last executing test programs: 16.449699139s ago: executing program 3 (id=5942): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff5"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="02060009020000", 0x7}], 0x1}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce2200"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 14.111635903s ago: executing program 3 (id=5949): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 13.736787744s ago: executing program 1 (id=5952): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x500}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.227022941s ago: executing program 1 (id=5953): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce2200"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 12.539261772s ago: executing program 3 (id=5956): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = getpid() r3 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r2, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$kcm(0xa, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) 11.068869759s ago: executing program 1 (id=5959): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000780)='.\x13SN\xd5\xa8\xe7\x13\x9d\x11\x85\xb2\xda\xda%\x00\xe9\a\xd9\x12s\x03\x00\xd0O\x87\x8fI\xa5\xbbHd\xfd\x19l\xca\x89\x8e)P\x18\x14\'\x81\n\x02\\\xca\f\xc30p{\x94\xd8wn>\btn\xc3\xfd\xca\x0f\xdb\xab\xae\x04\x0e*\xb4\x06@v\xfd\x86\x9d\xb7\x801\x80\x9a\xc0N,\x8d\x13\x11eJ\x10CQ\xb9ab\xf311\xf9\x03\xd5\xec\x9fa7S\x8b\xdan\xd9W#\x06&P)\x1ak~LB\xa4\f@\xff\xb2]\xddk\xa9\xbd}\xefp}\x90\xd0\xdb\xcc\xf9\xe8\":O\f\x98D\xf07\\F\b\xe2\x82\xfa\xe3L\xb5\x8d\xe3\x87\xa6v\x9a\xb6\xf4\x80\x85\";\xe5\xdf\xa2\xbd\xf9}\\\xbe?\x93|\xcbg\x1c~\xb6Y\xaa\xf3\xd6%\x89\xe4\x1b\xb6.f\x12\xe5\xabm \xb6\\\xb9T\fZma\xb9\xd7xzS\xd3\x8b\x02Qj\xf5\xb7X\xc6\b\x19.\xae\xdd\xa9\xd0\xf2\xdc\x1f\xf1z\v\xf9\xc3\xf0V5D&a\xf6^\x94\x19\xe0\b\xf0\xdcD{(\x1b\xf9|\xe9\xa1]\xdc\xe8\xb8\xdb\xd5<2\x96\'s\xe7\x84\x82\xea\xbb\xff\xb7\xb8%-?\x83\x9cwOe|\xb4\xef\xb6\xf4\xdf\xbf\x1e\xc6OSs\xc4_6H\xde\x9eN\x12\x9cH\x86\x824\xaf\x177\t:\xe3_w-\xbf\x1b\x14\xc7\x1d\xb4\x99\x1f\xadf\x9e\xc7X\x040\x9e^ \xc9m\x9ek\x86\t\x9f \xc8\xcf\xf5\x80(\xd9l\x91\xf7x\x7f\xaa\xd9\xd4nO\xa0\xa0M6\v.\xd8[\xc9\xa4` ') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={0xffffffffffffffff, 0xe0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000000d40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000ec0), &(0x7f0000000f00), 0x8, 0x56, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001200)={&(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000200)="e0bc3ee4b1ea294836c20e0187bde0a19c556d0125c464c4c0f2b79e9dc305ba8684f61fe0a8885b8c1c6b007f0cdabf1f886a9d7c045d1a723e6b00484bffbd6c4d3a711fdc78c2d935ce6eeb2d1a2a5a3bf6923d77aa0cb80e0d800fe4aa88082cc9333b7ff18be1545a4e", 0x6c}, {0x0}, {&(0x7f0000000540)="f014ad5337128f289a2c1373fd662c0df43ba2d43dfbab44270c6a0930da1b4d599e45345df37edd754e237f069a42c8cb83798f230bc1bbf71a1b3b59428ced0ec6f6eda16151c663d6c0bb19c29ff2a40568b72d8881eb20784da1665e559744175f15b127f0657404e5dd6f36a04b63ab7a05a5b220fe2834a6fb4156483c18f50d276b376cff63f8004aa808c2a6b5462a43fef9682acc748146ee72c0c9668bf2ff607063fe9fa8f1f850c96b393edda635543ad1843707f0e0aa", 0xbd}, {&(0x7f00000006c0)="6294433fea0bef1c4ae62df5b2b62c8c66b4350a24ebf6df63aadd68738d0929bb644936d680a49add2f036696f0d8b3aa0f15ee6ce6b944428536202383204db5b4d32ae674120dd1c5df78ebe011be5bfdd7d3226da78f408f8a4ee0dd236af1a526cc1c74beba46afca4b", 0x6c}, {&(0x7f0000000900)="d963c4e2e07a06be4f59", 0xa}, {&(0x7f0000000940)="8e0a226a36fde584e98f6577626a7f9f2b6b9186077a4cd5f481cae8bfec6a674aff4bf0253b85046aa9ae5aa23efe21a7f701bd9a4c567191f1e070b9a4b3261b057f371eec7d2db7f555125c148c95f6b5e6af2b1762a1c5e31935938e29c03dc38141fb5bec32f7ef5ebfc2e1448d5f381fa75acf1f80c5d70abb", 0x7c}, {&(0x7f0000000b00)="8e11c90c7608f893b04406c56cfb07a9688448a5c1d2ab465fb3ef929d7805a8c2a154faff4df3cfde12cd779316191e97c095e9d4eee1f006f328dbf92be194bfe9544b8094e3c345a93c99edae585b7dc2d6beb5424f27b25130f3d7422aa74b7f0a52d2240936bb0b38de0366973c39ead91e1e26a6930414069820db254be65cc415d642e70ef4ea6fb6ebfea047ab4c0903f029a8402dedf92e4e775242ff9467114ec357d5ceb36055eb609db6881246c0836c4e4d474466d9d48082a8bac4a412f8503607fdbb133bcd2d", 0xce}], 0x7, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @broadcast}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x60, 0x0, 0x7, {[@rr={0x7, 0x2b, 0x77, [@rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @local, @loopback, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x6, 0x3}, @lsrr={0x83, 0x1f, 0x40, [@remote, @local, @multicast1, @remote, @private=0xa010100, @broadcast, @loopback]}]}}}], 0xe0}, 0x4000081) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x87, 0x52000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x8000, 0xfffffffffffffffd, 0x80000001, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) socket$kcm(0x10, 0x400000002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509000000000000639af0ff00000000b509000000000000db9af0ff41000000bf8200000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) 10.217735806s ago: executing program 1 (id=5964): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000780)='.\x13SN\xd5\xa8\xe7\x13\x9d\x11\x85\xb2\xda\xda%\x00\xe9\a\xd9\x12s\x03\x00\xd0O\x87\x8fI\xa5\xbbHd\xfd\x19l\xca\x89\x8e)P\x18\x14\'\x81\n\x02\\\xca\f\xc30p{\x94\xd8wn>\btn\xc3\xfd\xca\x0f\xdb\xab\xae\x04\x0e*\xb4\x06@v\xfd\x86\x9d\xb7\x801\x80\x9a\xc0N,\x8d\x13\x11eJ\x10CQ\xb9ab\xf311\xf9\x03\xd5\xec\x9fa7S\x8b\xdan\xd9W#\x06&P)\x1ak~LB\xa4\f@\xff\xb2]\xddk\xa9\xbd}\xefp}\x90\xd0\xdb\xcc\xf9\xe8\":O\f\x98D\xf07\\F\b\xe2\x82\xfa\xe3L\xb5\x8d\xe3\x87\xa6v\x9a\xb6\xf4\x80\x85\";\xe5\xdf\xa2\xbd\xf9}\\\xbe?\x93|\xcbg\x1c~\xb6Y\xaa\xf3\xd6%\x89\xe4\x1b\xb6.f\x12\xe5\xabm \xb6\\\xb9T\fZma\xb9\xd7xzS\xd3\x8b\x02Qj\xf5\xb7X\xc6\b\x19.\xae\xdd\xa9\xd0\xf2\xdc\x1f\xf1z\v\xf9\xc3\xf0V5D&a\xf6^\x94\x19\xe0\b\xf0\xdcD{(\x1b\xf9|\xe9\xa1]\xdc\xe8\xb8\xdb\xd5<2\x96\'s\xe7\x84\x82\xea\xbb\xff\xb7\xb8%-?\x83\x9cwOe|\xb4\xef\xb6\xf4\xdf\xbf\x1e\xc6OSs\xc4_6H\xde\x9eN\x12\x9cH\x86\x824\xaf\x177\t:\xe3_w-\xbf\x1b\x14\xc7\x1d\xb4\x99\x1f\xadf\x9e\xc7X\x040\x9e^ \xc9m\x9ek\x86\t\x9f \xc8\xcf\xf5\x80(\xd9l\x91\xf7x\x7f\xaa\xd9\xd4nO\xa0\xa0M6\v.\xd8[\xc9\xa4` ') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={0xffffffffffffffff, 0xe0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000000d40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000ec0), &(0x7f0000000f00), 0x8, 0x56, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001200)={&(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000200)="e0bc3ee4b1ea294836c20e0187bde0a19c556d0125c464c4c0f2b79e9dc305ba8684f61fe0a8885b8c1c6b007f0cdabf1f886a9d7c045d1a723e6b00484bffbd6c4d3a711fdc78c2d935ce6eeb2d1a2a5a3bf6923d77aa0cb80e0d800fe4aa88082cc9333b7ff18be1545a4e", 0x6c}, {0x0}, {&(0x7f0000000540)="f014ad5337128f289a2c1373fd662c0df43ba2d43dfbab44270c6a0930da1b4d599e45345df37edd754e237f069a42c8cb83798f230bc1bbf71a1b3b59428ced0ec6f6eda16151c663d6c0bb19c29ff2a40568b72d8881eb20784da1665e559744175f15b127f0657404e5dd6f36a04b63ab7a05a5b220fe2834a6fb4156483c18f50d276b376cff63f8004aa808c2a6b5462a43fef9682acc748146ee72c0c9668bf2ff607063fe9fa8f1f850c96b393edda635543ad1843707f0e0aa", 0xbd}, {&(0x7f00000006c0)="6294433fea0bef1c4ae62df5b2b62c8c66b4350a24ebf6df63aadd68738d0929bb644936d680a49add2f036696f0d8b3aa0f15ee6ce6b944428536202383204db5b4d32ae674120dd1c5df78ebe011be5bfdd7d3226da78f408f8a4ee0dd236af1a526cc1c74beba46afca4b", 0x6c}, {&(0x7f0000000900)="d963c4e2e07a06be4f59", 0xa}, {&(0x7f0000000940)="8e0a226a36fde584e98f6577626a7f9f2b6b9186077a4cd5f481cae8bfec6a674aff4bf0253b85046aa9ae5aa23efe21a7f701bd9a4c567191f1e070b9a4b3261b057f371eec7d2db7f555125c148c95f6b5e6af2b1762a1c5e31935938e29c03dc38141fb5bec32f7ef5ebfc2e1448d5f381fa75acf1f80c5d70abb", 0x7c}, {&(0x7f0000000b00)="8e11c90c7608f893b04406c56cfb07a9688448a5c1d2ab465fb3ef929d7805a8c2a154faff4df3cfde12cd779316191e97c095e9d4eee1f006f328dbf92be194bfe9544b8094e3c345a93c99edae585b7dc2d6beb5424f27b25130f3d7422aa74b7f0a52d2240936bb0b38de0366973c39ead91e1e26a6930414069820db254be65cc415d642e70ef4ea6fb6ebfea047ab4c0903f029a8402dedf92e4e775242ff9467114ec357d5ceb36055eb609db6881246c0836c4e4d474466d9d48082a8bac4a412f8503607fdbb133bcd2d", 0xce}], 0x7, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @broadcast}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@rr={0x7, 0x2b, 0x77, [@rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @local, @loopback, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1f, 0x40, [@remote, @local, @multicast1, @remote, @private=0xa010100, @broadcast, @loopback]}]}}}], 0xe0}, 0x4000081) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x87, 0x52000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x8000, 0xfffffffffffffffd, 0x80000001, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) socket$kcm(0x10, 0x400000002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509000000000000639af0ff00000000b509000000000000db9af0ff41000000bf8200000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) 9.914043246s ago: executing program 3 (id=5966): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 9.703038982s ago: executing program 1 (id=5968): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000900d48fd6ee000e07000000010000000a0000000000000203000000000000000500000d00000000060000000300000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x8, 0x38}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8971, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 9.326005524s ago: executing program 1 (id=5969): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffbd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="919116ca5294e781e19ae69c6b2199b2374ccb7d6e", 0x15}], 0x1}, 0xf080) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}}}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x9c) socket$kcm(0x29, 0x2, 0x0) 8.84260937s ago: executing program 2 (id=5971): socket$kcm(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) sendmsg$inet(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) close(r7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r8 = getpid() perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3d, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x9, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r9, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 6.338806429s ago: executing program 0 (id=5978): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff5"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="02060009020000", 0x7}], 0x1}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce2200"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.197832794s ago: executing program 4 (id=5980): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000780)='.\x13SN\xd5\xa8\xe7\x13\x9d\x11\x85\xb2\xda\xda%\x00\xe9\a\xd9\x12s\x03\x00\xd0O\x87\x8fI\xa5\xbbHd\xfd\x19l\xca\x89\x8e)P\x18\x14\'\x81\n\x02\\\xca\f\xc30p{\x94\xd8wn>\btn\xc3\xfd\xca\x0f\xdb\xab\xae\x04\x0e*\xb4\x06@v\xfd\x86\x9d\xb7\x801\x80\x9a\xc0N,\x8d\x13\x11eJ\x10CQ\xb9ab\xf311\xf9\x03\xd5\xec\x9fa7S\x8b\xdan\xd9W#\x06&P)\x1ak~LB\xa4\f@\xff\xb2]\xddk\xa9\xbd}\xefp}\x90\xd0\xdb\xcc\xf9\xe8\":O\f\x98D\xf07\\F\b\xe2\x82\xfa\xe3L\xb5\x8d\xe3\x87\xa6v\x9a\xb6\xf4\x80\x85\";\xe5\xdf\xa2\xbd\xf9}\\\xbe?\x93|\xcbg\x1c~\xb6Y\xaa\xf3\xd6%\x89\xe4\x1b\xb6.f\x12\xe5\xabm \xb6\\\xb9T\fZma\xb9\xd7xzS\xd3\x8b\x02Qj\xf5\xb7X\xc6\b\x19.\xae\xdd\xa9\xd0\xf2\xdc\x1f\xf1z\v\xf9\xc3\xf0V5D&a\xf6^\x94\x19\xe0\b\xf0\xdcD{(\x1b\xf9|\xe9\xa1]\xdc\xe8\xb8\xdb\xd5<2\x96\'s\xe7\x84\x82\xea\xbb\xff\xb7\xb8%-?\x83\x9cwOe|\xb4\xef\xb6\xf4\xdf\xbf\x1e\xc6OSs\xc4_6H\xde\x9eN\x12\x9cH\x86\x824\xaf\x177\t:\xe3_w-\xbf\x1b\x14\xc7\x1d\xb4\x99\x1f\xadf\x9e\xc7X\x040\x9e^ \xc9m\x9ek\x86\t\x9f \xc8\xcf\xf5\x80(\xd9l\x91\xf7x\x7f\xaa\xd9\xd4nO\xa0\xa0M6\v.\xd8[\xc9\xa4` ') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={0xffffffffffffffff, 0xe0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000000d40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000ec0), &(0x7f0000000f00), 0x8, 0x56, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001200)={&(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000200)="e0bc3ee4b1ea294836c20e0187bde0a19c556d0125c464c4c0f2b79e9dc305ba8684f61fe0a8885b8c1c6b007f0cdabf1f886a9d7c045d1a723e6b00484bffbd6c4d3a711fdc78c2d935ce6eeb2d1a2a5a3bf6923d77aa0cb80e0d800fe4aa88082cc9333b7ff18be1545a4e", 0x6c}, {0x0}, {&(0x7f0000000540)="f014ad5337128f289a2c1373fd662c0df43ba2d43dfbab44270c6a0930da1b4d599e45345df37edd754e237f069a42c8cb83798f230bc1bbf71a1b3b59428ced0ec6f6eda16151c663d6c0bb19c29ff2a40568b72d8881eb20784da1665e559744175f15b127f0657404e5dd6f36a04b63ab7a05a5b220fe2834a6fb4156483c18f50d276b376cff63f8004aa808c2a6b5462a43fef9682acc748146ee72c0c9668bf2ff607063fe9fa8f1f850c96b393edda635543ad1843707f0e0aa", 0xbd}, {&(0x7f00000006c0)="6294433fea0bef1c4ae62df5b2b62c8c66b4350a24ebf6df63aadd68738d0929bb644936d680a49add2f036696f0d8b3aa0f15ee6ce6b944428536202383204db5b4d32ae674120dd1c5df78ebe011be5bfdd7d3226da78f408f8a4ee0dd236af1a526cc1c74beba46afca4b", 0x6c}, {&(0x7f0000000900)="d963c4e2e07a06be4f59", 0xa}, {&(0x7f0000000940)="8e0a226a36fde584e98f6577626a7f9f2b6b9186077a4cd5f481cae8bfec6a674aff4bf0253b85046aa9ae5aa23efe21a7f701bd9a4c567191f1e070b9a4b3261b057f371eec7d2db7f555125c148c95f6b5e6af2b1762a1c5e31935938e29c03dc38141fb5bec32f7ef5ebfc2e1448d5f381fa75acf1f80c5d70abb", 0x7c}, {&(0x7f0000000b00)="8e11c90c7608f893b04406c56cfb07a9688448a5c1d2ab465fb3ef929d7805a8c2a154faff4df3cfde12cd779316191e97c095e9d4eee1f006f328dbf92be194bfe9544b8094e3c345a93c99edae585b7dc2d6beb5424f27b25130f3d7422aa74b7f0a52d2240936bb0b38de0366973c39ead91e1e26a6930414069820db254be65cc415d642e70ef4ea6fb6ebfea047ab4c0903f029a8402dedf92e4e775242ff9467114ec357d5ceb36055eb609db6881246c0836c4e4d474466d9d48082a8bac4a412f8503607fdbb133bcd2d", 0xce}], 0x7, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @broadcast}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@rr={0x7, 0x2b, 0x77, [@rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @local, @loopback, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1f, 0x40, [@remote, @local, @multicast1, @remote, @private=0xa010100, @broadcast, @loopback]}]}}}], 0xe0}, 0x4000081) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x87, 0x52000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x8000, 0xfffffffffffffffd, 0x80000001, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) socket$kcm(0x10, 0x400000002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509000000000000639af0ff00000000b509000000000000db9af0ff41000000bf8200000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) 5.675716201s ago: executing program 4 (id=5981): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000900d48fd6ee000e07000000010000000a0000000000000203000000000000000500000d00000000060000000300000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x8, 0x38}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8971, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 5.303157022s ago: executing program 4 (id=5982): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffbd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="919116ca5294e781e19ae69c6b2199b2374ccb7d6e", 0x15}], 0x1}, 0xf080) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}}}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x9c) socket$kcm(0x29, 0x2, 0x0) 4.72671422s ago: executing program 0 (id=5983): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4800) 4.668923073s ago: executing program 4 (id=5984): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1d, @local}, 0x10, 0x0}, 0x8850) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2813], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1fff8}], 0x1}, 0x80d1) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fc6c40000000000000000002c0000002c0000000200000000000d0000000000000000000000000000000000000003000000000200000003000000"], 0x0, 0x46, 0x0, 0x1}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x14, &(0x7f0000001040)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) 4.41378976s ago: executing program 0 (id=5985): socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20004, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0xb, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d00)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@llc={0x1a, 0x303, 0xc5, 0x8, 0x3, 0x40, @local}, 0x80, &(0x7f0000000640)}, 0x0) r1 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="6b0000000000000029000000050000000002020000000000000000007f000001080000000700000000000034366567f221978756640000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="d8000000180081034ef0f206b74cb9040a1d080006007c06e8fc55a10a0015000600142603600e1208000f0000000401a8000100df80ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b31627ffe06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a468eb4edbb57a5025ccca9e00360db798262f3dcace0d0bdb8e73ece0b42a9ecbee12cf1de59bf09ebc62e9b6e6bf545de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffefffffe}, 0x0, 0x20, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r3], 0xfe33) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r4, &(0x7f0000000140)="02f8b6b93d5dee3673f737ece2b062308d92d913d46d7aba02a9dbdfd7b818350da50d0ad44da4e6d2db239139ceab65516764ae9ee75ad438b2fb1a89eda021ace5eed61d4765eb620ed7897646d9cbde5f05a686a2cebba22f60050f408794", &(0x7f0000000200)=""/80}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r5, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2578], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1212000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 4.230466946s ago: executing program 3 (id=5986): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce2200"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.395935644s ago: executing program 4 (id=5987): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0x3, 0x400, 0x6, 0x8, 0x800, r1, 0x737a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a0000000000", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0xa, 0x6, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000047"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r5, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x1b, &(0x7f0000000100)=r4, 0x120) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f0000001b40)=""/4065, 0xfe1}, {&(0x7f0000003b80)=""/4124, 0x101c}, {&(0x7f0000000240)=""/152, 0x98}], 0x5}, 0x20) recvmsg(r3, &(0x7f0000005cc0)={&(0x7f0000000140)=@tipc=@id, 0x80, &(0x7f0000005c80)=[{&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/185, 0xb9}], 0x2}, 0x100) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x391, 0xffffffffffffffff, 0x4}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) 2.378285985s ago: executing program 3 (id=5988): socket$kcm(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) sendmsg$inet(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) close(r7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r8 = getpid() perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3d, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x9, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r9, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.348826276s ago: executing program 0 (id=5989): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0x3, 0x400, 0x6, 0x8, 0x800, r1, 0x737a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a0000000000", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0xa, 0x6, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000047"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r5, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x1b, &(0x7f0000000100)=r4, 0x120) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f0000001b40)=""/4065, 0xfe1}, {&(0x7f0000003b80)=""/4124, 0x101c}, {&(0x7f0000000240)=""/152, 0x98}], 0x5}, 0x20) recvmsg(r3, &(0x7f0000005cc0)={&(0x7f0000000140)=@tipc=@id, 0x80, &(0x7f0000005c80)=[{&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/185, 0xb9}], 0x2}, 0x100) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x391, 0xffffffffffffffff, 0x4}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) 2.21046751s ago: executing program 2 (id=5990): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x19, &(0x7f0000000000), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x33, &(0x7f0000000040), 0xcf) socket$kcm(0x29, 0x5, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b90402200d00098000000000150010001400259070f409000d2000000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee05e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5e08001b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6cce50dd6e4edef3d939acd92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0xb, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff9d, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x4000) 1.686806767s ago: executing program 2 (id=5991): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000900d48fd6ee000e07000000010000000a0000000000000203000000000000000500000d00000000060000000300000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x8, 0x38}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8971, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 1.374621277s ago: executing program 2 (id=5992): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x9d, &(0x7f00000000c0)=""/157, 0x0, 0x2}, 0x94) 1.315822119s ago: executing program 0 (id=5993): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffbd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="919116ca5294e781e19ae69c6b2199b2374ccb7d6e", 0x15}], 0x1}, 0xf080) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}}}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x9c) socket$kcm(0x29, 0x2, 0x0) 998.654029ms ago: executing program 2 (id=5994): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1d, @local}, 0x10, 0x0}, 0x8850) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2813], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1fff8}], 0x1}, 0x80d1) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r5) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) 845.823944ms ago: executing program 4 (id=5995): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 178.588825ms ago: executing program 0 (id=5996): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1d, @local}, 0x10, 0x0}, 0x8850) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2813], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1fff8}], 0x1}, 0x80d1) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r5) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) 0s ago: executing program 2 (id=5997): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce2200"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.128728][T15790] RSP: 002b:00007fe4fede5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.137226][T15790] RAX: ffffffffffffffda RBX: 00007fe4fe215fa0 RCX: 00007fe4fdf9ce59 [ 708.145279][T15790] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 708.153316][T15790] RBP: 00007fe4fede5090 R08: 0000000000000000 R09: 0000000000000000 [ 708.161343][T15790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.169367][T15790] R13: 00007fe4fe216038 R14: 00007fe4fe215fa0 R15: 00007fff7fe77b08 [ 708.177425][T15790] [ 708.959559][T15810] netlink: 'syz.4.3641': attribute type 29 has an invalid length. [ 708.967988][T15810] netlink: 'syz.4.3641': attribute type 29 has an invalid length. [ 709.832490][T15821] __nla_validate_parse: 1 callbacks suppressed [ 709.832513][T15821] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3644'. [ 709.922429][T15822] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3645'. [ 709.980072][T15822] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3645'. [ 710.009519][T15826] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3647'. [ 710.020118][T15826] netlink: zone id is out of range [ 710.025830][T15826] netlink: zone id is out of range [ 710.031204][T15826] netlink: zone id is out of range [ 710.055667][T15822] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3645'. [ 710.084903][T15826] netlink: del zone limit has 4 unknown bytes [ 710.330054][T15833] device wlan1 entered promiscuous mode [ 711.779720][T15847] netlink: 'syz.4.3652': attribute type 29 has an invalid length. [ 711.808311][T15847] netlink: 'syz.4.3652': attribute type 29 has an invalid length. [ 711.954295][T15854] FAULT_INJECTION: forcing a failure. [ 711.954295][T15854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.022629][T15854] CPU: 1 PID: 15854 Comm: syz.2.3654 Not tainted syzkaller #0 [ 712.030193][T15854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 712.040297][T15854] Call Trace: [ 712.043619][T15854] [ 712.046622][T15854] dump_stack_lvl+0x188/0x24e [ 712.051368][T15854] ? show_regs_print_info+0x12/0x12 [ 712.056641][T15854] ? load_image+0x400/0x400 [ 712.061206][T15854] ? __lock_acquire+0x7d10/0x7d10 [ 712.066295][T15854] should_fail_ex+0x399/0x4d0 [ 712.071113][T15854] _copy_from_user+0x2c/0x170 [ 712.075850][T15854] ___sys_recvmsg+0x172/0x590 [ 712.080597][T15854] ? __sys_recvmsg+0x290/0x290 [ 712.085442][T15854] ? trace_call_bpf+0xbf/0x6b0 [ 712.090265][T15854] ? trace_call_bpf+0x5d6/0x6b0 [ 712.095186][T15854] ? __fget_files+0x43d/0x4b0 [ 712.099939][T15854] __x64_sys_recvmsg+0x205/0x2e0 [ 712.104966][T15854] ? perf_trace_preemptirq_template+0x268/0x320 [ 712.111256][T15854] ? ___sys_recvmsg+0x590/0x590 [ 712.116179][T15854] ? lockdep_hardirqs_on+0x94/0x140 [ 712.121425][T15854] do_syscall_64+0x4c/0xa0 [ 712.125892][T15854] ? clear_bhb_loop+0x60/0xb0 [ 712.130622][T15854] ? clear_bhb_loop+0x60/0xb0 [ 712.135358][T15854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 712.141307][T15854] RIP: 0033:0x7f9169d9ce59 [ 712.145770][T15854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.165510][T15854] RSP: 002b:00007f916ac9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 712.173969][T15854] RAX: ffffffffffffffda RBX: 00007f916a015fa0 RCX: 00007f9169d9ce59 [ 712.182004][T15854] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 712.189998][T15854] RBP: 00007f916ac9b090 R08: 0000000000000000 R09: 0000000000000000 [ 712.198014][T15854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.206012][T15854] R13: 00007f916a016038 R14: 00007f916a015fa0 R15: 00007ffc62405178 [ 712.214027][T15854] [ 712.471603][T15867] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3658'. [ 712.517656][T15866] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3659'. [ 712.536486][T15866] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3659'. [ 712.594114][T15866] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3659'. [ 713.242136][T15892] netlink: 'syz.2.3668': attribute type 29 has an invalid length. [ 713.275318][T15892] netlink: 'syz.2.3668': attribute type 29 has an invalid length. [ 714.241002][T15902] FAULT_INJECTION: forcing a failure. [ 714.241002][T15902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.254883][T15902] CPU: 0 PID: 15902 Comm: syz.1.3670 Not tainted syzkaller #0 [ 714.262404][T15902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 714.272502][T15902] Call Trace: [ 714.275818][T15902] [ 714.278785][T15902] dump_stack_lvl+0x188/0x24e [ 714.283526][T15902] ? show_regs_print_info+0x12/0x12 [ 714.288782][T15902] ? load_image+0x400/0x400 [ 714.293347][T15902] ? __lock_acquire+0x7d10/0x7d10 [ 714.298417][T15902] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 714.304459][T15902] should_fail_ex+0x399/0x4d0 [ 714.309193][T15902] _copy_to_user+0x2c/0x130 [ 714.313749][T15902] bpf_test_finish+0x198/0x600 [ 714.318584][T15902] ? convert_skb_to___skb+0x420/0x420 [ 714.324029][T15902] bpf_prog_test_run_flow_dissector+0x4c5/0x640 [ 714.330337][T15902] ? xdp_convert_buff_to_md+0x200/0x200 [ 714.335931][T15902] ? __fget_files+0x28/0x4b0 [ 714.340567][T15902] ? __fget_files+0x28/0x4b0 [ 714.345232][T15902] ? xdp_convert_buff_to_md+0x200/0x200 [ 714.350904][T15902] bpf_prog_test_run+0x31e/0x390 [ 714.355891][T15902] __sys_bpf+0x62b/0x780 [ 714.360190][T15902] ? bpf_link_show_fdinfo+0x380/0x380 [ 714.365630][T15902] ? lock_chain_count+0x20/0x20 [ 714.370524][T15902] __x64_sys_bpf+0x78/0x90 [ 714.374977][T15902] do_syscall_64+0x4c/0xa0 [ 714.379433][T15902] ? clear_bhb_loop+0x60/0xb0 [ 714.384148][T15902] ? clear_bhb_loop+0x60/0xb0 [ 714.388877][T15902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.394799][T15902] RIP: 0033:0x7fe4fdf9ce59 [ 714.399250][T15902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.418877][T15902] RSP: 002b:00007fe4fede5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 714.427319][T15902] RAX: ffffffffffffffda RBX: 00007fe4fe215fa0 RCX: 00007fe4fdf9ce59 [ 714.435315][T15902] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 714.443310][T15902] RBP: 00007fe4fede5090 R08: 0000000000000000 R09: 0000000000000000 [ 714.451836][T15902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.459832][T15902] R13: 00007fe4fe216038 R14: 00007fe4fe215fa0 R15: 00007fff7fe77b08 [ 714.467838][T15902] [ 714.701671][T15911] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3674'. [ 714.855610][T15916] __nla_validate_parse: 2 callbacks suppressed [ 714.855633][T15916] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.3676'. [ 715.257392][T15926] netlink: 'syz.1.3679': attribute type 10 has an invalid length. [ 715.299006][T15926] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.310720][T15926] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.375580][T15933] netlink: 'syz.2.3681': attribute type 29 has an invalid length. [ 715.469518][T15926] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.477898][T15926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.488108][T15926] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.496509][T15926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.567505][T15926] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 715.582122][T15933] netlink: 'syz.2.3681': attribute type 29 has an invalid length. [ 717.008167][T15961] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3689'. [ 717.034981][T15961] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3689'. [ 717.069093][T15964] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.3690'. [ 717.134203][T15966] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3689'. [ 717.567710][T15976] netlink: 'syz.1.3694': attribute type 29 has an invalid length. [ 720.232033][T15976] netlink: 'syz.1.3694': attribute type 29 has an invalid length. [ 720.497446][T15997] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3700'. [ 720.522482][T15997] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3700'. [ 720.759407][T16002] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.3702'. [ 721.057647][T16008] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3705'. [ 721.072751][T16008] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3705'. [ 721.137080][T16008] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3705'. [ 722.342626][T16022] netlink: 'syz.2.3710': attribute type 29 has an invalid length. [ 722.358695][T16022] netlink: 'syz.2.3710': attribute type 29 has an invalid length. [ 723.055217][ T4273] Bluetooth: hci5: ISO packet for unknown connection handle 3327 [ 723.152833][T16031] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3713'. [ 723.235309][T16031] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3713'. [ 723.411323][T16043] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3718'. [ 723.442045][T16043] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3718'. [ 723.716380][T16057] netlink: zone id is out of range [ 723.721568][T16057] netlink: zone id is out of range [ 723.735016][T16057] netlink: zone id is out of range [ 723.742973][T16057] netlink: del zone limit has 4 unknown bytes [ 724.219879][T16064] netlink: 'syz.3.3724': attribute type 29 has an invalid length. [ 724.243177][T16064] netlink: 'syz.3.3724': attribute type 29 has an invalid length. [ 725.502019][T16084] netlink: 'syz.1.3729': attribute type 13 has an invalid length. [ 725.551250][T16084] __nla_validate_parse: 2 callbacks suppressed [ 725.551290][T16084] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3729'. [ 725.642459][T16089] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.3731'. [ 725.659686][T16084] erspan0: refused to change device tx_queue_len [ 725.675991][T16084] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 725.720602][T16094] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.3733'. [ 728.152423][T16127] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.3748'. [ 728.191718][T16132] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.3747'. [ 728.480516][T16142] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.3752'. [ 728.497993][T16144] netlink: 'syz.2.3753': attribute type 29 has an invalid length. [ 728.529762][T16144] netlink: 'syz.2.3753': attribute type 29 has an invalid length. [ 728.864187][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 729.077171][T16159] netlink: 'syz.0.3758': attribute type 10 has an invalid length. [ 729.098939][T16160] netlink: 'syz.0.3758': attribute type 10 has an invalid length. [ 729.235163][T16168] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3761'. [ 729.267622][T16168] netlink: zone id is out of range [ 729.328819][T16168] netlink: del zone limit has 4 unknown bytes [ 730.788518][T16183] netlink: 'syz.2.3765': attribute type 1 has an invalid length. [ 730.827674][T16189] netlink: 'syz.3.3768': attribute type 29 has an invalid length. [ 730.837959][T16190] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3765'. [ 730.851121][T16183] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.3765'. [ 730.868548][T16189] netlink: 'syz.3.3768': attribute type 29 has an invalid length. [ 730.885766][T16187] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.3766'. [ 730.915834][T16192] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3769'. [ 731.429706][T13185] device hsr_slave_0 left promiscuous mode [ 731.455458][T13185] device hsr_slave_1 left promiscuous mode [ 731.472273][T16207] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3774'. [ 731.519554][T16207] netlink: zone id is out of range [ 731.562468][T16207] netlink: del zone limit has 4 unknown bytes [ 731.905834][T13185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.923837][T13185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.940690][T13185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.953315][T13185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.970857][T13185] device bridge_slave_1 left promiscuous mode [ 731.979427][T13185] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.989382][T13185] device bridge_slave_0 left promiscuous mode [ 731.996324][T13185] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.048775][T13185] device veth1_macvtap left promiscuous mode [ 732.060412][T13185] device veth1_vlan left promiscuous mode [ 732.067204][T13185] device veth0_vlan left promiscuous mode [ 732.900592][T13185] team0 (unregistering): Port device team_slave_1 removed [ 732.950909][T13185] team0 (unregistering): Port device team_slave_0 removed [ 733.010596][T13185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.105241][T13185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.442107][T13185] bond0 (unregistering): Released all slaves [ 733.560018][T16220] netlink: 'syz.4.3776': attribute type 13 has an invalid length. [ 733.571825][T16220] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3776'. [ 733.589182][T16220] erspan0: refused to change device tx_queue_len [ 733.597973][T16220] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 733.880695][T16237] netlink: 'syz.1.3784': attribute type 29 has an invalid length. [ 733.912179][T16235] netlink: 'syz.2.3783': attribute type 1 has an invalid length. [ 733.938442][T16237] netlink: 'syz.1.3784': attribute type 29 has an invalid length. [ 733.946775][T16235] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.3783'. [ 733.995374][T16235] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3783'. [ 734.229489][T16246] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3788'. [ 734.264170][T16246] netlink: zone id is out of range [ 734.287488][T16247] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.3789'. [ 734.306584][T16246] netlink: del zone limit has 4 unknown bytes [ 735.846755][T16280] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3799'. [ 736.277956][T16295] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3802'. [ 736.294634][T16295] netlink: zone id is out of range [ 736.307595][T16295] netlink: zone id is out of range [ 736.333997][T16295] netlink: zone id is out of range [ 736.454336][T16295] netlink: del zone limit has 4 unknown bytes [ 737.041532][T16303] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.3805'. [ 737.173751][T16305] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3806'. [ 737.699204][T16321] netlink: 'syz.3.3819': attribute type 1 has an invalid length. [ 737.707379][T16321] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.3819'. [ 737.724017][T16321] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3819'. [ 739.315364][T16350] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3815'. [ 739.380028][T16350] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3815'. [ 739.386121][T16351] netlink: 'syz.3.3817': attribute type 1 has an invalid length. [ 739.407758][T16354] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.3820'. [ 739.419404][T16350] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 739.442842][T16351] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.3817'. [ 740.911638][T16390] __nla_validate_parse: 1 callbacks suppressed [ 740.911658][T16390] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3840'. [ 741.141799][T16390] netlink: zone id is out of range [ 741.193336][T16390] netlink: zone id is out of range [ 741.243968][T16390] netlink: zone id is out of range [ 741.467252][T16390] netlink: del zone limit has 4 unknown bytes [ 743.442896][T16406] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.3833'. [ 743.519818][T16409] netlink: 'syz.2.3834': attribute type 1 has an invalid length. [ 743.545158][T16410] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3835'. [ 743.561848][T16409] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.3834'. [ 743.578404][T16416] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3834'. [ 744.237419][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 746.599723][T16470] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.3851'. [ 746.748733][T16475] netlink: 'syz.0.3853': attribute type 1 has an invalid length. [ 746.763204][T16475] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.3853'. [ 747.276667][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.283385][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.444766][T16472] team0: Port device team_slave_0 removed [ 747.463939][T16471] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3852'. [ 747.484864][T16475] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3853'. [ 748.029070][T16501] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3860'. [ 748.101005][T16501] netlink: zone id is out of range [ 748.126322][T16501] netlink: zone id is out of range [ 748.134559][T16501] netlink: zone id is out of range [ 748.160971][T16501] netlink: del zone limit has 4 unknown bytes [ 749.459092][T16520] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3866'. [ 750.421990][T16527] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.3877'. [ 750.681640][T16536] netlink: 'syz.2.3869': attribute type 1 has an invalid length. [ 750.745107][T16536] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.3869'. [ 750.931967][T16536] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3869'. [ 755.072470][T16585] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3883'. [ 755.092740][T16585] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3883'. [ 755.157890][T16585] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3883'. [ 755.247190][T16589] netlink: 'syz.2.3886': attribute type 1 has an invalid length. [ 755.256306][T16589] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.3886'. [ 755.300968][T16589] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3886'. [ 755.405061][T16596] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3898'. [ 755.414765][T16596] netlink: zone id is out of range [ 755.420078][T16596] netlink: zone id is out of range [ 755.426123][T16596] netlink: zone id is out of range [ 755.482574][T16596] netlink: del zone limit has 4 unknown bytes [ 758.825564][T16649] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3900'. [ 758.840853][T16649] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3900'. [ 758.930311][T16650] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3900'. [ 759.422495][T16654] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3903'. [ 759.453259][T16654] netlink: zone id is out of range [ 759.497181][T16654] netlink: zone id is out of range [ 759.502407][T16654] netlink: zone id is out of range [ 759.547945][T16654] netlink: del zone limit has 4 unknown bytes [ 759.627686][T16658] netlink: 'syz.2.3902': attribute type 1 has an invalid length. [ 759.708082][T16662] netlink: 'syz.1.3906': attribute type 29 has an invalid length. [ 759.724272][T16662] netlink: 'syz.1.3906': attribute type 29 has an invalid length. [ 760.136232][T16675] __nla_validate_parse: 2 callbacks suppressed [ 760.136253][T16675] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3912'. [ 762.159266][T16707] netlink: 'syz.1.3919': attribute type 1 has an invalid length. [ 762.167551][T16707] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.3919'. [ 762.170434][T16709] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3920'. [ 762.200561][T16707] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3919'. [ 762.224815][T16709] netlink: zone id is out of range [ 762.230057][T16709] netlink: zone id is out of range [ 762.275052][T16709] netlink: zone id is out of range [ 762.326826][T16709] netlink: del zone limit has 4 unknown bytes [ 762.549102][T16719] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3922'. [ 762.575149][T16719] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3922'. [ 762.736531][T16719] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3922'. [ 762.893258][T16722] delete_channel: no stack [ 764.505004][T16758] netlink: 'syz.1.3935': attribute type 1 has an invalid length. [ 764.513662][T16758] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.3935'. [ 764.743522][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 765.998369][T16758] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3935'. [ 766.340396][T16776] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.3940'. [ 766.883278][T16790] netlink: 'syz.0.3944': attribute type 29 has an invalid length. [ 766.895664][T16790] netlink: 'syz.0.3944': attribute type 29 has an invalid length. [ 767.949955][T16796] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.3947'. [ 767.976964][T16799] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3949'. [ 768.387465][T16812] netlink: 'syz.1.3951': attribute type 1 has an invalid length. [ 768.403885][T16812] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.3951'. [ 769.243237][T16807] device sit0 entered promiscuous mode [ 769.339367][T16810] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3946'. [ 769.359109][T16812] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3951'. [ 770.863205][T16845] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.3961'. [ 771.036768][T16848] netlink: 'syz.1.3962': attribute type 13 has an invalid length. [ 771.055715][T16848] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3962'. [ 771.147627][T16850] netlink: 'syz.3.3963': attribute type 1 has an invalid length. [ 771.172703][T16850] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.3963'. [ 771.219774][T16848] erspan0: refused to change device tx_queue_len [ 771.253313][T16854] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3963'. [ 771.420396][T16864] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3967'. [ 772.087810][T16864] device veth0_macvtap left promiscuous mode [ 772.583657][T16884] netlink: 'syz.1.3972': attribute type 10 has an invalid length. [ 772.712103][T16890] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3974'. [ 773.417797][T16884] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.454257][T16884] bond0: (slave team0): Enslaving as an active interface with an up link [ 773.475933][T16890] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3974'. [ 773.514097][T16893] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3974'. [ 773.686851][T16905] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3978'. [ 773.686883][T16902] netlink: 'syz.4.3978': attribute type 1 has an invalid length. [ 773.712144][T16902] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.3978'. [ 774.270607][T16916] netlink: 'syz.1.3982': attribute type 21 has an invalid length. [ 774.371045][T16916] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3982'. [ 774.949761][ T4282] Bluetooth: hci5: command 0x0406 tx timeout [ 776.277657][ T4282] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 776.438286][T16942] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3991'. [ 776.784574][T16950] netlink: 'syz.1.3993': attribute type 1 has an invalid length. [ 776.798312][T16950] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.3993'. [ 776.811535][T16950] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3993'. [ 779.538014][T16978] netlink: 'syz.2.4003': attribute type 4 has an invalid length. [ 779.546213][T16978] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4003'. [ 779.558650][T16981] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4002'. [ 779.572357][T16981] FAULT_INJECTION: forcing a failure. [ 779.572357][T16981] name failslab, interval 1, probability 0, space 0, times 0 [ 779.588920][T16981] CPU: 0 PID: 16981 Comm: syz.3.4002 Not tainted syzkaller #0 [ 779.596474][T16981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 779.606592][T16981] Call Trace: [ 779.609921][T16981] [ 779.612893][T16981] dump_stack_lvl+0x188/0x24e [ 779.617644][T16981] ? show_regs_print_info+0x12/0x12 [ 779.622909][T16981] ? load_image+0x400/0x400 [ 779.627467][T16981] ? __might_sleep+0xd0/0xd0 [ 779.632094][T16981] ? __lock_acquire+0x7d10/0x7d10 [ 779.637179][T16981] should_fail_ex+0x399/0x4d0 [ 779.641916][T16981] should_failslab+0x5/0x20 [ 779.646462][T16981] slab_pre_alloc_hook+0x59/0x310 [ 779.651531][T16981] ? br_netlink_fini+0x30/0x30 [ 779.656354][T16981] kmem_cache_alloc_node+0x5a/0x320 [ 779.661601][T16981] ? __alloc_skb+0xfc/0x7e0 [ 779.666180][T16981] __alloc_skb+0xfc/0x7e0 [ 779.670565][T16981] rtmsg_ifinfo_build_skb+0x80/0x190 [ 779.675910][T16981] rtmsg_ifinfo+0xc4/0x200 [ 779.680386][T16981] dev_close_many+0x27b/0x410 [ 779.685111][T16981] ? do_trace_netlink_extack+0x9c/0x220 [ 779.690719][T16981] ? __dev_open+0x430/0x430 [ 779.695385][T16981] ? exc_int3+0xa/0x70 [ 779.699528][T16981] unregister_netdevice_many_notify+0x491/0x19c0 [ 779.705922][T16981] ? __lock_acquire+0x13cf/0x7d10 [ 779.711031][T16981] ? unregister_netdevice_many+0x20/0x20 [ 779.716723][T16981] ? unregister_netdevice_queue+0x1aa/0x370 [ 779.722679][T16981] ? list_netdevice+0x6c0/0x6c0 [ 779.727586][T16981] ? __nla_parse+0x3c/0x50 [ 779.732054][T16981] ? list_netdevice+0x6c0/0x6c0 [ 779.737088][T16981] rtnl_dellink+0x55d/0x830 [ 779.741654][T16981] ? lockdep_hardirqs_on+0x94/0x140 [ 779.746927][T16981] ? rtnl_newlink+0x20a0/0x20a0 [ 779.751880][T16981] ? __mutex_lock+0x806/0xaf0 [ 779.756621][T16981] ? lock_release+0x7d/0x920 [ 779.761350][T16981] ? rtnl_newlink+0x20a0/0x20a0 [ 779.766294][T16981] rtnetlink_rcv_msg+0x87c/0xfc0 [ 779.771311][T16981] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 779.776575][T16981] ? rtnetlink_bind+0x80/0x80 [ 779.781327][T16981] ? mark_lock+0x94/0x320 [ 779.785718][T16981] ? __lock_acquire+0x12f4/0x7d10 [ 779.790833][T16981] ? verify_lock_unused+0x140/0x140 [ 779.796094][T16981] ? perf_trace_lock+0xf8/0x390 [ 779.801000][T16981] ? verify_lock_unused+0x140/0x140 [ 779.806268][T16981] ? perf_trace_lock+0xf8/0x390 [ 779.811173][T16981] ? perf_trace_lock+0xf8/0x390 [ 779.816082][T16981] ? trace_event_raw_event_lock+0x250/0x250 [ 779.822045][T16981] netlink_rcv_skb+0x1fb/0x450 [ 779.826876][T16981] ? rtnetlink_bind+0x80/0x80 [ 779.831614][T16981] ? netlink_ack+0x1170/0x1170 [ 779.836449][T16981] ? netlink_deliver_tap+0x2e/0x1b0 [ 779.841720][T16981] netlink_unicast+0x74d/0x8d0 [ 779.846550][T16981] netlink_sendmsg+0x8ad/0xbd0 [ 779.851382][T16981] ? netlink_getsockopt+0x550/0x550 [ 779.856647][T16981] ? aa_sock_msg_perm+0x94/0x150 [ 779.861634][T16981] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 779.866964][T16981] ? security_socket_sendmsg+0x7c/0xa0 [ 779.872492][T16981] ? netlink_getsockopt+0x550/0x550 [ 779.877760][T16981] ____sys_sendmsg+0x5be/0x970 [ 779.882598][T16981] ? __sys_sendmsg_sock+0x30/0x30 [ 779.887693][T16981] ? __import_iovec+0x315/0x500 [ 779.892607][T16981] ? import_iovec+0x6f/0xa0 [ 779.897165][T16981] ___sys_sendmsg+0x2a2/0x360 [ 779.901910][T16981] ? __sys_sendmsg+0x290/0x290 [ 779.906753][T16981] ? trace_call_bpf+0xbf/0x6b0 [ 779.911597][T16981] __se_sys_sendmsg+0x1bb/0x2a0 [ 779.916507][T16981] ? ct_nmi_exit+0x145/0x1c0 [ 779.921144][T16981] ? __x64_sys_sendmsg+0x80/0x80 [ 779.926203][T16981] ? lockdep_hardirqs_on+0x94/0x140 [ 779.931471][T16981] do_syscall_64+0x4c/0xa0 [ 779.935952][T16981] ? clear_bhb_loop+0x60/0xb0 [ 779.940687][T16981] ? clear_bhb_loop+0x60/0xb0 [ 779.945512][T16981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 779.951456][T16981] RIP: 0033:0x7f43d959ce59 [ 779.955905][T16981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.975747][T16981] RSP: 002b:00007f43da507028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.984259][T16981] RAX: ffffffffffffffda RBX: 00007f43d9816090 RCX: 00007f43d959ce59 [ 779.992274][T16981] RDX: 0000000004008014 RSI: 0000200000000040 RDI: 0000000000000003 [ 780.000278][T16981] RBP: 00007f43da507090 R08: 0000000000000000 R09: 0000000000000000 [ 780.008308][T16981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.016334][T16981] R13: 00007f43d9816128 R14: 00007f43d9816090 R15: 00007fff3d219e28 [ 780.024385][T16981] [ 780.099346][T16981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.141267][T16981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.168433][T16981] bond0 (unregistering): Released all slaves [ 780.417477][T16991] netlink: 'syz.2.4007': attribute type 1 has an invalid length. [ 780.441053][T16991] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.4007'. [ 780.490653][T16991] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4007'. [ 782.069917][T17019] netlink: 'syz.1.4017': attribute type 1 has an invalid length. [ 782.079991][T17019] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.4017'. [ 782.103002][T17019] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4017'. [ 785.092793][T17036] netlink: 'syz.4.4021': attribute type 1 has an invalid length. [ 785.114427][T17036] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.4021'. [ 785.198744][T17036] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4021'. [ 785.392613][T17047] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4026'. [ 785.484235][T17047] netlink: zone id is out of range [ 785.511262][T17047] netlink: zone id is out of range [ 785.532562][T17047] netlink: zone id is out of range [ 785.561657][T17047] netlink: del zone limit has 4 unknown bytes [ 785.926572][T17063] netlink: 'syz.4.4032': attribute type 10 has an invalid length. [ 786.175277][T17073] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.4034'. [ 788.003842][T17063] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.175459][T17063] device bridge_slave_1 left promiscuous mode [ 788.181801][T17063] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.925383][T17063] team0: Port device bridge_slave_1 added [ 788.932469][T17073] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 788.946709][T17084] netlink: 'syz.2.4037': attribute type 5 has an invalid length. [ 788.973571][T17073] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 788.983220][T17073] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 789.262248][T17093] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4041'. [ 789.299652][T17093] netlink: zone id is out of range [ 789.342182][T17093] netlink: zone id is out of range [ 789.372539][T17093] netlink: zone id is out of range [ 789.457263][T17093] netlink: del zone limit has 4 unknown bytes [ 790.554585][T17118] FAULT_INJECTION: forcing a failure. [ 790.554585][T17118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.579655][T17118] CPU: 0 PID: 17118 Comm: syz.3.4049 Not tainted syzkaller #0 [ 790.587214][T17118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 790.597330][T17118] Call Trace: [ 790.600759][T17118] [ 790.603759][T17118] dump_stack_lvl+0x188/0x24e [ 790.608482][T17118] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 790.614677][T17118] ? show_regs_print_info+0x12/0x12 [ 790.619912][T17118] ? load_image+0x400/0x400 [ 790.624455][T17118] should_fail_ex+0x399/0x4d0 [ 790.629164][T17118] _copy_from_user+0x2c/0x170 [ 790.633888][T17118] __copy_msghdr+0x3b7/0x580 [ 790.638544][T17118] ___sys_sendmsg+0x210/0x360 [ 790.643270][T17118] ? __sys_sendmsg+0x290/0x290 [ 790.648091][T17118] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 790.653861][T17118] __se_sys_sendmsg+0x1bb/0x2a0 [ 790.658740][T17118] ? __x64_sys_sendmsg+0x80/0x80 [ 790.663731][T17118] ? syscall_enter_from_user_mode+0x2a/0x80 [ 790.669650][T17118] do_syscall_64+0x4c/0xa0 [ 790.674094][T17118] ? clear_bhb_loop+0x60/0xb0 [ 790.678803][T17118] ? clear_bhb_loop+0x60/0xb0 [ 790.683513][T17118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 790.689434][T17118] RIP: 0033:0x7f43d959ce59 [ 790.693872][T17118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.713511][T17118] RSP: 002b:00007f43da528028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 790.721953][T17118] RAX: ffffffffffffffda RBX: 00007f43d9815fa0 RCX: 00007f43d959ce59 [ 790.729947][T17118] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000005 [ 790.737950][T17118] RBP: 00007f43da528090 R08: 0000000000000000 R09: 0000000000000000 [ 790.745942][T17118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.753931][T17118] R13: 00007f43d9816038 R14: 00007f43d9815fa0 R15: 00007fff3d219e28 [ 790.761935][T17118] [ 792.237985][T17142] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4055'. [ 792.247739][T17142] netlink: zone id is out of range [ 792.252913][T17142] netlink: zone id is out of range [ 792.258776][T17142] netlink: zone id is out of range [ 792.271843][T17142] netlink: del zone limit has 4 unknown bytes [ 793.335637][T17171] netlink: 'syz.4.4064': attribute type 29 has an invalid length. [ 793.344609][T17171] netlink: 'syz.4.4064': attribute type 29 has an invalid length. [ 794.343189][T17180] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4067'. [ 794.358674][T17180] netlink: zone id is out of range [ 794.364501][T17180] netlink: zone id is out of range [ 794.369748][T17180] netlink: zone id is out of range [ 794.385940][T17180] netlink: del zone limit has 4 unknown bytes [ 794.525498][T17183] FAULT_INJECTION: forcing a failure. [ 794.525498][T17183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.541012][T17183] CPU: 0 PID: 17183 Comm: syz.0.4068 Not tainted syzkaller #0 [ 794.548562][T17183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 794.558684][T17183] Call Trace: [ 794.562014][T17183] [ 794.564994][T17183] dump_stack_lvl+0x188/0x24e [ 794.569741][T17183] ? show_regs_print_info+0x12/0x12 [ 794.574996][T17183] ? load_image+0x400/0x400 [ 794.579553][T17183] ? __lock_acquire+0x7d10/0x7d10 [ 794.584633][T17183] ? unix_ioctl+0x25d/0x660 [ 794.589204][T17183] should_fail_ex+0x399/0x4d0 [ 794.593923][T17183] _copy_from_user+0x2c/0x170 [ 794.598642][T17183] sock_do_ioctl+0x18c/0x320 [ 794.603270][T17183] ? sock_show_fdinfo+0xb0/0xb0 [ 794.608175][T17183] sock_ioctl+0x4d2/0x710 [ 794.612547][T17183] ? sock_poll+0x410/0x410 [ 794.617013][T17183] ? bpf_lsm_file_ioctl+0x5/0x10 [ 794.621987][T17183] ? security_file_ioctl+0x7c/0xa0 [ 794.627135][T17183] ? sock_poll+0x410/0x410 [ 794.631586][T17183] __se_sys_ioctl+0xfa/0x170 [ 794.636223][T17183] do_syscall_64+0x4c/0xa0 [ 794.640679][T17183] ? clear_bhb_loop+0x60/0xb0 [ 794.645388][T17183] ? clear_bhb_loop+0x60/0xb0 [ 794.650102][T17183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 794.656048][T17183] RIP: 0033:0x7f36bf99ce59 [ 794.660494][T17183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.680130][T17183] RSP: 002b:00007f36c0885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.688612][T17183] RAX: ffffffffffffffda RBX: 00007f36bfc15fa0 RCX: 00007f36bf99ce59 [ 794.696617][T17183] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000004 [ 794.704797][T17183] RBP: 00007f36c0885090 R08: 0000000000000000 R09: 0000000000000000 [ 794.712808][T17183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.720818][T17183] R13: 00007f36bfc16038 R14: 00007f36bfc15fa0 R15: 00007ffca7aba758 [ 794.728844][T17183] [ 797.186653][T17222] netlink: 'syz.1.4082': attribute type 29 has an invalid length. [ 797.200429][T17222] netlink: 'syz.1.4082': attribute type 29 has an invalid length. [ 797.261789][T17218] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4079'. [ 797.309145][T17218] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4079'. [ 797.740602][T17231] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4084'. [ 797.771579][T17231] netlink: zone id is out of range [ 797.788358][T17231] netlink: zone id is out of range [ 797.800675][T17231] netlink: zone id is out of range [ 797.837110][T17231] netlink: del zone limit has 4 unknown bytes [ 798.176159][T17238] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4086'. [ 798.716956][T17239] netlink: 'syz.1.4085': attribute type 5 has an invalid length. [ 798.763115][T17238] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4086'. [ 798.824166][T17242] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4086'. [ 799.010085][T17251] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4089'. [ 799.027249][T17251] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4089'. [ 799.915366][T17271] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4095'. [ 799.967086][T17271] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4095'. [ 800.225556][T17276] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4096'. [ 800.265471][T17280] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.4099'. [ 800.280397][T17276] netlink: zone id is out of range [ 800.302847][T17276] netlink: zone id is out of range [ 800.330973][T17282] netlink: 'syz.0.4098': attribute type 21 has an invalid length. [ 800.346026][T17276] netlink: zone id is out of range [ 800.357119][T17282] IPv6: Can't replace route, no match found [ 800.380794][T17276] netlink: del zone limit has 4 unknown bytes [ 800.437562][T17282] netlink: 'syz.0.4098': attribute type 1 has an invalid length. [ 800.472223][T17287] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4098'. [ 800.495720][T17282] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.4098'. [ 800.676653][T17291] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4102'. [ 800.705002][T17291] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4102'. [ 800.802008][T17291] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4102'. [ 801.100304][T17299] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4104'. [ 802.189769][T17328] netlink: zone id is out of range [ 802.236402][T17328] netlink: zone id is out of range [ 802.286223][T17329] netlink: 'syz.3.4115': attribute type 21 has an invalid length. [ 802.299745][T17329] IPv6: Can't replace route, no match found [ 802.332791][T17329] netlink: 'syz.3.4115': attribute type 1 has an invalid length. [ 803.531756][T17359] FAULT_INJECTION: forcing a failure. [ 803.531756][T17359] name failslab, interval 1, probability 0, space 0, times 0 [ 803.606218][T17359] CPU: 1 PID: 17359 Comm: syz.0.4127 Not tainted syzkaller #0 [ 803.613777][T17359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 803.623884][T17359] Call Trace: [ 803.627196][T17359] [ 803.630162][T17359] dump_stack_lvl+0x188/0x24e [ 803.634893][T17359] ? show_regs_print_info+0x12/0x12 [ 803.640146][T17359] ? load_image+0x400/0x400 [ 803.644698][T17359] ? __might_sleep+0xd0/0xd0 [ 803.649335][T17359] ? __lock_acquire+0x7d10/0x7d10 [ 803.654429][T17359] should_fail_ex+0x399/0x4d0 [ 803.659182][T17359] should_failslab+0x5/0x20 [ 803.663737][T17359] slab_pre_alloc_hook+0x59/0x310 [ 803.668820][T17359] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 803.674605][T17359] __kmem_cache_alloc_node+0x4f/0x260 [ 803.680029][T17359] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 803.685803][T17359] __kmalloc+0xa0/0x240 [ 803.690017][T17359] tomoyo_realpath_from_path+0xdf/0x5d0 [ 803.695634][T17359] ? tomoyo_path_number_perm+0x205/0x650 [ 803.701337][T17359] tomoyo_path_number_perm+0x22f/0x650 [ 803.706853][T17359] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 803.712358][T17359] ? ksys_write+0x1c0/0x250 [ 803.716916][T17359] ? common_file_perm+0x171/0x1c0 [ 803.722030][T17359] ? __fget_files+0x28/0x4b0 [ 803.726671][T17359] ? __fget_files+0x28/0x4b0 [ 803.731330][T17359] security_file_ioctl+0x6c/0xa0 [ 803.736321][T17359] __se_sys_ioctl+0x48/0x170 [ 803.740968][T17359] do_syscall_64+0x4c/0xa0 [ 803.745442][T17359] ? clear_bhb_loop+0x60/0xb0 [ 803.750170][T17359] ? clear_bhb_loop+0x60/0xb0 [ 803.754902][T17359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 803.760844][T17359] RIP: 0033:0x7f36bf99ce59 [ 803.765304][T17359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.784964][T17359] RSP: 002b:00007f36c0885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 803.793419][T17359] RAX: ffffffffffffffda RBX: 00007f36bfc15fa0 RCX: 00007f36bf99ce59 [ 803.801433][T17359] RDX: 0000200000000040 RSI: 00000000000089a2 RDI: 0000000000000003 [ 803.809435][T17359] RBP: 00007f36c0885090 R08: 0000000000000000 R09: 0000000000000000 [ 803.817431][T17359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.825426][T17359] R13: 00007f36bfc16038 R14: 00007f36bfc15fa0 R15: 00007ffca7aba758 [ 803.833453][T17359] [ 803.856577][T17359] ERROR: Out of memory at tomoyo_realpath_from_path. [ 803.868589][T17359] bridge0: port 3(syz_tun) entered blocking state [ 803.875894][T17359] bridge0: port 3(syz_tun) entered disabled state [ 803.888893][T17359] device syz_tun entered promiscuous mode [ 803.895354][T17359] bridge0: port 3(syz_tun) entered blocking state [ 803.901997][T17359] bridge0: port 3(syz_tun) entered forwarding state [ 804.857266][T17385] bridge0: port 3(syz_tun) entered blocking state [ 804.876543][T17385] bridge0: port 3(syz_tun) entered disabled state [ 804.897191][T17385] device syz_tun entered promiscuous mode [ 804.909374][T17385] bridge0: port 3(syz_tun) entered blocking state [ 804.916060][T17385] bridge0: port 3(syz_tun) entered forwarding state [ 804.935067][T17386] netlink: 'syz.4.4131': attribute type 21 has an invalid length. [ 804.951992][T17386] IPv6: Can't replace route, no match found [ 804.992328][T17386] netlink: 'syz.4.4131': attribute type 1 has an invalid length. [ 805.022835][T17386] __nla_validate_parse: 13 callbacks suppressed [ 805.022875][T17386] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.4131'. [ 805.106411][T17386] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4131'. [ 805.453352][T17396] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4137'. [ 805.485990][T17396] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4137'. [ 805.614569][T17396] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4137'. [ 805.823155][T17408] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4142'. [ 805.859597][T17408] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4142'. [ 805.981270][T17408] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4142'. [ 806.734761][T17423] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.4147'. [ 806.844678][T17422] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4146'. [ 808.740755][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.747329][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.097934][T17492] __nla_validate_parse: 9 callbacks suppressed [ 810.097959][T17492] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4169'. [ 810.181096][T17492] net_ratelimit: 2 callbacks suppressed [ 810.181117][T17492] netlink: zone id is out of range [ 810.273210][T17492] netlink: del zone limit has 4 unknown bytes [ 810.322696][T17500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4168'. [ 810.379616][T17500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4168'. [ 810.536763][T17500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4168'. [ 812.139739][T17515] netlink: 'syz.4.4177': attribute type 10 has an invalid length. [ 812.155187][T17509] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4174'. [ 812.165872][T17515] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4177'. [ 812.176062][T17509] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4174'. [ 812.196461][T17515] netlink: 'syz.4.4177': attribute type 21 has an invalid length. [ 812.252684][T17515] netlink: 'syz.4.4177': attribute type 21 has an invalid length. [ 812.337145][T17515] netlink: 'syz.4.4177': attribute type 21 has an invalid length. [ 812.388739][T17512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.406635][T17512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.747024][T17512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 812.766634][T17512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.139328][T17521] netlink: 'syz.0.4175': attribute type 21 has an invalid length. [ 813.148070][T17521] netlink: 'syz.0.4175': attribute type 6 has an invalid length. [ 813.156242][T17521] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4175'. [ 813.167155][T17525] netlink: 'syz.1.4178': attribute type 13 has an invalid length. [ 813.179457][T17525] netlink: 14581 bytes leftover after parsing attributes in process `syz.1.4178'. [ 813.487574][T17536] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4182'. [ 813.540118][T17536] netlink: zone id is out of range [ 813.565050][T17536] netlink: del zone limit has 4 unknown bytes [ 814.733205][T17572] netlink: 'syz.0.4192': attribute type 5 has an invalid length. [ 818.463869][T17596] __nla_validate_parse: 2 callbacks suppressed [ 818.463888][T17596] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4199'. [ 818.530860][T17596] netlink: zone id is out of range [ 818.564003][T17596] netlink: del zone limit has 4 unknown bytes [ 818.579171][T17602] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4202'. [ 818.779256][T17602] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4202'. [ 818.897030][T17611] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.4206'. [ 820.614951][T17658] tipc: Started in network mode [ 820.620105][T17658] tipc: Node identity 9215a268, cluster identity 4711 [ 820.622159][T17657] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4217'. [ 820.661930][T17658] tipc: Node number set to 2450891368 [ 820.671536][T17660] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4218'. [ 820.684109][T17660] netlink: zone id is out of range [ 820.689344][T17660] netlink: zone id is out of range [ 820.701830][T17657] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4217'. [ 820.722365][T17660] netlink: zone id is out of range [ 820.767531][T17660] netlink: del zone limit has 4 unknown bytes [ 820.787048][T17666] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.4220'. [ 820.906036][T17669] tipc: Started in network mode [ 820.911106][T17669] tipc: Node identity 9215a268, cluster identity 4711 [ 820.919215][T17669] tipc: Node number set to 2450891368 [ 821.284461][T17681] tipc: Started in network mode [ 821.290180][T17681] tipc: Node identity 9215a268, cluster identity 4711 [ 821.299044][T17681] tipc: Node number set to 2450891368 [ 821.700147][T17688] netlink: 'syz.0.4227': attribute type 3 has an invalid length. [ 821.744524][T17690] netlink: 'syz.0.4227': attribute type 41 has an invalid length. [ 821.745825][T17688] netlink: 'syz.0.4227': attribute type 1 has an invalid length. [ 822.625207][T17703] netlink: 'syz.4.4232': attribute type 11 has an invalid length. [ 822.654715][T17705] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4231'. [ 822.673739][T17703] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4232'. [ 825.952353][T17741] __nla_validate_parse: 2 callbacks suppressed [ 825.952422][T17741] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4243'. [ 826.012876][T17741] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4243'. [ 826.323442][T17759] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4247'. [ 826.677385][T17759] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4247'. [ 826.710420][T17765] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4247'. [ 827.528488][T17793] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4257'. [ 827.545903][T17793] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4257'. [ 828.169772][T17796] FAULT_INJECTION: forcing a failure. [ 828.169772][T17796] name failslab, interval 1, probability 0, space 0, times 0 [ 828.233793][T17796] CPU: 1 PID: 17796 Comm: syz.0.4258 Not tainted syzkaller #0 [ 828.241354][T17796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 828.251553][T17796] Call Trace: [ 828.254896][T17796] [ 828.257873][T17796] dump_stack_lvl+0x188/0x24e [ 828.262628][T17796] ? show_regs_print_info+0x12/0x12 [ 828.267879][T17796] ? load_image+0x400/0x400 [ 828.272462][T17796] ? __might_sleep+0xd0/0xd0 [ 828.277096][T17796] ? __lock_acquire+0x7d10/0x7d10 [ 828.282172][T17796] should_fail_ex+0x399/0x4d0 [ 828.286897][T17796] should_failslab+0x5/0x20 [ 828.291435][T17796] slab_pre_alloc_hook+0x59/0x310 [ 828.296503][T17796] ? __get_vm_area_node+0x122/0x330 [ 828.301745][T17796] __kmem_cache_alloc_node+0x4f/0x260 [ 828.307172][T17796] ? __get_vm_area_node+0x122/0x330 [ 828.312436][T17796] kmalloc_node_trace+0x22/0xe0 [ 828.317341][T17796] __get_vm_area_node+0x122/0x330 [ 828.322428][T17796] __vmalloc_node_range+0x357/0x13b0 [ 828.327770][T17796] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 828.333370][T17796] ? perf_trace_preemptirq_template+0x268/0x320 [ 828.339679][T17796] ? free_vm_area+0x50/0x50 [ 828.344321][T17796] ? end_current_label_crit_section+0x170/0x170 [ 828.350693][T17796] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 828.356927][T17796] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 828.362524][T17796] __vmalloc+0x76/0x80 [ 828.366661][T17796] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 828.372238][T17796] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 828.377643][T17796] ? bpf_lsm_capable+0x5/0x10 [ 828.382355][T17796] ? security_capable+0x85/0xb0 [ 828.387227][T17796] bpf_prog_alloc+0x1c/0x1b0 [ 828.391846][T17796] bpf_prog_load+0x7c9/0x1560 [ 828.396574][T17796] ? map_freeze+0x390/0x390 [ 828.401116][T17796] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 828.407302][T17796] ? lockdep_hardirqs_on+0x94/0x140 [ 828.412536][T17796] ? copy_user_enhanced_fast_string+0xa/0x40 [ 828.418726][T17796] ? bpf_lsm_bpf+0x5/0x10 [ 828.423091][T17796] ? security_bpf+0x7a/0xa0 [ 828.427653][T17796] __sys_bpf+0x5b8/0x780 [ 828.431931][T17796] ? bpf_link_show_fdinfo+0x380/0x380 [ 828.437436][T17796] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 828.443635][T17796] __x64_sys_bpf+0x78/0x90 [ 828.448085][T17796] do_syscall_64+0x4c/0xa0 [ 828.452537][T17796] ? clear_bhb_loop+0x60/0xb0 [ 828.457249][T17796] ? clear_bhb_loop+0x60/0xb0 [ 828.461956][T17796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 828.467876][T17796] RIP: 0033:0x7f36bf99ce59 [ 828.472326][T17796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.491956][T17796] RSP: 002b:00007f36c0885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 828.500408][T17796] RAX: ffffffffffffffda RBX: 00007f36bfc15fa0 RCX: 00007f36bf99ce59 [ 828.508425][T17796] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 828.516428][T17796] RBP: 00007f36c0885090 R08: 0000000000000000 R09: 0000000000000000 [ 828.524428][T17796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.532423][T17796] R13: 00007f36bfc16038 R14: 00007f36bfc15fa0 R15: 00007ffca7aba758 [ 828.540458][T17796] [ 828.583219][T17799] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4259'. [ 828.680644][T17796] syz.0.4258: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 828.709324][T17805] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4261'. [ 828.719317][T17796] CPU: 1 PID: 17796 Comm: syz.0.4258 Not tainted syzkaller #0 [ 828.726876][T17796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 828.736987][T17796] Call Trace: [ 828.740305][T17796] [ 828.743292][T17796] dump_stack_lvl+0x188/0x24e [ 828.748033][T17796] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 828.754256][T17796] ? show_regs_print_info+0x12/0x12 [ 828.759518][T17796] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 828.765739][T17796] warn_alloc+0x242/0x330 [ 828.770124][T17796] ? __get_vm_area_node+0x122/0x330 [ 828.775383][T17796] ? zone_watermark_ok_safe+0x270/0x270 [ 828.780989][T17796] ? rcu_is_watching+0x11/0xa0 [ 828.785815][T17796] ? __get_vm_area_node+0x318/0x330 [ 828.791076][T17796] __vmalloc_node_range+0x37c/0x13b0 [ 828.796393][T17796] ? perf_trace_preemptirq_template+0x268/0x320 [ 828.802680][T17796] ? free_vm_area+0x50/0x50 [ 828.807217][T17796] ? end_current_label_crit_section+0x170/0x170 [ 828.813497][T17796] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 828.819691][T17796] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 828.825277][T17796] __vmalloc+0x76/0x80 [ 828.829385][T17796] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 828.834973][T17796] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 828.840379][T17796] ? bpf_lsm_capable+0x5/0x10 [ 828.845089][T17796] ? security_capable+0x85/0xb0 [ 828.849962][T17796] bpf_prog_alloc+0x1c/0x1b0 [ 828.854588][T17796] bpf_prog_load+0x7c9/0x1560 [ 828.859303][T17796] ? map_freeze+0x390/0x390 [ 828.863845][T17796] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 828.870028][T17796] ? lockdep_hardirqs_on+0x94/0x140 [ 828.875280][T17796] ? copy_user_enhanced_fast_string+0xa/0x40 [ 828.881307][T17796] ? bpf_lsm_bpf+0x5/0x10 [ 828.885676][T17796] ? security_bpf+0x7a/0xa0 [ 828.890209][T17796] __sys_bpf+0x5b8/0x780 [ 828.894489][T17796] ? bpf_link_show_fdinfo+0x380/0x380 [ 828.899912][T17796] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 828.906108][T17796] __x64_sys_bpf+0x78/0x90 [ 828.910555][T17796] do_syscall_64+0x4c/0xa0 [ 828.915008][T17796] ? clear_bhb_loop+0x60/0xb0 [ 828.919715][T17796] ? clear_bhb_loop+0x60/0xb0 [ 828.924428][T17796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 828.930348][T17796] RIP: 0033:0x7f36bf99ce59 [ 828.934785][T17796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.954506][T17796] RSP: 002b:00007f36c0885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 828.963040][T17796] RAX: ffffffffffffffda RBX: 00007f36bfc15fa0 RCX: 00007f36bf99ce59 [ 828.971047][T17796] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 828.979062][T17796] RBP: 00007f36c0885090 R08: 0000000000000000 R09: 0000000000000000 [ 828.987048][T17796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.995036][T17796] R13: 00007f36bfc16038 R14: 00007f36bfc15fa0 R15: 00007ffca7aba758 [ 829.003044][T17796] [ 829.015292][T17805] netlink: zone id is out of range [ 829.022086][T17796] Mem-Info: [ 829.026616][T17796] active_anon:6154 inactive_anon:0 isolated_anon:0 [ 829.026616][T17796] active_file:20089 inactive_file:40253 isolated_file:0 [ 829.026616][T17796] unevictable:768 dirty:186 writeback:0 [ 829.026616][T17796] slab_reclaimable:21069 slab_unreclaimable:97132 [ 829.026616][T17796] mapped:30446 shmem:1361 pagetables:625 [ 829.026616][T17796] sec_pagetables:0 bounce:0 [ 829.026616][T17796] kernel_misc_reclaimable:0 [ 829.026616][T17796] free:1322206 free_pcp:8203 free_cma:0 [ 829.078184][T17810] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4263'. [ 829.090020][T17805] netlink: zone id is out of range [ 829.100249][T17805] netlink: zone id is out of range [ 829.111246][T17805] netlink: del zone limit has 4 unknown bytes [ 829.122735][T17796] Node 0 active_anon:24616kB inactive_anon:0kB active_file:80356kB inactive_file:160808kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125784kB dirty:740kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10248kB pagetables:2500kB sec_pagetables:0kB all_unreclaimable? no [ 829.162720][T17796] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 829.201894][T17796] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 829.234916][T17796] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 829.241118][T17796] Node 0 DMA32 free:1366204kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:24616kB inactive_anon:0kB active_file:80356kB inactive_file:160808kB unevictable:1536kB writepending:740kB present:3129332kB managed:2592964kB mlocked:0kB bounce:0kB free_pcp:25536kB local_pcp:18312kB free_cma:0kB [ 829.278224][T17796] lowmem_reserve[]: 0 0 1 1 1 [ 829.283189][T17796] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 829.314427][T17796] lowmem_reserve[]: 0 0 0 0 0 [ 829.319425][T17796] Node 1 Normal free:3906364kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:8288kB local_pcp:1568kB free_cma:0kB [ 829.354546][T17796] lowmem_reserve[]: 0 0 0 0 0 [ 829.359628][T17796] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 829.376872][T17796] Node 0 DMA32: 3355*4kB (UME) 1768*8kB (UME) 951*16kB (UME) 1202*32kB (UME) 240*64kB (UME) 559*128kB (UME) 191*256kB (UME) 58*512kB (UM) 25*1024kB (UME) 8*2048kB (UME) 263*4096kB (UM) = 1365980kB [ 829.403201][T17796] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 829.419104][T17796] Node 1 Normal: 233*4kB (UME) 53*8kB (UME) 39*16kB (UE) 130*32kB (UME) 41*64kB (UME) 14*128kB (UM) 10*256kB (UM) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3906364kB [ 829.441496][T17796] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 829.463629][T17796] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 829.473255][T17796] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 829.487109][T17796] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 829.496816][T17796] 61703 total pagecache pages [ 829.501720][T17796] 0 pages in swap cache [ 829.512951][T17796] Free swap = 124996kB [ 829.517552][T17796] Total swap = 124996kB [ 829.521833][T17796] 2097051 pages RAM [ 829.530026][T17796] 0 pages HighMem/MovableOnly [ 829.535202][T17796] 415209 pages reserved [ 829.539600][T17796] 0 pages cma reserved [ 829.912010][T17824] netlink: 'syz.1.4268': attribute type 21 has an invalid length. [ 829.955769][T17824] netlink: 'syz.1.4268': attribute type 20 has an invalid length. [ 831.084015][T17855] __nla_validate_parse: 5 callbacks suppressed [ 831.084038][T17855] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4275'. [ 831.107865][T17855] netlink: zone id is out of range [ 831.119008][T17855] netlink: zone id is out of range [ 831.127019][T17855] netlink: zone id is out of range [ 831.152956][T17855] netlink: del zone limit has 4 unknown bytes [ 832.291403][T17877] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.4280'. [ 832.597452][T17888] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4285'. [ 832.612132][T17888] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4285'. [ 832.868238][T17891] netlink: 'syz.3.4287': attribute type 21 has an invalid length. [ 832.895298][T17891] IPv6: Can't replace route, no match found [ 832.925272][T17891] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.4287'. [ 832.998511][T17891] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4287'. [ 833.166388][T17908] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4292'. [ 833.210516][T17908] netlink: zone id is out of range [ 833.224836][T17908] netlink: zone id is out of range [ 837.174657][T17936] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4300'. [ 837.214198][T17936] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4300'. [ 837.407374][T17940] FAULT_INJECTION: forcing a failure. [ 837.407374][T17940] name failslab, interval 1, probability 0, space 0, times 0 [ 837.439804][T17940] CPU: 0 PID: 17940 Comm: syz.0.4301 Not tainted syzkaller #0 [ 837.447356][T17940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 837.457443][T17940] Call Trace: [ 837.460745][T17940] [ 837.463705][T17940] dump_stack_lvl+0x188/0x24e [ 837.468422][T17940] ? show_regs_print_info+0x12/0x12 [ 837.473739][T17940] ? load_image+0x400/0x400 [ 837.478273][T17940] ? __might_sleep+0xd0/0xd0 [ 837.482881][T17940] ? __lock_acquire+0x7d10/0x7d10 [ 837.487948][T17940] should_fail_ex+0x399/0x4d0 [ 837.492656][T17940] should_failslab+0x5/0x20 [ 837.497278][T17940] slab_pre_alloc_hook+0x59/0x310 [ 837.502337][T17940] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 837.507925][T17940] __kmem_cache_alloc_node+0x4f/0x260 [ 837.513328][T17940] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 837.518907][T17940] __kmalloc+0xa0/0x240 [ 837.523197][T17940] bpf_prog_test_run_skb+0x234/0x12a0 [ 837.528763][T17940] ? __fget_files+0x28/0x4b0 [ 837.533413][T17940] ? __fget_files+0x28/0x4b0 [ 837.538073][T17940] ? __fget_files+0x43d/0x4b0 [ 837.542809][T17940] ? cpu_online+0xa0/0xa0 [ 837.547184][T17940] bpf_prog_test_run+0x31e/0x390 [ 837.552165][T17940] __sys_bpf+0x62b/0x780 [ 837.556444][T17940] ? bpf_link_show_fdinfo+0x380/0x380 [ 837.561871][T17940] ? lock_chain_count+0x20/0x20 [ 837.566774][T17940] __x64_sys_bpf+0x78/0x90 [ 837.571231][T17940] do_syscall_64+0x4c/0xa0 [ 837.575698][T17940] ? clear_bhb_loop+0x60/0xb0 [ 837.580432][T17940] ? clear_bhb_loop+0x60/0xb0 [ 837.585146][T17940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 837.591078][T17940] RIP: 0033:0x7f36bf99ce59 [ 837.595522][T17940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.615259][T17940] RSP: 002b:00007f36c0885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 837.623699][T17940] RAX: ffffffffffffffda RBX: 00007f36bfc15fa0 RCX: 00007f36bf99ce59 [ 837.631691][T17940] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 837.639696][T17940] RBP: 00007f36c0885090 R08: 0000000000000000 R09: 0000000000000000 [ 837.647696][T17940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.655695][T17940] R13: 00007f36bfc16038 R14: 00007f36bfc15fa0 R15: 00007ffca7aba758 [ 837.663701][T17940] [ 837.750642][T17948] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4304'. [ 837.798832][T17948] net_ratelimit: 2 callbacks suppressed [ 837.798853][T17948] netlink: zone id is out of range [ 837.850715][T17948] netlink: zone id is out of range [ 837.866396][T17948] netlink: zone id is out of range [ 837.890727][T17948] netlink: del zone limit has 4 unknown bytes [ 838.120522][T17959] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.4306'. [ 838.220866][T17957] netlink: 'syz.0.4306': attribute type 21 has an invalid length. [ 838.245477][T17957] IPv6: Can't replace route, no match found [ 838.339753][T17959] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4306'. [ 840.222190][T17974] netlink: 'syz.3.4311': attribute type 10 has an invalid length. [ 840.240642][T17974] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4311'. [ 840.370683][T17974] netlink: 'syz.3.4311': attribute type 21 has an invalid length. [ 840.409535][T17974] netlink: 'syz.3.4311': attribute type 6 has an invalid length. [ 840.439795][T17974] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4311'. [ 840.738902][T17988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4315'. [ 840.759247][T17988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4315'. [ 842.982257][T18014] netlink: 'syz.4.4322': attribute type 21 has an invalid length. [ 843.014044][T18014] IPv6: Can't replace route, no match found [ 843.064013][T18014] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.4322'. [ 843.170796][T18014] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4322'. [ 843.470120][T18027] netlink: 'syz.0.4327': attribute type 29 has an invalid length. [ 843.478998][T18027] netlink: 'syz.0.4327': attribute type 29 has an invalid length. [ 844.145350][T18036] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4328'. [ 844.178181][T18036] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4328'. [ 844.270859][T18036] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4328'. [ 844.477658][T18047] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4332'. [ 844.533348][T18047] netlink: zone id is out of range [ 844.551994][T18047] netlink: zone id is out of range [ 844.569064][T18047] netlink: zone id is out of range [ 844.620714][T18053] netlink: 'syz.4.4334': attribute type 29 has an invalid length. [ 844.639167][T18047] netlink: del zone limit has 4 unknown bytes [ 844.688267][T18053] netlink: 'syz.4.4334': attribute type 29 has an invalid length. [ 845.217054][T18061] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4335'. [ 845.238999][T18061] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4335'. [ 845.797158][T18076] netlink: 'syz.2.4339': attribute type 21 has an invalid length. [ 845.829677][T18076] IPv6: Can't replace route, no match found [ 845.930695][T18076] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.4339'. [ 845.981221][T18076] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4339'. [ 846.654514][T18083] netlink: 'syz.2.4343': attribute type 11 has an invalid length. [ 846.770422][T18089] netlink: zone id is out of range [ 846.816835][T18091] netlink: 'syz.2.4343': attribute type 29 has an invalid length. [ 846.841700][T18089] netlink: zone id is out of range [ 846.874986][T18089] netlink: zone id is out of range [ 846.925447][T18091] netlink: 'syz.2.4343': attribute type 29 has an invalid length. [ 846.937579][T18089] netlink: del zone limit has 4 unknown bytes [ 847.651542][T18104] netlink: 'syz.1.4350': attribute type 29 has an invalid length. [ 847.684040][T18104] netlink: 'syz.1.4350': attribute type 29 has an invalid length. [ 848.045884][T18115] IPv6: Can't replace route, no match found [ 848.135509][T18115] __nla_validate_parse: 6 callbacks suppressed [ 848.135654][T18115] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.4354'. [ 848.259149][T18115] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4354'. [ 848.524526][T18118] validate_nla: 1 callbacks suppressed [ 848.524549][T18118] netlink: 'syz.1.4355': attribute type 29 has an invalid length. [ 848.624139][T18118] netlink: 'syz.1.4355': attribute type 29 has an invalid length. [ 849.528611][T18124] syz.2.4356 (18124) used obsolete PPPIOCDETACH ioctl [ 849.724179][T18131] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4359'. [ 849.753865][T18131] netlink: zone id is out of range [ 849.761583][T18131] netlink: zone id is out of range [ 849.773712][T18131] netlink: zone id is out of range [ 849.795042][T18127] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4358'. [ 849.820689][T18127] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4358'. [ 849.851599][T18131] netlink: del zone limit has 4 unknown bytes [ 849.961711][T18127] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4358'. [ 850.200373][T18143] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4364'. [ 850.244666][T18143] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4364'. [ 850.337530][T18150] netlink: 'syz.0.4366': attribute type 29 has an invalid length. [ 850.363967][T18150] netlink: 'syz.0.4366': attribute type 29 has an invalid length. [ 851.331564][T18166] netlink: 'syz.4.4370': attribute type 21 has an invalid length. [ 851.378825][T18169] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4369'. [ 851.396249][T18166] IPv6: Can't replace route, no match found [ 851.421177][T18171] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.4370'. [ 852.575628][T18183] netlink: zone id is out of range [ 852.679588][T18183] netlink: zone id is out of range [ 852.763605][T18183] netlink: zone id is out of range [ 852.792922][T18183] netlink: del zone limit has 4 unknown bytes [ 853.323076][T18201] __nla_validate_parse: 7 callbacks suppressed [ 853.323130][T18201] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4378'. [ 853.419416][T18201] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4378'. [ 853.540628][T18206] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.4382'. [ 853.829549][T18217] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.4383'. [ 854.228234][T18229] netlink: 'syz.2.4387': attribute type 21 has an invalid length. [ 854.253014][T18229] IPv6: Can't replace route, no match found [ 854.268292][T18227] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4388'. [ 854.325802][T18227] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4388'. [ 854.356423][T18229] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.4387'. [ 854.431273][T18227] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4388'. [ 854.458608][T18229] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4387'. [ 855.597879][T18234] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4389'. [ 855.613722][T18234] netlink: zone id is out of range [ 855.619970][T18234] netlink: zone id is out of range [ 855.703591][T18234] netlink: zone id is out of range [ 855.814193][T18234] netlink: del zone limit has 4 unknown bytes [ 856.697371][T18254] netlink: 'syz.0.4395': attribute type 10 has an invalid length. [ 856.969252][T18254] team0: Port device netdevsim0 added [ 857.361417][T18265] netlink: 'syz.0.4400': attribute type 21 has an invalid length. [ 857.378396][T18265] IPv6: Can't replace route, no match found [ 857.642076][T18270] FAULT_INJECTION: forcing a failure. [ 857.642076][T18270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.660272][T18270] CPU: 1 PID: 18270 Comm: syz.2.4401 Not tainted syzkaller #0 [ 857.667915][T18270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 857.678038][T18270] Call Trace: [ 857.681370][T18270] [ 857.684359][T18270] dump_stack_lvl+0x188/0x24e [ 857.689119][T18270] ? show_regs_print_info+0x12/0x12 [ 857.694414][T18270] ? load_image+0x400/0x400 [ 857.699004][T18270] ? __lock_acquire+0x7d10/0x7d10 [ 857.704117][T18270] should_fail_ex+0x399/0x4d0 [ 857.708879][T18270] _copy_from_iter+0x1c0/0x1130 [ 857.713790][T18270] ? __lock_acquire+0x7d10/0x7d10 [ 857.718883][T18270] ? mark_lock+0x94/0x320 [ 857.723313][T18270] ? copyout_mc+0x110/0x110 [ 857.727885][T18270] ? __virt_addr_valid+0x188/0x540 [ 857.733055][T18270] ? __virt_addr_valid+0x188/0x540 [ 857.738226][T18270] ? __virt_addr_valid+0x465/0x540 [ 857.743415][T18270] ? __check_object_size+0x500/0xa40 [ 857.748763][T18270] skb_copy_datagram_from_iter+0xef/0x690 [ 857.754557][T18270] ? napi_get_frags+0xb7/0x140 [ 857.759386][T18270] tun_get_user+0xb81/0x3c70 [ 857.764092][T18270] ? rcu_read_unlock+0xa0/0xa0 [ 857.768939][T18270] ? tun_get+0x1c/0x2e0 [ 857.773174][T18270] ? __lock_acquire+0x7d10/0x7d10 [ 857.778270][T18270] ? tun_get+0x1c/0x2e0 [ 857.782504][T18270] tun_chr_write_iter+0x112/0x1f0 [ 857.787592][T18270] vfs_write+0x4b1/0xa30 [ 857.791912][T18270] ? file_end_write+0x250/0x250 [ 857.796964][T18270] ? __fget_files+0x43d/0x4b0 [ 857.801721][T18270] ? __fdget_pos+0x1d4/0x360 [ 857.806376][T18270] ? ksys_write+0x71/0x250 [ 857.810875][T18270] ksys_write+0x14c/0x250 [ 857.815291][T18270] ? __ia32_sys_read+0x80/0x80 [ 857.820116][T18270] ? lockdep_hardirqs_on+0x94/0x140 [ 857.825537][T18270] do_syscall_64+0x4c/0xa0 [ 857.830027][T18270] ? clear_bhb_loop+0x60/0xb0 [ 857.834797][T18270] ? clear_bhb_loop+0x60/0xb0 [ 857.839570][T18270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 857.845531][T18270] RIP: 0033:0x7f9169d9ce59 [ 857.850014][T18270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.869757][T18270] RSP: 002b:00007f916ac9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 857.878235][T18270] RAX: ffffffffffffffda RBX: 00007f916a015fa0 RCX: 00007f9169d9ce59 [ 857.886252][T18270] RDX: 0000000000000016 RSI: 0000200000000000 RDI: 0000000000000003 [ 857.894259][T18270] RBP: 00007f916ac9b090 R08: 0000000000000000 R09: 0000000000000000 [ 857.902268][T18270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.910278][T18270] R13: 00007f916a016038 R14: 00007f916a015fa0 R15: 00007ffc62405178 [ 857.918335][T18270] [ 859.407461][T18291] netlink: 'syz.4.4407': attribute type 29 has an invalid length. [ 859.480765][T18291] netlink: 'syz.4.4407': attribute type 29 has an invalid length. [ 859.515750][T18294] __nla_validate_parse: 5 callbacks suppressed [ 859.515795][T18294] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4408'. [ 859.553735][T18297] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4410'. [ 859.575975][T18294] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4408'. [ 859.598000][T18297] netlink: zone id is out of range [ 859.619948][T18297] netlink: zone id is out of range [ 859.639366][T18297] netlink: zone id is out of range [ 859.725165][T18297] netlink: del zone limit has 4 unknown bytes [ 863.244206][T18349] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4423'. [ 863.261964][T18349] netlink: zone id is out of range [ 863.268626][T18349] netlink: zone id is out of range [ 863.283102][T18349] netlink: zone id is out of range [ 863.292980][T18349] netlink: del zone limit has 4 unknown bytes [ 863.687388][T18352] netlink: 'syz.0.4424': attribute type 29 has an invalid length. [ 863.721310][T18354] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4425'. [ 863.748840][T18352] netlink: 'syz.0.4424': attribute type 29 has an invalid length. [ 863.760970][T18354] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4425'. [ 864.099938][T18359] device syzkaller0 entered promiscuous mode [ 866.730775][T18396] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4437'. [ 866.740440][T18396] netlink: zone id is out of range [ 866.749484][T18396] netlink: zone id is out of range [ 866.758313][T18396] netlink: zone id is out of range [ 866.770847][T18396] netlink: del zone limit has 4 unknown bytes [ 867.101923][T18387] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4434'. [ 867.129291][T18387] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 867.159358][T18387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 867.326170][T18402] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4439'. [ 867.370108][T18402] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4439'. [ 867.396183][T18404] netlink: 'syz.1.4440': attribute type 29 has an invalid length. [ 867.460485][T18404] netlink: 'syz.1.4440': attribute type 29 has an invalid length. [ 867.763785][T18416] netlink: 'syz.4.4443': attribute type 21 has an invalid length. [ 867.781957][T18416] IPv6: Can't replace route, no match found [ 867.838209][T18416] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.4443'. [ 867.900709][T18416] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4443'. [ 868.869098][T18434] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4449'. [ 868.885338][T18434] netlink: zone id is out of range [ 868.890667][T18434] netlink: zone id is out of range [ 868.902402][T18434] netlink: zone id is out of range [ 868.978552][T18434] netlink: del zone limit has 4 unknown bytes [ 869.921424][ T46] wlan1: Trigger new scan to find an IBSS to join [ 870.173934][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.180343][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.067230][T18452] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4453'. [ 872.068017][T18454] netlink: 'syz.1.4454': attribute type 29 has an invalid length. [ 872.087260][T18452] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4453'. [ 872.264326][T18454] netlink: 'syz.1.4454': attribute type 29 has an invalid length. [ 872.667985][T18466] netlink: 'syz.0.4458': attribute type 21 has an invalid length. [ 872.676861][T18466] IPv6: Can't replace route, no match found [ 872.762150][T18466] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.4458'. [ 872.851257][T18466] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4458'. [ 873.038714][T18482] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4462'. [ 873.062023][T18481] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4461'. [ 873.072497][T18481] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4461'. [ 873.092336][T18482] netlink: zone id is out of range [ 873.112236][T18482] netlink: zone id is out of range [ 873.125966][T18482] netlink: zone id is out of range [ 873.155087][T18482] netlink: del zone limit has 4 unknown bytes [ 873.209822][T18484] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4461'. [ 873.904156][ T4335] wlan1: Trigger new scan to find an IBSS to join [ 875.026634][ T46] wlan1: Creating new IBSS network, BSSID 0a:ef:a4:87:ac:6e [ 875.702303][T18510] netlink: 'syz.3.4471': attribute type 29 has an invalid length. [ 875.728088][T18510] netlink: 'syz.3.4471': attribute type 29 has an invalid length. [ 875.761730][T18514] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4472'. [ 875.776979][T18511] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4470'. [ 876.223835][T18526] netlink: 'syz.0.4485': attribute type 29 has an invalid length. [ 876.267769][T18526] netlink: 'syz.0.4485': attribute type 29 has an invalid length. [ 876.285453][T18528] netlink: 'syz.3.4475': attribute type 21 has an invalid length. [ 876.324044][T18528] IPv6: Can't replace route, no match found [ 876.525378][T18532] netlink: zone id is out of range [ 876.548988][T18532] netlink: zone id is out of range [ 876.575663][T18532] netlink: zone id is out of range [ 876.620536][T18532] netlink: del zone limit has 4 unknown bytes [ 879.854017][T18567] __nla_validate_parse: 7 callbacks suppressed [ 879.854062][T18567] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4486'. [ 879.912240][T18567] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4486'. [ 879.948982][T18569] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4487'. [ 879.987991][T18569] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4487'. [ 880.034570][T18577] netlink: 'syz.2.4490': attribute type 29 has an invalid length. [ 880.072551][T18569] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4487'. [ 880.099692][T18577] netlink: 'syz.2.4490': attribute type 29 has an invalid length. [ 880.252565][T18584] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4493'. [ 880.281944][T18584] netlink: zone id is out of range [ 880.303758][T18584] netlink: zone id is out of range [ 880.310011][T18584] netlink: zone id is out of range [ 880.325979][T18584] netlink: del zone limit has 4 unknown bytes [ 880.509195][T18595] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.4495'. [ 880.670942][T18596] tap0: tun_chr_ioctl cmd 1074025675 [ 880.683621][T18596] tap0: persist disabled [ 881.779328][T18612] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4500'. [ 881.790753][T18612] openvswitch: netlink: Message has 6 unknown bytes. [ 882.866202][T18620] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4502'. [ 882.878494][T18620] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4502'. [ 883.260840][T18637] netlink: zone id is out of range [ 883.283875][T18637] netlink: zone id is out of range [ 883.307059][T18637] netlink: zone id is out of range [ 883.376570][T18637] netlink: del zone limit has 4 unknown bytes [ 886.468115][T18679] __nla_validate_parse: 5 callbacks suppressed [ 886.468153][T18679] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4518'. [ 886.514857][T18679] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4518'. [ 887.075182][T18682] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4519'. [ 887.107726][T18682] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4519'. [ 887.134237][T18687] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4521'. [ 887.152549][T18687] netlink: zone id is out of range [ 887.158566][T18687] netlink: zone id is out of range [ 887.163987][T18687] netlink: zone id is out of range [ 887.183263][T18687] netlink: del zone limit has 4 unknown bytes [ 887.216282][T18686] netlink: 'syz.4.4522': attribute type 10 has an invalid length. [ 887.230144][T18686] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4522'. [ 887.246831][T18686] batman_adv: batadv0: Adding interface: vlan1 [ 887.253596][T18686] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.285017][T18686] batman_adv: batadv0: Interface activated: vlan1 [ 887.334772][T18689] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4519'. [ 889.952235][T18737] netlink: 'syz.1.4531': attribute type 10 has an invalid length. [ 890.811372][T18737] device geneve0 entered promiscuous mode [ 890.872363][T18737] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 891.024847][T18745] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4534'. [ 891.074761][T18745] netlink: zone id is out of range [ 891.080000][T18745] netlink: zone id is out of range [ 891.123280][T18749] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4535'. [ 891.134028][T18745] netlink: zone id is out of range [ 891.146619][T18749] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4535'. [ 891.181895][T18745] netlink: del zone limit has 4 unknown bytes [ 892.868347][T18774] __nla_validate_parse: 3 callbacks suppressed [ 892.868386][T18774] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4541'. [ 896.242480][T18810] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4548'. [ 896.311562][T18810] netlink: zone id is out of range [ 896.340265][T18810] netlink: zone id is out of range [ 896.366814][T18810] netlink: zone id is out of range [ 896.441042][T18810] netlink: del zone limit has 4 unknown bytes [ 896.452500][T18817] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4550'. [ 896.527087][T18817] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4550'. [ 896.634570][T18824] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4550'. [ 896.754394][T18829] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4557'. [ 896.795743][T18829] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4557'. [ 898.461856][T18856] netlink: 'syz.0.4564': attribute type 10 has an invalid length. [ 898.507234][T18856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4564'. [ 898.578807][T18856] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 898.796865][T18867] netlink: 'syz.1.4567': attribute type 3 has an invalid length. [ 898.805466][T18867] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4567'. [ 898.892130][ T4273] Bluetooth: hci2: unexpected event 0x17 length: 151 > 6 [ 898.959955][T18870] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4568'. [ 899.043728][T18870] netlink: zone id is out of range [ 899.049571][T18870] netlink: zone id is out of range [ 899.086313][T18870] netlink: zone id is out of range [ 899.112366][T18872] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4570'. [ 899.141285][T18872] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4570'. [ 899.160324][T18870] netlink: del zone limit has 4 unknown bytes [ 899.306369][T18872] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4570'. [ 899.374579][T18883] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4571'. [ 900.256669][T18899] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4577'. [ 900.277369][T18899] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4577'. [ 901.009325][T18916] netlink: 'syz.4.4581': attribute type 3 has an invalid length. [ 901.038936][T18915] netlink: 'syz.3.4580': attribute type 10 has an invalid length. [ 901.049102][T18915] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4580'. [ 901.077478][T18915] batman_adv: batadv0: Adding interface: vlan1 [ 901.092620][T18915] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.125732][T18915] batman_adv: batadv0: Interface activated: vlan1 [ 901.277125][T18918] IPv6: Can't replace route, no match found [ 902.028233][T18926] netlink: zone id is out of range [ 902.033617][T18926] netlink: zone id is out of range [ 902.049147][T18926] netlink: zone id is out of range [ 902.075820][T18927] sock: sock_set_timeout: `syz.2.4583' (pid 18927) tries to set negative timeout [ 902.094849][T18926] netlink: del zone limit has 4 unknown bytes [ 902.142974][T18933] netlink: 'syz.0.4587': attribute type 10 has an invalid length. [ 902.174609][T18933] device geneve0 entered promiscuous mode [ 902.365420][T18933] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 902.420567][T18942] netlink: 'syz.1.4588': attribute type 21 has an invalid length. [ 902.436317][T18942] IPv6: Can't replace route, no match found [ 902.449647][T18941] netlink: 'syz.4.4590': attribute type 21 has an invalid length. [ 902.460264][T18941] IPv6: Can't replace route, no match found [ 903.718344][T18966] __nla_validate_parse: 7 callbacks suppressed [ 903.718413][T18966] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4597'. [ 903.785051][T18966] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4597'. [ 903.816121][T18970] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4598'. [ 903.844212][T18970] netlink: zone id is out of range [ 903.871184][T18970] netlink: zone id is out of range [ 903.899321][T18970] netlink: zone id is out of range [ 903.985267][T18974] netlink: 'syz.3.4599': attribute type 3 has an invalid length. [ 903.995783][T18970] netlink: del zone limit has 4 unknown bytes [ 904.043180][T18974] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4599'. [ 904.189864][ T4273] Bluetooth: hci1: unexpected event 0x17 length: 151 > 6 [ 905.075459][T13185] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 905.242546][T18982] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4603'. [ 905.249876][T18983] netlink: 'syz.3.4602': attribute type 21 has an invalid length. [ 905.301049][T18983] IPv6: Can't replace route, no match found [ 905.325528][T18982] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4603'. [ 905.363139][T18983] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4602'. [ 905.670972][T18993] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4604'. [ 905.693949][T18996] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4608'. [ 905.723868][T18993] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4604'. [ 907.649874][T19029] device syzkaller0 entered promiscuous mode [ 907.784078][T19042] netlink: 'syz.2.4621': attribute type 3 has an invalid length. [ 907.879154][T19046] FAULT_INJECTION: forcing a failure. [ 907.879154][T19046] name failslab, interval 1, probability 0, space 0, times 0 [ 907.898162][T19046] CPU: 0 PID: 19046 Comm: syz.1.4623 Not tainted syzkaller #0 [ 907.905716][T19046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 907.915930][T19046] Call Trace: [ 907.919263][T19046] [ 907.922258][T19046] dump_stack_lvl+0x188/0x24e [ 907.927030][T19046] ? show_regs_print_info+0x12/0x12 [ 907.932312][T19046] ? load_image+0x400/0x400 [ 907.936889][T19046] ? __might_sleep+0xd0/0xd0 [ 907.941541][T19046] ? __lock_acquire+0x7d10/0x7d10 [ 907.946645][T19046] should_fail_ex+0x399/0x4d0 [ 907.951396][T19046] should_failslab+0x5/0x20 [ 907.955947][T19046] slab_pre_alloc_hook+0x59/0x310 [ 907.961132][T19046] kmem_cache_alloc_node+0x5a/0x320 [ 907.966482][T19046] ? __alloc_skb+0xfc/0x7e0 [ 907.971074][T19046] __alloc_skb+0xfc/0x7e0 [ 907.975486][T19046] ? netlink_autobind+0xda/0x300 [ 907.980497][T19046] netlink_sendmsg+0x654/0xbd0 [ 907.985357][T19046] ? netlink_getsockopt+0x550/0x550 [ 907.990642][T19046] ? aa_sock_msg_perm+0x94/0x150 [ 907.995746][T19046] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 908.001091][T19046] ? security_socket_sendmsg+0x7c/0xa0 [ 908.006715][T19046] ? netlink_getsockopt+0x550/0x550 [ 908.011990][T19046] ____sys_sendmsg+0x5be/0x970 [ 908.016841][T19046] ? __sys_sendmsg_sock+0x30/0x30 [ 908.021940][T19046] ? __import_iovec+0x315/0x500 [ 908.026869][T19046] ? import_iovec+0x6f/0xa0 [ 908.031456][T19046] ___sys_sendmsg+0x2a2/0x360 [ 908.036217][T19046] ? __sys_sendmsg+0x290/0x290 [ 908.041107][T19046] ? __lock_acquire+0x7d10/0x7d10 [ 908.046271][T19046] __se_sys_sendmsg+0x1bb/0x2a0 [ 908.051200][T19046] ? ct_nmi_exit+0x145/0x1c0 [ 908.055864][T19046] ? __x64_sys_sendmsg+0x80/0x80 [ 908.060915][T19046] ? lockdep_hardirqs_on+0x94/0x140 [ 908.066188][T19046] do_syscall_64+0x4c/0xa0 [ 908.070674][T19046] ? clear_bhb_loop+0x60/0xb0 [ 908.075416][T19046] ? clear_bhb_loop+0x60/0xb0 [ 908.080167][T19046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 908.086130][T19046] RIP: 0033:0x7fe4fdf9ce59 [ 908.090600][T19046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.110265][T19046] RSP: 002b:00007fe4fede5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 908.118926][T19046] RAX: ffffffffffffffda RBX: 00007fe4fe215fa0 RCX: 00007fe4fdf9ce59 [ 908.126978][T19046] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 908.135011][T19046] RBP: 00007fe4fede5090 R08: 0000000000000000 R09: 0000000000000000 [ 908.143129][T19046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.151162][T19046] R13: 00007fe4fe216038 R14: 00007fe4fe215fa0 R15: 00007fff7fe77b08 [ 908.159242][T19046] [ 908.354641][T19052] netlink: zone id is out of range [ 908.370120][T19052] netlink: zone id is out of range [ 908.377961][T19052] netlink: zone id is out of range [ 908.401729][T19052] netlink: del zone limit has 4 unknown bytes [ 912.091369][T19054] __nla_validate_parse: 8 callbacks suppressed [ 912.091387][T19054] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4625'. [ 912.112277][T19070] netlink: 'syz.3.4630': attribute type 21 has an invalid length. [ 912.135969][T19070] IPv6: Can't replace route, no match found [ 912.142428][T19071] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4630'. [ 912.399854][T19078] device syzkaller0 entered promiscuous mode [ 912.438531][T19092] netlink: 'syz.4.4636': attribute type 10 has an invalid length. [ 912.494618][T19092] bond0: (slave veth1_to_batadv): Enslaving as an active interface with an up link [ 917.025603][T19140] device syzkaller0 entered promiscuous mode [ 920.702752][ T4273] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 920.764970][T19171] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.4659'. [ 922.783780][ T4273] Bluetooth: hci2: command 0x2016 tx timeout [ 924.721671][T19165] netlink: 'syz.4.4659': attribute type 21 has an invalid length. [ 924.729778][T19165] IPv6: Can't replace route, no match found [ 924.736214][T19171] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4659'. [ 924.745871][T19174] netlink: 'syz.1.4662': attribute type 10 has an invalid length. [ 924.783810][T19174] team0: Device wg1 is of different type [ 925.004288][T19187] sctp: [Deprecated]: syz.3.4665 (pid 19187) Use of int in max_burst socket option deprecated. [ 925.004288][T19187] Use struct sctp_assoc_value instead [ 926.976290][T19218] netlink: 'syz.2.4675': attribute type 21 has an invalid length. [ 927.017835][T19218] IPv6: Can't replace route, no match found [ 927.078209][T19218] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.4675'. [ 927.154653][T19226] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4675'. [ 928.216269][T19237] netlink: 'syz.0.4681': attribute type 13 has an invalid length. [ 928.253122][T19237] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4681'. [ 928.411797][T19237] syz_tun: refused to change device tx_queue_len [ 928.451750][T19237] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 931.586469][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.592894][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.568124][T19302] FAULT_INJECTION: forcing a failure. [ 932.568124][T19302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 932.582194][T19302] CPU: 1 PID: 19302 Comm: syz.1.4699 Not tainted syzkaller #0 [ 932.589723][T19302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 932.599849][T19302] Call Trace: [ 932.603190][T19302] [ 932.606164][T19302] dump_stack_lvl+0x188/0x24e [ 932.610917][T19302] ? show_regs_print_info+0x12/0x12 [ 932.616175][T19302] ? load_image+0x400/0x400 [ 932.620733][T19302] ? __lock_acquire+0x7d10/0x7d10 [ 932.625834][T19302] ? perf_trace_lock+0xf8/0x390 [ 932.630748][T19302] should_fail_ex+0x399/0x4d0 [ 932.635462][T19302] _copy_from_user+0x2c/0x170 [ 932.640211][T19302] ___sys_recvmsg+0x172/0x590 [ 932.644932][T19302] ? __sys_recvmsg+0x290/0x290 [ 932.649736][T19302] ? common_file_perm+0x171/0x1c0 [ 932.654794][T19302] ? __fget_files+0x43d/0x4b0 [ 932.659517][T19302] __x64_sys_recvmsg+0x205/0x2e0 [ 932.664491][T19302] ? ___sys_recvmsg+0x590/0x590 [ 932.669389][T19302] ? lockdep_hardirqs_on+0x94/0x140 [ 932.674644][T19302] do_syscall_64+0x4c/0xa0 [ 932.679095][T19302] ? clear_bhb_loop+0x60/0xb0 [ 932.683804][T19302] ? clear_bhb_loop+0x60/0xb0 [ 932.688543][T19302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 932.694494][T19302] RIP: 0033:0x7fe4fdf9ce59 [ 932.698948][T19302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.718593][T19302] RSP: 002b:00007fe4fede5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 932.727045][T19302] RAX: ffffffffffffffda RBX: 00007fe4fe215fa0 RCX: 00007fe4fdf9ce59 [ 932.735047][T19302] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 932.743133][T19302] RBP: 00007fe4fede5090 R08: 0000000000000000 R09: 0000000000000000 [ 932.751125][T19302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.759124][T19302] R13: 00007fe4fe216038 R14: 00007fe4fe215fa0 R15: 00007fff7fe77b08 [ 932.767152][T19302] [ 932.796504][T19303] netlink: 'syz.2.4698': attribute type 20 has an invalid length. [ 933.054553][T19303] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4698'. [ 933.070242][T19303] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4698'. [ 933.091501][T19306] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4698'. [ 934.419303][T19322] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4705'. [ 934.445651][T19322] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4705'. [ 934.687250][T19324] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4706'. [ 934.775527][T19324] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4706'. [ 934.972568][T19324] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4706'. [ 937.861398][T19372] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4721'. [ 937.898272][T19372] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4721'. [ 938.228770][T19383] netlink: 'syz.4.4726': attribute type 21 has an invalid length. [ 940.827140][T19414] __nla_validate_parse: 3 callbacks suppressed [ 940.827185][T19414] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4738'. [ 940.864083][T19414] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4738'. [ 941.145591][T19427] FAULT_INJECTION: forcing a failure. [ 941.145591][T19427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 941.233573][T19427] CPU: 1 PID: 19427 Comm: syz.4.4743 Not tainted syzkaller #0 [ 941.241126][T19427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 941.251234][T19427] Call Trace: [ 941.254617][T19427] [ 941.257592][T19427] dump_stack_lvl+0x188/0x24e [ 941.262332][T19427] ? show_regs_print_info+0x12/0x12 [ 941.267586][T19427] ? load_image+0x400/0x400 [ 941.272139][T19427] ? __lock_acquire+0x7d10/0x7d10 [ 941.277214][T19427] ? snprintf+0xe5/0x140 [ 941.281500][T19427] should_fail_ex+0x399/0x4d0 [ 941.286226][T19427] _copy_to_user+0x2c/0x130 [ 941.290782][T19427] simple_read_from_buffer+0xe3/0x150 [ 941.296210][T19427] proc_fail_nth_read+0x1a6/0x220 [ 941.301292][T19427] ? proc_fault_inject_write+0x310/0x310 [ 941.306988][T19427] ? fsnotify_perm+0x248/0x550 [ 941.311889][T19427] ? proc_fault_inject_write+0x310/0x310 [ 941.317587][T19427] vfs_read+0x2de/0xa00 [ 941.321829][T19427] ? kernel_read+0x1e0/0x1e0 [ 941.326739][T19427] ? __fget_files+0x28/0x4b0 [ 941.331401][T19427] ? __fget_files+0x28/0x4b0 [ 941.336041][T19427] ? __fget_files+0x43d/0x4b0 [ 941.340808][T19427] ? __fdget_pos+0x2ae/0x360 [ 941.345448][T19427] ? ksys_read+0x71/0x250 [ 941.349829][T19427] ksys_read+0x14c/0x250 [ 941.354126][T19427] ? vfs_write+0xa30/0xa30 [ 941.358594][T19427] ? lockdep_hardirqs_on+0x94/0x140 [ 941.363849][T19427] do_syscall_64+0x4c/0xa0 [ 941.368328][T19427] ? clear_bhb_loop+0x60/0xb0 [ 941.373060][T19427] ? clear_bhb_loop+0x60/0xb0 [ 941.377784][T19427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 941.383721][T19427] RIP: 0033:0x7f9dc615d68e [ 941.388295][T19427] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 941.407969][T19427] RSP: 002b:00007f9dc7005fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 941.416552][T19427] RAX: ffffffffffffffda RBX: 00007f9dc70066c0 RCX: 00007f9dc615d68e [ 941.424565][T19427] RDX: 000000000000000f RSI: 00007f9dc70060a0 RDI: 0000000000000004 [ 941.432737][T19427] RBP: 00007f9dc7006090 R08: 0000000000000000 R09: 0000000000000000 [ 941.440744][T19427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.448840][T19427] R13: 00007f9dc6416038 R14: 00007f9dc6415fa0 R15: 00007fff84925a78 [ 941.457040][T19427] [ 941.522529][T19438] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4746'. [ 941.556691][T19428] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4742'. [ 941.594446][T19428] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4742'. [ 941.668923][T19428] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4742'. [ 942.304713][T19456] sctp: [Deprecated]: syz.1.4752 (pid 19456) Use of int in max_burst socket option deprecated. [ 942.304713][T19456] Use struct sctp_assoc_value instead [ 943.032780][T19467] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4756'. [ 943.068902][T19467] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4756'. [ 943.167101][T19471] netlink: 'syz.4.4757': attribute type 29 has an invalid length. [ 943.190158][T19471] netlink: 'syz.4.4757': attribute type 29 has an invalid length. [ 943.221132][T19470] netlink: 'syz.4.4757': attribute type 29 has an invalid length. [ 943.231290][T19472] netlink: 'syz.4.4757': attribute type 29 has an invalid length. [ 943.364909][T19474] FAULT_INJECTION: forcing a failure. [ 943.364909][T19474] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 943.378849][T19474] CPU: 1 PID: 19474 Comm: syz.4.4758 Not tainted syzkaller #0 [ 943.386400][T19474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 943.396526][T19474] Call Trace: [ 943.399844][T19474] [ 943.402816][T19474] dump_stack_lvl+0x188/0x24e [ 943.407546][T19474] ? show_regs_print_info+0x12/0x12 [ 943.412815][T19474] ? load_image+0x400/0x400 [ 943.417375][T19474] ? __lock_acquire+0x7d10/0x7d10 [ 943.422474][T19474] ? verify_lock_unused+0x140/0x140 [ 943.427745][T19474] should_fail_ex+0x399/0x4d0 [ 943.432909][T19474] prepare_alloc_pages+0x1e2/0x5f0 [ 943.438774][T19474] __alloc_pages+0x130/0x4f0 [ 943.443689][T19474] ? zone_statistics+0x170/0x170 [ 943.448940][T19474] ? verify_lock_unused+0x140/0x140 [ 943.454795][T19474] __folio_alloc+0xe/0x30 [ 943.459167][T19474] vma_alloc_folio+0x4a3/0x900 [ 943.463972][T19474] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 943.469821][T19474] shmem_alloc_and_acct_folio+0x463/0xbc0 [ 943.475588][T19474] ? shmem_replace_folio+0xee0/0xee0 [ 943.480923][T19474] ? xas_load+0x127/0x140 [ 943.485285][T19474] ? __filemap_get_folio+0x10f/0xdb0 [ 943.490600][T19474] ? __filemap_get_folio+0xb24/0xdb0 [ 943.495924][T19474] ? __filemap_get_folio+0x10f/0xdb0 [ 943.501266][T19474] ? page_cache_prev_miss+0x380/0x380 [ 943.506719][T19474] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 943.512754][T19474] ? do_user_addr_fault+0x7a0/0xb10 [ 943.518011][T19474] ? lock_chain_count+0x20/0x20 [ 943.522899][T19474] shmem_get_folio_gfp+0x1361/0x3400 [ 943.528625][T19474] shmem_write_begin+0xee/0x3f0 [ 943.533529][T19474] generic_perform_write+0x2fa/0x5c0 [ 943.538861][T19474] ? generic_file_direct_write+0x330/0x330 [ 943.544705][T19474] ? __file_remove_privs+0x5f0/0x5f0 [ 943.550025][T19474] ? rwsem_write_trylock+0x135/0x1c0 [ 943.555340][T19474] ? clear_nonspinnable+0x60/0x60 [ 943.560397][T19474] ? generic_write_checks_count+0x3d9/0x4c0 [ 943.566317][T19474] __generic_file_write_iter+0x148/0x2a0 [ 943.571990][T19474] generic_file_write_iter+0xab/0x2e0 [ 943.577399][T19474] vfs_write+0x4b1/0xa30 [ 943.581675][T19474] ? file_end_write+0x250/0x250 [ 943.586561][T19474] ? __fget_files+0x43d/0x4b0 [ 943.591281][T19474] ? __fdget_pos+0x2ae/0x360 [ 943.595906][T19474] ? ksys_write+0x71/0x250 [ 943.600358][T19474] ksys_write+0x14c/0x250 [ 943.604740][T19474] ? __ia32_sys_read+0x80/0x80 [ 943.609574][T19474] ? lockdep_hardirqs_on+0x94/0x140 [ 943.614817][T19474] do_syscall_64+0x4c/0xa0 [ 943.619270][T19474] ? clear_bhb_loop+0x60/0xb0 [ 943.624008][T19474] ? clear_bhb_loop+0x60/0xb0 [ 943.628737][T19474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 943.634682][T19474] RIP: 0033:0x7f9dc619ce59 [ 943.639129][T19474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.658764][T19474] RSP: 002b:00007f9dc7006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 943.667222][T19474] RAX: ffffffffffffffda RBX: 00007f9dc6415fa0 RCX: 00007f9dc619ce59 [ 943.675214][T19474] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000006 [ 943.683230][T19474] RBP: 00007f9dc7006090 R08: 0000000000000000 R09: 0000000000000000 [ 943.691225][T19474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.699320][T19474] R13: 00007f9dc6416038 R14: 00007f9dc6415fa0 R15: 00007fff84925a78 [ 943.707349][T19474] [ 944.171841][T19487] sctp: [Deprecated]: syz.3.4764 (pid 19487) Use of int in max_burst socket option deprecated. [ 944.171841][T19487] Use struct sctp_assoc_value instead [ 945.378863][T19497] netlink: 'syz.3.4768': attribute type 3 has an invalid length. [ 945.411317][T19497] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.4768'. [ 946.639339][T19529] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4776'. [ 947.144283][T19529] device veth0_macvtap left promiscuous mode [ 947.612467][T19538] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4779'. [ 948.596827][T19538] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4779'. [ 948.899383][T19557] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4783'. [ 951.283175][T19605] netlink: 'syz.2.4796': attribute type 10 has an invalid length. [ 952.197498][T19605] team0: Device veth1_macvtap failed to register rx_handler [ 952.224601][T19616] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4798'. [ 952.369650][T19616] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4798'. [ 952.422552][T19620] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4799'. [ 952.435910][T19618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4798'. [ 952.449682][T19620] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4799'. [ 952.706431][T19633] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4804'. [ 952.779288][T19636] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4804'. [ 952.800123][T19636] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 954.824862][T19669] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4814'. [ 954.856850][T19669] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4814'. [ 954.958180][T19669] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4814'. [ 955.067828][T19675] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 956.647902][T19706] openvswitch: netlink: Message has 6 unknown bytes. [ 960.044627][T19725] sctp: [Deprecated]: syz.2.4831 (pid 19725) Use of int in max_burst socket option deprecated. [ 960.044627][T19725] Use struct sctp_assoc_value instead [ 961.359501][T19749] __nla_validate_parse: 4 callbacks suppressed [ 961.359540][T19749] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4838'. [ 961.481380][T19749] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4838'. [ 961.527173][T19756] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4841'. [ 961.561448][T19757] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4838'. [ 961.633073][T19758] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4841'. [ 961.658360][T19758] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 964.749197][T19771] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.806818][T19787] netlink: 'syz.3.4848': attribute type 21 has an invalid length. [ 964.825882][T19787] IPv6: Can't replace route, no match found [ 964.833975][T19789] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4848'. [ 965.111245][T19795] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4851'. [ 965.149424][T19795] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4851'. [ 965.574473][T19807] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4856'. [ 965.629397][T19807] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4856'. [ 967.107126][T19823] __nla_validate_parse: 1 callbacks suppressed [ 967.107161][T19823] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4861'. [ 967.218616][T19823] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4861'. [ 967.257690][T19823] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 969.144523][T19847] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4867'. [ 969.191707][T19847] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4867'. [ 969.271870][T19854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4870'. [ 969.299134][T19855] netlink: 'syz.0.4868': attribute type 29 has an invalid length. [ 969.311239][T19854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4870'. [ 969.351515][T19855] netlink: 'syz.0.4868': attribute type 29 has an invalid length. [ 969.400809][T19849] netlink: 'syz.0.4868': attribute type 29 has an invalid length. [ 969.430613][T19854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4870'. [ 969.454428][T19856] netlink: 'syz.0.4868': attribute type 29 has an invalid length. [ 969.621463][T19863] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4881'. [ 969.685659][T19863] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4881'. [ 971.686131][T19897] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4885'. [ 972.867894][T19911] FAULT_INJECTION: forcing a failure. [ 972.867894][T19911] name failslab, interval 1, probability 0, space 0, times 0 [ 972.901251][T19911] CPU: 0 PID: 19911 Comm: syz.4.4890 Not tainted syzkaller #0 [ 972.908811][T19911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 972.918912][T19911] Call Trace: [ 972.922233][T19911] [ 972.925201][T19911] dump_stack_lvl+0x188/0x24e [ 972.929936][T19911] ? show_regs_print_info+0x12/0x12 [ 972.935201][T19911] ? load_image+0x400/0x400 [ 972.939791][T19911] should_fail_ex+0x399/0x4d0 [ 972.944522][T19911] should_failslab+0x5/0x20 [ 972.949095][T19911] slab_pre_alloc_hook+0x59/0x310 [ 972.954184][T19911] kmem_cache_alloc+0x56/0x2f0 [ 972.958995][T19911] ? skb_clone+0x1e7/0x370 [ 972.963486][T19911] skb_clone+0x1e7/0x370 [ 972.967783][T19911] bpf_clone_redirect+0x163/0x4a0 [ 972.972839][T19911] ? ktime_get+0x247/0x270 [ 972.977289][T19911] bpf_prog_5a852fc91b8e417a+0x19/0x1d [ 972.982784][T19911] bpf_test_run+0x2b6/0x830 [ 972.987332][T19911] ? convert___skb_to_skb+0x580/0x580 [ 972.992742][T19911] ? eth_get_headlen+0x200/0x200 [ 972.997712][T19911] ? __build_skb+0x257/0x3c0 [ 973.002339][T19911] ? convert___skb_to_skb+0x3d/0x580 [ 973.007676][T19911] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 973.013088][T19911] ? cpu_online+0xa0/0xa0 [ 973.017447][T19911] bpf_prog_test_run+0x31e/0x390 [ 973.022418][T19911] __sys_bpf+0x62b/0x780 [ 973.026716][T19911] ? bpf_link_show_fdinfo+0x380/0x380 [ 973.032130][T19911] ? lock_chain_count+0x20/0x20 [ 973.037017][T19911] __x64_sys_bpf+0x78/0x90 [ 973.041461][T19911] do_syscall_64+0x4c/0xa0 [ 973.045907][T19911] ? clear_bhb_loop+0x60/0xb0 [ 973.050608][T19911] ? clear_bhb_loop+0x60/0xb0 [ 973.055312][T19911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 973.061262][T19911] RIP: 0033:0x7f9dc619ce59 [ 973.065707][T19911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.085337][T19911] RSP: 002b:00007f9dc7006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 973.093783][T19911] RAX: ffffffffffffffda RBX: 00007f9dc6415fa0 RCX: 00007f9dc619ce59 [ 973.102657][T19911] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 973.110659][T19911] RBP: 00007f9dc7006090 R08: 0000000000000000 R09: 0000000000000000 [ 973.118655][T19911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.126648][T19911] R13: 00007f9dc6416038 R14: 00007f9dc6415fa0 R15: 00007fff84925a78 [ 973.134657][T19911] [ 973.211189][T19915] __nla_validate_parse: 2 callbacks suppressed [ 973.211212][T19915] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.4892'. [ 973.230386][T19915] openvswitch: netlink: Key type 386 is out of range max 32 [ 974.665809][T19946] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4901'. [ 974.686870][T19945] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4900'. [ 974.696660][T19946] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4901'. [ 974.723588][T19945] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4900'. [ 974.787767][T19947] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4901'. [ 976.060850][T19966] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4917'. [ 977.164692][T19960] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4907'. [ 977.182334][T19966] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4917'. [ 977.224123][T19968] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4917'. [ 977.510101][T19976] wlan1: mtu greater than device maximum [ 978.648487][T20004] FAULT_INJECTION: forcing a failure. [ 978.648487][T20004] name failslab, interval 1, probability 0, space 0, times 0 [ 978.676301][T20004] CPU: 1 PID: 20004 Comm: syz.4.4923 Not tainted syzkaller #0 [ 978.683872][T20004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 978.693971][T20004] Call Trace: [ 978.697376][T20004] [ 978.700350][T20004] dump_stack_lvl+0x188/0x24e [ 978.705098][T20004] ? show_regs_print_info+0x12/0x12 [ 978.710460][T20004] ? load_image+0x400/0x400 [ 978.715056][T20004] ? __might_sleep+0xd0/0xd0 [ 978.719688][T20004] ? __lock_acquire+0x7d10/0x7d10 [ 978.724776][T20004] should_fail_ex+0x399/0x4d0 [ 978.729502][T20004] should_failslab+0x5/0x20 [ 978.734045][T20004] slab_pre_alloc_hook+0x59/0x310 [ 978.739127][T20004] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 978.745589][T20004] __kmem_cache_alloc_node+0x4f/0x260 [ 978.751012][T20004] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 978.757664][T20004] __kmalloc+0xa0/0x240 [ 978.761878][T20004] bpf_prog_test_run_flow_dissector+0x255/0x640 [ 978.768180][T20004] ? xdp_convert_buff_to_md+0x200/0x200 [ 978.773781][T20004] ? __fget_files+0x28/0x4b0 [ 978.778425][T20004] ? __fget_files+0x28/0x4b0 [ 978.783088][T20004] ? __fget_files+0x43d/0x4b0 [ 978.787863][T20004] ? xdp_convert_buff_to_md+0x200/0x200 [ 978.793453][T20004] bpf_prog_test_run+0x31e/0x390 [ 978.798444][T20004] __sys_bpf+0x62b/0x780 [ 978.802741][T20004] ? bpf_link_show_fdinfo+0x380/0x380 [ 978.808185][T20004] ? lock_chain_count+0x20/0x20 [ 978.813098][T20004] __x64_sys_bpf+0x78/0x90 [ 978.817571][T20004] do_syscall_64+0x4c/0xa0 [ 978.822044][T20004] ? clear_bhb_loop+0x60/0xb0 [ 978.826765][T20004] ? clear_bhb_loop+0x60/0xb0 [ 978.831485][T20004] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 978.837433][T20004] RIP: 0033:0x7f9dc619ce59 [ 978.841887][T20004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.861569][T20004] RSP: 002b:00007f9dc7006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 978.870031][T20004] RAX: ffffffffffffffda RBX: 00007f9dc6415fa0 RCX: 00007f9dc619ce59 [ 978.878057][T20004] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 978.886068][T20004] RBP: 00007f9dc7006090 R08: 0000000000000000 R09: 0000000000000000 [ 978.894084][T20004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.902115][T20004] R13: 00007f9dc6416038 R14: 00007f9dc6415fa0 R15: 00007fff84925a78 [ 978.910161][T20004] [ 979.150308][T20007] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4924'. [ 979.159906][T20007] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4924'. [ 979.186744][T20007] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4924'. [ 980.511714][T20017] FAULT_INJECTION: forcing a failure. [ 980.511714][T20017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.548567][T20017] CPU: 0 PID: 20017 Comm: syz.1.4928 Not tainted syzkaller #0 [ 980.556149][T20017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 980.566258][T20017] Call Trace: [ 980.569671][T20017] [ 980.572644][T20017] dump_stack_lvl+0x188/0x24e [ 980.577393][T20017] ? show_regs_print_info+0x12/0x12 [ 980.582654][T20017] ? load_image+0x400/0x400 [ 980.587216][T20017] ? __lock_acquire+0x7d10/0x7d10 [ 980.592310][T20017] should_fail_ex+0x399/0x4d0 [ 980.597131][T20017] _copy_from_user+0x2c/0x170 [ 980.601868][T20017] __copy_msghdr+0x3b7/0x580 [ 980.606523][T20017] ___sys_sendmsg+0x210/0x360 [ 980.611266][T20017] ? __sys_sendmsg+0x290/0x290 [ 980.616104][T20017] ? __lock_acquire+0x7d10/0x7d10 [ 980.621302][T20017] __se_sys_sendmsg+0x1bb/0x2a0 [ 980.626217][T20017] ? __x64_sys_sendmsg+0x80/0x80 [ 980.631253][T20017] ? lockdep_hardirqs_on+0x94/0x140 [ 980.636500][T20017] do_syscall_64+0x4c/0xa0 [ 980.640964][T20017] ? clear_bhb_loop+0x60/0xb0 [ 980.645674][T20017] ? clear_bhb_loop+0x60/0xb0 [ 980.650387][T20017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 980.656307][T20017] RIP: 0033:0x7fe4fdf9ce59 [ 980.660767][T20017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.680495][T20017] RSP: 002b:00007fe4fede5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 980.688942][T20017] RAX: ffffffffffffffda RBX: 00007fe4fe215fa0 RCX: 00007fe4fdf9ce59 [ 980.696945][T20017] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 980.704942][T20017] RBP: 00007fe4fede5090 R08: 0000000000000000 R09: 0000000000000000 [ 980.712937][T20017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.720945][T20017] R13: 00007fe4fe216038 R14: 00007fe4fe215fa0 R15: 00007fff7fe77b08 [ 980.728968][T20017] [ 981.547821][T20035] sctp: [Deprecated]: syz.1.4935 (pid 20035) Use of int in max_burst socket option deprecated. [ 981.547821][T20035] Use struct sctp_assoc_value instead [ 982.090927][T20046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4939'. [ 982.788306][T20046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4939'. [ 985.098020][T20075] sctp: [Deprecated]: syz.1.4949 (pid 20075) Use of int in max_burst socket option deprecated. [ 985.098020][T20075] Use struct sctp_assoc_value instead [ 985.569562][T20091] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4954'. [ 985.642146][T20091] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4954'. [ 985.761164][T20095] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4954'. [ 988.008683][T20134] FAULT_INJECTION: forcing a failure. [ 988.008683][T20134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.063836][T20134] CPU: 1 PID: 20134 Comm: syz.3.4968 Not tainted syzkaller #0 [ 988.071487][T20134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 988.081592][T20134] Call Trace: [ 988.085007][T20134] [ 988.087979][T20134] dump_stack_lvl+0x188/0x24e [ 988.092713][T20134] ? show_regs_print_info+0x12/0x12 [ 988.097968][T20134] ? load_image+0x400/0x400 [ 988.102552][T20134] ? __lock_acquire+0x7d10/0x7d10 [ 988.107642][T20134] should_fail_ex+0x399/0x4d0 [ 988.112372][T20134] _copy_from_user+0x2c/0x170 [ 988.117101][T20134] csum_and_copy_from_iter+0x207/0x1350 [ 988.122714][T20134] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 988.128408][T20134] ? __kmem_cache_alloc_node+0x140/0x260 [ 988.134104][T20134] ip_generic_getfrag+0x150/0x2e0 [ 988.139191][T20134] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 988.144117][T20134] ? skb_put+0x117/0x210 [ 988.148411][T20134] __ip_append_data+0x2b1f/0x3850 [ 988.153488][T20134] ? verify_lock_unused+0x140/0x140 [ 988.158748][T20134] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 988.163731][T20134] ? ip_setup_cork+0x850/0x850 [ 988.168527][T20134] ? udp_sendmsg+0x34d/0x23b0 [ 988.173234][T20134] ? __local_bh_enable_ip+0x136/0x1c0 [ 988.178631][T20134] ip_append_data+0x132/0x1a0 [ 988.183349][T20134] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 988.188238][T20134] udp_sendmsg+0x5cc/0x23b0 [ 988.192775][T20134] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 988.197657][T20134] ? udp_cmsg_send+0x350/0x350 [ 988.202466][T20134] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 988.208486][T20134] ? rcu_is_watching+0x11/0xa0 [ 988.213285][T20134] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 988.219495][T20134] ? inet_sendmsg+0x174/0x2f0 [ 988.224215][T20134] ? inet_sendmsg+0x78/0x2f0 [ 988.228830][T20134] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 988.234137][T20134] ? security_socket_sendmsg+0x7c/0xa0 [ 988.239638][T20134] sock_write_iter+0x2d9/0x3e0 [ 988.244425][T20134] ? sock_read_iter+0x3a0/0x3a0 [ 988.249313][T20134] ? common_file_perm+0x171/0x1c0 [ 988.254368][T20134] vfs_write+0x4b1/0xa30 [ 988.258651][T20134] ? file_end_write+0x250/0x250 [ 988.263622][T20134] ? __fget_files+0x43d/0x4b0 [ 988.268340][T20134] ? __fdget_pos+0x1d4/0x360 [ 988.273032][T20134] ? ksys_write+0x71/0x250 [ 988.277496][T20134] ksys_write+0x14c/0x250 [ 988.281864][T20134] ? __ia32_sys_read+0x80/0x80 [ 988.286660][T20134] ? lockdep_hardirqs_on+0x94/0x140 [ 988.291885][T20134] do_syscall_64+0x4c/0xa0 [ 988.296388][T20134] ? clear_bhb_loop+0x60/0xb0 [ 988.301120][T20134] ? clear_bhb_loop+0x60/0xb0 [ 988.305852][T20134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 988.311866][T20134] RIP: 0033:0x7f43d959ce59 [ 988.316310][T20134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.335934][T20134] RSP: 002b:00007f43da528028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 988.345145][T20134] RAX: ffffffffffffffda RBX: 00007f43d9815fa0 RCX: 00007f43d959ce59 [ 988.353227][T20134] RDX: 000000000000fe33 RSI: 00002000000001c0 RDI: 0000000000000005 [ 988.361228][T20134] RBP: 00007f43da528090 R08: 0000000000000000 R09: 0000000000000000 [ 988.369224][T20134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.377219][T20134] R13: 00007f43d9816038 R14: 00007f43d9815fa0 R15: 00007fff3d219e28 [ 988.385231][T20134] [ 989.434824][T20159] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4975'. [ 989.450835][T20159] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4975'. [ 989.479154][T20159] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4975'. [ 990.591983][T20163] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4979'. [ 990.622780][T20163] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4979'. [ 990.798636][T20171] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.4982'. [ 992.123256][T20185] netlink: 'syz.2.4994': attribute type 46 has an invalid length. [ 992.157720][T20185] netlink: 'syz.2.4994': attribute type 46 has an invalid length. [ 993.054100][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.060487][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.585961][T20215] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4993'. [ 993.648314][T20211] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4995'. [ 993.687284][T20211] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4995'. [ 994.049914][T20222] netlink: 'syz.0.4998': attribute type 21 has an invalid length. [ 994.080275][T20222] IPv6: Can't replace route, no match found [ 994.181020][T20222] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.4998'. [ 994.280496][T20222] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4998'. [ 994.443229][T20230] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5001'. [ 994.472013][T20230] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5001'. [ 996.490355][T20261] __nla_validate_parse: 1 callbacks suppressed [ 996.490426][T20261] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5009'. [ 996.518712][T20261] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5009'. [ 996.602227][T20265] sctp: [Deprecated]: syz.1.5010 (pid 20265) Use of int in max_burst socket option deprecated. [ 996.602227][T20265] Use struct sctp_assoc_value instead [ 996.778976][T20269] netlink: 'syz.3.5008': attribute type 46 has an invalid length. [ 996.804720][T20269] netlink: 'syz.3.5008': attribute type 46 has an invalid length. [ 998.317091][T20282] netlink: 'syz.3.5016': attribute type 21 has an invalid length. [ 998.345732][T20282] IPv6: Can't replace route, no match found [ 998.529719][T20282] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.5016'. [ 998.584497][T20289] netlink: 'syz.1.5019': attribute type 10 has an invalid length. [ 998.829660][T20296] netlink: 'syz.2.5021': attribute type 2 has an invalid length. [ 998.843975][T20296] netlink: 'syz.2.5021': attribute type 1 has an invalid length. [ 998.852541][T20296] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.5021'. [ 999.494083][T20289] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 999.543763][T20282] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5016'. [ 999.568816][T20298] netlink: 'syz.2.5021': attribute type 10 has an invalid length. [ 999.749370][T20303] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5023'. [ 999.782878][T20305] sctp: [Deprecated]: syz.1.5024 (pid 20305) Use of int in max_burst socket option deprecated. [ 999.782878][T20305] Use struct sctp_assoc_value instead [ 999.824190][T20303] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5023'. [ 1000.521840][T20334] netlink: 'syz.4.5029': attribute type 46 has an invalid length. [ 1000.532917][T20334] netlink: 'syz.4.5029': attribute type 46 has an invalid length. [ 1001.041955][T20343] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5034'. [ 1001.070344][T20343] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5034'. [ 1001.101204][T20343] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5034'. [ 1001.294732][T20349] netlink: 'syz.4.5036': attribute type 21 has an invalid length. [ 1001.310850][T20349] IPv6: Can't replace route, no match found [ 1001.952251][T20360] __nla_validate_parse: 2 callbacks suppressed [ 1001.952289][T20360] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5039'. [ 1001.973081][T20360] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5039'. [ 1002.336072][T20363] sctp: [Deprecated]: syz.2.5040 (pid 20363) Use of int in max_burst socket option deprecated. [ 1002.336072][T20363] Use struct sctp_assoc_value instead [ 1002.519025][T20372] netlink: 'syz.3.5044': attribute type 11 has an invalid length. [ 1002.540246][T20372] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5044'. [ 1005.346592][T20410] sctp: [Deprecated]: syz.2.5056 (pid 20410) Use of int in max_burst socket option deprecated. [ 1005.346592][T20410] Use struct sctp_assoc_value instead [ 1005.778594][T20420] device wlan1 entered promiscuous mode [ 1006.109614][T20432] netlink: 'syz.2.5067': attribute type 3 has an invalid length. [ 1006.131189][T20432] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5067'. [ 1006.371644][T20443] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5069'. [ 1006.875930][T20446] netlink: 'syz.0.5069': attribute type 10 has an invalid length. [ 1006.901114][T20446] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5069'. [ 1006.969216][T20446] device team0 entered promiscuous mode [ 1007.032801][T20446] device team_slave_0 entered promiscuous mode [ 1007.051640][T20446] device team_slave_1 entered promiscuous mode [ 1007.069033][T20446] device geneve1 entered promiscuous mode [ 1007.113445][T20446] device netdevsim0 entered promiscuous mode [ 1007.144151][T20446] bridge0: port 4(team0) entered blocking state [ 1007.191727][T20446] bridge0: port 4(team0) entered disabled state [ 1008.196235][T20463] sctp: [Deprecated]: syz.3.5074 (pid 20463) Use of int in max_burst socket option deprecated. [ 1008.196235][T20463] Use struct sctp_assoc_value instead [ 1008.424982][ T4273] Bluetooth: hci4: unexpected subevent 0x12 length: 150 > 5 [ 1008.900993][T20480] device syzkaller0 entered promiscuous mode [ 1010.942221][T20515] sctp: [Deprecated]: syz.0.5090 (pid 20515) Use of int in max_burst socket option deprecated. [ 1010.942221][T20515] Use struct sctp_assoc_value instead [ 1013.243462][T20504] netlink: 'syz.2.5088': attribute type 39 has an invalid length. [ 1014.299752][T20546] sctp: [Deprecated]: syz.0.5101 (pid 20546) Use of int in max_burst socket option deprecated. [ 1014.299752][T20546] Use struct sctp_assoc_value instead [ 1014.878888][T20556] FAULT_INJECTION: forcing a failure. [ 1014.878888][T20556] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.933257][T20556] CPU: 1 PID: 20556 Comm: syz.2.5103 Not tainted syzkaller #0 [ 1014.940838][T20556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1014.950972][T20556] Call Trace: [ 1014.954350][T20556] [ 1014.957342][T20556] dump_stack_lvl+0x188/0x24e [ 1014.962112][T20556] ? show_regs_print_info+0x12/0x12 [ 1014.967405][T20556] ? load_image+0x400/0x400 [ 1014.972086][T20556] ? __might_sleep+0xd0/0xd0 [ 1014.976756][T20556] ? __lock_acquire+0x7d10/0x7d10 [ 1014.981908][T20556] should_fail_ex+0x399/0x4d0 [ 1014.986681][T20556] should_failslab+0x5/0x20 [ 1014.991260][T20556] slab_pre_alloc_hook+0x59/0x310 [ 1014.996417][T20556] kmem_cache_alloc+0x56/0x2f0 [ 1015.001242][T20556] ? ptlock_alloc+0x1c/0x60 [ 1015.005921][T20556] ptlock_alloc+0x1c/0x60 [ 1015.010315][T20556] pte_alloc_one+0xc0/0x310 [ 1015.014897][T20556] ? pfn_modify_allowed+0x560/0x560 [ 1015.020166][T20556] ? __rwlock_init+0x140/0x140 [ 1015.025033][T20556] __pte_alloc+0x21/0x150 [ 1015.029462][T20556] handle_mm_fault+0x3634/0x3ee0 [ 1015.034468][T20556] ? mt_find+0x157/0x830 [ 1015.038846][T20556] ? numa_migrate_prep+0x250/0x250 [ 1015.044069][T20556] ? lock_chain_count+0x20/0x20 [ 1015.049020][T20556] ? lock_mm_and_find_vma+0xae/0x2f0 [ 1015.054382][T20556] do_user_addr_fault+0x51f/0xb10 [ 1015.059541][T20556] exc_page_fault+0x60/0x100 [ 1015.064216][T20556] asm_exc_page_fault+0x22/0x30 [ 1015.069141][T20556] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1015.075015][T20556] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 1015.094687][T20556] RSP: 0018:ffffc90005157e80 EFLAGS: 00050293 [ 1015.100838][T20556] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000200000000140 [ 1015.108879][T20556] RDX: 0000000000000000 RSI: ffffffff8a8c22a0 RDI: ffffffff8adf1320 [ 1015.116923][T20556] RBP: 0000000000000004 R08: ffffffff8e1ff3ef R09: 1ffffffff1c3fe7d [ 1015.124972][T20556] R10: dffffc0000000000 R11: fffffbfff1c3fe7e R12: 0000000000000800 [ 1015.132998][T20556] R13: 0000200000000140 R14: 0000000000000009 R15: 0000000000000800 [ 1015.141100][T20556] __sys_socketpair+0xb4/0x540 [ 1015.145975][T20556] __x64_sys_socketpair+0x97/0xb0 [ 1015.151088][T20556] do_syscall_64+0x4c/0xa0 [ 1015.155702][T20556] ? clear_bhb_loop+0x60/0xb0 [ 1015.160466][T20556] ? clear_bhb_loop+0x60/0xb0 [ 1015.165240][T20556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1015.171291][T20556] RIP: 0033:0x7f9169d9ce59 [ 1015.175774][T20556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.195446][T20556] RSP: 002b:00007f916ac9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1015.203937][T20556] RAX: ffffffffffffffda RBX: 00007f916a015fa0 RCX: 00007f9169d9ce59 [ 1015.211970][T20556] RDX: 0000000000000001 RSI: 0000000000000800 RDI: 0000000000000009 [ 1015.220001][T20556] RBP: 00007f916ac9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.228040][T20556] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 1015.236072][T20556] R13: 00007f916a016038 R14: 00007f916a015fa0 R15: 00007ffc62405178 [ 1015.244170][T20556] [ 1015.526016][T20565] netlink: 'syz.2.5107': attribute type 10 has an invalid length. [ 1015.629952][T20565] team0: Device wg1 is of different type [ 1015.916203][T20575] device syzkaller0 entered promiscuous mode [ 1016.182138][T20581] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5111'. [ 1016.941394][T20593] sctp: [Deprecated]: syz.2.5114 (pid 20593) Use of int in max_burst socket option deprecated. [ 1016.941394][T20593] Use struct sctp_assoc_value instead [ 1017.116074][T20597] netlink: 'syz.2.5116': attribute type 1 has an invalid length. [ 1017.124221][T20597] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5116'. [ 1018.918447][T20585] netlink: 'syz.4.5111': attribute type 10 has an invalid length. [ 1018.926491][T20585] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5111'. [ 1018.935556][T20585] device team0 entered promiscuous mode [ 1018.941149][T20585] device team_slave_0 entered promiscuous mode [ 1018.953581][T20585] device team_slave_1 entered promiscuous mode [ 1018.960015][T20585] device bridge_slave_1 entered promiscuous mode [ 1018.967859][T20585] bridge0: port 2(team0) entered blocking state [ 1018.975371][T20585] bridge0: port 2(team0) entered disabled state [ 1018.987718][T20585] bridge0: port 2(team0) entered blocking state [ 1018.994163][T20585] bridge0: port 2(team0) entered forwarding state [ 1019.004559][T20595] netlink: 'syz.3.5115': attribute type 21 has an invalid length. [ 1019.022712][T20595] netlink: 'syz.3.5115': attribute type 1 has an invalid length. [ 1019.846099][T20623] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5123'. [ 1020.358354][T20632] netlink: 'syz.2.5128': attribute type 21 has an invalid length. [ 1020.369567][T20632] IPv6: Can't replace route, no match found [ 1020.397075][T20632] netlink: 'syz.2.5128': attribute type 1 has an invalid length. [ 1020.410470][T20632] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.5128'. [ 1020.458699][T20632] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5128'. [ 1020.773034][T20639] device syzkaller0 entered promiscuous mode [ 1021.675800][T20653] netlink: 'syz.1.5132': attribute type 1 has an invalid length. [ 1021.693811][T20653] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5132'. [ 1021.706023][T20644] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5131'. [ 1021.732327][T20649] netlink: 'syz.3.5131': attribute type 10 has an invalid length. [ 1021.760767][T20649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5131'. [ 1021.776481][T20649] device team0 entered promiscuous mode [ 1021.782135][T20649] device team_slave_1 entered promiscuous mode [ 1021.794917][T20649] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1022.480243][T20675] netlink: 'syz.0.5138': attribute type 11 has an invalid length. [ 1022.500506][T20675] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5138'. [ 1024.974710][T20700] netlink: 'syz.2.5143': attribute type 1 has an invalid length. [ 1024.990495][T20700] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.5143'. [ 1025.219902][T20701] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5145'. [ 1026.212362][T20695] netlink: 'syz.2.5143': attribute type 21 has an invalid length. [ 1026.226888][T20695] IPv6: Can't replace route, no match found [ 1026.232937][T20700] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5143'. [ 1026.255367][T20701] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5145'. [ 1026.516956][T20712] sctp: [Deprecated]: syz.3.5149 (pid 20712) Use of int in max_burst socket option deprecated. [ 1026.516956][T20712] Use struct sctp_assoc_value instead [ 1026.732154][T20715] device syzkaller0 entered promiscuous mode [ 1026.790054][T20717] netlink: 'syz.2.5150': attribute type 21 has an invalid length. [ 1026.810636][T20717] netlink: 'syz.2.5150': attribute type 1 has an invalid length. [ 1026.979627][T20726] sctp: [Deprecated]: syz.3.5154 (pid 20726) Use of int in max_burst socket option deprecated. [ 1026.979627][T20726] Use struct sctp_assoc_value instead [ 1027.412035][T20732] netlink: 'syz.3.5155': attribute type 1 has an invalid length. [ 1027.430718][T20732] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5155'. [ 1027.546016][T20739] sctp: [Deprecated]: syz.1.5157 (pid 20739) Use of int in max_burst socket option deprecated. [ 1027.546016][T20739] Use struct sctp_assoc_value instead [ 1029.427251][T20757] netlink: 'syz.2.5161': attribute type 1 has an invalid length. [ 1029.452157][T20756] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5162'. [ 1029.462215][T20757] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.5161'. [ 1031.043466][T20747] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5158'. [ 1031.060438][T20754] netlink: 'syz.2.5161': attribute type 21 has an invalid length. [ 1031.083933][T20754] IPv6: Can't replace route, no match found [ 1031.089983][T20756] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5162'. [ 1031.107402][T20757] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5161'. [ 1031.329014][T20765] sctp: [Deprecated]: syz.3.5166 (pid 20765) Use of int in max_burst socket option deprecated. [ 1031.329014][T20765] Use struct sctp_assoc_value instead [ 1031.346267][T20766] sctp: [Deprecated]: syz.2.5167 (pid 20766) Use of int in max_burst socket option deprecated. [ 1031.346267][T20766] Use struct sctp_assoc_value instead [ 1033.077538][T20794] device syzkaller0 entered promiscuous mode [ 1033.716203][T20808] netlink: 'syz.3.5178': attribute type 1 has an invalid length. [ 1033.755561][T20808] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.5178'. [ 1033.935172][T20813] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5179'. [ 1039.083553][T20807] netlink: 'syz.3.5178': attribute type 21 has an invalid length. [ 1039.091579][T20807] IPv6: Can't replace route, no match found [ 1039.098784][T20808] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5178'. [ 1039.110039][T20813] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5179'. [ 1039.672923][T20849] sctp: [Deprecated]: syz.1.5190 (pid 20849) Use of int in max_burst socket option deprecated. [ 1039.672923][T20849] Use struct sctp_assoc_value instead [ 1040.979667][T20878] netlink: 'syz.0.5198': attribute type 27 has an invalid length. [ 1040.998347][T20878] netlink: 'syz.0.5198': attribute type 3 has an invalid length. [ 1041.010234][T20878] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5198'. [ 1041.504196][T20896] netlink: 'syz.1.5202': attribute type 1 has an invalid length. [ 1041.542858][T20896] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.5202'. [ 1041.847520][T20893] netlink: 'syz.1.5202': attribute type 21 has an invalid length. [ 1041.884121][T20893] IPv6: Can't replace route, no match found [ 1041.909395][T20896] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5202'. [ 1042.050558][T20903] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5203'. [ 1042.061669][T20891] device syzkaller0 entered promiscuous mode [ 1042.088417][T20902] sctp: [Deprecated]: syz.3.5204 (pid 20902) Use of int in max_burst socket option deprecated. [ 1042.088417][T20902] Use struct sctp_assoc_value instead [ 1042.136177][T20903] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5203'. [ 1045.201877][ T4273] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 1046.347250][T20924] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5209'. [ 1046.821540][T20950] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5219'. [ 1046.845188][T20950] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5219'. [ 1048.580985][T20972] sctp: [Deprecated]: syz.0.5224 (pid 20972) Use of int in max_burst socket option deprecated. [ 1048.580985][T20972] Use struct sctp_assoc_value instead [ 1048.887694][T20977] device syzkaller0 entered promiscuous mode [ 1053.707062][T21035] netlink: 'syz.0.5242': attribute type 1 has an invalid length. [ 1053.739992][T21035] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.5242'. [ 1053.848489][T21040] netlink: 'syz.3.5243': attribute type 1 has an invalid length. [ 1053.859982][T21040] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.5243'. [ 1054.122869][T21030] netlink: 'syz.0.5242': attribute type 21 has an invalid length. [ 1054.144378][T21030] IPv6: Can't replace route, no match found [ 1054.151041][T21034] netlink: 'syz.3.5243': attribute type 21 has an invalid length. [ 1054.187980][T21034] IPv6: Can't replace route, no match found [ 1054.203758][T21035] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5242'. [ 1054.233628][T21040] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5243'. [ 1054.466858][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.473279][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.008392][T21062] device syzkaller0 entered promiscuous mode [ 1057.589368][T21095] netlink: 'syz.3.5258': attribute type 1 has an invalid length. [ 1057.605625][T21095] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.5258'. [ 1059.034140][T21094] netlink: 'syz.3.5258': attribute type 21 has an invalid length. [ 1059.042121][T21094] IPv6: Can't replace route, no match found [ 1059.063991][T21095] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5258'. [ 1059.369790][T21104] netlink: 'syz.0.5261': attribute type 21 has an invalid length. [ 1059.414065][T21104] IPv6: Can't replace route, no match found [ 1059.497396][T21104] netlink: 'syz.0.5261': attribute type 1 has an invalid length. [ 1059.524237][T21104] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.5261'. [ 1059.602121][T21104] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5261'. [ 1060.402544][T21125] device syzkaller0 entered promiscuous mode [ 1061.090531][T21135] device syzkaller0 entered promiscuous mode [ 1061.167112][T21145] sctp: [Deprecated]: syz.0.5273 (pid 21145) Use of int in max_burst socket option deprecated. [ 1061.167112][T21145] Use struct sctp_assoc_value instead [ 1062.742657][T21163] netlink: 'syz.2.5277': attribute type 1 has an invalid length. [ 1062.750719][T21163] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.5277'. [ 1066.523426][T21160] netlink: 'syz.2.5277': attribute type 21 has an invalid length. [ 1066.531396][T21160] IPv6: Can't replace route, no match found [ 1066.539476][T21163] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5277'. [ 1066.570314][T21177] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5282'. [ 1070.864841][T21218] device syzkaller0 entered promiscuous mode [ 1078.764247][T21268] netlink: 'syz.0.5308': attribute type 10 has an invalid length. [ 1078.816167][T21268] team0: Port device netdevsim0 removed [ 1078.828945][T21268] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1078.841067][T21275] netlink: 'syz.3.5310': attribute type 7 has an invalid length. [ 1078.854742][T21275] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5310'. [ 1078.986476][T21282] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5311'. [ 1079.020969][T21282] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5311'. [ 1079.435838][T21299] netlink: 'syz.4.5315': attribute type 1 has an invalid length. [ 1079.450739][T21299] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.5315'. [ 1080.056442][T21282] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5311'. [ 1080.079928][T21295] netlink: 'syz.4.5315': attribute type 21 has an invalid length. [ 1080.104040][T21295] IPv6: Can't replace route, no match found [ 1080.131368][T21299] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5315'. [ 1082.168455][T21346] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5328'. [ 1082.192284][T21346] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5328'. [ 1082.427918][T21350] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5328'. [ 1083.184316][T21356] netlink: 'syz.2.5331': attribute type 21 has an invalid length. [ 1083.192958][T21356] IPv6: Can't replace route, no match found [ 1083.300835][T21356] netlink: 'syz.2.5331': attribute type 1 has an invalid length. [ 1083.341237][T21356] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.5331'. [ 1085.878257][T21409] __nla_validate_parse: 1 callbacks suppressed [ 1085.878285][T21409] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5345'. [ 1085.903271][T21410] netlink: 'syz.2.5346': attribute type 21 has an invalid length. [ 1085.924764][T21410] IPv6: Can't replace route, no match found [ 1085.941250][T21413] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.5347'. [ 1085.952093][T21409] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5345'. [ 1086.007271][T21410] netlink: 'syz.2.5346': attribute type 1 has an invalid length. [ 1086.027918][T21410] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.5346'. [ 1086.038852][T21415] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5347'. [ 1086.061997][T21414] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5345'. [ 1086.136978][T21410] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5346'. [ 1086.261774][T21422] FAULT_INJECTION: forcing a failure. [ 1086.261774][T21422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1086.363706][T21422] CPU: 1 PID: 21422 Comm: syz.4.5349 Not tainted syzkaller #0 [ 1086.371284][T21422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1086.381417][T21422] Call Trace: [ 1086.384786][T21422] [ 1086.387771][T21422] dump_stack_lvl+0x188/0x24e [ 1086.392624][T21422] ? show_regs_print_info+0x12/0x12 [ 1086.397905][T21422] ? load_image+0x400/0x400 [ 1086.402681][T21422] ? __lock_acquire+0x7d10/0x7d10 [ 1086.407814][T21422] should_fail_ex+0x399/0x4d0 [ 1086.412564][T21422] _copy_from_user+0x2c/0x170 [ 1086.417343][T21422] generic_map_update_batch+0x4a1/0x810 [ 1086.423015][T21422] ? rcu_read_unlock+0xa0/0xa0 [ 1086.428125][T21422] ? __fdget+0x17c/0x200 [ 1086.432480][T21422] ? rcu_read_unlock+0xa0/0xa0 [ 1086.437409][T21422] bpf_map_do_batch+0x466/0x600 [ 1086.442444][T21422] __sys_bpf+0x6f7/0x780 [ 1086.446781][T21422] ? bpf_link_show_fdinfo+0x380/0x380 [ 1086.452264][T21422] ? lock_chain_count+0x20/0x20 [ 1086.457212][T21422] __x64_sys_bpf+0x78/0x90 [ 1086.461702][T21422] do_syscall_64+0x4c/0xa0 [ 1086.466275][T21422] ? clear_bhb_loop+0x60/0xb0 [ 1086.471117][T21422] ? clear_bhb_loop+0x60/0xb0 [ 1086.475877][T21422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1086.481838][T21422] RIP: 0033:0x7f9dc619ce59 [ 1086.486319][T21422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.506014][T21422] RSP: 002b:00007f9dc7006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1086.514507][T21422] RAX: ffffffffffffffda RBX: 00007f9dc6415fa0 RCX: 00007f9dc619ce59 [ 1086.522641][T21422] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 1086.530695][T21422] RBP: 00007f9dc7006090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.538753][T21422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1086.546875][T21422] R13: 00007f9dc6416038 R14: 00007f9dc6415fa0 R15: 00007fff84925a78 [ 1086.554946][T21422] [ 1087.726001][T21452] netlink: 'syz.4.5361': attribute type 21 has an invalid length. [ 1087.739110][T21452] IPv6: Can't replace route, no match found [ 1087.838543][T21452] netlink: 'syz.4.5361': attribute type 1 has an invalid length. [ 1087.856469][T21452] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.5361'. [ 1087.872343][T21456] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5361'. [ 1089.518075][T21479] netlink: 'syz.3.5378': attribute type 2 has an invalid length. [ 1089.591145][T21483] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5378'. [ 1090.400887][T21505] netlink: 'syz.0.5373': attribute type 1 has an invalid length. [ 1090.429912][T21479] netlink: 'syz.3.5378': attribute type 10 has an invalid length. [ 1090.539571][T21479] device bridge_slave_1 entered promiscuous mode [ 1090.568813][T21479] team0: Port device bridge_slave_1 added [ 1090.598594][T21502] netlink: 'syz.0.5373': attribute type 21 has an invalid length. [ 1090.624755][T21502] IPv6: Can't replace route, no match found [ 1090.647638][T21503] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1091.121621][T21524] FAULT_INJECTION: forcing a failure. [ 1091.121621][T21524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1091.142759][T21524] CPU: 0 PID: 21524 Comm: syz.0.5381 Not tainted syzkaller #0 [ 1091.150401][T21524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1091.160521][T21524] Call Trace: [ 1091.163846][T21524] [ 1091.166821][T21524] dump_stack_lvl+0x188/0x24e [ 1091.171564][T21524] ? show_regs_print_info+0x12/0x12 [ 1091.176907][T21524] ? load_image+0x400/0x400 [ 1091.181461][T21524] ? __lock_acquire+0x7d10/0x7d10 [ 1091.186569][T21524] ? __fget_files+0x28/0x4b0 [ 1091.191238][T21524] should_fail_ex+0x399/0x4d0 [ 1091.196098][T21524] _copy_to_user+0x2c/0x130 [ 1091.200689][T21524] bpf_obj_get_info_by_fd+0xcc0/0x2f50 [ 1091.206314][T21524] ? __lock_acquire+0x7d10/0x7d10 [ 1091.211428][T21524] ? verify_lock_unused+0x140/0x140 [ 1091.216724][T21524] ? bpf_map_get_fd_by_id+0x310/0x310 [ 1091.222199][T21524] ? __might_fault+0xa6/0x120 [ 1091.226981][T21524] ? trace_call_bpf+0xbf/0x6b0 [ 1091.231858][T21524] ? __lock_acquire+0x7d10/0x7d10 [ 1091.236957][T21524] ? trace_call_bpf+0x5d6/0x6b0 [ 1091.242019][T21524] ? __might_fault+0xa6/0x120 [ 1091.246767][T21524] ? __might_fault+0xc2/0x120 [ 1091.251506][T21524] ? __might_fault+0xa6/0x120 [ 1091.256248][T21524] ? bpf_lsm_bpf+0x5/0x10 [ 1091.260637][T21524] ? security_bpf+0x7a/0xa0 [ 1091.265205][T21524] __sys_bpf+0x505/0x780 [ 1091.269513][T21524] ? bpf_link_show_fdinfo+0x380/0x380 [ 1091.274966][T21524] ? lock_chain_count+0x20/0x20 [ 1091.279888][T21524] __x64_sys_bpf+0x78/0x90 [ 1091.284368][T21524] do_syscall_64+0x4c/0xa0 [ 1091.288849][T21524] ? clear_bhb_loop+0x60/0xb0 [ 1091.293581][T21524] ? clear_bhb_loop+0x60/0xb0 [ 1091.298324][T21524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1091.304325][T21524] RIP: 0033:0x7f36bf99ce59 [ 1091.308805][T21524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.328478][T21524] RSP: 002b:00007f36c0885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1091.336953][T21524] RAX: ffffffffffffffda RBX: 00007f36bfc15fa0 RCX: 00007f36bf99ce59 [ 1091.344985][T21524] RDX: 000000000000000c RSI: 0000200000000240 RDI: 000000000000000f [ 1091.353102][T21524] RBP: 00007f36c0885090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.361127][T21524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1091.369154][T21524] R13: 00007f36bfc16038 R14: 00007f36bfc15fa0 R15: 00007ffca7aba758 [ 1091.377200][T21524] [ 1091.592673][T21530] __nla_validate_parse: 3 callbacks suppressed [ 1091.592697][T21530] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5384'. [ 1091.645233][T21530] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5384'. [ 1091.719110][T21530] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5384'. [ 1091.755699][T21536] netlink: 'syz.3.5387': attribute type 21 has an invalid length. [ 1091.773919][T21536] IPv6: Can't replace route, no match found [ 1091.828443][T21536] netlink: 'syz.3.5387': attribute type 1 has an invalid length. [ 1091.849238][T21536] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.5387'. [ 1091.928719][T21536] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5387'. [ 1092.029928][T21545] sctp: [Deprecated]: syz.4.5389 (pid 21545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1092.029928][T21545] Use struct sctp_sack_info instead [ 1092.091959][T21550] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5390'. [ 1092.105423][T21550] syz.0.5390[21550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1092.105607][T21550] syz.0.5390[21550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1093.671563][T21587] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5399'. [ 1093.770131][T21587] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5399'. [ 1093.990144][T21587] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5399'. [ 1094.368361][T21597] sctp: [Deprecated]: syz.0.5402 (pid 21597) Use of int in max_burst socket option deprecated. [ 1094.368361][T21597] Use struct sctp_assoc_value instead [ 1094.543397][T21601] bridge0: port 2(team0) entered disabled state [ 1094.551393][T21601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.217797][T21621] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5412'. [ 1095.777825][T21634] sctp: [Deprecated]: syz.4.5418 (pid 21634) Use of int in max_burst socket option deprecated. [ 1095.777825][T21634] Use struct sctp_assoc_value instead [ 1095.871570][T21638] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1096.956577][T21682] sctp: [Deprecated]: syz.3.5433 (pid 21682) Use of int in max_burst socket option deprecated. [ 1096.956577][T21682] Use struct sctp_assoc_value instead [ 1097.628581][T21702] __nla_validate_parse: 3 callbacks suppressed [ 1097.628622][T21702] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.5438'. [ 1097.720491][T21702] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1097.794161][T21702] CPU: 1 PID: 21702 Comm: syz.0.5438 Not tainted syzkaller #0 [ 1097.801722][T21702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1097.811835][T21702] Call Trace: [ 1097.815163][T21702] [ 1097.818143][T21702] dump_stack_lvl+0x188/0x24e [ 1097.822889][T21702] ? show_regs_print_info+0x12/0x12 [ 1097.828153][T21702] ? load_image+0x400/0x400 [ 1097.832736][T21702] sysfs_warn_dup+0x8a/0xa0 [ 1097.837304][T21702] sysfs_do_create_link_sd+0xc0/0x110 [ 1097.842744][T21702] device_add+0x7ed/0xfb0 [ 1097.847131][T21702] wiphy_register+0x1d9f/0x2ac0 [ 1097.852039][T21702] ? cfg80211_event_work+0x40/0x40 [ 1097.857197][T21702] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1097.863396][T21702] ? ieee80211_register_hw+0x2b34/0x39f0 [ 1097.869068][T21702] ieee80211_register_hw+0x2d00/0x39f0 [ 1097.874578][T21702] ? ieee80211_register_hw+0xea1/0x39f0 [ 1097.880162][T21702] ? ieee80211_register_hw+0xea1/0x39f0 [ 1097.885757][T21702] ? ieee80211_tasklet_handler+0x20/0x20 [ 1097.891432][T21702] ? __hrtimer_init+0x59/0x270 [ 1097.896226][T21702] ? __hrtimer_init+0x186/0x270 [ 1097.901111][T21702] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1097.906910][T21702] hwsim_new_radio_nl+0xafa/0xce0 [ 1097.911999][T21702] genl_family_rcv_msg_doit+0x22a/0x330 [ 1097.917668][T21702] ? end_current_label_crit_section+0x170/0x170 [ 1097.923944][T21702] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1097.929881][T21702] ? bpf_lsm_capable+0x5/0x10 [ 1097.934593][T21702] ? security_capable+0x85/0xb0 [ 1097.939483][T21702] genl_rcv_msg+0x604/0x790 [ 1097.944020][T21702] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1097.950204][T21702] ? genl_bind+0x360/0x360 [ 1097.954656][T21702] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1097.961052][T21702] ? lock_acquire+0x225/0x4a0 [ 1097.965778][T21702] netlink_rcv_skb+0x1fb/0x450 [ 1097.970709][T21702] ? genl_bind+0x360/0x360 [ 1097.975157][T21702] ? netlink_ack+0x1170/0x1170 [ 1097.979964][T21702] ? down_read+0x1a8/0x2d0 [ 1097.984440][T21702] genl_rcv+0x24/0x40 [ 1097.988455][T21702] netlink_unicast+0x74d/0x8d0 [ 1097.993263][T21702] netlink_sendmsg+0x8ad/0xbd0 [ 1097.998085][T21702] ? lockdep_hardirqs_on+0x94/0x140 [ 1098.003326][T21702] ? netlink_getsockopt+0x550/0x550 [ 1098.008566][T21702] ? bpf_lsm_socket_accept+0x10/0x10 [ 1098.013887][T21702] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1098.019200][T21702] ? security_socket_sendmsg+0x7c/0xa0 [ 1098.024713][T21702] ? netlink_getsockopt+0x550/0x550 [ 1098.029955][T21702] ____sys_sendmsg+0x5be/0x970 [ 1098.034780][T21702] ? __sys_sendmsg_sock+0x30/0x30 [ 1098.039853][T21702] ? __import_iovec+0x315/0x500 [ 1098.044756][T21702] ? import_iovec+0x6f/0xa0 [ 1098.049292][T21702] ___sys_sendmsg+0x2a2/0x360 [ 1098.054010][T21702] ? try_to_wake_up+0x6ae/0x1080 [ 1098.058988][T21702] ? __sys_sendmsg+0x290/0x290 [ 1098.063809][T21702] ? perf_trace_preemptirq_template+0xa8/0x320 [ 1098.070004][T21702] ? irqentry_enter+0x33/0x50 [ 1098.074734][T21702] ? rcu_is_watching+0x11/0xa0 [ 1098.079558][T21702] __se_sys_sendmsg+0x1bb/0x2a0 [ 1098.084444][T21702] ? __x64_sys_sendmsg+0x80/0x80 [ 1098.089427][T21702] ? lockdep_hardirqs_on+0x94/0x140 [ 1098.094661][T21702] do_syscall_64+0x4c/0xa0 [ 1098.099124][T21702] ? clear_bhb_loop+0x60/0xb0 [ 1098.103838][T21702] ? clear_bhb_loop+0x60/0xb0 [ 1098.108554][T21702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1098.114474][T21702] RIP: 0033:0x7f36bf99ce59 [ 1098.118917][T21702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.138553][T21702] RSP: 002b:00007f36c0864028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1098.147009][T21702] RAX: ffffffffffffffda RBX: 00007f36bfc16090 RCX: 00007f36bf99ce59 [ 1098.155005][T21702] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1098.163014][T21702] RBP: 00007f36bfa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1098.171005][T21702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1098.179000][T21702] R13: 00007f36bfc16128 R14: 00007f36bfc16090 R15: 00007ffca7aba758 [ 1098.187019][T21702] [ 1098.445179][T21719] sctp: [Deprecated]: syz.1.5444 (pid 21719) Use of int in max_burst socket option deprecated. [ 1098.445179][T21719] Use struct sctp_assoc_value instead [ 1098.465049][T21717] netlink: 'syz.4.5442': attribute type 11 has an invalid length. [ 1098.497350][T21717] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5442'. [ 1098.512582][T21717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1100.301727][T21764] sctp: [Deprecated]: syz.2.5456 (pid 21764) Use of int in max_burst socket option deprecated. [ 1100.301727][T21764] Use struct sctp_assoc_value instead [ 1100.967112][T21792] netlink: 'syz.0.5473': attribute type 21 has an invalid length. [ 1100.976845][T21792] IPv6: Can't replace route, no match found [ 1101.029956][T21792] netlink: 'syz.0.5473': attribute type 1 has an invalid length. [ 1101.069173][T21792] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.5473'. [ 1101.103082][T21796] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5473'. [ 1101.282079][T21799] netlink: 'syz.0.5466': attribute type 21 has an invalid length. [ 1101.307383][T21799] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5466'. [ 1102.050783][T21798] delete_channel: no stack [ 1104.457149][T21814] sctp: [Deprecated]: syz.2.5470 (pid 21814) Use of int in max_burst socket option deprecated. [ 1104.457149][T21814] Use struct sctp_assoc_value instead [ 1104.518191][T21818] sctp: [Deprecated]: syz.3.5471 (pid 21818) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1104.518191][T21818] Use struct sctp_sack_info instead [ 1105.099775][T21819] device syzkaller0 entered promiscuous mode [ 1105.107596][T21837] netlink: 'syz.1.5477': attribute type 21 has an invalid length. [ 1105.117428][T21837] IPv6: Can't replace route, no match found [ 1105.126898][T21839] netlink: 'syz.1.5477': attribute type 1 has an invalid length. [ 1105.136686][T21839] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.5477'. [ 1108.123778][T21837] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5477'. [ 1108.412404][T21868] sctp: [Deprecated]: syz.0.5486 (pid 21868) Use of int in max_burst socket option deprecated. [ 1108.412404][T21868] Use struct sctp_assoc_value instead [ 1108.968695][T21882] FAULT_INJECTION: forcing a failure. [ 1108.968695][T21882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.035272][T21882] CPU: 1 PID: 21882 Comm: syz.4.5490 Not tainted syzkaller #0 [ 1109.042831][T21882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1109.052927][T21882] Call Trace: [ 1109.056264][T21882] [ 1109.059230][T21882] dump_stack_lvl+0x188/0x24e [ 1109.063985][T21882] ? show_regs_print_info+0x12/0x12 [ 1109.069259][T21882] ? load_image+0x400/0x400 [ 1109.073828][T21882] ? __might_fault+0xa6/0x120 [ 1109.078570][T21882] should_fail_ex+0x399/0x4d0 [ 1109.083297][T21882] copyin+0x1b/0x120 [ 1109.087239][T21882] _copy_from_iter+0x447/0x1130 [ 1109.092139][T21882] ? copyout_mc+0x110/0x110 [ 1109.096696][T21882] ? __virt_addr_valid+0x188/0x540 [ 1109.101868][T21882] ? __virt_addr_valid+0x188/0x540 [ 1109.107068][T21882] ? __virt_addr_valid+0x465/0x540 [ 1109.112249][T21882] ? __check_object_size+0x500/0xa40 [ 1109.117606][T21882] kcm_sendmsg+0xc26/0x2310 [ 1109.122255][T21882] ? kcm_getsockopt+0x280/0x280 [ 1109.127163][T21882] ? aa_sock_msg_perm+0x94/0x150 [ 1109.132150][T21882] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1109.137485][T21882] ? security_socket_sendmsg+0x7c/0xa0 [ 1109.143000][T21882] ? kcm_getsockopt+0x280/0x280 [ 1109.147909][T21882] ____sys_sendmsg+0x5be/0x970 [ 1109.152735][T21882] ? __sys_sendmsg_sock+0x30/0x30 [ 1109.157820][T21882] ? __import_iovec+0x315/0x500 [ 1109.162723][T21882] ? import_iovec+0x6f/0xa0 [ 1109.167372][T21882] ___sys_sendmsg+0x2a2/0x360 [ 1109.172192][T21882] ? __sys_sendmsg+0x290/0x290 [ 1109.177036][T21882] ? trace_call_bpf+0xbf/0x6b0 [ 1109.181966][T21882] __se_sys_sendmsg+0x1bb/0x2a0 [ 1109.186872][T21882] ? __x64_sys_sendmsg+0x80/0x80 [ 1109.191876][T21882] ? lockdep_hardirqs_on+0x94/0x140 [ 1109.197211][T21882] do_syscall_64+0x4c/0xa0 [ 1109.201678][T21882] ? clear_bhb_loop+0x60/0xb0 [ 1109.206397][T21882] ? clear_bhb_loop+0x60/0xb0 [ 1109.211114][T21882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1109.217155][T21882] RIP: 0033:0x7f9dc619ce59 [ 1109.221616][T21882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.241284][T21882] RSP: 002b:00007f9dc7006028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1109.249862][T21882] RAX: ffffffffffffffda RBX: 00007f9dc6415fa0 RCX: 00007f9dc619ce59 [ 1109.257881][T21882] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 1109.265919][T21882] RBP: 00007f9dc7006090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.274020][T21882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1109.282049][T21882] R13: 00007f9dc6416038 R14: 00007f9dc6415fa0 R15: 00007fff84925a78 [ 1109.290191][T21882] [ 1109.501722][T21891] netlink: 'syz.0.5494': attribute type 21 has an invalid length. [ 1109.525263][T21891] IPv6: Can't replace route, no match found [ 1109.604759][T21891] netlink: 'syz.0.5494': attribute type 1 has an invalid length. [ 1109.627938][T21891] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.5494'. [ 1109.652365][T21899] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5494'. [ 1109.859308][T21909] sctp: [Deprecated]: syz.0.5499 (pid 21909) Use of int in max_burst socket option deprecated. [ 1109.859308][T21909] Use struct sctp_assoc_value instead [ 1110.030901][T21901] device syzkaller0 entered promiscuous mode [ 1110.038737][T21911] FAULT_INJECTION: forcing a failure. [ 1110.038737][T21911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1110.052630][T21911] CPU: 1 PID: 21911 Comm: syz.2.5500 Not tainted syzkaller #0 [ 1110.060163][T21911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1110.070277][T21911] Call Trace: [ 1110.073601][T21911] [ 1110.076577][T21911] dump_stack_lvl+0x188/0x24e [ 1110.081323][T21911] ? show_regs_print_info+0x12/0x12 [ 1110.086590][T21911] ? load_image+0x400/0x400 [ 1110.091159][T21911] ? __lock_acquire+0x7d10/0x7d10 [ 1110.096256][T21911] ? snprintf+0xe5/0x140 [ 1110.100559][T21911] should_fail_ex+0x399/0x4d0 [ 1110.105294][T21911] _copy_to_user+0x2c/0x130 [ 1110.109854][T21911] simple_read_from_buffer+0xe3/0x150 [ 1110.115281][T21911] proc_fail_nth_read+0x1a6/0x220 [ 1110.120363][T21911] ? proc_fault_inject_write+0x310/0x310 [ 1110.126152][T21911] ? fsnotify_perm+0x248/0x550 [ 1110.130968][T21911] ? proc_fault_inject_write+0x310/0x310 [ 1110.136827][T21911] vfs_read+0x2de/0xa00 [ 1110.141066][T21911] ? kernel_read+0x1e0/0x1e0 [ 1110.145719][T21911] ? __fget_files+0x28/0x4b0 [ 1110.150366][T21911] ? __fget_files+0x28/0x4b0 [ 1110.155015][T21911] ? __fget_files+0x43d/0x4b0 [ 1110.159782][T21911] ? __fdget_pos+0x2ae/0x360 [ 1110.164440][T21911] ? ksys_read+0x71/0x250 [ 1110.168826][T21911] ksys_read+0x14c/0x250 [ 1110.173131][T21911] ? vfs_write+0xa30/0xa30 [ 1110.177615][T21911] ? lockdep_hardirqs_on+0x94/0x140 [ 1110.182858][T21911] do_syscall_64+0x4c/0xa0 [ 1110.187351][T21911] ? clear_bhb_loop+0x60/0xb0 [ 1110.192081][T21911] ? clear_bhb_loop+0x60/0xb0 [ 1110.196830][T21911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1110.202772][T21911] RIP: 0033:0x7f9169d5d68e [ 1110.207233][T21911] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1110.226894][T21911] RSP: 002b:00007f916ac9afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1110.235366][T21911] RAX: ffffffffffffffda RBX: 00007f916ac9b6c0 RCX: 00007f9169d5d68e [ 1110.243477][T21911] RDX: 000000000000000f RSI: 00007f916ac9b0a0 RDI: 0000000000000004 [ 1110.251493][T21911] RBP: 00007f916ac9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.259527][T21911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1110.267558][T21911] R13: 00007f916a016038 R14: 00007f916a015fa0 R15: 00007ffc62405178 [ 1110.275690][T21911] [ 1113.219929][T21940] netlink: 'syz.1.5509': attribute type 1 has an invalid length. [ 1113.250108][T21940] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.5509'. [ 1114.983368][T21937] netlink: 'syz.1.5509': attribute type 21 has an invalid length. [ 1115.001864][T21937] IPv6: Can't replace route, no match found [ 1115.013654][T21940] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5509'. [ 1115.501335][T21960] netlink: 'syz.2.5515': attribute type 27 has an invalid length. [ 1115.525575][T21960] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5515'. [ 1115.907351][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.913941][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.478482][T21982] FAULT_INJECTION: forcing a failure. [ 1116.478482][T21982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1116.553729][T21982] CPU: 0 PID: 21982 Comm: syz.1.5522 Not tainted syzkaller #0 [ 1116.561291][T21982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1116.571393][T21982] Call Trace: [ 1116.574723][T21982] [ 1116.577698][T21982] dump_stack_lvl+0x188/0x24e [ 1116.582452][T21982] ? show_regs_print_info+0x12/0x12 [ 1116.587720][T21982] ? load_image+0x400/0x400 [ 1116.592284][T21982] ? __lock_acquire+0x7d10/0x7d10 [ 1116.597376][T21982] ? snprintf+0xe5/0x140 [ 1116.601674][T21982] should_fail_ex+0x399/0x4d0 [ 1116.606403][T21982] _copy_to_user+0x2c/0x130 [ 1116.610969][T21982] simple_read_from_buffer+0xe3/0x150 [ 1116.616394][T21982] proc_fail_nth_read+0x1a6/0x220 [ 1116.621480][T21982] ? proc_fault_inject_write+0x310/0x310 [ 1116.627175][T21982] ? fsnotify_perm+0x248/0x550 [ 1116.631996][T21982] ? proc_fault_inject_write+0x310/0x310 [ 1116.637696][T21982] vfs_read+0x2de/0xa00 [ 1116.641919][T21982] ? kernel_read+0x1e0/0x1e0 [ 1116.646582][T21982] ? __fget_files+0x28/0x4b0 [ 1116.651232][T21982] ? __fget_files+0x28/0x4b0 [ 1116.655887][T21982] ? __fget_files+0x43d/0x4b0 [ 1116.660633][T21982] ? __fdget_pos+0x2ae/0x360 [ 1116.665281][T21982] ? ksys_read+0x71/0x250 [ 1116.669668][T21982] ksys_read+0x14c/0x250 [ 1116.673978][T21982] ? vfs_write+0xa30/0xa30 [ 1116.678456][T21982] ? lockdep_hardirqs_on+0x94/0x140 [ 1116.683713][T21982] do_syscall_64+0x4c/0xa0 [ 1116.688189][T21982] ? clear_bhb_loop+0x60/0xb0 [ 1116.692924][T21982] ? clear_bhb_loop+0x60/0xb0 [ 1116.697654][T21982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1116.703583][T21982] RIP: 0033:0x7fe4fdf5d68e [ 1116.708044][T21982] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1116.727679][T21982] RSP: 002b:00007fe4fede4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1116.736123][T21982] RAX: ffffffffffffffda RBX: 00007fe4fede56c0 RCX: 00007fe4fdf5d68e [ 1116.744136][T21982] RDX: 000000000000000f RSI: 00007fe4fede50a0 RDI: 0000000000000004 [ 1116.752158][T21982] RBP: 00007fe4fede5090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.760168][T21982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.768252][T21982] R13: 00007fe4fe216038 R14: 00007fe4fe215fa0 R15: 00007fff7fe77b08 [ 1116.776263][T21982] [ 1116.854719][T21986] netlink: 'syz.3.5523': attribute type 21 has an invalid length. [ 1116.874833][T21986] IPv6: Can't replace route, no match found [ 1116.932367][T21986] netlink: 'syz.3.5523': attribute type 1 has an invalid length. [ 1116.956474][T21986] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.5523'. [ 1116.996464][T21991] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5523'. [ 1117.465167][T21984] device syzkaller0 entered promiscuous mode [ 1119.681734][T22021] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5532'. [ 1121.620210][T22019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5534'. [ 1121.833854][T22026] netlink: 'syz.1.5540': attribute type 21 has an invalid length. [ 1121.848108][T22026] IPv6: Can't replace route, no match found [ 1121.878644][T22026] netlink: 'syz.1.5540': attribute type 1 has an invalid length. [ 1121.897166][T22026] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.5540'. [ 1121.912619][T22036] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5539'. [ 1122.007622][T22026] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5540'. [ 1123.362872][T22062] netlink: 'syz.2.5548': attribute type 10 has an invalid length. [ 1123.462809][T22062] bond0: (slave bond_slave_0): Releasing backup interface [ 1123.679126][T22069] netlink: 'syz.4.5549': attribute type 25 has an invalid length. [ 1123.819531][T22072] device syzkaller0 entered promiscuous mode [ 1124.280686][T22088] netlink: 'syz.3.5554': attribute type 1 has an invalid length. [ 1124.299285][T22088] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.5554'. [ 1126.271576][T22083] netlink: 'syz.3.5554': attribute type 21 has an invalid length. [ 1126.279597][T22083] IPv6: Can't replace route, no match found [ 1126.285958][T22088] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5554'. [ 1126.375996][T22096] FAULT_INJECTION: forcing a failure. [ 1126.375996][T22096] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.398593][T22096] CPU: 0 PID: 22096 Comm: syz.2.5557 Not tainted syzkaller #0 [ 1126.406250][T22096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1126.416355][T22096] Call Trace: [ 1126.419689][T22096] [ 1126.422657][T22096] dump_stack_lvl+0x188/0x24e [ 1126.427396][T22096] ? sctp_sendmsg+0x15b0/0x2940 [ 1126.432298][T22096] ? ___sys_sendmsg+0x2a2/0x360 [ 1126.437197][T22096] ? show_regs_print_info+0x12/0x12 [ 1126.442455][T22096] ? load_image+0x400/0x400 [ 1126.447018][T22096] should_fail_ex+0x399/0x4d0 [ 1126.451743][T22096] should_failslab+0x5/0x20 [ 1126.456289][T22096] slab_pre_alloc_hook+0x59/0x310 [ 1126.461359][T22096] ? sctp_add_bind_addr+0x89/0x350 [ 1126.466553][T22096] __kmem_cache_alloc_node+0x4f/0x260 [ 1126.471987][T22096] ? sctp_add_bind_addr+0x89/0x350 [ 1126.477247][T22096] kmalloc_trace+0x26/0xe0 [ 1126.481743][T22096] sctp_add_bind_addr+0x89/0x350 [ 1126.486766][T22096] sctp_copy_local_addr_list+0x311/0x4e0 [ 1126.492559][T22096] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 1126.498350][T22096] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1126.504491][T22096] ? sctp_v4_is_any+0x31/0x50 [ 1126.509256][T22096] ? sctp_copy_one_addr+0x93/0x660 [ 1126.514440][T22096] sctp_bind_addr_copy+0xaf/0x3c0 [ 1126.519539][T22096] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1126.525935][T22096] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1126.531278][T22096] ? __sctp_connect+0xd80/0xd80 [ 1126.536184][T22096] ? __local_bh_enable_ip+0x136/0x1c0 [ 1126.541696][T22096] ? _local_bh_enable+0xa0/0xa0 [ 1126.546615][T22096] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1126.552476][T22096] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1126.558339][T22096] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1126.563953][T22096] ? security_sctp_bind_connect+0x85/0xb0 [ 1126.569725][T22096] sctp_sendmsg+0x15b0/0x2940 [ 1126.574578][T22096] ? aa_sk_perm+0x771/0x950 [ 1126.579148][T22096] ? sctp_getsockopt+0x8a0/0x8a0 [ 1126.584157][T22096] ? __might_fault+0xa6/0x120 [ 1126.588885][T22096] ? aa_af_perm+0x340/0x340 [ 1126.593448][T22096] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1126.599943][T22096] ? inet_sendmsg+0x78/0x2f0 [ 1126.604590][T22096] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1126.609935][T22096] ? security_socket_sendmsg+0x7c/0xa0 [ 1126.615461][T22096] ? inet_send_prepare+0x260/0x260 [ 1126.620616][T22096] ____sys_sendmsg+0x5be/0x970 [ 1126.625452][T22096] ? __sys_sendmsg_sock+0x30/0x30 [ 1126.630539][T22096] ? __import_iovec+0x315/0x500 [ 1126.635484][T22096] ? import_iovec+0x6f/0xa0 [ 1126.640051][T22096] ___sys_sendmsg+0x2a2/0x360 [ 1126.644799][T22096] ? __sys_sendmsg+0x290/0x290 [ 1126.649644][T22096] ? __lock_acquire+0x7d10/0x7d10 [ 1126.654750][T22096] __se_sys_sendmsg+0x1bb/0x2a0 [ 1126.659687][T22096] ? __x64_sys_sendmsg+0x80/0x80 [ 1126.664707][T22096] ? lockdep_hardirqs_on+0x94/0x140 [ 1126.669963][T22096] do_syscall_64+0x4c/0xa0 [ 1126.674456][T22096] ? clear_bhb_loop+0x60/0xb0 [ 1126.679194][T22096] ? clear_bhb_loop+0x60/0xb0 [ 1126.683939][T22096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1126.689899][T22096] RIP: 0033:0x7f9169d9ce59 [ 1126.694369][T22096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1126.714035][T22096] RSP: 002b:00007f916ac9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1126.722507][T22096] RAX: ffffffffffffffda RBX: 00007f916a015fa0 RCX: 00007f9169d9ce59 [ 1126.730534][T22096] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1126.738568][T22096] RBP: 00007f916ac9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1126.746678][T22096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1126.754707][T22096] R13: 00007f916a016038 R14: 00007f916a015fa0 R15: 00007ffc62405178 [ 1126.762765][T22096] [ 1128.389350][T22132] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5566'. [ 1128.754037][T22139] netlink: 'syz.1.5568': attribute type 21 has an invalid length. [ 1128.762414][T22139] IPv6: Can't replace route, no match found [ 1128.838070][T22139] netlink: 'syz.1.5568': attribute type 1 has an invalid length. [ 1128.865198][T22139] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.5568'. [ 1128.892869][T22145] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5568'. [ 1129.072991][T22143] device syzkaller0 entered promiscuous mode [ 1132.986721][T22184] netlink: 'syz.4.5580': attribute type 28 has an invalid length. [ 1133.882436][T22206] device syzkaller0 entered promiscuous mode [ 1136.689494][T22232] netlink: 'syz.0.5593': attribute type 10 has an invalid length. [ 1136.701070][T22232] bond0: (slave bond_slave_0): Releasing backup interface [ 1138.968490][T22287] device syzkaller0 entered promiscuous mode [ 1139.178907][T22290] bridge0: port 3(syz_tun) entered disabled state [ 1139.186745][T22290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.194919][T22290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.287289][T22301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5612'. [ 1141.473530][T22307] netlink: 'syz.0.5613': attribute type 29 has an invalid length. [ 1141.563564][T22307] netlink: 'syz.0.5613': attribute type 29 has an invalid length. [ 1141.572683][T22312] netlink: 'syz.0.5613': attribute type 29 has an invalid length. [ 1142.233958][T22316] device syzkaller0 entered promiscuous mode [ 1142.583637][T22345] netlink: 'syz.4.5623': attribute type 29 has an invalid length. [ 1145.074157][T22345] netlink: 'syz.4.5623': attribute type 29 has an invalid length. [ 1146.241081][T22392] sctp: [Deprecated]: syz.2.5638 (pid 22392) Use of int in max_burst socket option deprecated. [ 1146.241081][T22392] Use struct sctp_assoc_value instead [ 1146.631650][T22396] device syzkaller0 entered promiscuous mode [ 1154.015833][T22499] device syzkaller0 entered promiscuous mode [ 1156.969561][T22520] netlink: 'syz.4.5677': attribute type 22 has an invalid length. [ 1156.977805][T22520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5677'. [ 1156.987931][T22540] netlink: 'syz.2.5685': attribute type 22 has an invalid length. [ 1156.997182][T22540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5685'. [ 1158.887067][T22604] netlink: 'syz.3.5705': attribute type 22 has an invalid length. [ 1158.902688][T22604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5705'. [ 1158.955340][T22589] device syzkaller0 entered promiscuous mode [ 1162.627344][T22653] bridge0: port 3(syz_tun) entered disabled state [ 1162.635747][T22653] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.877602][T22662] netlink: 'syz.0.5726': attribute type 27 has an invalid length. [ 1162.885766][T22662] netlink: 'syz.0.5726': attribute type 4 has an invalid length. [ 1162.898495][T22662] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5726'. [ 1164.729412][T22701] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.5741'. [ 1164.770637][T22701] netlink: 'syz.4.5741': attribute type 1 has an invalid length. [ 1164.798577][T22701] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.5741'. [ 1167.575657][T22758] sctp: [Deprecated]: syz.3.5758 (pid 22758) Use of int in max_burst socket option deprecated. [ 1167.575657][T22758] Use struct sctp_assoc_value instead [ 1169.598558][T22795] netlink: 'syz.1.5767': attribute type 10 has an invalid length. [ 1170.558924][T22811] sctp: [Deprecated]: syz.2.5771 (pid 22811) Use of int in max_burst socket option deprecated. [ 1170.558924][T22811] Use struct sctp_assoc_value instead [ 1170.844441][T22819] sctp: [Deprecated]: syz.0.5785 (pid 22819) Use of int in max_burst socket option deprecated. [ 1170.844441][T22819] Use struct sctp_assoc_value instead [ 1173.589873][T22871] sctp: [Deprecated]: syz.1.5790 (pid 22871) Use of int in max_burst socket option deprecated. [ 1173.589873][T22871] Use struct sctp_assoc_value instead [ 1174.174349][T22884] netlink: 'syz.3.5795': attribute type 21 has an invalid length. [ 1174.189584][T22884] IPv6: Can't replace route, no match found [ 1174.245339][T22884] netlink: 'syz.3.5795': attribute type 1 has an invalid length. [ 1174.256981][T22884] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.5795'. [ 1174.688046][T22884] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5795'. [ 1175.279429][T22906] sctp: [Deprecated]: syz.3.5802 (pid 22906) Use of int in max_burst socket option deprecated. [ 1175.279429][T22906] Use struct sctp_assoc_value instead [ 1176.200807][T22927] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.5806'. [ 1176.252496][T22927] netlink: 'syz.3.5806': attribute type 1 has an invalid length. [ 1176.265615][T22927] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.5806'. [ 1176.706380][T22934] netlink: 'syz.0.5809': attribute type 21 has an invalid length. [ 1176.760470][T22939] netlink: 'syz.0.5809': attribute type 1 has an invalid length. [ 1176.836052][T22939] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.5809'. [ 1176.929234][T22934] IPv6: Can't replace route, no match found [ 1177.362917][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.370762][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.434122][T22934] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5809'. [ 1177.650589][T22956] sctp: [Deprecated]: syz.2.5814 (pid 22956) Use of int in max_burst socket option deprecated. [ 1177.650589][T22956] Use struct sctp_assoc_value instead [ 1178.857387][T22976] -1: renamed from syzkaller0 [ 1179.348420][T22987] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.5822'. [ 1179.381312][T22987] netlink: 'syz.0.5822': attribute type 1 has an invalid length. [ 1179.399457][T22987] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.5822'. [ 1179.985907][T22993] netlink: 'syz.0.5825': attribute type 21 has an invalid length. [ 1180.010033][T22993] IPv6: Can't replace route, no match found [ 1180.046192][T22993] netlink: 'syz.0.5825': attribute type 1 has an invalid length. [ 1180.059418][T22993] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.5825'. [ 1180.181819][T22993] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5825'. [ 1180.235672][T22999] sctp: [Deprecated]: syz.3.5827 (pid 22999) Use of int in max_burst socket option deprecated. [ 1180.235672][T22999] Use struct sctp_assoc_value instead [ 1180.989943][T23028] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5838'. [ 1181.040499][T23028] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1181.092437][T23028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1181.197201][T23036] netlink: 'syz.2.5840': attribute type 21 has an invalid length. [ 1181.223982][T23036] IPv6: Can't replace route, no match found [ 1181.301211][T23036] netlink: 'syz.2.5840': attribute type 1 has an invalid length. [ 1181.310598][T23036] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.5840'. [ 1181.338175][T23036] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5840'. [ 1181.648126][T23047] sctp: [Deprecated]: syz.3.5844 (pid 23047) Use of int in max_burst socket option deprecated. [ 1181.648126][T23047] Use struct sctp_assoc_value instead [ 1181.805760][T23049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.815335][T23049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.056973][T23056] FAULT_INJECTION: forcing a failure. [ 1182.056973][T23056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1182.103571][T23056] CPU: 0 PID: 23056 Comm: syz.3.5846 Not tainted syzkaller #0 [ 1182.111116][T23056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1182.121326][T23056] Call Trace: [ 1182.124644][T23056] [ 1182.127617][T23056] dump_stack_lvl+0x188/0x24e [ 1182.132361][T23056] ? show_regs_print_info+0x12/0x12 [ 1182.137616][T23056] ? load_image+0x400/0x400 [ 1182.142179][T23056] ? __lock_acquire+0x7d10/0x7d10 [ 1182.147267][T23056] should_fail_ex+0x399/0x4d0 [ 1182.151990][T23056] _copy_from_user+0x2c/0x170 [ 1182.156715][T23056] iovec_from_user+0x143/0x360 [ 1182.161534][T23056] __import_iovec+0x6d/0x500 [ 1182.166180][T23056] ? __might_fault+0xa6/0x120 [ 1182.170917][T23056] import_iovec+0x6f/0xa0 [ 1182.175297][T23056] ___sys_recvmsg+0x4b6/0x590 [ 1182.180035][T23056] ? __sys_recvmsg+0x290/0x290 [ 1182.184866][T23056] ? common_file_perm+0x171/0x1c0 [ 1182.189943][T23056] ? __fget_files+0x43d/0x4b0 [ 1182.194667][T23056] __x64_sys_recvmsg+0x205/0x2e0 [ 1182.199642][T23056] ? ___sys_recvmsg+0x590/0x590 [ 1182.204547][T23056] ? lockdep_hardirqs_on+0x94/0x140 [ 1182.209791][T23056] do_syscall_64+0x4c/0xa0 [ 1182.214275][T23056] ? clear_bhb_loop+0x60/0xb0 [ 1182.219078][T23056] ? clear_bhb_loop+0x60/0xb0 [ 1182.223800][T23056] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1182.229742][T23056] RIP: 0033:0x7f43d959ce59 [ 1182.234186][T23056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1182.253814][T23056] RSP: 002b:00007f43da528028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1182.262272][T23056] RAX: ffffffffffffffda RBX: 00007f43d9815fa0 RCX: 00007f43d959ce59 [ 1182.270262][T23056] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 1182.278260][T23056] RBP: 00007f43da528090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.286258][T23056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.294258][T23056] R13: 00007f43d9816038 R14: 00007f43d9815fa0 R15: 00007fff3d219e28 [ 1182.302361][T23056] [ 1182.972280][T23081] sctp: [Deprecated]: syz.2.5856 (pid 23081) Use of int in max_burst socket option deprecated. [ 1182.972280][T23081] Use struct sctp_assoc_value instead [ 1183.245609][T23088] FAULT_INJECTION: forcing a failure. [ 1183.245609][T23088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1183.280823][T23088] CPU: 1 PID: 23088 Comm: syz.4.5858 Not tainted syzkaller #0 [ 1183.288378][T23088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1183.298559][T23088] Call Trace: [ 1183.301873][T23088] [ 1183.304826][T23088] dump_stack_lvl+0x188/0x24e [ 1183.309549][T23088] ? show_regs_print_info+0x12/0x12 [ 1183.314788][T23088] ? load_image+0x400/0x400 [ 1183.319327][T23088] ? __lock_acquire+0x7d10/0x7d10 [ 1183.324391][T23088] should_fail_ex+0x399/0x4d0 [ 1183.329106][T23088] strncpy_from_user+0x32/0x350 [ 1183.334006][T23088] bpf_prog_load+0x1f3/0x1560 [ 1183.338741][T23088] ? map_freeze+0x390/0x390 [ 1183.343277][T23088] ? __might_fault+0xa6/0x120 [ 1183.347990][T23088] ? __might_fault+0xa6/0x120 [ 1183.352757][T23088] ? __might_fault+0xc2/0x120 [ 1183.357457][T23088] ? __might_fault+0xa6/0x120 [ 1183.362156][T23088] ? bpf_lsm_bpf+0x5/0x10 [ 1183.366507][T23088] ? security_bpf+0x7a/0xa0 [ 1183.371044][T23088] __sys_bpf+0x5b8/0x780 [ 1183.375318][T23088] ? bpf_link_show_fdinfo+0x380/0x380 [ 1183.380735][T23088] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1183.386947][T23088] __x64_sys_bpf+0x78/0x90 [ 1183.391399][T23088] do_syscall_64+0x4c/0xa0 [ 1183.395854][T23088] ? clear_bhb_loop+0x60/0xb0 [ 1183.400561][T23088] ? clear_bhb_loop+0x60/0xb0 [ 1183.405269][T23088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1183.411198][T23088] RIP: 0033:0x7f9dc619ce59 [ 1183.415649][T23088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1183.435285][T23088] RSP: 002b:00007f9dc7006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1183.443733][T23088] RAX: ffffffffffffffda RBX: 00007f9dc6415fa0 RCX: 00007f9dc619ce59 [ 1183.451728][T23088] RDX: 0000000000000094 RSI: 0000200000002c80 RDI: 0000000000000005 [ 1183.459808][T23088] RBP: 00007f9dc7006090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.467812][T23088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.475908][T23088] R13: 00007f9dc6416038 R14: 00007f9dc6415fa0 R15: 00007fff84925a78 [ 1183.484020][T23088] [ 1183.609137][T23090] netlink: 'syz.2.5859': attribute type 10 has an invalid length. [ 1183.622499][T23090] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5859'. [ 1183.639724][T23090] device macvlan1 entered promiscuous mode [ 1183.668496][T23090] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1183.707318][T23090] batman_adv: batadv0: Adding interface: macvlan1 [ 1183.727800][T23090] batman_adv: batadv0: The MTU of interface macvlan1 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1183.863648][T23090] batman_adv: batadv0: Interface activated: macvlan1 [ 1183.894388][T23090] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1184.724949][T23113] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5863'. [ 1184.804504][T23113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5863'. [ 1184.927280][T23118] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5868'. [ 1184.970171][T23118] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5868'. [ 1185.011599][T23119] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5868'. [ 1185.218486][T23123] sctp: [Deprecated]: syz.4.5869 (pid 23123) Use of int in max_burst socket option deprecated. [ 1185.218486][T23123] Use struct sctp_assoc_value instead [ 1187.768860][T23132] ÿÿÿÿÿÿ: renamed from vlan1 [ 1187.787463][T23127] netlink: 'syz.0.5871': attribute type 27 has an invalid length. [ 1187.823379][T23127] netlink: 'syz.0.5871': attribute type 4 has an invalid length. [ 1187.831397][T23127] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5871'. [ 1188.820134][T23148] netlink: 'syz.4.5880': attribute type 21 has an invalid length. [ 1188.880946][T23148] IPv6: Can't replace route, no match found [ 1188.964577][T23156] netlink: 'syz.4.5880': attribute type 1 has an invalid length. [ 1189.053979][T23156] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.5880'. [ 1189.158127][T23161] sctp: [Deprecated]: syz.2.5883 (pid 23161) Use of int in max_burst socket option deprecated. [ 1189.158127][T23161] Use struct sctp_assoc_value instead [ 1189.174905][T23148] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5880'. [ 1190.120278][T23180] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.5888'. [ 1190.891752][T23196] netlink: 'syz.4.5894': attribute type 21 has an invalid length. [ 1190.916662][T23196] IPv6: Can't replace route, no match found [ 1190.986420][T23196] netlink: 'syz.4.5894': attribute type 1 has an invalid length. [ 1190.995285][T23196] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.5894'. [ 1191.009831][T23200] sctp: [Deprecated]: syz.3.5895 (pid 23200) Use of int in max_burst socket option deprecated. [ 1191.009831][T23200] Use struct sctp_assoc_value instead [ 1191.044521][T23196] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5894'. [ 1191.247163][T23203] netlink: 'syz.2.5896': attribute type 21 has an invalid length. [ 1191.257589][T23203] IPv6: Can't replace route, no match found [ 1191.335878][T23203] netlink: 'syz.2.5896': attribute type 1 has an invalid length. [ 1191.361967][T23203] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.5896'. [ 1191.468900][T23203] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5896'. [ 1193.441649][T23246] sctp: [Deprecated]: syz.0.5909 (pid 23246) Use of int in max_burst socket option deprecated. [ 1193.441649][T23246] Use struct sctp_assoc_value instead [ 1194.672534][T23270] netlink: 'syz.3.5916': attribute type 21 has an invalid length. [ 1194.685829][T23270] IPv6: Can't replace route, no match found [ 1194.753014][T23270] netlink: 'syz.3.5916': attribute type 1 has an invalid length. [ 1194.785175][T23270] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.5916'. [ 1194.819269][T23275] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5916'. [ 1195.762935][T23290] sctp: [Deprecated]: syz.1.5921 (pid 23290) Use of int in max_burst socket option deprecated. [ 1195.762935][T23290] Use struct sctp_assoc_value instead [ 1196.144246][T23294] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.5922'. [ 1197.610586][T23321] netlink: 'syz.1.5930': attribute type 21 has an invalid length. [ 1197.629904][T23321] IPv6: Can't replace route, no match found [ 1197.699040][T23323] netlink: 'syz.1.5930': attribute type 1 has an invalid length. [ 1197.717306][T23323] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.5930'. [ 1197.743330][T23323] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5930'. [ 1198.425216][T23335] sctp: [Deprecated]: syz.1.5933 (pid 23335) Use of int in max_burst socket option deprecated. [ 1198.425216][T23335] Use struct sctp_assoc_value instead Stopping sshd: stopped /usr/sbin/sshd (pid 4026) OK Stopping crond: stopped /usr/sbin/crond (pid 4011) OK [ 1200.421613][T23373] netlink: 'syz.2.5943': attribute type 21 has an invalid length. [ 1200.454090][T23373] IPv6: Can't replace route, no match found [ 1200.495132][T23373] netlink: 'syz.2.5943': attribute type 1 has an invalid length. [ 1200.533562][T23373] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.5943'. Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3931) [ 1201.636405][T23390] sctp: [Deprecated]: syz.0.5946 (pid 23390) Use of int in max_burst socket option deprecated. [ 1201.636405][T23390] Use struct sctp_assoc_value instead Stopping network: [ 1202.182330][T23378] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5943'. OK [ 1204.374635][T23440] FAULT_INJECTION: forcing a failure. [ 1204.374635][T23440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1204.413321][T23440] CPU: 0 PID: 23440 Comm: syz.4.5957 Not tainted syzkaller #0 [ 1204.420973][T23440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1204.431159][T23440] Call Trace: [ 1204.434461][T23440] [ 1204.437414][T23440] dump_stack_lvl+0x188/0x24e [ 1204.442136][T23440] ? show_regs_print_info+0x12/0x12 [ 1204.447400][T23440] ? load_image+0x400/0x400 [ 1204.451962][T23440] ? __lock_acquire+0x7d10/0x7d10 [ 1204.457025][T23440] should_fail_ex+0x399/0x4d0 [ 1204.461724][T23440] _copy_to_user+0x2c/0x130 [ 1204.466250][T23440] generic_map_delete_batch+0x5cc/0x6f0 [ 1204.471833][T23440] ? bpf_map_inc_not_zero+0x100/0x100 [ 1204.477261][T23440] ? __fdget+0x17c/0x200 [ 1204.481567][T23440] ? bpf_map_inc_not_zero+0x100/0x100 [ 1204.486972][T23440] bpf_map_do_batch+0x466/0x600 [ 1204.491863][T23440] __sys_bpf+0x6f7/0x780 [ 1204.496153][T23440] ? bpf_link_show_fdinfo+0x380/0x380 [ 1204.501569][T23440] ? lock_chain_count+0x20/0x20 [ 1204.506458][T23440] __x64_sys_bpf+0x78/0x90 [ 1204.510915][T23440] do_syscall_64+0x4c/0xa0 [ 1204.515364][T23440] ? clear_bhb_loop+0x60/0xb0 [ 1204.520065][T23440] ? clear_bhb_loop+0x60/0xb0 [ 1204.524770][T23440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1204.530727][T23440] RIP: 0033:0x7f9dc619ce59 [ 1204.535175][T23440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1204.554813][T23440] RSP: 002b:00007f9dc7006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1204.563263][T23440] RAX: ffffffffffffffda RBX: 00007f9dc6415fa0 RCX: 00007f9dc619ce59 [ 1204.571272][T23440] RDX: 0000000000000038 RSI: 0000200000001340 RDI: 000000000000001b [ 1204.579354][T23440] RBP: 00007f9dc7006090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.587374][T23440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1204.595378][T23440] R13: 00007f9dc6416038 R14: 00007f9dc6415fa0 R15: 00007fff84925a78 [ 1204.603384][T23440] Stopping iptables: OK [ 1205.007442][T23448] netlink: 'syz.0.5958': attribute type 21 has an invalid length. [ 1205.036439][T23448] IPv6: Can't replace route, no match found Stopping system message bus: [ 1205.097856][T23452] netlink: 'syz.0.5958': attribute type 1 has an invalid length. [ 1205.208681][T23452] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.5958'. [ 1205.324311][T23455] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5958'. [ 1205.712935][T23464] sctp: [Deprecated]: syz.2.5961 (pid 23464) Use of int in max_burst socket option deprecated. [ 1205.712935][T23464] Use struct sctp_assoc_value instead done [ 1208.087493][T23517] netlink: 'syz.4.5972': attribute type 1 has an invalid length. [ 1208.121762][T23517] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.5972'. [ 1208.867960][T23516] netlink: 'syz.4.5972': attribute type 21 has an invalid length. [ 1208.924123][T23516] IPv6: Can't replace route, no match found [ 1209.046537][T23517] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5972'. [ 1209.806930][T13423] device syz_tun left promiscuous mode [ 1209.817229][T13423] bridge0: port 3(syz_tun) entered disabled state [ 1209.889190][T23532] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1209.899237][T23532] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1209.907863][T23532] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1209.921436][T23532] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1209.930104][T23532] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1209.937884][T23532] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 Stopping klogd: OK Stopping acpid: [ 1210.745690][T23531] chnl_net:caif_netlink_parms(): no params data found [ 1211.057196][T23531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.083392][T23531] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.122563][T23531] device bridge_slave_0 entered promiscuous mode [ 1211.179496][T23531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.218761][T23531] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.259423][T23531] device bridge_slave_1 entered promiscuous mode [ 1211.345123][T23531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.366367][T23531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.409657][T23531] team0: Port device team_slave_0 added [ 1211.440835][T23531] team0: Port device team_slave_1 added [ 1211.484769][T23531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.502107][T23531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.543031][T23531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.562557][T23531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.570543][T23531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.604101][T23531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1211.711079][T23531] device hsr_slave_0 entered promiscuous mode [ 1211.721738][T23531] device hsr_slave_1 entered promiscuous mode [ 1211.869608][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.994225][T23532] Bluetooth: hci0: command 0x0409 tx timeout [ 1212.004743][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.278929][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.293669][T23570] netlink: 'syz.0.5985': attribute type 1 has an invalid length. [ 1212.342374][T23570] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.5985'. [ 1212.362298][T23567] netlink: 'syz.0.5985': attribute type 21 has an invalid length. OK [ 1212.411653][T23567] IPv6: Can't replace route, no match found [ 1212.500158][T23570] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5985'. Stopping syslogd: stopped /sbin/syslogd (pid 3619) OK [ 1214.042176][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.067189][T23532] Bluetooth: hci0: command 0x041b tx timeout umount: can't remount debugfs read-only [ 1214.530615][T23584] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5990'. [ 1214.558786][T23586] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5990'. [ 1215.694668][T23531] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1215.722677][T23531] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1215.798882][T23531] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1215.839110][T23531] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1216.159241][T23532] Bluetooth: hci0: command 0x040f tx timeout [ 1216.619046][ T46] device hsr_slave_0 left promiscuous mode umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 1216.858388][ T46] device hsr_slave_1 left promiscuous mode Connection to 10.128.1.190 closed by remote host. [ 1216.902409][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.963863][ T46] device bridge_slave_0 left promiscuous mode [ 1216.979505][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.106137][ T46] device veth1_macvtap left promiscuous mode [ 1217.112300][ T46] device veth1_vlan left promiscuous mode [ 1217.133467][ T46] device veth0_vlan left promiscuous mode [ 1217.379178][ T46] team0 (unregistering): Port device geneve1 removed [ 1217.420661][ T46] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1217.739917][ T46] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1217.778726][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1217.817285][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1217.856928][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1217.895448][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface Sent SIGKILL to all processes Requesting system poweroff [ 1218.131807][ T46] bond0 (unregistering): (slave team0): Releasing backup interface [ 1218.166296][ T46] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1218.175662][ T46] bond0 (unregistering): Released all slaves [ 1218.223503][T23532] Bluetooth: hci0: command 0x0419 tx timeout [ 1218.356579][T14682] device syz_tun left promiscuous mode [ 1218.362193][T14682] bridge0: port 3(syz_tun) entered disabled state [ 1219.077899][T23610] kvm: exiting hardware virtualization [ 1219.111410][T23610] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1219.127261][T23610] ACPI: PM: Preparing to enter system sleep state S5 [ 1219.136541][T23610] reboot: Power down serialport: VM disconnected.