'. [ 317.248046][ T8437] FAULT_INJECTION: forcing a failure. [ 317.248046][ T8437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.294285][ T8437] CPU: 0 PID: 8437 Comm: syz.0.825 Not tainted syzkaller #0 [ 317.301774][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 317.311880][ T8437] Call Trace: [ 317.315388][ T8437] [ 317.318378][ T8437] dump_stack_lvl+0x18c/0x250 [ 317.323136][ T8437] ? show_regs_print_info+0x20/0x20 [ 317.328479][ T8437] ? load_image+0x420/0x420 [ 317.333029][ T8437] ? __might_fault+0xaa/0x120 [ 317.337742][ T8437] ? __lock_acquire+0x7d40/0x7d40 [ 317.342889][ T8437] should_fail_ex+0x39d/0x4d0 [ 317.347692][ T8437] strncpy_from_user+0x36/0x2d0 [ 317.352851][ T8437] getname_flags+0xf6/0x500 [ 317.357477][ T8437] do_sys_openat2+0xda/0x1d0 [ 317.362277][ T8437] ? do_sys_open+0xe0/0xe0 [ 317.366723][ T8437] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 317.372949][ T8437] ? lock_chain_count+0x20/0x20 [ 317.378105][ T8437] __x64_sys_openat+0x139/0x160 [ 317.383339][ T8437] do_syscall_64+0x55/0xa0 [ 317.387864][ T8437] ? clear_bhb_loop+0x40/0x90 [ 317.392656][ T8437] ? clear_bhb_loop+0x40/0x90 [ 317.397458][ T8437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.403466][ T8437] RIP: 0033:0x7fcf85f5d60e [ 317.408018][ T8437] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 317.427836][ T8437] RSP: 002b:00007fcf86e97ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 317.436376][ T8437] RAX: ffffffffffffffda RBX: 00007fcf86e986c0 RCX: 00007fcf85f5d60e [ 317.444477][ T8437] RDX: 0000000000000002 RSI: 00007fcf86e97f90 RDI: ffffffffffffff9c [ 317.452852][ T8437] RBP: 00007fcf86e98090 R08: 0000000000000000 R09: 0000000000000000 [ 317.461036][ T8437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.469045][ T8437] R13: 00007fcf86216038 R14: 00007fcf86215fa0 R15: 00007ffca307ffe8 [ 317.477319][ T8437] [ 317.574775][ T8445] FAULT_INJECTION: forcing a failure. [ 317.574775][ T8445] name failslab, interval 1, probability 0, space 0, times 0 [ 317.588551][ T8445] CPU: 0 PID: 8445 Comm: syz.3.828 Not tainted syzkaller #0 [ 317.595922][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 317.606681][ T8445] Call Trace: [ 317.610291][ T8445] [ 317.613418][ T8445] dump_stack_lvl+0x18c/0x250 [ 317.618178][ T8445] ? show_regs_print_info+0x20/0x20 [ 317.623624][ T8445] ? load_image+0x420/0x420 [ 317.628166][ T8445] ? __kmem_cache_alloc_node+0x13a/0x250 [ 317.633918][ T8445] ? netdev_core_pick_tx+0x340/0x340 [ 317.639408][ T8445] should_fail_ex+0x39d/0x4d0 [ 317.644125][ T8445] should_failslab+0x9/0x20 [ 317.648926][ T8445] slab_pre_alloc_hook+0x59/0x310 [ 317.654312][ T8445] kmem_cache_alloc+0x5a/0x2d0 [ 317.659278][ T8445] ? skb_clone+0x1eb/0x370 [ 317.663800][ T8445] skb_clone+0x1eb/0x370 [ 317.668069][ T8445] bpf_clone_redirect+0x167/0x4a0 [ 317.673274][ T8445] bpf_prog_6893982b85ceadf7+0x5e/0x63 [ 317.679018][ T8445] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 317.685318][ T8445] ? preempt_schedule+0xc0/0xd0 [ 317.690234][ T8445] ? bpf_test_run+0x174/0x870 [ 317.694952][ T8445] ? preempt_schedule_common+0x82/0xc0 [ 317.700444][ T8445] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 317.706564][ T8445] ? lockdep_softirqs_on+0x580/0x580 [ 317.712455][ T8445] ? lock_chain_count+0x20/0x20 [ 317.717353][ T8445] ? __local_bh_disable_ip+0x108/0x1a0 [ 317.722869][ T8445] ? __cant_sleep+0x220/0x220 [ 317.727877][ T8445] ? __local_bh_enable_ip+0x13a/0x1c0 [ 317.733303][ T8445] ? _local_bh_enable+0xa0/0xa0 [ 317.738189][ T8445] ? bpf_test_timer_continue+0x135/0x380 [ 317.744110][ T8445] ? bpf_test_run+0x174/0x870 [ 317.748816][ T8445] bpf_test_run+0x2df/0x870 [ 317.753619][ T8445] ? bpf_test_run+0x174/0x870 [ 317.758321][ T8445] ? convert___skb_to_skb+0x590/0x590 [ 317.763721][ T8445] ? eth_get_headlen+0x210/0x210 [ 317.768689][ T8445] ? slab_build_skb+0x25f/0x3f0 [ 317.773730][ T8445] ? convert___skb_to_skb+0x3d/0x590 [ 317.779059][ T8445] bpf_prog_test_run_skb+0xad2/0x12b0 [ 317.784484][ T8445] ? cpu_online+0x60/0x60 [ 317.788927][ T8445] bpf_prog_test_run+0x321/0x390 [ 317.793978][ T8445] __sys_bpf+0x49d/0x890 [ 317.798253][ T8445] ? bpf_link_show_fdinfo+0x390/0x390 [ 317.803652][ T8445] ? lock_chain_count+0x20/0x20 [ 317.808550][ T8445] __x64_sys_bpf+0x7c/0x90 [ 317.813030][ T8445] do_syscall_64+0x55/0xa0 [ 317.817571][ T8445] ? clear_bhb_loop+0x40/0x90 [ 317.822286][ T8445] ? clear_bhb_loop+0x40/0x90 [ 317.827074][ T8445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.833023][ T8445] RIP: 0033:0x7f01c799cdd9 [ 317.837472][ T8445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.857910][ T8445] RSP: 002b:00007f01c8949028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 317.866539][ T8445] RAX: ffffffffffffffda RBX: 00007f01c7c15fa0 RCX: 00007f01c799cdd9 [ 317.874705][ T8445] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 317.882867][ T8445] RBP: 00007f01c8949090 R08: 0000000000000000 R09: 0000000000000000 [ 317.891296][ T8445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 317.899354][ T8445] R13: 00007f01c7c16038 R14: 00007f01c7c15fa0 R15: 00007ffee1123d78 [ 317.907543][ T8445] [ 317.931175][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.937763][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.983094][ T8449] netlink: 'syz.2.829': attribute type 2 has an invalid length. [ 317.996087][ T8449] netlink: 132 bytes leftover after parsing attributes in process `syz.2.829'. [ 318.712705][ T8462] netlink: 152 bytes leftover after parsing attributes in process `syz.3.833'. [ 319.097403][ T8471] netlink: 188 bytes leftover after parsing attributes in process `syz.0.836'. [ 320.323381][ T8497] validate_nla: 2 callbacks suppressed [ 320.323412][ T8497] netlink: 'syz.0.843': attribute type 3 has an invalid length. [ 320.378666][ T8497] netlink: 132 bytes leftover after parsing attributes in process `syz.0.843'. [ 320.400955][ T8497] FAULT_INJECTION: forcing a failure. [ 320.400955][ T8497] name failslab, interval 1, probability 0, space 0, times 0 [ 320.425087][ T8497] CPU: 0 PID: 8497 Comm: syz.0.843 Not tainted syzkaller #0 [ 320.432493][ T8497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 320.443166][ T8497] Call Trace: [ 320.446515][ T8497] [ 320.449516][ T8497] dump_stack_lvl+0x18c/0x250 [ 320.454267][ T8497] ? show_regs_print_info+0x20/0x20 [ 320.459574][ T8497] ? load_image+0x420/0x420 [ 320.464322][ T8497] ? __might_sleep+0xe0/0xe0 [ 320.469051][ T8497] ? __lock_acquire+0x7d40/0x7d40 [ 320.474137][ T8497] should_fail_ex+0x39d/0x4d0 [ 320.478987][ T8497] should_failslab+0x9/0x20 [ 320.483542][ T8497] slab_pre_alloc_hook+0x59/0x310 [ 320.488893][ T8497] ? lockdep_hardirqs_on+0x98/0x150 [ 320.494296][ T8497] kmem_cache_alloc_node+0x60/0x320 [ 320.499540][ T8497] ? __alloc_skb+0x103/0x2c0 [ 320.504182][ T8497] __alloc_skb+0x103/0x2c0 [ 320.508646][ T8497] netlink_ack+0x376/0x1180 [ 320.513224][ T8497] ? __dev_queue_xmit+0x265/0x3660 [ 320.518400][ T8497] ? netlink_dump+0xe50/0xe50 [ 320.523123][ T8497] ? ref_tracker_free+0x690/0x840 [ 320.528213][ T8497] netlink_rcv_skb+0x2c5/0x4d0 [ 320.533023][ T8497] ? rtnetlink_bind+0x80/0x80 [ 320.537855][ T8497] ? netlink_ack+0x1180/0x1180 [ 320.542886][ T8497] ? __lock_acquire+0x7d40/0x7d40 [ 320.547993][ T8497] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.553518][ T8497] netlink_unicast+0x751/0x8d0 [ 320.558649][ T8497] netlink_sendmsg+0x8d0/0xbf0 [ 320.563532][ T8497] ? netlink_getsockopt+0x590/0x590 [ 320.569042][ T8497] ? aa_sock_msg_perm+0x94/0x150 [ 320.574037][ T8497] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 320.579378][ T8497] ? security_socket_sendmsg+0x80/0xa0 [ 320.585182][ T8497] ? netlink_getsockopt+0x590/0x590 [ 320.590612][ T8497] ____sys_sendmsg+0x5ba/0x960 [ 320.595899][ T8497] ? __asan_memset+0x22/0x40 [ 320.600620][ T8497] ? __sys_sendmsg_sock+0x30/0x30 [ 320.605941][ T8497] ? __import_iovec+0x5f2/0x850 [ 320.611107][ T8497] ? import_iovec+0x73/0xa0 [ 320.615927][ T8497] ___sys_sendmsg+0x2a6/0x360 [ 320.620816][ T8497] ? get_pid_task+0x20/0x1e0 [ 320.625484][ T8497] ? __sys_sendmsg+0x2a0/0x2a0 [ 320.630417][ T8497] ? __lock_acquire+0x7d40/0x7d40 [ 320.635941][ T8497] __se_sys_sendmsg+0x1c2/0x2b0 [ 320.641097][ T8497] ? __x64_sys_sendmsg+0x80/0x80 [ 320.646398][ T8497] ? lockdep_hardirqs_on+0x98/0x150 [ 320.651799][ T8497] do_syscall_64+0x55/0xa0 [ 320.656557][ T8497] ? clear_bhb_loop+0x40/0x90 [ 320.661397][ T8497] ? clear_bhb_loop+0x40/0x90 [ 320.666216][ T8497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.672205][ T8497] RIP: 0033:0x7fcf85f9cdd9 [ 320.676856][ T8497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.697155][ T8497] RSP: 002b:00007fcf86e98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.705623][ T8497] RAX: ffffffffffffffda RBX: 00007fcf86215fa0 RCX: 00007fcf85f9cdd9 [ 320.713662][ T8497] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 320.721758][ T8497] RBP: 00007fcf86e98090 R08: 0000000000000000 R09: 0000000000000000 [ 320.729765][ T8497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 320.737862][ T8497] R13: 00007fcf86216038 R14: 00007fcf86215fa0 R15: 00007ffca307ffe8 [ 320.746423][ T8497] [ 320.780744][ T8491] sit0: entered allmulticast mode [ 321.337494][ T8504] netlink: 14 bytes leftover after parsing attributes in process `syz.0.844'. [ 322.205258][ T8509] netlink: 830 bytes leftover after parsing attributes in process `syz.1.848'. [ 322.600680][ T8510] netlink: 'syz.0.847': attribute type 21 has an invalid length. [ 322.723419][ T8510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 322.731046][ T8510] IPv6: NLM_F_CREATE should be set when creating new route [ 322.738510][ T8510] IPv6: NLM_F_CREATE should be set when creating new route [ 322.745959][ T8510] IPv6: NLM_F_CREATE should be set when creating new route [ 323.587794][ T8522] netlink: 'syz.1.852': attribute type 2 has an invalid length. [ 323.595729][ T8522] netlink: 'syz.1.852': attribute type 8 has an invalid length. [ 323.606582][ T8522] netlink: 132 bytes leftover after parsing attributes in process `syz.1.852'. [ 324.360710][ T8531] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.853'. [ 324.489043][ T8535] netlink: 'syz.0.855': attribute type 3 has an invalid length. [ 324.507702][ T8535] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.855'. [ 324.661990][ T8531] @0Ù: renamed from bond_slave_1 (while UP) [ 328.403334][ T8559] netlink: 'syz.0.863': attribute type 29 has an invalid length. [ 328.591392][ T8564] netlink: 'syz.3.865': attribute type 10 has an invalid length. [ 328.736296][ T8564] netlink: 'syz.3.865': attribute type 19 has an invalid length. [ 328.757513][ T8564] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.865'. [ 328.858586][ T8559] netlink: 'syz.0.863': attribute type 6 has an invalid length. [ 328.977035][ T8559] netlink: 140 bytes leftover after parsing attributes in process `syz.0.863'. [ 329.251550][ T8569] IPv6: Can't replace route, no match found [ 329.878893][ T8583] netlink: 'syz.3.869': attribute type 3 has an invalid length. [ 329.936607][ T8583] netlink: 'syz.3.869': attribute type 1 has an invalid length. [ 329.946102][ T8583] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.869'. [ 330.121165][ T8589] netlink: 'syz.2.872': attribute type 1 has an invalid length. [ 330.145065][ T8589] netlink: 'syz.2.872': attribute type 3 has an invalid length. [ 330.168701][ T8589] netlink: 132 bytes leftover after parsing attributes in process `syz.2.872'. [ 330.191905][ T8589] netlink: 'syz.2.872': attribute type 10 has an invalid length. [ 330.446944][ T8589] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.455232][ T8589] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.510251][ T8589] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.517690][ T8589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.525487][ T8589] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.532981][ T8589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.622486][ T8589] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 333.208254][ T8606] netlink: 'syz.3.876': attribute type 21 has an invalid length. [ 333.448941][ T8606] IPv6: NLM_F_CREATE should be specified when creating new route [ 334.087276][ T8608] netlink: 'syz.2.878': attribute type 10 has an invalid length. [ 334.150719][ T8608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.878'. [ 334.993685][ T8631] netlink: 'syz.2.884': attribute type 11 has an invalid length. [ 335.023576][ T8631] netlink: 'syz.2.884': attribute type 1 has an invalid length. [ 335.063990][ T8631] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.884'. [ 336.081051][ T8648] netlink: 'syz.0.888': attribute type 6 has an invalid length. [ 336.095041][ T8648] netlink: 140 bytes leftover after parsing attributes in process `syz.0.888'. [ 336.277523][ T8650] IPv6: Can't replace route, no match found [ 337.274586][ T8659] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.891'. [ 338.399270][ T8687] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.903'. [ 339.063712][ T8678] netlink: 'syz.2.901': attribute type 29 has an invalid length. [ 339.098227][ T8682] netlink: 'syz.2.901': attribute type 6 has an invalid length. [ 339.115992][ T8682] netlink: 140 bytes leftover after parsing attributes in process `syz.2.901'. [ 339.132622][ T8686] IPv6: Can't replace route, no match found [ 339.144794][ T8693] netlink: 'syz.0.904': attribute type 21 has an invalid length. [ 339.937699][ T8711] syzkaller0: entered promiscuous mode [ 339.957257][ T8711] syzkaller0: entered allmulticast mode [ 343.360277][ T8746] netlink: 'syz.3.923': attribute type 29 has an invalid length. [ 343.533028][ T8746] netlink: 'syz.3.923': attribute type 6 has an invalid length. [ 343.560755][ T8746] netlink: 140 bytes leftover after parsing attributes in process `syz.3.923'. [ 343.745762][ T8754] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.927'. [ 343.788796][ T8752] netlink: 'syz.0.926': attribute type 29 has an invalid length. [ 343.956131][ T8752] netlink: 'syz.0.926': attribute type 6 has an invalid length. [ 343.966337][ T8752] netlink: 140 bytes leftover after parsing attributes in process `syz.0.926'. [ 344.038871][ T8755] IPv6: Can't replace route, no match found [ 344.043929][ T8760] netlink: 14 bytes leftover after parsing attributes in process `syz.3.930'. [ 344.061126][ T8760] netlink: get zone limit has 4 unknown bytes [ 344.162589][ T8764] netlink: 'syz.2.931': attribute type 29 has an invalid length. [ 344.303227][ T8764] netlink: 'syz.2.931': attribute type 6 has an invalid length. [ 344.325028][ T8764] netlink: 140 bytes leftover after parsing attributes in process `syz.2.931'. [ 344.430905][ T8766] IPv6: Can't replace route, no match found [ 344.730097][ T8772] netlink: 'syz.0.933': attribute type 10 has an invalid length. [ 344.996990][ T8781] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode [ 345.030641][ T8781] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 345.324311][ T8786] netlink: 'syz.1.939': attribute type 29 has an invalid length. [ 346.113212][ T8786] netlink: 'syz.1.939': attribute type 6 has an invalid length. [ 346.128577][ T8786] netlink: 140 bytes leftover after parsing attributes in process `syz.1.939'. [ 346.149334][ T8791] IPv6: Can't replace route, no match found [ 347.502956][ T8815] netlink: 'syz.1.954': attribute type 9 has an invalid length. [ 347.556440][ T8815] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.954'. [ 348.370087][ T8825] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 348.548256][ T8829] netlink: 'syz.1.948': attribute type 10 has an invalid length. [ 348.744094][ T8835] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.951'. [ 348.765129][ T8835] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 348.785978][ T8835] CPU: 0 PID: 8835 Comm: syz.0.951 Not tainted syzkaller #0 [ 348.793474][ T8835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 348.803680][ T8835] Call Trace: [ 348.807009][ T8835] [ 348.810070][ T8835] dump_stack_lvl+0x18c/0x250 [ 348.814833][ T8835] ? show_regs_print_info+0x20/0x20 [ 348.820318][ T8835] ? load_image+0x420/0x420 [ 348.825119][ T8835] sysfs_warn_dup+0x8e/0xa0 [ 348.829767][ T8835] sysfs_do_create_link_sd+0xc0/0x110 [ 348.835197][ T8835] device_add_class_symlinks+0x1cf/0x240 [ 348.841137][ T8835] device_add+0x507/0xc20 [ 348.845609][ T8835] wiphy_register+0x1dad/0x2ae0 [ 348.850846][ T8835] ? cfg80211_event_work+0x40/0x40 [ 348.856018][ T8835] ? minstrel_ht_alloc+0x88a/0x990 [ 348.861270][ T8835] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 348.867401][ T8835] ieee80211_register_hw+0x3464/0x4250 [ 348.873002][ T8835] ? ieee80211_tasklet_handler+0x20/0x20 [ 348.878758][ T8835] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 348.884685][ T8835] ? __debug_object_init+0xec/0x450 [ 348.889918][ T8835] ? __asan_memset+0x22/0x40 [ 348.894636][ T8835] ? __hrtimer_init+0x186/0x270 [ 348.899877][ T8835] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 348.905731][ T8835] ? mac80211_hwsim_free+0x220/0x220 [ 348.911043][ T8835] ? rcu_is_watching+0x15/0xb0 [ 348.915920][ T8835] ? kstrndup+0xbd/0x140 [ 348.920288][ T8835] hwsim_new_radio_nl+0xdc9/0x1a90 [ 348.925606][ T8835] ? __nla_validate+0x50/0x50 [ 348.930405][ T8835] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 348.937148][ T8835] ? __nla_parse+0x40/0x50 [ 348.941765][ T8835] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 348.948296][ T8835] genl_family_rcv_msg_doit+0x211/0x310 [ 348.953865][ T8835] ? end_current_label_crit_section+0x170/0x170 [ 348.960226][ T8835] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 348.966234][ T8835] ? bpf_lsm_capable+0x9/0x10 [ 348.971023][ T8835] ? security_capable+0x89/0xb0 [ 348.976077][ T8835] genl_rcv_msg+0x619/0x7a0 [ 348.980780][ T8835] ? genl_bind+0x360/0x360 [ 348.985249][ T8835] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 348.992018][ T8835] ? ref_tracker_free+0x690/0x840 [ 348.997365][ T8835] netlink_rcv_skb+0x241/0x4d0 [ 349.002352][ T8835] ? genl_bind+0x360/0x360 [ 349.006807][ T8835] ? netlink_ack+0x1180/0x1180 [ 349.011640][ T8835] ? __lock_acquire+0x7d40/0x7d40 [ 349.016697][ T8835] ? down_read+0x1ac/0x2e0 [ 349.021184][ T8835] genl_rcv+0x28/0x40 [ 349.025294][ T8835] netlink_unicast+0x751/0x8d0 [ 349.030186][ T8835] netlink_sendmsg+0x8d0/0xbf0 [ 349.034989][ T8835] ? netlink_getsockopt+0x590/0x590 [ 349.040230][ T8835] ? aa_sock_msg_perm+0x94/0x150 [ 349.045495][ T8835] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 349.050930][ T8835] ? security_socket_sendmsg+0x80/0xa0 [ 349.056511][ T8835] ? netlink_getsockopt+0x590/0x590 [ 349.061769][ T8835] ____sys_sendmsg+0x5ba/0x960 [ 349.066682][ T8835] ? __asan_memset+0x22/0x40 [ 349.071341][ T8835] ? __sys_sendmsg_sock+0x30/0x30 [ 349.076570][ T8835] ? __import_iovec+0x5f2/0x850 [ 349.081520][ T8835] ? import_iovec+0x73/0xa0 [ 349.086244][ T8835] ___sys_sendmsg+0x2a6/0x360 [ 349.090958][ T8835] ? __sys_sendmsg+0x2a0/0x2a0 [ 349.095918][ T8835] __se_sys_sendmsg+0x1c2/0x2b0 [ 349.100798][ T8835] ? __x64_sys_sendmsg+0x80/0x80 [ 349.105867][ T8835] ? lockdep_hardirqs_on+0x98/0x150 [ 349.111088][ T8835] do_syscall_64+0x55/0xa0 [ 349.115524][ T8835] ? clear_bhb_loop+0x40/0x90 [ 349.120222][ T8835] ? clear_bhb_loop+0x40/0x90 [ 349.124927][ T8835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.130984][ T8835] RIP: 0033:0x7fcf85f9cdd9 [ 349.135426][ T8835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.155683][ T8835] RSP: 002b:00007fcf86e98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.164319][ T8835] RAX: ffffffffffffffda RBX: 00007fcf86215fa0 RCX: 00007fcf85f9cdd9 [ 349.172361][ T8835] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 349.180439][ T8835] RBP: 00007fcf86032d69 R08: 0000000000000000 R09: 0000000000000000 [ 349.188599][ T8835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.196676][ T8835] R13: 00007fcf86216038 R14: 00007fcf86215fa0 R15: 00007ffca307ffe8 [ 349.204858][ T8835] [ 349.307912][ T8837] netlink: 'syz.2.952': attribute type 29 has an invalid length. [ 349.343081][ T8837] netlink: 'syz.2.952': attribute type 6 has an invalid length. [ 349.371096][ T8837] netlink: 140 bytes leftover after parsing attributes in process `syz.2.952'. [ 349.406494][ T8840] netlink: 'syz.1.953': attribute type 6 has an invalid length. [ 349.425468][ T8837] IPv6: Can't replace route, no match found [ 349.988043][ T8858] netlink: 'syz.1.962': attribute type 29 has an invalid length. [ 349.996346][ T8858] netlink: 'syz.1.962': attribute type 29 has an invalid length. [ 350.007319][ T8858] netlink: 'syz.1.962': attribute type 29 has an invalid length. [ 350.017159][ T8858] netlink: 'syz.1.962': attribute type 29 has an invalid length. [ 350.521896][ T8861] netlink: 'syz.3.963': attribute type 10 has an invalid length. [ 350.652029][ T8861] geneve1: left promiscuous mode [ 350.660985][ T8861] geneve1: left allmulticast mode [ 352.873398][ T8884] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.960'. [ 353.345075][ T8884] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 353.816404][ T8899] netlink: 'syz.2.972': attribute type 29 has an invalid length. [ 353.923134][ T8900] netlink: 'syz.2.972': attribute type 6 has an invalid length. [ 353.975096][ T8900] netlink: 140 bytes leftover after parsing attributes in process `syz.2.972'. [ 353.992798][ T8901] IPv6: Can't replace route, no match found [ 355.388532][ T8914] netlink: 'syz.2.975': attribute type 10 has an invalid length. [ 355.413434][ T8914] geneve1: left promiscuous mode [ 355.436518][ T8914] geneve1: left allmulticast mode [ 355.688273][ T8920] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 356.122342][ T8924] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.979'. [ 356.211303][ T8927] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.980'. [ 356.247305][ T8922] netlink: 'syz.0.978': attribute type 6 has an invalid length. [ 356.285095][ T8922] netlink: 140 bytes leftover after parsing attributes in process `syz.0.978'. [ 356.546360][ T8925] IPv6: Can't replace route, no match found [ 356.552575][ T8927] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.980'. [ 363.287583][ T8968] netlink: 'syz.3.988': attribute type 10 has an invalid length. [ 363.295688][ T8968] netlink: 40 bytes leftover after parsing attributes in process `syz.3.988'. [ 363.337767][ T8968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.681628][ T8971] mac80211_hwsim hwsim20 wlan1: left promiscuous mode [ 364.090525][ T8982] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.995'. [ 364.141281][ T8982] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.995'. [ 364.332833][ T8984] netlink: 'syz.3.996': attribute type 6 has an invalid length. [ 364.370222][ T8984] netlink: 140 bytes leftover after parsing attributes in process `syz.3.996'. [ 365.372081][ T9010] geneve1: entered promiscuous mode [ 365.390668][ T9010] geneve1: entered allmulticast mode [ 366.927682][ T9026] netlink: 195628 bytes leftover after parsing attributes in process `syz.2.1010'. [ 367.310365][ T9030] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1012'. [ 367.342321][ T9030] netlink: get zone limit has 4 unknown bytes [ 367.763556][ T9036] FAULT_INJECTION: forcing a failure. [ 367.763556][ T9036] name failslab, interval 1, probability 0, space 0, times 0 [ 367.827340][ T9036] CPU: 0 PID: 9036 Comm: syz.2.1014 Not tainted syzkaller #0 [ 367.835003][ T9036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 367.845379][ T9036] Call Trace: [ 367.848709][ T9036] [ 367.851862][ T9036] dump_stack_lvl+0x18c/0x250 [ 367.857077][ T9036] ? sctp_sendmsg+0x1575/0x28c0 [ 367.862419][ T9036] ? ___sys_sendmsg+0x2a6/0x360 [ 367.867605][ T9036] ? show_regs_print_info+0x20/0x20 [ 367.873052][ T9036] ? load_image+0x420/0x420 [ 367.877911][ T9036] should_fail_ex+0x39d/0x4d0 [ 367.883095][ T9036] should_failslab+0x9/0x20 [ 367.888027][ T9036] slab_pre_alloc_hook+0x59/0x310 [ 367.893533][ T9036] ? sctp_add_bind_addr+0x8c/0x360 [ 367.898985][ T9036] __kmem_cache_alloc_node+0x53/0x250 [ 367.904628][ T9036] ? sctp_add_bind_addr+0x8c/0x360 [ 367.909920][ T9036] kmalloc_trace+0x2a/0xe0 [ 367.914512][ T9036] sctp_add_bind_addr+0x8c/0x360 [ 367.919520][ T9036] sctp_copy_local_addr_list+0x315/0x4f0 [ 367.925399][ T9036] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 367.931359][ T9036] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 367.937672][ T9036] ? sctp_v4_is_any+0x35/0x60 [ 367.942433][ T9036] ? sctp_copy_one_addr+0x8c/0x350 [ 367.947739][ T9036] sctp_bind_addr_copy+0xb3/0x3c0 [ 367.952837][ T9036] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 367.959259][ T9036] sctp_connect_new_asoc+0x2f9/0x6a0 [ 367.964696][ T9036] ? __sctp_connect+0xd80/0xd80 [ 367.970348][ T9036] ? __local_bh_enable_ip+0x13a/0x1c0 [ 367.976927][ T9036] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 367.983168][ T9036] ? security_sctp_bind_connect+0x89/0xb0 [ 367.988956][ T9036] sctp_sendmsg+0x1575/0x28c0 [ 367.993703][ T9036] ? sctp_getsockopt+0xb60/0xb60 [ 367.998694][ T9036] ? aa_sk_perm+0x83c/0x970 [ 368.003457][ T9036] ? aa_af_perm+0x330/0x330 [ 368.007896][ T9040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.008185][ T9036] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 368.030049][ T9036] ? sock_rps_record_flow+0x19/0x3f0 [ 368.035527][ T9036] ? inet_sendmsg+0xe9/0x2f0 [ 368.040252][ T9036] ? inet_send_prepare+0x260/0x260 [ 368.045473][ T9036] ____sys_sendmsg+0x5ba/0x960 [ 368.050296][ T9036] ? __lock_acquire+0x7d40/0x7d40 [ 368.055718][ T9036] ? __asan_memset+0x22/0x40 [ 368.057249][ T9044] netlink: 'syz.0.1017': attribute type 10 has an invalid length. [ 368.060671][ T9036] ? __sys_sendmsg_sock+0x30/0x30 [ 368.060698][ T9036] ? __import_iovec+0x5f2/0x850 [ 368.079381][ T9036] ? import_iovec+0x73/0xa0 [ 368.084202][ T9036] ___sys_sendmsg+0x2a6/0x360 [ 368.089332][ T9036] ? get_pid_task+0x20/0x1e0 [ 368.094778][ T9036] ? __sys_sendmsg+0x2a0/0x2a0 [ 368.099959][ T9036] ? __lock_acquire+0x7d40/0x7d40 [ 368.105483][ T9036] __se_sys_sendmsg+0x1c2/0x2b0 [ 368.110448][ T9045] netlink: 'syz.0.1017': attribute type 9 has an invalid length. [ 368.110466][ T9036] ? __x64_sys_sendmsg+0x80/0x80 [ 368.118321][ T9036] ? lockdep_hardirqs_on+0x98/0x150 [ 368.118353][ T9036] do_syscall_64+0x55/0xa0 [ 368.118371][ T9036] ? clear_bhb_loop+0x40/0x90 [ 368.118395][ T9036] ? clear_bhb_loop+0x40/0x90 [ 368.118420][ T9036] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.118443][ T9036] RIP: 0033:0x7f55fa19cdd9 [ 368.118462][ T9036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.123687][ T9045] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1017'. [ 368.128811][ T9036] RSP: 002b:00007f55fb0c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.128837][ T9036] RAX: ffffffffffffffda RBX: 00007f55fa415fa0 RCX: 00007f55fa19cdd9 [ 368.128851][ T9036] RDX: 00000000000040f0 RSI: 0000200000000240 RDI: 0000000000000003 [ 368.128864][ T9036] RBP: 00007f55fb0c5090 R08: 0000000000000000 R09: 0000000000000000 [ 368.128877][ T9036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 368.128890][ T9036] R13: 00007f55fa416038 R14: 00007f55fa415fa0 R15: 00007ffe2f86ab58 [ 368.128921][ T9036] [ 368.282263][ T9044] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.316106][ T9044] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.351232][ T9044] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.384895][ T9044] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.627667][ T9052] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1003'. [ 368.756523][ T9052] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 368.764706][ T9052] CPU: 1 PID: 9052 Comm: syz.1.1003 Not tainted syzkaller #0 [ 368.772232][ T9052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 368.782540][ T9052] Call Trace: [ 368.785883][ T9052] [ 368.788881][ T9052] dump_stack_lvl+0x18c/0x250 [ 368.793728][ T9052] ? show_regs_print_info+0x20/0x20 [ 368.799168][ T9052] ? load_image+0x420/0x420 [ 368.803774][ T9052] sysfs_warn_dup+0x8e/0xa0 [ 368.808445][ T9052] sysfs_do_create_link_sd+0xc0/0x110 [ 368.813907][ T9052] device_add_class_symlinks+0x1cf/0x240 [ 368.819648][ T9052] device_add+0x507/0xc20 [ 368.824330][ T9052] wiphy_register+0x1dad/0x2ae0 [ 368.829984][ T9052] ? cfg80211_event_work+0x40/0x40 [ 368.835429][ T9052] ? minstrel_ht_alloc+0x88a/0x990 [ 368.840991][ T9052] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 368.847297][ T9052] ieee80211_register_hw+0x3464/0x4250 [ 368.852979][ T9052] ? ieee80211_tasklet_handler+0x20/0x20 [ 368.858755][ T9052] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 368.865351][ T9052] ? __debug_object_init+0xec/0x450 [ 368.871253][ T9052] ? __asan_memset+0x22/0x40 [ 368.876700][ T9052] ? __hrtimer_init+0x186/0x270 [ 368.882074][ T9052] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 368.888513][ T9052] ? mac80211_hwsim_free+0x220/0x220 [ 368.893956][ T9052] ? rcu_is_watching+0x15/0xb0 [ 368.899112][ T9052] ? kstrndup+0xbd/0x140 [ 368.903719][ T9052] hwsim_new_radio_nl+0xdc9/0x1a90 [ 368.909310][ T9052] ? __nla_validate+0x50/0x50 [ 368.914037][ T9052] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 368.920626][ T9052] ? __nla_parse+0x40/0x50 [ 368.925093][ T9052] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 368.931887][ T9052] genl_family_rcv_msg_doit+0x211/0x310 [ 368.937636][ T9052] ? end_current_label_crit_section+0x170/0x170 [ 368.944081][ T9052] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 368.950005][ T9052] ? bpf_lsm_capable+0x9/0x10 [ 368.954796][ T9052] ? security_capable+0x89/0xb0 [ 368.959696][ T9052] genl_rcv_msg+0x619/0x7a0 [ 368.964227][ T9052] ? genl_bind+0x360/0x360 [ 368.968757][ T9052] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 368.975117][ T9052] ? ref_tracker_free+0x690/0x840 [ 368.980362][ T9052] netlink_rcv_skb+0x241/0x4d0 [ 368.985250][ T9052] ? genl_bind+0x360/0x360 [ 368.989792][ T9052] ? netlink_ack+0x1180/0x1180 [ 368.994589][ T9052] ? __lock_acquire+0x7d40/0x7d40 [ 368.999646][ T9052] ? down_read+0x1ac/0x2e0 [ 369.004092][ T9052] genl_rcv+0x28/0x40 [ 369.008271][ T9052] netlink_unicast+0x751/0x8d0 [ 369.013102][ T9052] netlink_sendmsg+0x8d0/0xbf0 [ 369.018000][ T9052] ? netlink_getsockopt+0x590/0x590 [ 369.023336][ T9052] ? aa_sock_msg_perm+0x94/0x150 [ 369.028410][ T9052] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 369.033910][ T9052] ? security_socket_sendmsg+0x80/0xa0 [ 369.039405][ T9052] ? netlink_getsockopt+0x590/0x590 [ 369.044906][ T9052] ____sys_sendmsg+0x5ba/0x960 [ 369.049722][ T9052] ? __asan_memset+0x22/0x40 [ 369.054342][ T9052] ? __sys_sendmsg_sock+0x30/0x30 [ 369.059395][ T9052] ? __import_iovec+0x5f2/0x850 [ 369.064269][ T9052] ? import_iovec+0x73/0xa0 [ 369.068811][ T9052] ___sys_sendmsg+0x2a6/0x360 [ 369.073615][ T9052] ? __sys_sendmsg+0x2a0/0x2a0 [ 369.078451][ T9052] __se_sys_sendmsg+0x1c2/0x2b0 [ 369.083556][ T9052] ? __x64_sys_sendmsg+0x80/0x80 [ 369.088705][ T9052] ? lockdep_hardirqs_on+0x98/0x150 [ 369.094026][ T9052] do_syscall_64+0x55/0xa0 [ 369.098597][ T9052] ? clear_bhb_loop+0x40/0x90 [ 369.103386][ T9052] ? clear_bhb_loop+0x40/0x90 [ 369.108197][ T9052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.114120][ T9052] RIP: 0033:0x7fa867b9cdd9 [ 369.118652][ T9052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.138982][ T9052] RSP: 002b:00007fa8689b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.147542][ T9052] RAX: ffffffffffffffda RBX: 00007fa867e16180 RCX: 00007fa867b9cdd9 [ 369.155717][ T9052] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 369.163788][ T9052] RBP: 00007fa867c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 369.171774][ T9052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.179762][ T9052] R13: 00007fa867e16218 R14: 00007fa867e16180 R15: 00007ffca966cfe8 [ 369.187860][ T9052] [ 369.348312][ T9061] netlink: 'syz.0.1028': attribute type 10 has an invalid length. [ 370.162261][ T9079] netlink: 'syz.0.1023': attribute type 10 has an invalid length. [ 370.172665][ T9079] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1023'. [ 370.690871][ T9096] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1033'. [ 371.082898][ T9097] netlink: 'syz.2.1032': attribute type 10 has an invalid length. [ 371.093014][ T9105] netlink: 'syz.1.1037': attribute type 3 has an invalid length. [ 371.463519][ T9110] FAULT_INJECTION: forcing a failure. [ 371.463519][ T9110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.561170][ T9110] CPU: 0 PID: 9110 Comm: syz.3.1038 Not tainted syzkaller #0 [ 371.568836][ T9110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 371.579565][ T9110] Call Trace: [ 371.583160][ T9110] [ 371.586486][ T9110] dump_stack_lvl+0x18c/0x250 [ 371.592025][ T9110] ? show_regs_print_info+0x20/0x20 [ 371.597392][ T9110] ? load_image+0x420/0x420 [ 371.602225][ T9110] ? __might_fault+0xaa/0x120 [ 371.607216][ T9110] ? __lock_acquire+0x7d40/0x7d40 [ 371.613092][ T9110] should_fail_ex+0x39d/0x4d0 [ 371.618004][ T9110] _copy_from_user+0x2f/0xe0 [ 371.622757][ T9110] generic_map_update_batch+0x54b/0x810 [ 371.628714][ T9110] ? rcu_read_unlock+0xa0/0xa0 [ 371.633728][ T9110] ? __fdget+0x180/0x210 [ 371.638191][ T9110] ? rcu_read_unlock+0xa0/0xa0 [ 371.643052][ T9110] bpf_map_do_batch+0x3d7/0x610 [ 371.648218][ T9110] __sys_bpf+0x381/0x890 [ 371.652577][ T9110] ? bpf_link_show_fdinfo+0x390/0x390 [ 371.658342][ T9110] ? lock_chain_count+0x20/0x20 [ 371.663513][ T9110] __x64_sys_bpf+0x7c/0x90 [ 371.668088][ T9110] do_syscall_64+0x55/0xa0 [ 371.672600][ T9110] ? clear_bhb_loop+0x40/0x90 [ 371.677427][ T9110] ? clear_bhb_loop+0x40/0x90 [ 371.682214][ T9110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.688295][ T9110] RIP: 0033:0x7f01c799cdd9 [ 371.692804][ T9110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.712664][ T9110] RSP: 002b:00007f01c8949028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 371.721278][ T9110] RAX: ffffffffffffffda RBX: 00007f01c7c15fa0 RCX: 00007f01c799cdd9 [ 371.729458][ T9110] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 371.737539][ T9110] RBP: 00007f01c8949090 R08: 0000000000000000 R09: 0000000000000000 [ 371.745599][ T9110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.753837][ T9110] R13: 00007f01c7c16038 R14: 00007f01c7c15fa0 R15: 00007ffee1123d78 [ 371.762285][ T9110] [ 372.247451][ T9116] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 372.514781][ T9125] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1044'. [ 372.900007][ T9134] netlink: 'syz.3.1047': attribute type 10 has an invalid length. [ 372.939880][ T9134] geneve1: left promiscuous mode [ 372.947206][ T9134] geneve1: left allmulticast mode [ 373.829432][ T9163] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1056'. [ 374.110232][ T9169] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1059'. [ 375.097642][ T9198] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode [ 375.404202][ T9193] netlink: 'syz.3.1067': attribute type 10 has an invalid length. [ 375.427539][ T9193] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1067'. [ 375.725281][ T9208] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1078'. [ 375.765391][ T9208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1078'. [ 377.553963][ T9242] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1082'. [ 377.711184][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1082'. [ 377.976721][ T9241] netlink: 'syz.3.1081': attribute type 29 has an invalid length. [ 378.056380][ T9241] netlink: 'syz.3.1081': attribute type 29 has an invalid length. [ 378.081976][ T9248] netlink: 'syz.0.1083': attribute type 10 has an invalid length. [ 378.092440][ T9248] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 378.156490][ T9244] netlink: 'syz.3.1081': attribute type 29 has an invalid length. [ 378.248436][ T9247] netlink: 'syz.3.1081': attribute type 29 has an invalid length. [ 378.310546][ T9256] netlink: 'syz.1.1086': attribute type 21 has an invalid length. [ 378.350114][ T9238] netlink: 'syz.3.1081': attribute type 29 has an invalid length. [ 379.228082][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.234626][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.183676][ T9274] syzkaller0: entered promiscuous mode [ 380.206112][ T9274] syzkaller0: entered allmulticast mode [ 380.324644][ T9284] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1093'. [ 382.739482][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1093'. [ 382.749194][ T9287] netlink: 'syz.0.1094': attribute type 6 has an invalid length. [ 382.757534][ T9287] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1094'. [ 382.778649][ T9289] IPv6: Can't replace route, no match found [ 382.949268][ T9295] FAULT_INJECTION: forcing a failure. [ 382.949268][ T9295] name failslab, interval 1, probability 0, space 0, times 0 [ 382.962665][ T9298] netlink: 'syz.2.1097': attribute type 21 has an invalid length. [ 382.962690][ T9298] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1097'. [ 382.969653][ T9295] CPU: 0 PID: 9295 Comm: syz.0.1098 Not tainted syzkaller #0 [ 382.987988][ T9295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 382.998117][ T9295] Call Trace: [ 383.001519][ T9295] [ 383.004579][ T9295] dump_stack_lvl+0x18c/0x250 [ 383.009393][ T9295] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 383.014657][ T9295] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.021301][ T9295] ? show_regs_print_info+0x20/0x20 [ 383.026541][ T9295] ? load_image+0x420/0x420 [ 383.031113][ T9295] should_fail_ex+0x39d/0x4d0 [ 383.035924][ T9295] should_failslab+0x9/0x20 [ 383.040647][ T9295] slab_pre_alloc_hook+0x59/0x310 [ 383.046180][ T9295] ? nf_ct_ext_add+0x1ab/0x440 [ 383.051917][ T9295] ? nf_ct_ext_add+0x1ab/0x440 [ 383.056877][ T9295] __kmem_cache_alloc_node+0x53/0x250 [ 383.062540][ T9295] ? nf_ct_ext_add+0x1ab/0x440 [ 383.067325][ T9295] __kmalloc_node_track_caller+0xa2/0x230 [ 383.073072][ T9295] krealloc+0x86/0x120 [ 383.077172][ T9295] nf_ct_ext_add+0x1ab/0x440 [ 383.081787][ T9295] init_conntrack+0x69c/0xf10 [ 383.086490][ T9295] ? early_drop+0x7f0/0x7f0 [ 383.091013][ T9295] ? nf_conntrack_find_get+0x650/0x650 [ 383.096520][ T9295] ? __local_bh_enable_ip+0x13a/0x1c0 [ 383.102177][ T9295] ? __siphash_unaligned+0x22e/0x3a0 [ 383.107580][ T9295] nf_conntrack_in+0xc06/0x15c0 [ 383.112730][ T9295] ? nf_ct_pernet+0x270/0x270 [ 383.117697][ T9295] ? ipt_do_table+0x2c1/0x15e0 [ 383.122497][ T9295] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 383.128060][ T9295] ? ipv4_conntrack_local+0x123/0x200 [ 383.133497][ T9295] ? ipv4_conntrack_in+0x20/0x20 [ 383.138484][ T9295] nf_hook_slow+0xbd/0x200 [ 383.142939][ T9295] ? nf_hook+0x390/0x390 [ 383.147382][ T9295] nf_hook+0x228/0x390 [ 383.151571][ T9295] ? nf_hook+0xa2/0x390 [ 383.155832][ T9295] ? __ip_local_out+0x5f0/0x5f0 [ 383.160730][ T9295] ? nf_hook+0x390/0x390 [ 383.165109][ T9295] ? __lock_acquire+0x7d40/0x7d40 [ 383.170195][ T9295] ? ip_fast_csum+0x1ee/0x2b0 [ 383.174903][ T9295] __ip_local_out+0x4db/0x5f0 [ 383.179685][ T9295] ? nf_hook+0x390/0x390 [ 383.183946][ T9295] ? __ip_queue_xmit+0x5d/0x1950 [ 383.188987][ T9295] __ip_queue_xmit+0xf7c/0x1950 [ 383.193901][ T9295] ? __ip_queue_xmit+0x5d/0x1950 [ 383.198864][ T9295] sctp_packet_transmit+0x247d/0x2a30 [ 383.204384][ T9295] sctp_packet_singleton+0x235/0x340 [ 383.209812][ T9295] ? sctp_outq_select_transport+0x570/0x570 [ 383.215797][ T9295] ? sctp_outq_select_transport+0x45d/0x570 [ 383.221810][ T9295] ? sctp_transport_burst_limited+0x197/0x280 [ 383.228094][ T9295] sctp_outq_flush+0x50e/0x3120 [ 383.233013][ T9295] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 383.239025][ T9295] ? _raw_spin_unlock+0x40/0x40 [ 383.243900][ T9295] ? rcu_is_watching+0x15/0xb0 [ 383.248777][ T9295] ? enqueue_timer+0x23d/0x550 [ 383.253556][ T9295] ? sctp_outq_tail+0x8a0/0x8a0 [ 383.258441][ T9295] ? sctp_outq_tail+0x604/0x8a0 [ 383.263490][ T9295] ? sctp_outq_uncork+0x4d/0xa0 [ 383.268421][ T9295] sctp_do_sm+0x533b/0x5a60 [ 383.272955][ T9295] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 383.278946][ T9295] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 383.284109][ T9295] ? __sk_mem_raise_allocated+0xa29/0x1340 [ 383.290294][ T9295] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 383.295692][ T9295] sctp_sendmsg_to_asoc+0x10a6/0x1830 [ 383.301187][ T9295] ? __asan_memcpy+0x40/0x70 [ 383.305921][ T9295] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 383.311413][ T9295] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 383.317346][ T9295] ? __sctp_connect+0xd80/0xd80 [ 383.322302][ T9295] ? __local_bh_enable_ip+0x13a/0x1c0 [ 383.327784][ T9295] ? _local_bh_enable+0xa0/0xa0 [ 383.332650][ T9295] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 383.338648][ T9295] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 383.344474][ T9295] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 383.350475][ T9295] ? security_sctp_bind_connect+0x89/0xb0 [ 383.356301][ T9295] sctp_sendmsg+0x1b83/0x28c0 [ 383.361094][ T9295] ? sctp_getsockopt+0xb60/0xb60 [ 383.366227][ T9295] ? aa_sk_perm+0x83c/0x970 [ 383.371046][ T9295] ? aa_af_perm+0x330/0x330 [ 383.375859][ T9295] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 383.382594][ T9295] ? sock_rps_record_flow+0x19/0x3f0 [ 383.388012][ T9295] ? inet_sendmsg+0x7c/0x2f0 [ 383.392621][ T9295] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 383.398072][ T9295] ? security_socket_sendmsg+0x80/0xa0 [ 383.403580][ T9295] ? inet_send_prepare+0x260/0x260 [ 383.408927][ T9295] ____sys_sendmsg+0x5ba/0x960 [ 383.413823][ T9295] ? __lock_acquire+0x7d40/0x7d40 [ 383.419437][ T9295] ? __asan_memset+0x22/0x40 [ 383.424153][ T9295] ? __sys_sendmsg_sock+0x30/0x30 [ 383.429200][ T9295] ? __import_iovec+0x5f2/0x850 [ 383.434165][ T9295] ? import_iovec+0x73/0xa0 [ 383.438921][ T9295] ___sys_sendmsg+0x2a6/0x360 [ 383.443701][ T9295] ? get_pid_task+0x20/0x1e0 [ 383.448669][ T9295] ? __sys_sendmsg+0x2a0/0x2a0 [ 383.453556][ T9295] ? __lock_acquire+0x7d40/0x7d40 [ 383.458721][ T9295] __se_sys_sendmsg+0x1c2/0x2b0 [ 383.464311][ T9295] ? __x64_sys_sendmsg+0x80/0x80 [ 383.469367][ T9295] ? lockdep_hardirqs_on+0x98/0x150 [ 383.474620][ T9295] do_syscall_64+0x55/0xa0 [ 383.479223][ T9295] ? clear_bhb_loop+0x40/0x90 [ 383.484095][ T9295] ? clear_bhb_loop+0x40/0x90 [ 383.489409][ T9295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.495334][ T9295] RIP: 0033:0x7fcf85f9cdd9 [ 383.499966][ T9295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.520388][ T9295] RSP: 002b:00007fcf86e98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.528920][ T9295] RAX: ffffffffffffffda RBX: 00007fcf86215fa0 RCX: 00007fcf85f9cdd9 [ 383.536995][ T9295] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 383.545019][ T9295] RBP: 00007fcf86e98090 R08: 0000000000000000 R09: 0000000000000000 [ 383.553113][ T9295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 383.561473][ T9295] R13: 00007fcf86216038 R14: 00007fcf86215fa0 R15: 00007ffca307ffe8 [ 383.569600][ T9295] [ 383.649262][ T9302] netlink: 'syz.1.1096': attribute type 21 has an invalid length. [ 383.657512][ T9302] netlink: 'syz.1.1096': attribute type 1 has an invalid length. [ 383.781311][ T9308] FAULT_INJECTION: forcing a failure. [ 383.781311][ T9308] name failslab, interval 1, probability 0, space 0, times 0 [ 383.794363][ T9308] CPU: 1 PID: 9308 Comm: syz.0.1102 Not tainted syzkaller #0 [ 383.801836][ T9308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 383.812400][ T9308] Call Trace: [ 383.815903][ T9308] [ 383.818920][ T9308] dump_stack_lvl+0x18c/0x250 [ 383.824017][ T9308] ? show_regs_print_info+0x20/0x20 [ 383.829278][ T9308] ? load_image+0x420/0x420 [ 383.830782][ T9309] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 383.833945][ T9308] ? netdev_core_pick_tx+0x340/0x340 [ 383.846766][ T9308] ? rcu_is_watching+0x15/0xb0 [ 383.851737][ T9308] should_fail_ex+0x39d/0x4d0 [ 383.856763][ T9308] should_failslab+0x9/0x20 [ 383.861412][ T9308] slab_pre_alloc_hook+0x59/0x310 [ 383.866867][ T9308] kmem_cache_alloc+0x5a/0x2d0 [ 383.872042][ T9308] ? skb_clone+0x1eb/0x370 [ 383.876517][ T9308] skb_clone+0x1eb/0x370 [ 383.880829][ T9308] bpf_clone_redirect+0x167/0x4a0 [ 383.885931][ T9308] bpf_prog_973cd02a7a0e8181+0x5e/0x63 [ 383.891502][ T9308] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 383.897623][ T9308] ? lock_chain_count+0x20/0x20 [ 383.902678][ T9308] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 383.908882][ T9308] ? lockdep_softirqs_on+0x580/0x580 [ 383.914292][ T9308] ? lock_chain_count+0x20/0x20 [ 383.919338][ T9308] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 383.925958][ T9308] ? __local_bh_disable_ip+0x108/0x1a0 [ 383.931437][ T9308] ? __cant_sleep+0x220/0x220 [ 383.936219][ T9308] ? __local_bh_enable_ip+0x13a/0x1c0 [ 383.941689][ T9308] ? _local_bh_enable+0xa0/0xa0 [ 383.946559][ T9308] ? bpf_test_timer_continue+0x135/0x380 [ 383.952317][ T9308] ? bpf_test_run+0x174/0x870 [ 383.957016][ T9308] bpf_test_run+0x2df/0x870 [ 383.961719][ T9308] ? bpf_test_run+0x174/0x870 [ 383.966423][ T9308] ? convert___skb_to_skb+0x590/0x590 [ 383.971824][ T9308] ? eth_get_headlen+0x210/0x210 [ 383.977115][ T9308] ? slab_build_skb+0x25f/0x3f0 [ 383.982008][ T9308] ? convert___skb_to_skb+0x3d/0x590 [ 383.987317][ T9308] bpf_prog_test_run_skb+0xad2/0x12b0 [ 383.992895][ T9308] ? cpu_online+0x60/0x60 [ 383.997358][ T9308] bpf_prog_test_run+0x321/0x390 [ 384.002407][ T9308] __sys_bpf+0x49d/0x890 [ 384.006671][ T9308] ? bpf_link_show_fdinfo+0x390/0x390 [ 384.012402][ T9308] ? lock_chain_count+0x20/0x20 [ 384.017369][ T9308] __x64_sys_bpf+0x7c/0x90 [ 384.021798][ T9308] do_syscall_64+0x55/0xa0 [ 384.026325][ T9308] ? clear_bhb_loop+0x40/0x90 [ 384.031029][ T9308] ? clear_bhb_loop+0x40/0x90 [ 384.035916][ T9308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.042001][ T9308] RIP: 0033:0x7fcf85f9cdd9 [ 384.046526][ T9308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.066671][ T9308] RSP: 002b:00007fcf86e98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.075107][ T9308] RAX: ffffffffffffffda RBX: 00007fcf86215fa0 RCX: 00007fcf85f9cdd9 [ 384.083182][ T9308] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 384.091170][ T9308] RBP: 00007fcf86e98090 R08: 0000000000000000 R09: 0000000000000000 [ 384.099330][ T9308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 384.107423][ T9308] R13: 00007fcf86216038 R14: 00007fcf86215fa0 R15: 00007ffca307ffe8 [ 384.115513][ T9308] [ 384.270686][ T9316] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1104'. [ 384.315974][ T9316] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 384.422625][ T9318] netlink: 'syz.1.1111': attribute type 3 has an invalid length. [ 384.461601][ T9318] netlink: 'syz.1.1111': attribute type 16 has an invalid length. [ 384.519372][ T9318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1111'. [ 385.492338][ T9338] FAULT_INJECTION: forcing a failure. [ 385.492338][ T9338] name failslab, interval 1, probability 0, space 0, times 0 [ 385.523895][ T9338] CPU: 1 PID: 9338 Comm: syz.1.1112 Not tainted syzkaller #0 [ 385.531664][ T9338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 385.542502][ T9338] Call Trace: [ 385.545836][ T9338] [ 385.549081][ T9338] dump_stack_lvl+0x18c/0x250 [ 385.553931][ T9338] ? show_regs_print_info+0x20/0x20 [ 385.559307][ T9338] ? load_image+0x420/0x420 [ 385.564196][ T9338] ? __lock_acquire+0x7d40/0x7d40 [ 385.569775][ T9338] ? perf_tp_event+0x13d7/0x1520 [ 385.574970][ T9338] should_fail_ex+0x39d/0x4d0 [ 385.579842][ T9338] should_failslab+0x9/0x20 [ 385.584614][ T9338] slab_pre_alloc_hook+0x59/0x310 [ 385.590024][ T9338] kmem_cache_alloc+0x5a/0x2d0 [ 385.595075][ T9338] ? alloc_empty_file+0x9e/0x1d0 [ 385.600389][ T9338] alloc_empty_file+0x9e/0x1d0 [ 385.605804][ T9338] path_openat+0x113/0x3230 [ 385.610732][ T9338] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 385.616929][ T9338] ? do_filp_open+0x430/0x430 [ 385.622044][ T9338] ? perf_trace_lock+0x304/0x3b0 [ 385.627099][ T9338] ? trace_event_raw_event_lock+0x250/0x250 [ 385.633205][ T9338] do_filp_open+0x1f5/0x430 [ 385.637817][ T9338] ? alloc_fd+0x58f/0x630 [ 385.642879][ T9338] ? vfs_tmpfile+0x490/0x490 [ 385.647886][ T9338] ? _raw_spin_unlock+0x28/0x40 [ 385.652948][ T9338] ? alloc_fd+0x58f/0x630 [ 385.657654][ T9338] do_sys_openat2+0x134/0x1d0 [ 385.662451][ T9338] ? do_sys_open+0xe0/0xe0 [ 385.666965][ T9338] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 385.673417][ T9338] ? lock_chain_count+0x20/0x20 [ 385.678395][ T9338] __x64_sys_openat+0x139/0x160 [ 385.683327][ T9338] do_syscall_64+0x55/0xa0 [ 385.688088][ T9338] ? clear_bhb_loop+0x40/0x90 [ 385.692871][ T9338] ? clear_bhb_loop+0x40/0x90 [ 385.697617][ T9338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.703619][ T9338] RIP: 0033:0x7fa867b5d60e [ 385.708264][ T9338] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 385.728289][ T9338] RSP: 002b:00007fa8689f4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 385.737054][ T9338] RAX: ffffffffffffffda RBX: 00007fa8689f56c0 RCX: 00007fa867b5d60e [ 385.745166][ T9338] RDX: 0000000000000002 RSI: 00007fa8689f4f90 RDI: ffffffffffffff9c [ 385.753428][ T9338] RBP: 00007fa8689f5090 R08: 0000000000000000 R09: 0000000000000000 [ 385.761694][ T9338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.770387][ T9338] R13: 00007fa867e16038 R14: 00007fa867e15fa0 R15: 00007ffca966cfe8 [ 385.778500][ T9338] [ 385.785174][ T9348] netlink: 'syz.2.1108': attribute type 10 has an invalid length. [ 387.404631][ T9377] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1124'. [ 387.415269][ T9377] netlink: get zone limit has 4 unknown bytes [ 388.531346][ T9392] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1129'. [ 388.603351][ T9394] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1130'. [ 388.656676][ T9394] netlink: get zone limit has 4 unknown bytes [ 388.753250][ T9397] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1132'. [ 389.361399][ T9412] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1137'. [ 389.372378][ T9412] netlink: get zone limit has 4 unknown bytes [ 389.622338][ T9416] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1139'. [ 389.661799][ T9416] netlink: get zone limit has 4 unknown bytes [ 390.381671][ T9439] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1148'. [ 390.575381][ T9443] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1149'. [ 390.599682][ T9443] netlink: get zone limit has 4 unknown bytes [ 392.328552][ T9476] netlink: 'syz.2.1164': attribute type 153 has an invalid length. [ 392.347432][ T9476] netlink: 'syz.2.1164': attribute type 1 has an invalid length. [ 392.353059][ T9478] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1163'. [ 392.359588][ T9476] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.1164'. [ 392.374508][ T9478] netlink: get zone limit has 4 unknown bytes [ 392.640128][ T9483] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1165'. [ 393.423405][ T9508] netlink: 'syz.3.1175': attribute type 3 has an invalid length. [ 393.444319][ T9508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1175'. [ 394.559797][ T9518] netlink: 'syz.0.1177': attribute type 10 has an invalid length. [ 394.787926][ T9523] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1181'. [ 395.014793][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'. [ 395.048084][ T9532] netlink: 'syz.1.1185': attribute type 25 has an invalid length. [ 395.081789][ T9532] netlink: 'syz.1.1185': attribute type 9 has an invalid length. [ 396.039827][ T9558] netlink: 'syz.2.1190': attribute type 10 has an invalid length. [ 396.438330][ T9561] netlink: 'syz.0.1194': attribute type 8 has an invalid length. [ 396.460812][ T9561] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.1194'. [ 396.731600][ T9576] sctp: [Deprecated]: syz.3.1199 (pid 9576) Use of int in max_burst socket option deprecated. [ 396.731600][ T9576] Use struct sctp_assoc_value instead [ 397.195292][ T9582] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1203'. [ 398.296662][ T9599] netlink: 'syz.1.1206': attribute type 10 has an invalid length. [ 398.413012][ T9610] netlink: 'syz.0.1212': attribute type 10 has an invalid length. [ 398.436133][ T9610] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1212'. [ 398.551909][ T9614] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1216'. [ 398.596524][ T9614] netlink: get zone limit has 4 unknown bytes [ 400.409691][ T9659] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1231'. [ 400.522251][ T9644] netlink: 'syz.1.1225': attribute type 8 has an invalid length. [ 400.535586][ T9644] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.1225'. [ 400.536363][ T9659] netlink: get zone limit has 4 unknown bytes [ 401.573341][ T9675] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1238'. [ 401.636000][ T9664] netlink: 'syz.2.1233': attribute type 21 has an invalid length. [ 401.646750][ T9664] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1233'. [ 401.666424][ T9664] netlink: 'syz.2.1233': attribute type 4 has an invalid length. [ 401.674764][ T9664] netlink: 'syz.2.1233': attribute type 3 has an invalid length. [ 401.683398][ T9664] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1233'. [ 401.754769][ T9678] FAULT_INJECTION: forcing a failure. [ 401.754769][ T9678] name failslab, interval 1, probability 0, space 0, times 0 [ 401.829736][ T9678] CPU: 0 PID: 9678 Comm: syz.3.1239 Not tainted syzkaller #0 [ 401.837229][ T9678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 401.847600][ T9678] Call Trace: [ 401.851268][ T9678] [ 401.854467][ T9678] dump_stack_lvl+0x18c/0x250 [ 401.859283][ T9678] ? show_regs_print_info+0x20/0x20 [ 401.864596][ T9678] ? load_image+0x420/0x420 [ 401.869394][ T9678] ? __might_sleep+0xe0/0xe0 [ 401.874101][ T9678] ? __lock_acquire+0x7d40/0x7d40 [ 401.879921][ T9678] should_fail_ex+0x39d/0x4d0 [ 401.884642][ T9678] should_failslab+0x9/0x20 [ 401.889180][ T9678] slab_pre_alloc_hook+0x59/0x310 [ 401.894353][ T9678] kmem_cache_alloc_node+0x60/0x320 [ 401.899690][ T9678] ? __alloc_skb+0x103/0x2c0 [ 401.904385][ T9678] __alloc_skb+0x103/0x2c0 [ 401.908996][ T9678] netlink_dump+0x1ec/0xe50 [ 401.913530][ T9678] ? __mutex_lock+0x315/0xcc0 [ 401.918318][ T9678] ? netlink_lookup+0x200/0x200 [ 401.923439][ T9678] ? netlink_autobind+0x300/0x300 [ 401.928763][ T9678] ? netlink_lookup+0x30/0x200 [ 401.933635][ T9678] ? netlink_lookup+0x30/0x200 [ 401.938518][ T9678] __netlink_dump_start+0x5f1/0x810 [ 401.943840][ T9678] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 401.949012][ T9678] rtnetlink_rcv_msg+0xe1d/0xfa0 [ 401.954056][ T9678] ? fib6_run_gc+0x8b0/0x8b0 [ 401.959027][ T9678] ? rtnetlink_bind+0x80/0x80 [ 401.963895][ T9678] ? perf_trace_preemptirq_template+0xac/0x330 [ 401.970334][ T9678] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 401.976340][ T9678] ? lock_chain_count+0x20/0x20 [ 401.981329][ T9678] ? __local_bh_enable_ip+0x13a/0x1c0 [ 401.986746][ T9678] ? lockdep_hardirqs_on+0x98/0x150 [ 401.992086][ T9678] ? __local_bh_enable_ip+0x13a/0x1c0 [ 401.997510][ T9678] ? _local_bh_enable+0xa0/0xa0 [ 402.002394][ T9678] ? __dev_queue_xmit+0x265/0x3660 [ 402.007702][ T9678] ? __dev_queue_xmit+0x265/0x3660 [ 402.013011][ T9678] ? __dev_queue_xmit+0x1b2c/0x3660 [ 402.018326][ T9678] ? __dev_queue_xmit+0x265/0x3660 [ 402.023490][ T9678] ? fib6_run_gc+0x8b0/0x8b0 [ 402.028135][ T9678] ? ref_tracker_free+0x690/0x840 [ 402.033210][ T9678] netlink_rcv_skb+0x241/0x4d0 [ 402.038026][ T9678] ? rtnetlink_bind+0x80/0x80 [ 402.042839][ T9678] ? netlink_ack+0x1180/0x1180 [ 402.047739][ T9678] ? __lock_acquire+0x7d40/0x7d40 [ 402.052795][ T9678] ? netlink_deliver_tap+0x2e/0x1b0 [ 402.058429][ T9678] netlink_unicast+0x751/0x8d0 [ 402.063573][ T9678] netlink_sendmsg+0x8d0/0xbf0 [ 402.068371][ T9678] ? netlink_getsockopt+0x590/0x590 [ 402.073593][ T9678] ? aa_sock_msg_perm+0x94/0x150 [ 402.078756][ T9678] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 402.084062][ T9678] ? security_socket_sendmsg+0x80/0xa0 [ 402.089638][ T9678] ? netlink_getsockopt+0x590/0x590 [ 402.094859][ T9678] ____sys_sendmsg+0x5ba/0x960 [ 402.099742][ T9678] ? __asan_memset+0x22/0x40 [ 402.104612][ T9678] ? __sys_sendmsg_sock+0x30/0x30 [ 402.109678][ T9678] ? __import_iovec+0x3fa/0x850 [ 402.114550][ T9678] ? import_iovec+0x73/0xa0 [ 402.119072][ T9678] ___sys_sendmsg+0x2a6/0x360 [ 402.123765][ T9678] ? get_pid_task+0x20/0x1e0 [ 402.128385][ T9678] ? __sys_sendmsg+0x2a0/0x2a0 [ 402.133285][ T9678] ? __lock_acquire+0x7d40/0x7d40 [ 402.138358][ T9678] __se_sys_sendmsg+0x1c2/0x2b0 [ 402.143225][ T9678] ? __x64_sys_sendmsg+0x80/0x80 [ 402.148193][ T9678] ? lockdep_hardirqs_on+0x98/0x150 [ 402.153469][ T9678] do_syscall_64+0x55/0xa0 [ 402.158005][ T9678] ? clear_bhb_loop+0x40/0x90 [ 402.162807][ T9678] ? clear_bhb_loop+0x40/0x90 [ 402.167514][ T9678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.173433][ T9678] RIP: 0033:0x7f01c799cdd9 [ 402.177952][ T9678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.197749][ T9678] RSP: 002b:00007f01c8928028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.206271][ T9678] RAX: ffffffffffffffda RBX: 00007f01c7c16090 RCX: 00007f01c799cdd9 [ 402.214258][ T9678] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 402.222347][ T9678] RBP: 00007f01c8928090 R08: 0000000000000000 R09: 0000000000000000 [ 402.230337][ T9678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.238320][ T9678] R13: 00007f01c7c16128 R14: 00007f01c7c16090 R15: 00007ffee1123d78 [ 402.246324][ T9678] [ 402.260782][ T9682] netlink: 'syz.1.1240': attribute type 1 has an invalid length. [ 402.275108][ T9682] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1240'. [ 402.891132][ T9693] netlink: 'syz.3.1242': attribute type 8 has an invalid length. [ 402.904482][ T9692] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1243'. [ 402.933689][ T9692] netlink: get zone limit has 4 unknown bytes [ 403.002875][ T9693] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.1242'. [ 403.673279][ T9700] netlink: 'syz.2.1246': attribute type 10 has an invalid length. [ 403.687627][ T9700] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1246'. [ 403.716536][ T9700] bridge0: port 3(team0) entered blocking state [ 403.744577][ T9700] bridge0: port 3(team0) entered disabled state [ 403.781350][ T9700] team0: entered allmulticast mode [ 403.805150][ T9700] team_slave_1: entered allmulticast mode [ 403.822787][ T9700] geneve1: entered allmulticast mode [ 403.844036][ T9700] team0: entered promiscuous mode [ 403.853594][ T9700] team_slave_1: entered promiscuous mode [ 403.863134][ T9700] geneve1: entered promiscuous mode [ 403.874573][ T9700] macvlan1: entered promiscuous mode [ 403.908458][ T9700] bridge0: port 3(team0) entered blocking state [ 403.915517][ T9700] bridge0: port 3(team0) entered forwarding state [ 404.415166][ T9706] netlink: 'syz.0.1248': attribute type 10 has an invalid length. [ 404.442328][ T9715] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1249'. [ 405.741131][ T9735] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1258'. [ 405.752318][ T9735] netlink: get zone limit has 4 unknown bytes [ 408.575109][ T9742] netlink: 'syz.0.1260': attribute type 10 has an invalid length. [ 409.103125][ T9750] netlink: 'syz.3.1262': attribute type 10 has an invalid length. [ 409.386264][ T9756] netlink: 'syz.1.1263': attribute type 9 has an invalid length. [ 409.401361][ T9756] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1263'. [ 410.716712][ T9762] wg2: entered promiscuous mode [ 410.722109][ T9762] wg2: entered allmulticast mode [ 410.993901][ T9769] netlink: 'syz.0.1268': attribute type 6 has an invalid length. [ 411.002699][ T9769] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1268'. [ 411.022273][ T9769] IPv6: Can't replace route, no match found [ 411.447586][ T9778] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1271'. [ 411.468882][ T9778] netlink: get zone limit has 4 unknown bytes [ 412.087568][ T9786] netlink: 'syz.1.1273': attribute type 2 has an invalid length. [ 412.149843][ T9786] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1273'. [ 413.993076][ T9812] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1281'. [ 414.003364][ T9812] netlink: get zone limit has 4 unknown bytes [ 414.019390][ T9808] netlink: 'syz.1.1280': attribute type 6 has an invalid length. [ 414.029454][ T9808] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1280'. [ 414.064116][ T9808] IPv6: Can't replace route, no match found [ 416.064882][ T9832] netlink: 'syz.2.1287': attribute type 2 has an invalid length. [ 416.085993][ T9832] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1287'. [ 416.648026][ T9841] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1291'. [ 416.705137][ T9845] netlink: 'syz.1.1292': attribute type 6 has an invalid length. [ 416.707570][ T9841] netlink: get zone limit has 4 unknown bytes [ 416.725118][ T9845] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1292'. [ 416.774366][ T9846] IPv6: Can't replace route, no match found [ 418.663869][ T9868] netlink: 'syz.3.1301': attribute type 2 has an invalid length. [ 418.687625][ T9868] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.1301'. [ 420.672837][ T9887] netlink: 'syz.3.1306': attribute type 3 has an invalid length. [ 420.688449][ T9887] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1306'. [ 420.808463][ T9894] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1305'. [ 420.836111][ T9894] netlink: get zone limit has 4 unknown bytes [ 420.864245][ T9888] netlink: 'syz.1.1304': attribute type 6 has an invalid length. [ 420.886262][ T9888] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1304'. [ 420.926313][ T9897] IPv6: Can't replace route, no match found [ 423.462598][ T9930] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1318'. [ 423.571910][ T9930] netlink: get zone limit has 4 unknown bytes [ 424.996681][ T9940] netlink: 'syz.3.1320': attribute type 6 has an invalid length. [ 425.322087][ T9940] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1320'. [ 426.910503][ T9956] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1326'. [ 427.212873][ T9963] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1329'. [ 427.233221][ T9963] netlink: get zone limit has 4 unknown bytes [ 427.770242][ T9968] netlink: 'syz.2.1330': attribute type 6 has an invalid length. [ 427.912903][ T9968] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1330'. [ 427.935142][ T9970] IPv6: Can't replace route, no match found [ 431.965210][T10007] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1341'. [ 432.053839][T10010] netlink: 'syz.2.1343': attribute type 6 has an invalid length. [ 432.076585][T10010] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1343'. [ 432.109606][T10010] IPv6: Can't replace route, no match found [ 432.253439][T10020] netlink: 'syz.3.1346': attribute type 10 has an invalid length. [ 432.290401][T10020] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1346'. [ 432.309172][T10020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.219176][T10047] netlink: 'syz.3.1355': attribute type 6 has an invalid length. [ 436.266079][T10047] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1355'. [ 436.416253][T10049] IPv6: Can't replace route, no match found [ 436.424979][T10045] netlink: 'syz.1.1353': attribute type 6 has an invalid length. [ 436.473524][T10045] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1353'. [ 436.920824][T10057] netlink: 'syz.0.1358': attribute type 9 has an invalid length. [ 437.163362][T10065] netlink: 10487 bytes leftover after parsing attributes in process `syz.3.1360'. [ 437.651844][T10062] netlink: 'syz.1.1359': attribute type 10 has an invalid length. [ 438.593858][T10083] netlink: 'syz.2.1365': attribute type 6 has an invalid length. [ 438.605822][T10083] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1365'. [ 439.264042][T10081] IPv6: Can't replace route, no match found [ 439.548273][T10090] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 439.577688][T10092] netlink: 'syz.3.1367': attribute type 3 has an invalid length. [ 439.607089][T10092] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1367'. [ 439.653108][T10099] netlink: 'syz.2.1370': attribute type 2 has an invalid length. [ 439.666365][T10099] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1370'. [ 440.692285][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.698991][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.738399][T10127] netlink: 'syz.2.1377': attribute type 6 has an invalid length. [ 443.751692][T10127] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1377'. [ 443.779824][T10127] IPv6: Can't replace route, no match found [ 443.791600][T10131] netlink: 'syz.3.1380': attribute type 2 has an invalid length. [ 443.801290][T10131] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.1380'. [ 446.984017][T10158] netlink: 'syz.1.1390': attribute type 6 has an invalid length. [ 447.024608][T10158] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1390'. [ 447.070485][T10154] netlink: 'syz.3.1388': attribute type 10 has an invalid length. [ 447.097186][T10161] IPv6: Can't replace route, no match found [ 448.503631][T10188] netlink: 'syz.0.1401': attribute type 6 has an invalid length. [ 448.579683][T10188] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1401'. [ 448.727718][T10191] IPv6: Can't replace route, no match found [ 449.092230][T10204] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1407'. [ 449.151492][T10204] netlink: get zone limit has 4 unknown bytes [ 449.541959][T10211] netlink: 'syz.0.1408': attribute type 10 has an invalid length. [ 449.678961][T10218] netlink: 'syz.2.1409': attribute type 10 has an invalid length. [ 451.723662][T10244] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1418'. [ 451.736115][T10244] netlink: get zone limit has 4 unknown bytes [ 451.766793][T10238] netlink: 'syz.0.1416': attribute type 6 has an invalid length. [ 451.797603][T10238] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1416'. [ 451.822910][T10238] IPv6: Can't replace route, no match found [ 452.579250][T10269] netlink: 'syz.0.1425': attribute type 10 has an invalid length. [ 452.992167][T10277] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1430'. [ 453.002049][T10277] netlink: get zone limit has 4 unknown bytes [ 453.387335][T10283] netlink: 'syz.1.1433': attribute type 6 has an invalid length. [ 453.403482][T10283] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1433'. [ 453.452359][T10286] IPv6: Can't replace route, no match found [ 455.067799][T10305] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1441'. [ 455.081514][T10305] netlink: get zone limit has 4 unknown bytes [ 455.244502][T10310] netlink: 'syz.1.1443': attribute type 6 has an invalid length. [ 455.276226][T10310] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1443'. [ 455.308030][T10311] netlink: 'syz.0.1440': attribute type 10 has an invalid length. [ 455.351976][T10310] IPv6: Can't replace route, no match found [ 455.709015][T10320] netlink: 'syz.1.1446': attribute type 6 has an invalid length. [ 455.722883][T10320] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1446'. [ 455.742703][T10320] IPv6: Can't replace route, no match found [ 456.115698][T10325] FAULT_INJECTION: forcing a failure. [ 456.115698][T10325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.150284][T10325] CPU: 1 PID: 10325 Comm: syz.2.1450 Not tainted syzkaller #0 [ 456.158019][T10325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 456.168415][T10325] Call Trace: [ 456.171828][T10325] [ 456.174896][T10325] dump_stack_lvl+0x18c/0x250 [ 456.179943][T10325] ? show_regs_print_info+0x20/0x20 [ 456.185446][T10325] ? load_image+0x420/0x420 [ 456.190319][T10325] ? __might_fault+0xaa/0x120 [ 456.195323][T10325] ? __lock_acquire+0x7d40/0x7d40 [ 456.200550][T10325] should_fail_ex+0x39d/0x4d0 [ 456.205436][T10325] _copy_from_user+0x2f/0xe0 [ 456.210264][T10325] generic_map_update_batch+0x59a/0x810 [ 456.216011][T10325] ? rcu_read_unlock+0xa0/0xa0 [ 456.220919][T10325] ? __fdget+0x180/0x210 [ 456.225370][T10325] ? rcu_read_unlock+0xa0/0xa0 [ 456.230217][T10325] bpf_map_do_batch+0x3d7/0x610 [ 456.235286][T10325] __sys_bpf+0x381/0x890 [ 456.239642][T10325] ? bpf_link_show_fdinfo+0x390/0x390 [ 456.245217][T10325] ? lock_chain_count+0x20/0x20 [ 456.250215][T10325] __x64_sys_bpf+0x7c/0x90 [ 456.254723][T10325] do_syscall_64+0x55/0xa0 [ 456.259214][T10325] ? clear_bhb_loop+0x40/0x90 [ 456.264060][T10325] ? clear_bhb_loop+0x40/0x90 [ 456.268992][T10325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.274960][T10325] RIP: 0033:0x7f55fa19cdd9 [ 456.279554][T10325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.299420][T10325] RSP: 002b:00007f55fb0c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 456.308107][T10325] RAX: ffffffffffffffda RBX: 00007f55fa415fa0 RCX: 00007f55fa19cdd9 [ 456.316153][T10325] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 456.324254][T10325] RBP: 00007f55fb0c5090 R08: 0000000000000000 R09: 0000000000000000 [ 456.332413][T10325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 456.340539][T10325] R13: 00007f55fa416038 R14: 00007f55fa415fa0 R15: 00007ffe2f86ab58 [ 456.348754][T10325] [ 457.140296][T10336] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1453'. [ 457.156223][T10336] netlink: get zone limit has 4 unknown bytes [ 459.313268][T10360] netlink: 'syz.0.1457': attribute type 10 has an invalid length. [ 460.564122][T10375] netlink: 'syz.1.1464': attribute type 2 has an invalid length. [ 460.623591][T10375] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1464'. [ 462.789196][T10397] netlink: 'syz.3.1470': attribute type 10 has an invalid length. [ 463.389135][T10410] netlink: 'syz.0.1476': attribute type 2 has an invalid length. [ 463.397355][T10410] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.1476'. [ 463.989081][T10424] netlink: 'syz.0.1481': attribute type 6 has an invalid length. [ 464.006130][T10424] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1481'. [ 464.029378][T10424] IPv6: Can't replace route, no match found [ 465.605344][T10437] netlink: 'syz.3.1483': attribute type 10 has an invalid length. [ 466.444143][T10446] netlink: 'syz.2.1487': attribute type 2 has an invalid length. [ 466.467646][T10446] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1487'. [ 467.213350][T10460] IPv6: Can't replace route, no match found [ 469.396064][T10491] netlink: 'syz.1.1497': attribute type 10 has an invalid length. [ 469.931227][T10496] netlink: 'syz.1.1501': attribute type 2 has an invalid length. [ 469.963915][T10496] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1501'. Stopping sshd: stopped /usr/sbin/sshd (pid 5526) OK Stopping crond: stopped /usr/sbin/crond (pid 5513) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5435) [ 472.706807][T10544] netlink: 'syz.2.1510': attribute type 10 has an invalid length. Stopping network: [ 473.251306][T10559] netlink: 'syz.3.1514': attribute type 2 has an invalid length. [ 473.336127][T10559] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.1514'. OK [ 474.834900][T10583] netlink: 'syz.3.1519': attribute type 9 has an invalid length. Stopping iptables: OK Stopping system message bus: done [ 476.542407][T10619] netlink: 'syz.0.1526': attribute type 2 has an invalid length. [ 476.556245][T10619] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.1526'. [ 476.870913][T10624] netlink: 'syz.1.1524': attribute type 10 has an invalid length. Stopping klogd: OK Stopping acpid: [ 480.936369][ T5156] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 481.089709][T10662] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.1538'. OK [ 481.642977][T10676] netlink: 'syz.0.1543': attribute type 9 has an invalid length. [ 481.733629][T10672] netlink: 'syz.2.1540': attribute type 10 has an invalid length. Stopping syslogd: stopped /sbin/syslogd (pid 5122) OK umount: can't remount debugfs read-only [ 484.194056][T10721] netlink: 'syz.3.1555': attribute type 10 has an invalid length. [ 484.394112][T10732] netlink: 165168 bytes leftover after parsing attributes in process `syz.0.1557'. [ 485.303829][T10753] FAULT_INJECTION: forcing a failure. [ 485.303829][T10753] name failslab, interval 1, probability 0, space 0, times 0 [ 485.366474][T10753] CPU: 0 PID: 10753 Comm: syz.3.1565 Not tainted syzkaller #0 [ 485.374137][T10753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 485.384547][T10753] Call Trace: [ 485.387882][T10753] [ 485.390859][T10753] dump_stack_lvl+0x18c/0x250 [ 485.395684][T10753] ? show_regs_print_info+0x20/0x20 [ 485.400929][T10753] ? load_image+0x420/0x420 [ 485.405615][T10753] ? __might_sleep+0xe0/0xe0 [ 485.410357][T10753] ? __lock_acquire+0x7d40/0x7d40 [ 485.415435][T10753] should_fail_ex+0x39d/0x4d0 [ 485.420191][T10753] should_failslab+0x9/0x20 [ 485.424804][T10753] slab_pre_alloc_hook+0x59/0x310 [ 485.429935][T10753] kmem_cache_alloc_node+0x60/0x320 [ 485.435287][T10753] ? __alloc_skb+0x103/0x2c0 [ 485.440027][T10753] __alloc_skb+0x103/0x2c0 [ 485.444579][T10753] _sctp_make_chunk+0x5e/0x420 [ 485.449397][T10753] sctp_make_datafrag_empty+0x12b/0x240 [ 485.455130][T10753] ? sctp_make_ecne+0x340/0x340 [ 485.460300][T10753] ? sctp_user_addto_chunk+0xb0/0x220 [ 485.465729][T10753] sctp_datamsg_from_user+0x722/0xee0 [ 485.471266][T10753] sctp_sendmsg_to_asoc+0x107f/0x1830 [ 485.476689][T10753] ? __asan_memcpy+0x40/0x70 [ 485.481342][T10753] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 485.486955][T10753] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 485.492807][T10753] ? __sctp_connect+0xd80/0xd80 [ 485.497740][T10753] ? __local_bh_enable_ip+0x13a/0x1c0 [ 485.503236][T10753] ? _local_bh_enable+0xa0/0xa0 [ 485.508125][T10753] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 485.514059][T10753] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 485.520080][T10753] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 485.525668][T10753] ? security_sctp_bind_connect+0x89/0xb0 [ 485.531791][T10753] sctp_sendmsg+0x1b83/0x28c0 [ 485.536784][T10753] ? sctp_getsockopt+0xb60/0xb60 [ 485.541756][T10753] ? aa_sk_perm+0x83c/0x970 [ 485.546315][T10753] ? aa_af_perm+0x330/0x330 [ 485.550856][T10753] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 485.557313][T10753] ? sock_rps_record_flow+0x19/0x3f0 [ 485.562668][T10753] ? inet_sendmsg+0x7c/0x2f0 [ 485.567355][T10753] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 485.572688][T10753] ? security_socket_sendmsg+0x80/0xa0 [ 485.578212][T10753] ? inet_send_prepare+0x260/0x260 [ 485.583523][T10753] ____sys_sendmsg+0x5ba/0x960 [ 485.588507][T10753] ? __lock_acquire+0x7d40/0x7d40 [ 485.593661][T10753] ? __asan_memset+0x22/0x40 [ 485.598328][T10753] ? __sys_sendmsg_sock+0x30/0x30 [ 485.603420][T10753] ? __import_iovec+0x5f2/0x850 [ 485.608489][T10753] ? import_iovec+0x73/0xa0 [ 485.613125][T10753] ___sys_sendmsg+0x2a6/0x360 [ 485.618026][T10753] ? get_pid_task+0x20/0x1e0 [ 485.622665][T10753] ? __sys_sendmsg+0x2a0/0x2a0 [ 485.627664][T10753] ? __lock_acquire+0x7d40/0x7d40 [ 485.632790][T10753] __se_sys_sendmsg+0x1c2/0x2b0 [ 485.637777][T10753] ? __x64_sys_sendmsg+0x80/0x80 [ 485.642973][T10753] ? lockdep_hardirqs_on+0x98/0x150 [ 485.648250][T10753] do_syscall_64+0x55/0xa0 [ 485.652719][T10753] ? clear_bhb_loop+0x40/0x90 [ 485.657443][T10753] ? clear_bhb_loop+0x40/0x90 [ 485.662170][T10753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.668288][T10753] RIP: 0033:0x7f01c799cdd9 [ 485.672924][T10753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.693097][T10753] RSP: 002b:00007f01c8949028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.701736][T10753] RAX: ffffffffffffffda RBX: 00007f01c7c15fa0 RCX: 00007f01c799cdd9 [ 485.709848][T10753] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 485.717937][T10753] RBP: 00007f01c8949090 R08: 0000000000000000 R09: 0000000000000000 [ 485.725978][T10753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 485.734073][T10753] R13: 00007f01c7c16038 R14: 00007f01c7c15fa0 R15: 00007ffee1123d78 [ 485.742193][T10753] [ 485.991693][T10747] netlink: 'syz.2.1563': attribute type 10 has an invalid length. [ 486.164449][T10747] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1563'. [ 486.235501][T10747] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 486.319320][T10747] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 486.470322][T10747] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 487.325477][T10765] netlink: 'syz.1.1567': attribute type 10 has an invalid length. [ 487.823082][T10781] FAULT_INJECTION: forcing a failure. [ 487.823082][T10781] name failslab, interval 1, probability 0, space 0, times 0 [ 487.869212][T10781] CPU: 0 PID: 10781 Comm: syz.1.1572 Not tainted syzkaller #0 [ 487.876869][T10781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 487.887587][T10781] Call Trace: [ 487.890914][T10781] [ 487.893940][T10781] dump_stack_lvl+0x18c/0x250 [ 487.898779][T10781] ? show_regs_print_info+0x20/0x20 [ 487.904047][T10781] ? load_image+0x420/0x420 [ 487.908615][T10781] ? __lock_acquire+0x7d40/0x7d40 [ 487.913718][T10781] should_fail_ex+0x39d/0x4d0 [ 487.918490][T10781] should_failslab+0x9/0x20 [ 487.923044][T10781] slab_pre_alloc_hook+0x59/0x310 [ 487.928130][T10781] kmem_cache_alloc+0x5a/0x2d0 [ 487.932958][T10781] ? sk_prot_alloc+0x57/0x210 [ 487.933948][T10784] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1574'. [ 487.937848][T10781] sk_prot_alloc+0x57/0x210 [ 487.937907][T10781] ? sk_alloc+0x24/0x360 [ 487.937935][T10781] sk_alloc+0x3a/0x360 [ 487.937965][T10781] inet_create+0x7a0/0xfe0 [ 487.937993][T10781] ? inet_create+0x9c/0xfe0 [ 487.938021][T10781] __sock_create+0x4a6/0x940 [ 487.974203][T10781] udp_sock_create4+0xcb/0x480 [ 487.979926][T10781] ? erspan_exit_batch_net+0x30/0x30 [ 487.985379][T10781] rxrpc_lookup_local+0xd1f/0x1610 [ 487.990650][T10781] ? rxrpc_local_dont_fragment+0x70/0x70 [ 487.996350][T10781] ? lockdep_hardirqs_on+0x98/0x150 [ 487.998192][T10784] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 488.001701][T10781] ? _local_bh_enable+0xa0/0xa0 [ 488.001748][T10781] rxrpc_sendmsg+0x30a/0x5b0 [ 488.001776][T10781] ? rxrpc_getsockopt+0x150/0x150 [ 488.001800][T10781] ____sys_sendmsg+0x5ba/0x960 [ 488.028007][T10781] ? __lock_acquire+0x7d40/0x7d40 [ 488.033247][T10781] ? __sys_sendmsg_sock+0x30/0x30 [ 488.038459][T10781] ? __import_iovec+0x5f2/0x850 [ 488.043372][T10781] ? import_iovec+0x73/0xa0 [ 488.048299][T10781] ___sys_sendmsg+0x2a6/0x360 [ 488.053036][T10781] ? get_pid_task+0x20/0x1e0 [ 488.057809][T10781] ? __sys_sendmsg+0x2a0/0x2a0 [ 488.062759][T10781] ? __lock_acquire+0x7d40/0x7d40 [ 488.067969][T10781] __se_sys_sendmsg+0x1c2/0x2b0 [ 488.072887][T10781] ? __x64_sys_sendmsg+0x80/0x80 [ 488.078005][T10781] ? lockdep_hardirqs_on+0x98/0x150 [ 488.084010][T10781] do_syscall_64+0x55/0xa0 [ 488.088485][T10781] ? clear_bhb_loop+0x40/0x90 [ 488.093230][T10781] ? clear_bhb_loop+0x40/0x90 [ 488.098087][T10781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.104031][T10781] RIP: 0033:0x7fa867b9cdd9 [ 488.108591][T10781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.128607][T10781] RSP: 002b:00007fa8689f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.137206][T10781] RAX: ffffffffffffffda RBX: 00007fa867e15fa0 RCX: 00007fa867b9cdd9 [ 488.145480][T10781] RDX: 000000000000ff00 RSI: 0000200000000000 RDI: 0000000000000003 [ 488.153587][T10781] RBP: 00007fa8689f5090 R08: 0000000000000000 R09: 0000000000000000 [ 488.161699][T10781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.169909][T10781] R13: 00007fa867e16038 R14: 00007fa867e15fa0 R15: 00007ffca966cfe8 [ 488.178126][T10781] umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.226 closed by remote host. Sent SIGKILL to all processes Requesting system poweroff [ 491.501108][ T2933] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.525596][T10793] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 491.538429][T10793] ACPI: PM: Preparing to enter system sleep state S5 [ 491.550528][T10793] kvm: exiting hardware virtualization [ 491.557296][T10793] reboot: Power down serialport: VM disconnected.