last executing test programs: 4.172261571s ago: executing program 0 (id=1975): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x28, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, 0x50) 3.689046431s ago: executing program 0 (id=1977): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1a0000004e792ab7ec107de9cc0000000000000000000e800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000007000000070000000090000000f0000000000001104000000030000000000000004000005090000000700000000000000070000000d000000030000a18c89c7d7643518000900000009000000000000000400000004000000d07900000080000c000000000000000300000000010000000100001bae727c000e0000000000000900000000002e0030303043f34a68028bf1c1bc6994472c8caff5afd9369b1a63f9a32d14e41f24cf20a045d810f4b0176fe566cea2e15fa533e96c61c4e13fe2744e054e8978bec9f3ee4ac9d6ac7a96afc81cb678953be555cd6d5aa8773fee471e4ccf8a8e68000000000000000000000000275788ed696b4af90ae181ce2bd9a55bbc53ee9c7b24cb42a9f490cd70cbe1f40288b14ccea91621f82922abcc8848fedf4651c18617f5d8d708a167088f305d5f8ab607c4e147696ab4d5032b71b3ba3a963690cbc4e59d0c8fe1a05a6fee"], &(0x7f0000000780)=""/173, 0x91, 0xad, 0x0, 0x4000006, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1]}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x80100104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, 0x50) close(r0) socket$kcm(0x11, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.951945235s ago: executing program 0 (id=1985): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$unix(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x17, &(0x7f0000000000)=r3, 0x10) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000060000000000000085000000c400000095090000000000006bea54c53b93df121ba1"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x10, &(0x7f00000001c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/53, 0x35}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x0, &(0x7f0000000080)="fcffffff00000000899094fb9db1", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.897162395s ago: executing program 3 (id=1986): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000001ec0)=""/159, 0x9a, 0x9f, 0x0, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x800, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x15, 0x1, &(0x7f0000003140)=ANY=[@ANYBLOB="88000000c10000007ea5da55998674799efcd15b23e58289e877445be5f957772ad2701df4147cccc986dfa2cbf77396ff5cad1dadd7b8a5f420067fcb3604946936f87e648ef00934effdaac134bb2bc71893b144e2888f7c472a1b4d0000000000000000004c5636acad735654d47f789d9581467829db7bfb09b98eb13e"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000e00)=""/4096, 0x41100, 0x18, '\x00', 0x0, @sk_reuseport=0x27, r1, 0x8, &(0x7f0000000300)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x7, 0x4, 0x8}, 0x10, r2, r0, 0x5, 0x0, &(0x7f0000001f80)=[{0x3, 0x3, 0x8, 0x5}, {0x5, 0x4, 0x3, 0xa}, {0x2, 0x2, 0x8, 0x3}, {0x1, 0x5, 0xa, 0xb}, {0x5, 0x3, 0x3, 0x7}], 0x10, 0x99}, 0x94) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x7, 0x8, 0x42, 0x0, 0x3ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x2, 0x800, 0x2, 0xc, 0x1, 0x2, 0x0, 0xc05, 0xfe, 0x4e9c}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x533, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x4, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, 0x0, 0x40844) socket$kcm(0x21, 0x2, 0x2) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r5, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10001, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x5, 0x5, &(0x7f0000002300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x30000800) close(r8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="0600000004000000ad3700005c00000000000000f8664dabb32aafe748958c93e19ae8f49dbbe61e70dd047c089befdece452aeb1bbab6df15aa17b624d2627a3840a701c18a25632e5a52ad3492ba55a00ca0b05519bba397fe34d0305ca5456165b5597ef25a33818de2d553a43bcc8fb1431c63eacadf6b30fed207699c475d8ea4e545bf11776b6f4adcca8ebe8dd020ca39fcf12e3a69b9ba323fb37bb5f62c866e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x26e1, 0x0) close(r9) socket$kcm(0x1e, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) socket$kcm(0xa, 0x2, 0x0) 2.429365209s ago: executing program 1 (id=1992): bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x8181, 0xc8, 0xffffffff, 0x0, 0x0, 0x341}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f0000000380)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) 2.390336622s ago: executing program 1 (id=1993): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x9a2a178d5a9f5051}, 0x5, 0x0, 0x0, 0x3, 0x4, 0x6, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 2.315455108s ago: executing program 1 (id=1994): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1a0000004e792ab7ec107de9cc0000000000000000000e800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)=""/173, 0x91, 0xad, 0x0, 0x4000006, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1]}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x80100104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, 0x50) close(r0) socket$kcm(0x11, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.040819277s ago: executing program 2 (id=1996): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047451, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x4, 0x0, 0x0, 0x0, 0x2, 0xbd05, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2000000000000007, 0xffffffffffffffff}, 0x828, 0x8, 0x4000, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x40840) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="1400000028000b6394f90509a16dd8e50000cc577836970686eb8790519b82b4aa31cc3ce90019982fe75ad84b9a26f3", 0x30}], 0x1}, 0x4000000) 1.946366979s ago: executing program 0 (id=1997): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="2e0000003600f7ffffff80698c6390090124fc602f6e354016000180008e9279ed91d47825d7563c5ddbeceb", 0x2c}], 0x1, 0x0, 0x0, 0x39c}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) 1.89549526s ago: executing program 3 (id=1998): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d000000fe000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) 1.811177185s ago: executing program 1 (id=1999): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1a0000004e792ab7ec107de9cc0000000000000000000e800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)=""/173, 0x91, 0xad, 0x0, 0x4000006, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1]}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x80100104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, 0x50) close(r0) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.776061758s ago: executing program 0 (id=2000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000600)={'veth0_macvtap\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x4008, 0x1084, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2dcd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000680)='syzkaller\x00', 0xa, 0x1013, &(0x7f0000001880)=""/4115, 0x41100}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000a96f00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) r7 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, 0x1, 0x4}, 0x38) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r8, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000ffff"], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)={r7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x300}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000000}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0xffffffffffffffff}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x41100, 0x8}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000020006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'pim6reg1\x00', @multicast}) close(0x3) recvmsg$kcm(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000240)=""/199, 0xc7}, {&(0x7f0000000540)=""/80, 0x50}, {&(0x7f0000000740)=""/249, 0xf9}], 0x4}, 0x100) 1.709458665s ago: executing program 3 (id=2001): close(0xffffffffffffffff) perf_event_open(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000004c0)='.', 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2000000000000000840000000a000000948404"], 0x20}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) 1.709207056s ago: executing program 2 (id=2002): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x9a2a178d5a9f5051}, 0x5, 0x0, 0x0, 0x3, 0x4, 0x6, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 1.562354528s ago: executing program 2 (id=2003): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d80000001c0081044e81f782db44b9040a1d080214000000020009a118000c0003f0ff0001000e1208000f0100910401a8001600200001400300000203600c00b94dcf5c0461c1d67f6f94007134cf6ee08017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68765730d16a4683f5aeb4edb49905025ccca9e00360db7010000000000800819a6f5a13c9762dd84985f369670c2c43f596a5d965698131ff72eaa40279786ba0d06831065d6784d838fc56eb589a528f2531d3e28ad988d705ae08eb73b7df4cefd5195b7", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x2000a890) 1.492371285s ago: executing program 3 (id=2004): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2d, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd5, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f00000002c0), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000480)=r3) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) 1.341222468s ago: executing program 0 (id=2005): r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000940)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$kcm(0x11, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) setsockopt$sock_attach_bpf(r4, 0x107, 0xe, &(0x7f0000000000)=r5, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000400104b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="80", 0x1}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d020000faffffff001800000000"], 0x38}, 0x41) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="120000002820000000000000", @ANYRES32=0x0, @ANYBLOB="fc3900a029cefb7feffd4c6a8c0ad8ace02933db4e1c51e5c6dec2b9991733b2dbb3cd0391a762eb97f1cca1e7", @ANYRES64=0x0], 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f088a8", 0x0, 0xfdf, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) 1.329943155s ago: executing program 2 (id=2006): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x32}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a12fd4ab9d54a2b6a97a577ae18c8199", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002c40)=""/4049, 0xfd1}], 0x1}, 0x20) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r2 = perf_event_open(&(0x7f00000011c0)={0x5, 0x80, 0x5, 0x7, 0x9, 0x9, 0x0, 0x2, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000001140), 0x7}, 0x10000, 0x2, 0xeb3, 0x4, 0x89fc, 0xfff, 0x7, 0x0, 0xffffffd6, 0x0, 0x5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x5) 1.249866581s ago: executing program 2 (id=2007): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000001ec0)=""/159, 0x9a, 0x9f, 0x0, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x800, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x15, 0x1, &(0x7f0000003140)=ANY=[@ANYBLOB="88000000c10000007ea5da55998674799efcd15b23e58289e877445be5f957772ad2701df4147cccc986dfa2cbf77396ff5cad1dadd7b8a5f420067fcb3604946936f87e648ef00934effdaac134bb2bc71893b144e2888f7c472a1b4d0000000000000000004c5636acad735654d47f789d9581467829db7bfb09b98eb13e"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000e00)=""/4096, 0x41100, 0x18, '\x00', 0x0, @sk_reuseport=0x27, r1, 0x8, &(0x7f0000000300)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x7, 0x4, 0x8}, 0x10, r2, r0, 0x5, 0x0, &(0x7f0000001f80)=[{0x3, 0x3, 0x8, 0x5}, {0x5, 0x4, 0x3, 0xa}, {0x2, 0x2, 0x8, 0x3}, {0x1, 0x5, 0xa, 0xb}, {0x5, 0x3, 0x3, 0x7}], 0x10, 0x99}, 0x94) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x7, 0x8, 0x42, 0x0, 0x3ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x2, 0x800, 0x2, 0xc, 0x1, 0x2, 0x0, 0xc05, 0xfe, 0x4e9c}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x533, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x4, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, 0x0, 0x40844) socket$kcm(0x21, 0x2, 0x2) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r5, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10001, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x5, 0x5, &(0x7f0000002300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x30000800) close(r8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="0600000004000000ad3700005c00000000000000f8664dabb32aafe748958c93e19ae8f49dbbe61e70dd047c089befdece452aeb1bbab6df15aa17b624d2627a3840a701c18a25632e5a52ad3492ba55a00ca0b05519bba397fe34d0305ca5456165b5597ef25a33818de2d553a43bcc8fb1431c63eacadf6b30fed207699c475d8ea4e545bf11776b6f4adcca8ebe8dd020ca39fcf12e3a69b9ba323fb37bb5f62c866e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x26e1, 0x0) close(r9) socket$kcm(0x1e, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) socket$kcm(0xa, 0x2, 0x0) 1.230497217s ago: executing program 1 (id=2008): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="2e0000003600f7ffffff80698c6390090124fc602f6e354016000180008e9279ed91d47825d7563c5ddbeceb16", 0x2d}], 0x1, 0x0, 0x0, 0x39c}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) 1.165423205s ago: executing program 3 (id=2009): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1a0000004e792ab7ec107de9cc0000000000000000000e800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)=""/173, 0x91, 0xad, 0x0, 0x4000006, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1]}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x80100104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, 0x50) close(r0) socket$kcm(0x11, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 165.95345ms ago: executing program 2 (id=2010): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000100)=0xaf91) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x68}, 0x84) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2b2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40002000) setsockopt$sock_attach_bpf(r7, 0x84, 0xb, &(0x7f0000000040)=r9, 0x4) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x10}, 0x18) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0xffffffffffffffff, 0x8, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffb}, @alu={0x4, 0x1, 0xb, 0xb, 0x6, 0x4, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0xb3, &(0x7f0000000580)=""/179, 0x41100, 0x48, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000002c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x5, 0x9, 0xd}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000840)=[r5, r6, r9, r10, r11], &(0x7f0000000880)=[{0x0, 0x1, 0x9}, {0x2, 0x5, 0x7, 0xb}], 0x10, 0x3}, 0x94) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000200)="97", 0x1}], 0x1}, 0xc000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r13) recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r14, 0x8) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r15, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000040)="b90103600040f000009e0fa208001fffffe101000000000000008035", 0x0, 0x20000102, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 36.085096ms ago: executing program 3 (id=2011): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x9a2a178d5a9f5051}, 0x5, 0x0, 0x0, 0x3, 0x4, 0x6, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 0s ago: executing program 1 (id=2012): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. [ 58.180829][ T5751] cgroup: Unknown subsys name 'net' [ 58.314973][ T5751] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.728033][ T5751] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.157679][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.165786][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.174751][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.182468][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.190662][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.198871][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.202313][ T5772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.214881][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.215962][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.223483][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.232443][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.237551][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.243741][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.251339][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.259618][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.265660][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.271034][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.279660][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.288212][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.292623][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.328290][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.344159][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.353152][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.367788][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.735866][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 61.766832][ T5761] chnl_net:caif_netlink_parms(): no params data found [ 61.859819][ T5762] chnl_net:caif_netlink_parms(): no params data found [ 61.903474][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 61.954909][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.962329][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.972039][ T5764] bridge_slave_0: entered allmulticast mode [ 61.979069][ T5764] bridge_slave_0: entered promiscuous mode [ 61.993669][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.001253][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.008657][ T5761] bridge_slave_0: entered allmulticast mode [ 62.015528][ T5761] bridge_slave_0: entered promiscuous mode [ 62.024374][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.031775][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.039495][ T5761] bridge_slave_1: entered allmulticast mode [ 62.046193][ T5761] bridge_slave_1: entered promiscuous mode [ 62.072573][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.079948][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.087093][ T5764] bridge_slave_1: entered allmulticast mode [ 62.094207][ T5764] bridge_slave_1: entered promiscuous mode [ 62.166926][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.185056][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.196247][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.234873][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.254021][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.261401][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.268985][ T5763] bridge_slave_0: entered allmulticast mode [ 62.275817][ T5763] bridge_slave_0: entered promiscuous mode [ 62.305719][ T5764] team0: Port device team_slave_0 added [ 62.312859][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.320481][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.327861][ T5763] bridge_slave_1: entered allmulticast mode [ 62.334998][ T5763] bridge_slave_1: entered promiscuous mode [ 62.356215][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.363565][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.371016][ T5762] bridge_slave_0: entered allmulticast mode [ 62.377664][ T5762] bridge_slave_0: entered promiscuous mode [ 62.395032][ T5761] team0: Port device team_slave_0 added [ 62.402938][ T5764] team0: Port device team_slave_1 added [ 62.411141][ T5761] team0: Port device team_slave_1 added [ 62.421865][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.433304][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.443030][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.450279][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.457673][ T5762] bridge_slave_1: entered allmulticast mode [ 62.464799][ T5762] bridge_slave_1: entered promiscuous mode [ 62.541405][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.550772][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.577301][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.592120][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.605133][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.615291][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.622630][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.649368][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.664048][ T5763] team0: Port device team_slave_0 added [ 62.671446][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.678798][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.705222][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.732250][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.739531][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.765590][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.777994][ T5763] team0: Port device team_slave_1 added [ 62.810671][ T5762] team0: Port device team_slave_0 added [ 62.851488][ T5762] team0: Port device team_slave_1 added [ 62.872378][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.884826][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.911075][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.941893][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.949175][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.975684][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.987470][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.996597][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.025104][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.042575][ T5761] hsr_slave_0: entered promiscuous mode [ 63.049322][ T5761] hsr_slave_1: entered promiscuous mode [ 63.066695][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.074485][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.100618][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.127680][ T5764] hsr_slave_0: entered promiscuous mode [ 63.134598][ T5764] hsr_slave_1: entered promiscuous mode [ 63.141537][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.149484][ T5764] Cannot create hsr debugfs directory [ 63.249253][ T5762] hsr_slave_0: entered promiscuous mode [ 63.255865][ T5762] hsr_slave_1: entered promiscuous mode [ 63.262987][ T5762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.270639][ T5762] Cannot create hsr debugfs directory [ 63.301964][ T5763] hsr_slave_0: entered promiscuous mode [ 63.308913][ T5763] hsr_slave_1: entered promiscuous mode [ 63.314981][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.322746][ T5763] Cannot create hsr debugfs directory [ 63.349947][ T5765] Bluetooth: hci0: command tx timeout [ 63.350053][ T5772] Bluetooth: hci3: command tx timeout [ 63.355649][ T5765] Bluetooth: hci2: command tx timeout [ 63.428285][ T5765] Bluetooth: hci1: command tx timeout [ 63.683187][ T5761] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.695511][ T5761] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.707532][ T5761] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.721871][ T5761] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.784005][ T5764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.793911][ T5764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.805178][ T5764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.825997][ T5764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.886119][ T5763] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.899007][ T5763] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.914889][ T5763] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.924771][ T5763] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.035796][ T5762] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.046796][ T5762] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.060302][ T5762] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.084363][ T5762] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.165284][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.184091][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.223947][ T5761] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.243168][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.263012][ T1072] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.270430][ T1072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.292616][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.317949][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.325200][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.337104][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.344249][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.369879][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.384481][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.391627][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.423066][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.430240][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.490442][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.497584][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.544506][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.666288][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.704130][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.711798][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.755369][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.762662][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.966884][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.093001][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.142981][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.187312][ T5764] veth0_vlan: entered promiscuous mode [ 65.222954][ T5764] veth1_vlan: entered promiscuous mode [ 65.256966][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.266400][ T5761] veth0_vlan: entered promiscuous mode [ 65.302780][ T5761] veth1_vlan: entered promiscuous mode [ 65.324896][ T5763] veth0_vlan: entered promiscuous mode [ 65.343900][ T5764] veth0_macvtap: entered promiscuous mode [ 65.372059][ T5763] veth1_vlan: entered promiscuous mode [ 65.383168][ T5764] veth1_macvtap: entered promiscuous mode [ 65.425814][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.433187][ T51] Bluetooth: hci0: command tx timeout [ 65.436379][ T5765] Bluetooth: hci3: command tx timeout [ 65.447841][ T51] Bluetooth: hci2: command tx timeout [ 65.451904][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.462307][ T5762] veth0_vlan: entered promiscuous mode [ 65.477662][ T5761] veth0_macvtap: entered promiscuous mode [ 65.494385][ T5764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.504340][ T5764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.515844][ T5764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.518954][ T5765] Bluetooth: hci1: command tx timeout [ 65.524737][ T5764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.545692][ T5762] veth1_vlan: entered promiscuous mode [ 65.557072][ T5761] veth1_macvtap: entered promiscuous mode [ 65.571175][ T5763] veth0_macvtap: entered promiscuous mode [ 65.608444][ T5763] veth1_macvtap: entered promiscuous mode [ 65.664283][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.677609][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.691092][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.722082][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.733272][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.744044][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.760518][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.771530][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.799548][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.807475][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.820649][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.832949][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.844269][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.857907][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.874107][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.884079][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.894594][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.905599][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.922420][ T5762] veth0_macvtap: entered promiscuous mode [ 65.938013][ T5761] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.946961][ T5761] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.956924][ T5761] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.968660][ T5761] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.981774][ T5763] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.994948][ T5763] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.003971][ T5763] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.012722][ T5763] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.034641][ T5762] veth1_macvtap: entered promiscuous mode [ 66.045046][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.054254][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.137976][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.159778][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.175202][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.186793][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.197553][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.209282][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.231061][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.281206][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.307129][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.319023][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.346092][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.356452][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.367346][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.379719][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.432682][ T5762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.444525][ T5762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.456997][ T5762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.474463][ T5762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.476473][ C0] hrtimer: interrupt took 30267 ns [ 66.509958][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.517890][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.578718][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.588994][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.667561][ T1072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.680485][ T1072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.736579][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.754456][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.774435][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.782022][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.879998][ T1072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.890978][ T1072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.071326][ T5826] FAULT_INJECTION: forcing a failure. [ 67.071326][ T5826] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 67.149327][ T5826] CPU: 1 PID: 5826 Comm: syz.3.4 Not tainted syzkaller #0 [ 67.156500][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 67.166600][ T5826] Call Trace: [ 67.169915][ T5826] [ 67.172868][ T5826] dump_stack_lvl+0x18c/0x250 [ 67.177587][ T5826] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 67.183775][ T5826] ? show_regs_print_info+0x20/0x20 [ 67.189117][ T5826] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 67.195327][ T5826] should_fail_ex+0x39d/0x4d0 [ 67.200040][ T5826] prepare_alloc_pages+0x1e2/0x5f0 [ 67.205220][ T5826] __alloc_pages+0x134/0x460 [ 67.209923][ T5826] ? zone_statistics+0x170/0x170 [ 67.214888][ T5826] ? do_wp_page+0x7ca/0x35f0 [ 67.219505][ T5826] ? do_wp_page+0xfc5/0x35f0 [ 67.224135][ T5826] __folio_alloc+0x10/0x20 [ 67.228581][ T5826] vma_alloc_folio+0x47a/0x8f0 [ 67.233380][ T5826] do_wp_page+0x1243/0x35f0 [ 67.238030][ T5826] ? folio_put+0xd0/0xd0 [ 67.242302][ T5826] ? do_raw_spin_lock+0x11f/0x2c0 [ 67.247365][ T5826] ? __rwlock_init+0x150/0x150 [ 67.252271][ T5826] handle_mm_fault+0x135d/0x4c00 [ 67.257238][ T5826] ? handle_mm_fault+0xe7/0x4c00 [ 67.262219][ T5826] ? numa_migrate_prep+0x350/0x350 [ 67.267390][ T5826] ? __mutex_trylock_common+0x159/0x260 [ 67.272992][ T5826] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 67.278307][ T5826] do_user_addr_fault+0x730/0x12c0 [ 67.283487][ T5826] exc_page_fault+0x64/0x100 [ 67.288119][ T5826] asm_exc_page_fault+0x26/0x30 [ 67.293001][ T5826] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 67.294529][ T5830] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3'. [ 67.298857][ T5826] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 67.298919][ T5826] RSP: 0018:ffffc90004b0fa10 EFLAGS: 00050246 [ 67.298937][ T5826] RAX: ffffffff8429a601 RBX: 0000000000000040 RCX: 0000000000000040 [ 67.298947][ T5826] RDX: 0000000000000000 RSI: ffffc90004b0fb00 RDI: 0000200000002040 [ 67.298957][ T5826] RBP: ffffc90004b0fd70 R08: ffffc90004b0fb3f R09: 1ffff92000961f67 [ 67.298968][ T5826] R10: dffffc0000000000 R11: fffff52000961f68 R12: 0000200000002080 [ 67.298979][ T5826] R13: 0000000000000040 R14: 0000200000002040 R15: ffffc90004b0fb00 [ 67.298996][ T5826] ? _copy_from_user+0x91/0xe0 [ 67.299028][ T5826] _copy_to_user+0x85/0xa0 [ 67.299049][ T5826] bpf_obj_get_info_by_fd+0x1162/0x3080 [ 67.299076][ T5826] ? __lock_acquire+0x7d40/0x7d40 [ 67.299094][ T5826] ? verify_lock_unused+0x140/0x140 [ 67.299113][ T5826] ? bpf_map_get_fd_by_id+0x310/0x310 [ 67.299145][ T5826] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 67.299166][ T5826] ? lock_chain_count+0x20/0x20 [ 67.299190][ T5826] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 67.299210][ T5826] ? lockdep_hardirqs_on+0x98/0x150 [ 67.299231][ T5826] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 67.299269][ T5826] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 67.299292][ T5826] ? bpf_lsm_bpf+0x9/0x10 [ 67.299309][ T5826] ? security_bpf+0x7e/0xa0 [ 67.299332][ T5826] __sys_bpf+0x7eb/0x890 [ 67.299351][ T5826] ? bpf_link_show_fdinfo+0x390/0x390 [ 67.312238][ T5830] bridge_slave_1: default FDB implementation only supports local addresses [ 67.327892][ T5826] ? lock_chain_count+0x20/0x20 [ 67.327922][ T5826] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 67.327945][ T5826] __x64_sys_bpf+0x7c/0x90 [ 67.327965][ T5826] do_syscall_64+0x55/0xa0 [ 67.327985][ T5826] ? clear_bhb_loop+0x40/0x90 [ 67.328002][ T5826] ? clear_bhb_loop+0x40/0x90 [ 67.328020][ T5826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.328037][ T5826] RIP: 0033:0x7fa743f9c799 [ 67.328066][ T5826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.328079][ T5826] RSP: 002b:00007fa744f4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.328099][ T5826] RAX: ffffffffffffffda RBX: 00007fa744215fa0 RCX: 00007fa743f9c799 [ 67.328110][ T5826] RDX: 0000000000000010 RSI: 0000200000001d00 RDI: 000000000000000f [ 67.328121][ T5826] RBP: 00007fa744f4d090 R08: 0000000000000000 R09: 0000000000000000 [ 67.328130][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.328139][ T5826] R13: 00007fa744216038 R14: 00007fa744215fa0 R15: 00007fff5c306f08 [ 67.328164][ T5826] [ 67.693353][ T5765] Bluetooth: hci3: command tx timeout [ 67.699091][ T5765] Bluetooth: hci2: command tx timeout [ 67.704669][ T5765] Bluetooth: hci0: command tx timeout [ 67.711246][ T5765] Bluetooth: hci1: command tx timeout [ 67.945915][ T5838] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7'. [ 67.967630][ T5838] hsr0: entered promiscuous mode [ 69.189589][ T5864] warning: `syz.2.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.755969][ T5765] Bluetooth: hci0: command tx timeout [ 69.761655][ T5772] Bluetooth: hci2: command tx timeout [ 69.761673][ T5773] Bluetooth: hci3: command tx timeout [ 69.767099][ T51] Bluetooth: hci1: command tx timeout [ 69.901560][ T5880] bridge_slave_1: left allmulticast mode [ 69.907399][ T5880] bridge_slave_1: left promiscuous mode [ 69.918386][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.936849][ T5880] bridge_slave_0: left allmulticast mode [ 69.946583][ T5880] bridge_slave_0: left promiscuous mode [ 69.953023][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.679471][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.686850][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.272621][ T5897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.347818][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 72.407422][ T5905] IPv6: Can't replace route, no match found [ 72.440518][ T5907] netlink: 72 bytes leftover after parsing attributes in process `syz.3.27'. [ 75.322223][ T5964] netlink: 'syz.2.49': attribute type 3 has an invalid length. [ 75.337253][ T5964] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.49'. [ 75.912468][ T5982] FAULT_INJECTION: forcing a failure. [ 75.912468][ T5982] name failslab, interval 1, probability 0, space 0, times 1 [ 75.938242][ T5982] CPU: 1 PID: 5982 Comm: syz.3.56 Not tainted syzkaller #0 [ 75.945506][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 75.955592][ T5982] Call Trace: [ 75.958891][ T5982] [ 75.961840][ T5982] dump_stack_lvl+0x18c/0x250 [ 75.966548][ T5982] ? show_regs_print_info+0x20/0x20 [ 75.971772][ T5982] ? load_image+0x400/0x400 [ 75.976305][ T5982] ? __might_sleep+0xe0/0xe0 [ 75.980919][ T5982] ? __lock_acquire+0x7d40/0x7d40 [ 75.985991][ T5982] should_fail_ex+0x39d/0x4d0 [ 75.990706][ T5982] should_failslab+0x9/0x20 [ 75.995239][ T5982] slab_pre_alloc_hook+0x59/0x310 [ 76.000314][ T5982] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 76.006056][ T5982] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 76.011770][ T5982] __kmem_cache_alloc_node+0x53/0x250 [ 76.017146][ T5982] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 76.022861][ T5982] __kmalloc+0xa4/0x230 [ 76.027012][ T5982] tomoyo_realpath_from_path+0xe3/0x5d0 [ 76.032652][ T5982] tomoyo_path_number_perm+0x248/0x620 [ 76.038109][ T5982] ? tomoyo_path_number_perm+0x217/0x620 [ 76.043737][ T5982] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 76.049194][ T5982] ? ksys_write+0x1c4/0x260 [ 76.053718][ T5982] ? __fget_files+0x28/0x4b0 [ 76.058329][ T5982] ? __fget_files+0x28/0x4b0 [ 76.062919][ T5982] security_file_ioctl+0x70/0xa0 [ 76.067859][ T5982] __se_sys_ioctl+0x48/0x170 [ 76.072447][ T5982] do_syscall_64+0x55/0xa0 [ 76.076946][ T5982] ? clear_bhb_loop+0x40/0x90 [ 76.081623][ T5982] ? clear_bhb_loop+0x40/0x90 [ 76.086303][ T5982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.092193][ T5982] RIP: 0033:0x7fa743f9c799 [ 76.096602][ T5982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.116216][ T5982] RSP: 002b:00007fa744f4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.124628][ T5982] RAX: ffffffffffffffda RBX: 00007fa744215fa0 RCX: 00007fa743f9c799 [ 76.132591][ T5982] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 76.140555][ T5982] RBP: 00007fa744f4d090 R08: 0000000000000000 R09: 0000000000000000 [ 76.148524][ T5982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.156509][ T5982] R13: 00007fa744216038 R14: 00007fa744215fa0 R15: 00007fff5c306f08 [ 76.164510][ T5982] [ 76.183721][ T5982] ERROR: Out of memory at tomoyo_realpath_from_path. [ 76.660243][ T5997] netlink: 14 bytes leftover after parsing attributes in process `syz.2.61'. [ 76.710642][ T5994] Zero length message leads to an empty skb [ 76.752718][ T5994] netlink: 'syz.2.61': attribute type 29 has an invalid length. [ 76.913996][ T6006] netlink: 'syz.1.63': attribute type 29 has an invalid length. [ 76.951315][ T5997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.988780][ T5997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.041433][ T5997] bond0 (unregistering): Released all slaves [ 77.197013][ T5994] netlink: 'syz.2.61': attribute type 29 has an invalid length. [ 77.218580][ T6004] netlink: 'syz.3.65': attribute type 21 has an invalid length. [ 77.233768][ T6004] netlink: 128 bytes leftover after parsing attributes in process `syz.3.65'. [ 77.254175][ T6004] netlink: 'syz.3.65': attribute type 4 has an invalid length. [ 77.269459][ T6004] netlink: 'syz.3.65': attribute type 5 has an invalid length. [ 77.277688][ T6004] netlink: 3 bytes leftover after parsing attributes in process `syz.3.65'. [ 77.345850][ T6006] netlink: 'syz.1.63': attribute type 29 has an invalid length. [ 77.368720][ T6011] netlink: 'syz.1.63': attribute type 29 has an invalid length. [ 77.403459][ T6013] netlink: 'syz.3.65': attribute type 21 has an invalid length. [ 77.456137][ T6013] netlink: 128 bytes leftover after parsing attributes in process `syz.3.65'. [ 77.470395][ T6013] netlink: 3 bytes leftover after parsing attributes in process `syz.3.65'. [ 77.545078][ T5997] syz.2.61 (5997) used greatest stack depth: 20520 bytes left [ 77.611570][ T6016] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 77.612106][ T6016] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.597737][ T6023] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 81.031088][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 81.059747][ T6050] netlink: 72 bytes leftover after parsing attributes in process `syz.1.74'. [ 81.220269][ T6040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.472254][ T6060] validate_nla: 4 callbacks suppressed [ 81.472298][ T6060] netlink: 'syz.1.81': attribute type 1 has an invalid length. [ 81.499445][ T6060] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.81'. [ 81.923547][ T27] cfg80211: failed to load regulatory.db [ 82.290363][ T6072] syz.1.84 uses obsolete (PF_INET,SOCK_PACKET) [ 83.396731][ T6085] netlink: 128 bytes leftover after parsing attributes in process `syz.3.88'. [ 83.416665][ T6085] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 83.702643][ T6090] netlink: 'syz.3.91': attribute type 29 has an invalid length. [ 83.739462][ T6090] netlink: 'syz.3.91': attribute type 29 has an invalid length. [ 84.031478][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 84.214308][ T6099] netlink: 72 bytes leftover after parsing attributes in process `syz.0.90'. [ 84.645231][ T6089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.025952][ T6110] netlink: 'syz.2.97': attribute type 21 has an invalid length. [ 85.048836][ T6110] netlink: 132 bytes leftover after parsing attributes in process `syz.2.97'. [ 85.067097][ T6110] netlink: 'syz.2.97': attribute type 1 has an invalid length. [ 85.097156][ T6114] netlink: 'syz.0.96': attribute type 25 has an invalid length. [ 85.125038][ T6114] netlink: 'syz.0.96': attribute type 28 has an invalid length. [ 86.623721][ T6134] netlink: 'syz.2.106': attribute type 21 has an invalid length. [ 86.662806][ T6134] netlink: 128 bytes leftover after parsing attributes in process `syz.2.106'. [ 86.691648][ T6134] netlink: 'syz.2.106': attribute type 4 has an invalid length. [ 86.707172][ T6134] netlink: 'syz.2.106': attribute type 5 has an invalid length. [ 86.732772][ T6134] netlink: 3 bytes leftover after parsing attributes in process `syz.2.106'. [ 86.923921][ T6144] netlink: 'syz.2.109': attribute type 25 has an invalid length. [ 86.955472][ T6144] netlink: 'syz.2.109': attribute type 28 has an invalid length. [ 87.176282][ T6148] netlink: 'syz.1.111': attribute type 2 has an invalid length. [ 87.872594][ T6152] syzkaller0: entered promiscuous mode [ 87.913349][ T6152] syzkaller0: entered allmulticast mode [ 88.529166][ T6164] netlink: 'syz.1.115': attribute type 21 has an invalid length. [ 88.542219][ T6164] netlink: 132 bytes leftover after parsing attributes in process `syz.1.115'. [ 88.572346][ T6164] netlink: 'syz.1.115': attribute type 1 has an invalid length. [ 91.013315][ T6174] netlink: 144 bytes leftover after parsing attributes in process `syz.1.118'. [ 91.054241][ T6174] team0: Port device team_slave_0 removed [ 91.060643][ T6174] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 91.295290][ T6184] netlink: 'syz.1.121': attribute type 25 has an invalid length. [ 91.303189][ T6184] netlink: 'syz.1.121': attribute type 28 has an invalid length. [ 93.344909][ T6211] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.128'. [ 94.745518][ T6231] FAULT_INJECTION: forcing a failure. [ 94.745518][ T6231] name failslab, interval 1, probability 0, space 0, times 0 [ 94.811434][ T6231] CPU: 0 PID: 6231 Comm: syz.3.135 Not tainted syzkaller #0 [ 94.818867][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.828988][ T6231] Call Trace: [ 94.832301][ T6231] [ 94.835256][ T6231] dump_stack_lvl+0x18c/0x250 [ 94.839981][ T6231] ? show_regs_print_info+0x20/0x20 [ 94.845207][ T6231] ? load_image+0x400/0x400 [ 94.849749][ T6231] ? __might_sleep+0xe0/0xe0 [ 94.854363][ T6231] ? __lock_acquire+0x7d40/0x7d40 [ 94.859416][ T6231] should_fail_ex+0x39d/0x4d0 [ 94.864122][ T6231] should_failslab+0x9/0x20 [ 94.868660][ T6231] slab_pre_alloc_hook+0x59/0x310 [ 94.873723][ T6231] ? genl_start+0x1c9/0x6b0 [ 94.878274][ T6231] __kmem_cache_alloc_node+0x53/0x250 [ 94.883682][ T6231] ? genl_start+0x1c9/0x6b0 [ 94.888227][ T6231] kmalloc_trace+0x2a/0xe0 [ 94.892765][ T6231] genl_start+0x1c9/0x6b0 [ 94.897095][ T6231] ? netlink_lookup+0x30/0x200 [ 94.901866][ T6231] __netlink_dump_start+0x4a9/0x810 [ 94.907074][ T6231] genl_family_rcv_msg_dumpit+0x214/0x310 [ 94.912795][ T6231] ? genl_rcv_msg+0x7a0/0x7a0 [ 94.917465][ T6231] ? genl_get_cmd+0x7f1/0x920 [ 94.922229][ T6231] ? genl_family_rcv_msg_doit+0x310/0x310 [ 94.927948][ T6231] ? genl_start+0x6b0/0x6b0 [ 94.932451][ T6231] ? genl_dumpit+0x1a0/0x1a0 [ 94.937052][ T6231] genl_rcv_msg+0x5e5/0x7a0 [ 94.941556][ T6231] ? genl_bind+0x360/0x360 [ 94.945966][ T6231] ? macsec_netdev_is_offloaded+0x60/0x60 [ 94.951691][ T6231] ? ref_tracker_free+0x690/0x840 [ 94.956717][ T6231] netlink_rcv_skb+0x241/0x4d0 [ 94.961493][ T6231] ? genl_bind+0x360/0x360 [ 94.965932][ T6231] ? netlink_ack+0x1180/0x1180 [ 94.970714][ T6231] ? __lock_acquire+0x7d40/0x7d40 [ 94.975742][ T6231] ? down_read+0x1ac/0x2e0 [ 94.980155][ T6231] genl_rcv+0x28/0x40 [ 94.984136][ T6231] netlink_unicast+0x751/0x8d0 [ 94.988911][ T6231] netlink_sendmsg+0x8d0/0xbf0 [ 94.993699][ T6231] ? netlink_getsockopt+0x590/0x590 [ 94.998903][ T6231] ? aa_sock_msg_perm+0x94/0x150 [ 95.004015][ T6231] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 95.009297][ T6231] ? security_socket_sendmsg+0x80/0xa0 [ 95.014752][ T6231] ? netlink_getsockopt+0x590/0x590 [ 95.019952][ T6231] ____sys_sendmsg+0x5ba/0x960 [ 95.024719][ T6231] ? __asan_memset+0x22/0x40 [ 95.029312][ T6231] ? __sys_sendmsg_sock+0x30/0x30 [ 95.034329][ T6231] ? __import_iovec+0x5f2/0x850 [ 95.039204][ T6231] ? import_iovec+0x73/0xa0 [ 95.043710][ T6231] ___sys_sendmsg+0x2a6/0x360 [ 95.048394][ T6231] ? get_pid_task+0x20/0x1e0 [ 95.052991][ T6231] ? __sys_sendmsg+0x2a0/0x2a0 [ 95.057782][ T6231] ? __lock_acquire+0x7d40/0x7d40 [ 95.062938][ T6231] __se_sys_sendmsg+0x1c2/0x2b0 [ 95.067815][ T6231] ? __x64_sys_sendmsg+0x80/0x80 [ 95.072872][ T6231] ? lockdep_hardirqs_on+0x98/0x150 [ 95.078075][ T6231] do_syscall_64+0x55/0xa0 [ 95.082502][ T6231] ? clear_bhb_loop+0x40/0x90 [ 95.087173][ T6231] ? clear_bhb_loop+0x40/0x90 [ 95.091851][ T6231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.097744][ T6231] RIP: 0033:0x7fa743f9c799 [ 95.102156][ T6231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.121918][ T6231] RSP: 002b:00007fa744f4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.130331][ T6231] RAX: ffffffffffffffda RBX: 00007fa744215fa0 RCX: 00007fa743f9c799 [ 95.138393][ T6231] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 95.146358][ T6231] RBP: 00007fa744f4d090 R08: 0000000000000000 R09: 0000000000000000 [ 95.154323][ T6231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.162307][ T6231] R13: 00007fa744216038 R14: 00007fa744215fa0 R15: 00007fff5c306f08 [ 95.170306][ T6231] [ 95.787544][ T6248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.148639][ T6257] netlink: 132 bytes leftover after parsing attributes in process `syz.3.145'. [ 96.245856][ T6257] validate_nla: 1 callbacks suppressed [ 96.245894][ T6257] netlink: 'syz.3.145': attribute type 10 has an invalid length. [ 96.415576][ T6257] team0: Device hsr_slave_0 failed to register rx_handler [ 96.704736][ T6257] syz.3.145 (6257) used greatest stack depth: 19368 bytes left [ 97.029055][ T6276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.047227][ T6292] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.157'. [ 98.068431][ T6290] netlink: 830 bytes leftover after parsing attributes in process `syz.3.156'. [ 98.211891][ T6294] FAULT_INJECTION: forcing a failure. [ 98.211891][ T6294] name failslab, interval 1, probability 0, space 0, times 0 [ 98.286558][ T6294] CPU: 0 PID: 6294 Comm: syz.0.158 Not tainted syzkaller #0 [ 98.294169][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 98.304534][ T6294] Call Trace: [ 98.307840][ T6294] [ 98.310811][ T6294] dump_stack_lvl+0x18c/0x250 [ 98.315523][ T6294] ? sctp_sendmsg+0x1575/0x28c0 [ 98.320405][ T6294] ? ___sys_sendmsg+0x2a6/0x360 [ 98.325288][ T6294] ? show_regs_print_info+0x20/0x20 [ 98.330574][ T6294] ? load_image+0x400/0x400 [ 98.335127][ T6294] should_fail_ex+0x39d/0x4d0 [ 98.339847][ T6294] should_failslab+0x9/0x20 [ 98.344385][ T6294] slab_pre_alloc_hook+0x59/0x310 [ 98.349448][ T6294] ? sctp_add_bind_addr+0x8c/0x360 [ 98.354586][ T6294] __kmem_cache_alloc_node+0x53/0x250 [ 98.360003][ T6294] ? sctp_add_bind_addr+0x8c/0x360 [ 98.365140][ T6294] kmalloc_trace+0x2a/0xe0 [ 98.369596][ T6294] sctp_add_bind_addr+0x8c/0x360 [ 98.374566][ T6294] sctp_copy_local_addr_list+0x315/0x4f0 [ 98.380277][ T6294] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 98.386012][ T6294] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 98.392090][ T6294] ? sctp_v6_is_any+0x64/0x70 [ 98.396770][ T6294] ? sctp_copy_one_addr+0x8c/0x350 [ 98.401995][ T6294] sctp_bind_addr_copy+0xb3/0x3c0 [ 98.407022][ T6294] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 98.413359][ T6294] sctp_connect_new_asoc+0x2f9/0x6a0 [ 98.418737][ T6294] ? __sctp_connect+0xd80/0xd80 [ 98.423591][ T6294] ? __local_bh_enable_ip+0x13a/0x1c0 [ 98.428979][ T6294] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 98.434519][ T6294] ? security_sctp_bind_connect+0x89/0xb0 [ 98.440240][ T6294] sctp_sendmsg+0x1575/0x28c0 [ 98.444923][ T6294] ? sctp_getsockopt+0xb60/0xb60 [ 98.449860][ T6294] ? aa_sk_perm+0x83c/0x970 [ 98.454378][ T6294] ? aa_af_perm+0x330/0x330 [ 98.458879][ T6294] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 98.465301][ T6294] ? sock_rps_record_flow+0x19/0x3f0 [ 98.470682][ T6294] ? inet_sendmsg+0xe9/0x2f0 [ 98.475270][ T6294] ? inet_send_prepare+0x260/0x260 [ 98.480379][ T6294] ____sys_sendmsg+0x5ba/0x960 [ 98.485223][ T6294] ? __lock_acquire+0x7d40/0x7d40 [ 98.490261][ T6294] ? __sys_sendmsg_sock+0x30/0x30 [ 98.495277][ T6294] ? __import_iovec+0x5f2/0x850 [ 98.500172][ T6294] ? import_iovec+0x73/0xa0 [ 98.504675][ T6294] ___sys_sendmsg+0x2a6/0x360 [ 98.509437][ T6294] ? __sys_sendmsg+0x2a0/0x2a0 [ 98.514218][ T6294] ? __lock_acquire+0x7d40/0x7d40 [ 98.519263][ T6294] __se_sys_sendmsg+0x1c2/0x2b0 [ 98.524111][ T6294] ? __x64_sys_sendmsg+0x80/0x80 [ 98.529059][ T6294] ? lockdep_hardirqs_on+0x98/0x150 [ 98.534256][ T6294] do_syscall_64+0x55/0xa0 [ 98.538681][ T6294] ? clear_bhb_loop+0x40/0x90 [ 98.543358][ T6294] ? clear_bhb_loop+0x40/0x90 [ 98.548063][ T6294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.553986][ T6294] RIP: 0033:0x7f47bff9c799 [ 98.558497][ T6294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.578207][ T6294] RSP: 002b:00007f47c0ecc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.586793][ T6294] RAX: ffffffffffffffda RBX: 00007f47c0215fa0 RCX: 00007f47bff9c799 [ 98.594764][ T6294] RDX: 00000000000480c4 RSI: 00002000000017c0 RDI: 0000000000000004 [ 98.602736][ T6294] RBP: 00007f47c0ecc090 R08: 0000000000000000 R09: 0000000000000000 [ 98.610702][ T6294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.618675][ T6294] R13: 00007f47c0216038 R14: 00007f47c0215fa0 R15: 00007ffc95c5b148 [ 98.626665][ T6294] [ 103.422169][ T6341] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.173'. [ 103.432058][ T6341] bridge_slave_1: default FDB implementation only supports local addresses [ 104.433659][ T6366] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.181'. [ 104.456056][ T6366] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.181'. [ 104.576152][ T6370] IPv6: Can't replace route, no match found [ 105.145836][ T6389] netlink: 40 bytes leftover after parsing attributes in process `syz.1.190'. [ 107.647675][ T6411] netlink: 'syz.3.196': attribute type 10 has an invalid length. [ 107.669041][ T6411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.196'. [ 107.686046][ T6411] batman_adv: batadv0: Adding interface: veth0_vlan [ 107.693717][ T6411] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.728455][ T6411] batman_adv: batadv0: Interface activated: veth0_vlan [ 108.039854][ T6413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.626734][ T6442] netlink: 60 bytes leftover after parsing attributes in process `syz.1.203'. [ 110.028416][ T6441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.246237][ T6451] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.212'. [ 110.994784][ T6469] netlink: 'syz.3.219': attribute type 21 has an invalid length. [ 111.069957][ T6469] netlink: 156 bytes leftover after parsing attributes in process `syz.3.219'. [ 111.466785][ T6467] netlink: 60 bytes leftover after parsing attributes in process `syz.0.218'. [ 111.468258][ T6471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.109909][ T6498] delete_channel: no stack [ 114.398351][ T6508] netlink: 'syz.2.230': attribute type 21 has an invalid length. [ 114.429513][ T6508] netlink: 156 bytes leftover after parsing attributes in process `syz.2.230'. [ 115.425911][ T6512] netlink: 60 bytes leftover after parsing attributes in process `syz.3.232'. [ 116.062534][ T6526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.253529][ T6539] netlink: 60 bytes leftover after parsing attributes in process `syz.0.241'. [ 116.262858][ T6539] netlink: 60 bytes leftover after parsing attributes in process `syz.0.241'. [ 116.289298][ T6530] delete_channel: no stack [ 116.311344][ T6539] netlink: 'syz.0.241': attribute type 21 has an invalid length. [ 116.349561][ T6539] netlink: 60 bytes leftover after parsing attributes in process `syz.0.241'. [ 116.495689][ T6544] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.243'. [ 116.590805][ T6547] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.245'. [ 116.631726][ T6547] bridge_slave_1: default FDB implementation only supports local addresses [ 117.155186][ T6553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.264541][ T6562] netlink: 'syz.1.249': attribute type 21 has an invalid length. [ 117.272710][ T6562] netlink: 156 bytes leftover after parsing attributes in process `syz.1.249'. [ 117.670385][ T6559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.247436][ T6576] netlink: 'syz.3.255': attribute type 2 has an invalid length. [ 119.255437][ T6576] netlink: 132 bytes leftover after parsing attributes in process `syz.3.255'. [ 119.471833][ T6588] netlink: 144 bytes leftover after parsing attributes in process `syz.3.259'. [ 119.777170][ T6588] team0: Port device team_slave_0 removed [ 119.805280][ T6583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.156928][ T6595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.534478][ T6618] netlink: 'syz.2.270': attribute type 10 has an invalid length. [ 120.543507][ T6618] netlink: 40 bytes leftover after parsing attributes in process `syz.2.270'. [ 120.557445][ T6618] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 120.783680][ T6624] syzkaller0: entered promiscuous mode [ 121.161110][ T6636] FAULT_INJECTION: forcing a failure. [ 121.161110][ T6636] name failslab, interval 1, probability 0, space 0, times 0 [ 121.175167][ T6636] CPU: 0 PID: 6636 Comm: syz.3.278 Not tainted syzkaller #0 [ 121.182500][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 121.192669][ T6636] Call Trace: [ 121.195965][ T6636] [ 121.198924][ T6636] dump_stack_lvl+0x18c/0x250 [ 121.203834][ T6636] ? show_regs_print_info+0x20/0x20 [ 121.209075][ T6636] ? load_image+0x400/0x400 [ 121.213612][ T6636] ? __might_sleep+0xe0/0xe0 [ 121.218229][ T6636] ? __lock_acquire+0x7d40/0x7d40 [ 121.223299][ T6636] should_fail_ex+0x39d/0x4d0 [ 121.227991][ T6636] should_failslab+0x9/0x20 [ 121.232498][ T6636] slab_pre_alloc_hook+0x59/0x310 [ 121.237526][ T6636] ? kasan_set_track+0x5f/0x70 [ 121.242290][ T6636] kmem_cache_alloc_node+0x60/0x320 [ 121.247494][ T6636] ? genl_rcv+0x28/0x40 [ 121.251648][ T6636] ? __alloc_skb+0x103/0x2c0 [ 121.256241][ T6636] __alloc_skb+0x103/0x2c0 [ 121.260668][ T6636] netlink_dump+0x1ec/0xe50 [ 121.265232][ T6636] ? netlink_lookup+0x200/0x200 [ 121.270122][ T6636] ? __asan_memset+0x22/0x40 [ 121.274729][ T6636] ? genl_start+0x493/0x6b0 [ 121.279234][ T6636] __netlink_dump_start+0x5f1/0x810 [ 121.284438][ T6636] genl_family_rcv_msg_dumpit+0x214/0x310 [ 121.290167][ T6636] ? genl_rcv_msg+0x7a0/0x7a0 [ 121.294839][ T6636] ? genl_get_cmd+0x7f1/0x920 [ 121.299515][ T6636] ? genl_family_rcv_msg_doit+0x310/0x310 [ 121.305227][ T6636] ? genl_start+0x6b0/0x6b0 [ 121.309722][ T6636] ? genl_dumpit+0x1a0/0x1a0 [ 121.314321][ T6636] genl_rcv_msg+0x5e5/0x7a0 [ 121.318824][ T6636] ? genl_bind+0x360/0x360 [ 121.323244][ T6636] ? macsec_netdev_is_offloaded+0x60/0x60 [ 121.328961][ T6636] ? ref_tracker_free+0x690/0x840 [ 121.333995][ T6636] netlink_rcv_skb+0x241/0x4d0 [ 121.338813][ T6636] ? genl_bind+0x360/0x360 [ 121.343245][ T6636] ? netlink_ack+0x1180/0x1180 [ 121.348070][ T6636] ? __lock_acquire+0x7d40/0x7d40 [ 121.353115][ T6636] ? down_read+0x1ac/0x2e0 [ 121.357531][ T6636] genl_rcv+0x28/0x40 [ 121.361512][ T6636] netlink_unicast+0x751/0x8d0 [ 121.366315][ T6636] netlink_sendmsg+0x8d0/0xbf0 [ 121.371082][ T6636] ? lockdep_hardirqs_on+0x98/0x150 [ 121.376366][ T6636] ? netlink_getsockopt+0x590/0x590 [ 121.381593][ T6636] ? netlink_getsockopt+0x590/0x590 [ 121.386810][ T6636] ____sys_sendmsg+0x5ba/0x960 [ 121.391593][ T6636] ? __asan_memset+0x22/0x40 [ 121.396221][ T6636] ? __sys_sendmsg_sock+0x30/0x30 [ 121.401254][ T6636] ? __import_iovec+0x5f2/0x850 [ 121.406117][ T6636] ? import_iovec+0x73/0xa0 [ 121.410703][ T6636] ___sys_sendmsg+0x2a6/0x360 [ 121.415400][ T6636] ? get_pid_task+0x20/0x1e0 [ 121.420009][ T6636] ? __sys_sendmsg+0x2a0/0x2a0 [ 121.424792][ T6636] ? __lock_acquire+0x7d40/0x7d40 [ 121.429937][ T6636] __se_sys_sendmsg+0x1c2/0x2b0 [ 121.434801][ T6636] ? __x64_sys_sendmsg+0x80/0x80 [ 121.439748][ T6636] ? lockdep_hardirqs_on+0x98/0x150 [ 121.444945][ T6636] do_syscall_64+0x55/0xa0 [ 121.449358][ T6636] ? clear_bhb_loop+0x40/0x90 [ 121.454034][ T6636] ? clear_bhb_loop+0x40/0x90 [ 121.458709][ T6636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.464596][ T6636] RIP: 0033:0x7fa743f9c799 [ 121.469105][ T6636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.488705][ T6636] RSP: 002b:00007fa744f4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.497119][ T6636] RAX: ffffffffffffffda RBX: 00007fa744215fa0 RCX: 00007fa743f9c799 [ 121.505088][ T6636] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 121.513056][ T6636] RBP: 00007fa744f4d090 R08: 0000000000000000 R09: 0000000000000000 [ 121.521106][ T6636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.529156][ T6636] R13: 00007fa744216038 R14: 00007fa744215fa0 R15: 00007fff5c306f08 [ 121.537133][ T6636] [ 122.489621][ T6656] netlink: 132 bytes leftover after parsing attributes in process `syz.0.288'. [ 123.614100][ T6663] netlink: 135856 bytes leftover after parsing attributes in process `syz.3.290'. [ 123.633940][ T6663] netlink: 8442 bytes leftover after parsing attributes in process `syz.3.290'. [ 124.497332][ T6656] netlink: 'syz.0.288': attribute type 10 has an invalid length. [ 124.515466][ T6656] team0: Device hsr_slave_0 failed to register rx_handler [ 124.989265][ T6666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.280804][ T6679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.561306][ T6676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.839137][ T6675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.658285][ T6705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.840648][ T6720] syz.1.311[6720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.840830][ T6720] syz.1.311[6720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.375013][ T6713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.029628][ T6731] netlink: 'syz.2.304': attribute type 4 has an invalid length. [ 129.058229][ T6731] netlink: 152 bytes leftover after parsing attributes in process `syz.2.304'. [ 129.097553][ T6731] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 129.208632][ T6733] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 129.215936][ T6733] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 129.317873][ T6737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.893395][ T6771] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 130.921582][ T6771] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 131.408292][ T6765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.455118][ T6809] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 132.479172][ T6809] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 132.606201][ T6812] netlink: 48 bytes leftover after parsing attributes in process `syz.3.346'. [ 133.113452][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.122142][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.323000][ T6824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.348'. [ 133.548223][ T6814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.129703][ T6842] netlink: 'syz.0.353': attribute type 10 has an invalid length. [ 134.210782][ T6842] netlink: 40 bytes leftover after parsing attributes in process `syz.0.353'. [ 134.345191][ T6842] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 134.365004][ T6836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.407155][ T6842] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.465241][ T6842] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 134.551170][ T6844] FAULT_INJECTION: forcing a failure. [ 134.551170][ T6844] name failslab, interval 1, probability 0, space 0, times 0 [ 134.728681][ T6844] CPU: 0 PID: 6844 Comm: syz.1.356 Not tainted syzkaller #0 [ 134.736063][ T6844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.746164][ T6844] Call Trace: [ 134.749489][ T6844] [ 134.752466][ T6844] dump_stack_lvl+0x18c/0x250 [ 134.757287][ T6844] ? sctp_sendmsg+0x1575/0x28c0 [ 134.762185][ T6844] ? ___sys_sendmsg+0x2a6/0x360 [ 134.767093][ T6844] ? show_regs_print_info+0x20/0x20 [ 134.772345][ T6844] ? load_image+0x400/0x400 [ 134.776926][ T6844] should_fail_ex+0x39d/0x4d0 [ 134.781667][ T6844] should_failslab+0x9/0x20 [ 134.786221][ T6844] slab_pre_alloc_hook+0x59/0x310 [ 134.791313][ T6844] ? sctp_add_bind_addr+0x8c/0x360 [ 134.796482][ T6844] __kmem_cache_alloc_node+0x53/0x250 [ 134.801916][ T6844] ? sctp_add_bind_addr+0x8c/0x360 [ 134.807090][ T6844] kmalloc_trace+0x2a/0xe0 [ 134.811653][ T6844] sctp_add_bind_addr+0x8c/0x360 [ 134.816645][ T6844] sctp_copy_local_addr_list+0x315/0x4f0 [ 134.822353][ T6844] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 134.828214][ T6844] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 134.834449][ T6844] ? sctp_v6_is_any+0x64/0x70 [ 134.839181][ T6844] ? sctp_copy_one_addr+0x8c/0x350 [ 134.844371][ T6844] sctp_bind_addr_copy+0xb3/0x3c0 [ 134.849555][ T6844] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 134.855948][ T6844] sctp_connect_new_asoc+0x2f9/0x6a0 [ 134.861292][ T6844] ? __sctp_connect+0xd80/0xd80 [ 134.866192][ T6844] ? __local_bh_enable_ip+0x13a/0x1c0 [ 134.871630][ T6844] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 134.877223][ T6844] ? security_sctp_bind_connect+0x89/0xb0 [ 134.882999][ T6844] sctp_sendmsg+0x1575/0x28c0 [ 134.887838][ T6844] ? sctp_getsockopt+0xb60/0xb60 [ 134.892834][ T6844] ? aa_sk_perm+0x83c/0x970 [ 134.897423][ T6844] ? aa_af_perm+0x330/0x330 [ 134.902000][ T6844] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 134.908482][ T6844] ? sock_rps_record_flow+0x19/0x3f0 [ 134.913821][ T6844] ? inet_sendmsg+0xe9/0x2f0 [ 134.918460][ T6844] ? inet_send_prepare+0x260/0x260 [ 134.923629][ T6844] ____sys_sendmsg+0x5ba/0x960 [ 134.928441][ T6844] ? __lock_acquire+0x7d40/0x7d40 [ 134.933530][ T6844] ? __asan_memset+0x22/0x40 [ 134.938164][ T6844] ? __sys_sendmsg_sock+0x30/0x30 [ 134.943217][ T6844] ? __import_iovec+0x5f2/0x850 [ 134.948126][ T6844] ? import_iovec+0x73/0xa0 [ 134.952685][ T6844] ___sys_sendmsg+0x2a6/0x360 [ 134.957405][ T6844] ? __sys_sendmsg+0x2a0/0x2a0 [ 134.962254][ T6844] ? __lock_acquire+0x7d40/0x7d40 [ 134.967376][ T6844] __se_sys_sendmsg+0x1c2/0x2b0 [ 134.972280][ T6844] ? __x64_sys_sendmsg+0x80/0x80 [ 134.977293][ T6844] ? lockdep_hardirqs_on+0x98/0x150 [ 134.982542][ T6844] do_syscall_64+0x55/0xa0 [ 134.987005][ T6844] ? clear_bhb_loop+0x40/0x90 [ 134.991720][ T6844] ? clear_bhb_loop+0x40/0x90 [ 134.996445][ T6844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.002378][ T6844] RIP: 0033:0x7f528819c799 [ 135.006836][ T6844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.026485][ T6844] RSP: 002b:00007f5289045028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.035032][ T6844] RAX: ffffffffffffffda RBX: 00007f5288415fa0 RCX: 00007f528819c799 [ 135.043047][ T6844] RDX: 0000000030008041 RSI: 0000200000002dc0 RDI: 0000000000000005 [ 135.051067][ T6844] RBP: 00007f5289045090 R08: 0000000000000000 R09: 0000000000000000 [ 135.059165][ T6844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.067170][ T6844] R13: 00007f5288416038 R14: 00007f5288415fa0 R15: 00007ffd0fb11cb8 [ 135.075210][ T6844] [ 135.459833][ T6855] netlink: 56843 bytes leftover after parsing attributes in process `syz.1.362'. [ 135.497812][ T6856] FAULT_INJECTION: forcing a failure. [ 135.497812][ T6856] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 135.520678][ T6856] CPU: 0 PID: 6856 Comm: syz.0.361 Not tainted syzkaller #0 [ 135.528025][ T6856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 135.538624][ T6856] Call Trace: [ 135.541943][ T6856] [ 135.544888][ T6856] dump_stack_lvl+0x18c/0x250 [ 135.549576][ T6856] ? show_regs_print_info+0x20/0x20 [ 135.554775][ T6856] ? load_image+0x400/0x400 [ 135.559276][ T6856] ? __might_fault+0xaa/0x120 [ 135.563945][ T6856] ? __lock_acquire+0x7d40/0x7d40 [ 135.568956][ T6856] ? unix_ioctl+0x261/0x670 [ 135.573482][ T6856] should_fail_ex+0x39d/0x4d0 [ 135.578181][ T6856] _copy_from_user+0x2f/0xe0 [ 135.582785][ T6856] sock_do_ioctl+0x190/0x310 [ 135.587547][ T6856] ? sock_show_fdinfo+0xb0/0xb0 [ 135.592406][ T6856] sock_ioctl+0x5ba/0x7e0 [ 135.596992][ T6856] ? sock_poll+0x3e0/0x3e0 [ 135.601416][ T6856] ? bpf_lsm_file_ioctl+0x9/0x10 [ 135.606435][ T6856] ? security_file_ioctl+0x80/0xa0 [ 135.611539][ T6856] ? sock_poll+0x3e0/0x3e0 [ 135.615948][ T6856] __se_sys_ioctl+0xfd/0x170 [ 135.620532][ T6856] do_syscall_64+0x55/0xa0 [ 135.624943][ T6856] ? clear_bhb_loop+0x40/0x90 [ 135.629612][ T6856] ? clear_bhb_loop+0x40/0x90 [ 135.634284][ T6856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.640180][ T6856] RIP: 0033:0x7f47bff9c799 [ 135.644588][ T6856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.664189][ T6856] RSP: 002b:00007f47c0ecc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.672598][ T6856] RAX: ffffffffffffffda RBX: 00007f47c0215fa0 RCX: 00007f47bff9c799 [ 135.680572][ T6856] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 135.688541][ T6856] RBP: 00007f47c0ecc090 R08: 0000000000000000 R09: 0000000000000000 [ 135.696513][ T6856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.704480][ T6856] R13: 00007f47c0216038 R14: 00007f47c0215fa0 R15: 00007ffc95c5b148 [ 135.712464][ T6856] [ 135.882775][ T6860] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.364'. [ 136.528943][ T6873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.606841][ T6873] netlink: 'syz.0.368': attribute type 21 has an invalid length. [ 136.648247][ T6873] netlink: 156 bytes leftover after parsing attributes in process `syz.0.368'. [ 137.095780][ T6867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.158858][ T6907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.381'. [ 138.243025][ T6907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.381'. [ 138.277319][ T6908] netlink: 'syz.1.379': attribute type 29 has an invalid length. [ 138.278409][ T6905] netlink: 14 bytes leftover after parsing attributes in process `syz.1.379'. [ 141.038657][ T6903] FAULT_INJECTION: forcing a failure. [ 141.038657][ T6903] name failslab, interval 1, probability 0, space 0, times 0 [ 141.066385][ T6903] CPU: 1 PID: 6903 Comm: syz.2.380 Not tainted syzkaller #0 [ 141.073766][ T6903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.084046][ T6903] Call Trace: [ 141.087374][ T6903] [ 141.090357][ T6903] dump_stack_lvl+0x18c/0x250 [ 141.095117][ T6903] ? show_regs_print_info+0x20/0x20 [ 141.100370][ T6903] ? load_image+0x400/0x400 [ 141.104909][ T6903] ? __might_sleep+0xe0/0xe0 [ 141.109523][ T6903] ? __lock_acquire+0x7d40/0x7d40 [ 141.114573][ T6903] should_fail_ex+0x39d/0x4d0 [ 141.119282][ T6903] should_failslab+0x9/0x20 [ 141.123797][ T6903] slab_pre_alloc_hook+0x59/0x310 [ 141.128847][ T6903] ? mas_next_slot+0x915/0x980 [ 141.133630][ T6903] ? task_numa_work+0x92d/0x1360 [ 141.138681][ T6903] __kmem_cache_alloc_node+0x53/0x250 [ 141.144106][ T6903] ? task_numa_work+0x92d/0x1360 [ 141.149068][ T6903] kmalloc_trace+0x2a/0xe0 [ 141.153515][ T6903] task_numa_work+0x92d/0x1360 [ 141.158355][ T6903] ? init_numa_balancing+0x400/0x400 [ 141.163658][ T6903] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 141.169696][ T6903] ? _raw_spin_unlock_irq+0x23/0x50 [ 141.174945][ T6903] ? lockdep_hardirqs_on+0x98/0x150 [ 141.180205][ T6903] task_work_run+0x1d4/0x260 [ 141.184823][ T6903] ? task_work_cancel+0x220/0x220 [ 141.189877][ T6903] ? check_and_init_map_value+0x330/0x330 [ 141.195688][ T6903] ? bpf_prog_test_run_skb+0xd73/0x12b0 [ 141.201262][ T6903] get_signal+0x1235/0x13f0 [ 141.205954][ T6903] ? bpf_prog_put+0x263/0x270 [ 141.210754][ T6903] ? bpf_prog_free_id+0x170/0x170 [ 141.215811][ T6903] ? cpu_online+0x60/0x60 [ 141.220176][ T6903] arch_do_signal_or_restart+0xc2/0x800 [ 141.225747][ T6903] ? get_sigframe_size+0x20/0x20 [ 141.230732][ T6903] ? perf_trace_preemptirq_template+0xac/0x330 [ 141.236980][ T6903] ? exit_to_user_mode_loop+0x3b/0x110 [ 141.242476][ T6903] exit_to_user_mode_loop+0x70/0x110 [ 141.247828][ T6903] exit_to_user_mode_prepare+0xee/0x180 [ 141.253408][ T6903] syscall_exit_to_user_mode+0x1a/0x50 [ 141.258884][ T6903] do_syscall_64+0x61/0xa0 [ 141.263313][ T6903] ? clear_bhb_loop+0x40/0x90 [ 141.268048][ T6903] ? clear_bhb_loop+0x40/0x90 [ 141.272763][ T6903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.278711][ T6903] RIP: 0033:0x7f938379c799 [ 141.283142][ T6903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.302850][ T6903] RSP: 002b:00007f9384586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 141.311315][ T6903] RAX: fffffffffffffffc RBX: 00007f9383a15fa0 RCX: 00007f938379c799 [ 141.319303][ T6903] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 141.327289][ T6903] RBP: 00007f9384586090 R08: 0000000000000000 R09: 0000000000000000 [ 141.335286][ T6903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.343358][ T6903] R13: 00007f9383a16038 R14: 00007f9383a15fa0 R15: 00007fff03e904a8 [ 141.351380][ T6903] [ 141.519892][ T6905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.605142][ T6905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.645254][ T6905] bond0 (unregistering): Released all slaves [ 141.735651][ T6907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.381'. [ 141.749103][ T6908] netlink: 'syz.1.379': attribute type 29 has an invalid length. [ 142.639031][ T6917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.807828][ T6932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.048793][ T6934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.690819][ T6954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.046392][ T6963] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.400'. [ 144.108852][ T6963] bridge_slave_1: default FDB implementation only supports local addresses [ 144.166843][ T6964] netlink: 'syz.2.400': attribute type 33 has an invalid length. [ 144.177811][ T6964] netlink: 152 bytes leftover after parsing attributes in process `syz.2.400'. [ 144.297120][ T6966] delete_channel: no stack [ 144.572059][ T6976] netlink: 'syz.2.405': attribute type 10 has an invalid length. [ 144.966972][ T6981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.974392][ T6983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.222324][ T7007] delete_channel: no stack [ 146.477927][ T7015] netlink: 'syz.1.417': attribute type 12 has an invalid length. [ 146.505716][ T7015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.417'. [ 146.555463][ T7015] netlink: 'syz.1.417': attribute type 12 has an invalid length. [ 146.582645][ T7015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.417'. [ 146.617978][ T7003] netlink: 'syz.3.415': attribute type 10 has an invalid length. [ 146.706946][ T7012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.767697][ T7003] team0: Device ipvlan1 failed to register rx_handler [ 146.909791][ T7015] netlink: 'syz.1.417': attribute type 12 has an invalid length. [ 146.926024][ T7015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.417'. [ 146.936357][ T7015] netlink: 'syz.1.417': attribute type 12 has an invalid length. [ 146.949858][ T7015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.417'. [ 146.960022][ T7015] netlink: 'syz.1.417': attribute type 12 has an invalid length. [ 146.968432][ T7015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.417'. [ 146.977720][ T7015] netlink: 'syz.1.417': attribute type 12 has an invalid length. [ 146.987715][ T7015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.417'. [ 147.001646][ T7015] netlink: 'syz.1.417': attribute type 12 has an invalid length. [ 147.015615][ T7015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.417'. [ 147.037740][ T7015] netlink: 'syz.1.417': attribute type 12 has an invalid length. [ 147.051661][ T7015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.417'. [ 147.054918][ T7020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.065037][ T7015] netlink: 'syz.1.417': attribute type 12 has an invalid length. [ 147.091840][ T7015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.417'. [ 147.108211][ T7015] netlink: 'syz.1.417': attribute type 12 has an invalid length. [ 147.125321][ T7015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.417'. [ 147.135061][ T7015] netlink: 'syz.1.417': attribute type 12 has an invalid length. [ 147.171275][ T7015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.417'. [ 147.216811][ T7015] netlink: 'syz.1.417': attribute type 12 has an invalid length. [ 147.236891][ T7015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.417'. [ 147.956838][ T7042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.079249][ T7046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.616309][ T7053] team0: Device ipvlan1 failed to register rx_handler [ 148.979431][ T7072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.090612][ T7053] syz.1.433 (7053) used greatest stack depth: 18992 bytes left [ 149.113155][ T7080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.144233][ T7077] syzkaller0: entered promiscuous mode [ 149.158290][ T7077] syzkaller0: entered allmulticast mode [ 149.443718][ T7083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.275837][ T7102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.242092][ T7106] validate_nla: 22 callbacks suppressed [ 152.242107][ T7106] netlink: 'syz.2.452': attribute type 10 has an invalid length. [ 152.259803][ T7106] __nla_validate_parse: 24 callbacks suppressed [ 152.259816][ T7106] netlink: 40 bytes leftover after parsing attributes in process `syz.2.452'. [ 152.276075][ T7106] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 152.316883][ T7113] netlink: 'syz.0.454': attribute type 10 has an invalid length. [ 152.334214][ T7113] team0: Device ipvlan1 failed to register rx_handler [ 152.591685][ T7121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.006643][ T7134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.273275][ T7171] FAULT_INJECTION: forcing a failure. [ 154.273275][ T7171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.316188][ T7169] netlink: 'syz.1.473': attribute type 4 has an invalid length. [ 154.324883][ T7171] CPU: 0 PID: 7171 Comm: syz.3.474 Not tainted syzkaller #0 [ 154.332209][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 154.342356][ T7171] Call Trace: [ 154.345639][ T7171] [ 154.348576][ T7171] dump_stack_lvl+0x18c/0x250 [ 154.353300][ T7171] ? show_regs_print_info+0x20/0x20 [ 154.358532][ T7171] ? load_image+0x400/0x400 [ 154.363139][ T7171] ? __might_fault+0xaa/0x120 [ 154.367909][ T7171] ? __lock_acquire+0x7d40/0x7d40 [ 154.372947][ T7171] should_fail_ex+0x39d/0x4d0 [ 154.377648][ T7171] _copy_from_user+0x2f/0xe0 [ 154.382251][ T7171] ___sys_sendmsg+0x1c7/0x360 [ 154.386939][ T7171] ? __sys_sendmsg+0x2a0/0x2a0 [ 154.391744][ T7171] ? __lock_acquire+0x7d40/0x7d40 [ 154.396915][ T7171] __se_sys_sendmsg+0x1c2/0x2b0 [ 154.401862][ T7171] ? __x64_sys_sendmsg+0x80/0x80 [ 154.406820][ T7171] ? lockdep_hardirqs_on+0x98/0x150 [ 154.412032][ T7171] do_syscall_64+0x55/0xa0 [ 154.416540][ T7171] ? clear_bhb_loop+0x40/0x90 [ 154.421223][ T7171] ? clear_bhb_loop+0x40/0x90 [ 154.425907][ T7171] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.431905][ T7171] RIP: 0033:0x7fa743f9c799 [ 154.436339][ T7171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.455952][ T7171] RSP: 002b:00007fa744f4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.464383][ T7171] RAX: ffffffffffffffda RBX: 00007fa744215fa0 RCX: 00007fa743f9c799 [ 154.472357][ T7171] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 154.480358][ T7171] RBP: 00007fa744f4d090 R08: 0000000000000000 R09: 0000000000000000 [ 154.488354][ T7171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.496344][ T7171] R13: 00007fa744216038 R14: 00007fa744215fa0 R15: 00007fff5c306f08 [ 154.504349][ T7171] [ 154.866528][ T7180] netlink: 'syz.1.477': attribute type 25 has an invalid length. [ 156.607417][ T7216] netlink: 'syz.3.492': attribute type 12 has an invalid length. [ 156.618335][ T7216] netlink: 120 bytes leftover after parsing attributes in process `syz.3.492'. [ 157.014796][ T7227] netlink: 14 bytes leftover after parsing attributes in process `syz.0.497'. [ 157.936473][ T7240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.613107][ T7269] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.515'. [ 158.649314][ T7269] bridge_slave_1: default FDB implementation only supports local addresses [ 159.325004][ T7267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.434876][ T7275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.372545][ T7303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.072550][ T7325] netlink: 44 bytes leftover after parsing attributes in process `syz.3.534'. [ 161.116714][ T7318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.127458][ T7325] bridge_slave_0: entered allmulticast mode [ 161.765609][ T7337] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.538'. [ 162.814266][ T7358] netlink: 48 bytes leftover after parsing attributes in process `syz.2.547'. [ 163.151858][ T7366] netlink: 20503 bytes leftover after parsing attributes in process `syz.2.549'. [ 163.240914][ T7351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.486254][ T7381] netlink: 'syz.2.556': attribute type 10 has an invalid length. [ 164.510578][ T7381] netlink: 40 bytes leftover after parsing attributes in process `syz.2.556'. [ 164.542523][ T7381] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 164.561191][ T7381] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.620704][ T7381] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 164.655917][ T7399] FAULT_INJECTION: forcing a failure. [ 164.655917][ T7399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.678165][ T7399] CPU: 1 PID: 7399 Comm: syz.3.561 Not tainted syzkaller #0 [ 164.685509][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 164.695591][ T7399] Call Trace: [ 164.698904][ T7399] [ 164.701856][ T7399] dump_stack_lvl+0x18c/0x250 [ 164.706567][ T7399] ? show_regs_print_info+0x20/0x20 [ 164.711976][ T7399] ? load_image+0x400/0x400 [ 164.716512][ T7399] ? __might_fault+0xaa/0x120 [ 164.721301][ T7399] ? __lock_acquire+0x7d40/0x7d40 [ 164.726360][ T7399] should_fail_ex+0x39d/0x4d0 [ 164.731077][ T7399] _copy_from_user+0x2f/0xe0 [ 164.735750][ T7399] dev_ethtool+0xc6/0x18d0 [ 164.740207][ T7399] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 164.746478][ T7399] ? __lock_acquire+0x7d40/0x7d40 [ 164.751536][ T7399] ? __might_fault+0xaa/0x120 [ 164.756239][ T7399] ? full_name_hash+0x92/0xe0 [ 164.761125][ T7399] ? dev_load+0x21/0x1f0 [ 164.765400][ T7399] dev_ioctl+0x392/0x1140 [ 164.769766][ T7399] sock_do_ioctl+0x239/0x310 [ 164.774387][ T7399] ? sock_show_fdinfo+0xb0/0xb0 [ 164.779281][ T7399] sock_ioctl+0x5ba/0x7e0 [ 164.783626][ T7399] ? sock_poll+0x3e0/0x3e0 [ 164.788079][ T7399] ? bpf_lsm_file_ioctl+0x9/0x10 [ 164.793019][ T7399] ? security_file_ioctl+0x80/0xa0 [ 164.798130][ T7399] ? sock_poll+0x3e0/0x3e0 [ 164.802628][ T7399] __se_sys_ioctl+0xfd/0x170 [ 164.807218][ T7399] do_syscall_64+0x55/0xa0 [ 164.811724][ T7399] ? clear_bhb_loop+0x40/0x90 [ 164.816400][ T7399] ? clear_bhb_loop+0x40/0x90 [ 164.821073][ T7399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.826964][ T7399] RIP: 0033:0x7fa743f9c799 [ 164.831373][ T7399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.851260][ T7399] RSP: 002b:00007fa744f4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.859844][ T7399] RAX: ffffffffffffffda RBX: 00007fa744215fa0 RCX: 00007fa743f9c799 [ 164.867819][ T7399] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 164.875789][ T7399] RBP: 00007fa744f4d090 R08: 0000000000000000 R09: 0000000000000000 [ 164.883755][ T7399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.891755][ T7399] R13: 00007fa744216038 R14: 00007fa744215fa0 R15: 00007fff5c306f08 [ 164.899733][ T7399] [ 165.550592][ T7396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.699081][ T7434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.042547][ T7441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.321718][ T7463] netlink: 'syz.3.585': attribute type 39 has an invalid length. [ 170.068500][ T7484] netlink: 60 bytes leftover after parsing attributes in process `syz.1.592'. [ 170.086517][ T7472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.134617][ T7489] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.594'. [ 170.781274][ T7509] netlink: 'syz.2.604': attribute type 1 has an invalid length. [ 170.950525][ T7513] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.605'. [ 171.145588][ T7516] netlink: 60 bytes leftover after parsing attributes in process `syz.0.606'. [ 171.221097][ T7510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.617824][ T7523] delete_channel: no stack [ 171.999506][ T7530] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.611'. [ 172.017563][ T7530] bridge_slave_1: default FDB implementation only supports local addresses [ 172.082761][ T7533] netlink: 'syz.1.611': attribute type 33 has an invalid length. [ 172.090780][ T7537] netlink: 'syz.2.614': attribute type 3 has an invalid length. [ 172.090834][ T7537] netlink: 'syz.2.614': attribute type 8 has an invalid length. [ 172.090852][ T7537] netlink: 'syz.2.614': attribute type 6 has an invalid length. [ 172.090871][ T7537] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.614'. [ 172.124954][ T7533] netlink: 152 bytes leftover after parsing attributes in process `syz.1.611'. [ 172.765059][ T7543] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.616'. [ 172.898274][ T7544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.036457][ T7548] netlink: 'syz.1.618': attribute type 17 has an invalid length. [ 173.037385][ T7550] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.619'. [ 173.046053][ T7548] netlink: 152 bytes leftover after parsing attributes in process `syz.1.618'. [ 173.064868][ T7548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.698818][ T7561] delete_channel: no stack [ 174.269108][ T7566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.626945][ T7600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.765359][ T7607] __nla_validate_parse: 6 callbacks suppressed [ 175.765375][ T7607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.644'. [ 177.066153][ T7634] netlink: 60 bytes leftover after parsing attributes in process `syz.2.655'. [ 177.210931][ T7644] netlink: 'syz.0.658': attribute type 10 has an invalid length. [ 177.223750][ T7644] netlink: 40 bytes leftover after parsing attributes in process `syz.0.658'. [ 177.255632][ T7644] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 177.273463][ T7644] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 177.303531][ T7644] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 177.568906][ T7645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.570848][ T7659] netlink: 'syz.0.665': attribute type 27 has an invalid length. [ 178.351134][ T7672] netlink: 60 bytes leftover after parsing attributes in process `syz.1.669'. [ 178.719822][ T7689] FAULT_INJECTION: forcing a failure. [ 178.719822][ T7689] name failslab, interval 1, probability 0, space 0, times 0 [ 178.772963][ T7689] CPU: 1 PID: 7689 Comm: syz.0.678 Not tainted syzkaller #0 [ 178.780322][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 178.790517][ T7689] Call Trace: [ 178.793841][ T7689] [ 178.796818][ T7689] dump_stack_lvl+0x18c/0x250 [ 178.801640][ T7689] ? show_regs_print_info+0x20/0x20 [ 178.806898][ T7689] ? load_image+0x400/0x400 [ 178.811473][ T7689] ? __might_sleep+0xe0/0xe0 [ 178.816112][ T7689] ? __lock_acquire+0x7d40/0x7d40 [ 178.821196][ T7689] should_fail_ex+0x39d/0x4d0 [ 178.825938][ T7689] should_failslab+0x9/0x20 [ 178.830495][ T7689] slab_pre_alloc_hook+0x59/0x310 [ 178.835637][ T7689] ? __lock_acquire+0x7d40/0x7d40 [ 178.840856][ T7689] kmem_cache_alloc_node+0x60/0x320 [ 178.846065][ T7689] ? __alloc_skb+0x103/0x2c0 [ 178.850679][ T7689] __alloc_skb+0x103/0x2c0 [ 178.855108][ T7689] netlink_sendmsg+0x66a/0xbf0 [ 178.859881][ T7689] ? perf_trace_lock+0x304/0x3b0 [ 178.864845][ T7689] ? netlink_getsockopt+0x590/0x590 [ 178.870055][ T7689] ? aa_sock_msg_perm+0x94/0x150 [ 178.874998][ T7689] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 178.880285][ T7689] ? security_socket_sendmsg+0x80/0xa0 [ 178.885750][ T7689] ? netlink_getsockopt+0x590/0x590 [ 178.890958][ T7689] ____sys_sendmsg+0x5ba/0x960 [ 178.895954][ T7689] ? __asan_memset+0x22/0x40 [ 178.900559][ T7689] ? __sys_sendmsg_sock+0x30/0x30 [ 178.905585][ T7689] ? __import_iovec+0x5f2/0x850 [ 178.910458][ T7689] ? import_iovec+0x73/0xa0 [ 178.914964][ T7689] ___sys_sendmsg+0x2a6/0x360 [ 178.919655][ T7689] ? __sys_sendmsg+0x2a0/0x2a0 [ 178.924445][ T7689] ? __lock_acquire+0x7d40/0x7d40 [ 178.929512][ T7689] __se_sys_sendmsg+0x1c2/0x2b0 [ 178.934369][ T7689] ? __x64_sys_sendmsg+0x80/0x80 [ 178.939329][ T7689] ? lockdep_hardirqs_on+0x98/0x150 [ 178.944535][ T7689] do_syscall_64+0x55/0xa0 [ 178.948953][ T7689] ? clear_bhb_loop+0x40/0x90 [ 178.953625][ T7689] ? clear_bhb_loop+0x40/0x90 [ 178.958308][ T7689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.964204][ T7689] RIP: 0033:0x7f47bff9c799 [ 178.968622][ T7689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.988314][ T7689] RSP: 002b:00007f47c0ecc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.996734][ T7689] RAX: ffffffffffffffda RBX: 00007f47c0215fa0 RCX: 00007f47bff9c799 [ 179.004708][ T7689] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 179.012678][ T7689] RBP: 00007f47c0ecc090 R08: 0000000000000000 R09: 0000000000000000 [ 179.020650][ T7689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.028618][ T7689] R13: 00007f47c0216038 R14: 00007f47c0215fa0 R15: 00007ffc95c5b148 [ 179.036609][ T7689] [ 179.124966][ T7684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.744116][ T7704] netlink: 'syz.1.684': attribute type 4 has an invalid length. [ 179.944803][ T7706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.685'. [ 180.602185][ T7718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.405524][ T7743] netlink: 'syz.3.700': attribute type 39 has an invalid length. [ 182.043492][ T7754] netlink: 'syz.2.705': attribute type 12 has an invalid length. [ 182.071802][ T7754] netlink: 120 bytes leftover after parsing attributes in process `syz.2.705'. [ 182.389981][ T7758] netlink: 132 bytes leftover after parsing attributes in process `syz.3.707'. [ 183.012380][ T7758] netlink: 'syz.3.707': attribute type 10 has an invalid length. [ 183.023024][ T7758] team0: Device hsr_slave_0 failed to register rx_handler [ 184.228373][ T7794] netlink: 'syz.0.720': attribute type 10 has an invalid length. [ 184.266277][ T7794] hsr0: entered promiscuous mode [ 186.399026][ T5083] Bluetooth: hci0: command 0x0406 tx timeout [ 186.405095][ T5769] Bluetooth: hci3: command 0x0406 tx timeout [ 186.405157][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 186.411205][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 187.642900][ T7836] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.736'. [ 187.655977][ T7836] bridge_slave_1: default FDB implementation only supports local addresses [ 187.707610][ T7838] netlink: 152 bytes leftover after parsing attributes in process `syz.0.737'. [ 187.752531][ T7838] netlink: 6 bytes leftover after parsing attributes in process `syz.0.737'. [ 188.289510][ T7856] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.297817][ T7856] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.321310][ T7856] bridge0: entered allmulticast mode [ 188.854228][ T7871] netlink: 60 bytes leftover after parsing attributes in process `syz.0.746'. [ 190.633114][ T7901] netlink: 60 bytes leftover after parsing attributes in process `syz.1.758'. [ 193.533837][ T7895] IPv6: Can't replace route, no match found [ 194.563892][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.570449][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.762538][ T7924] FAULT_INJECTION: forcing a failure. [ 194.762538][ T7924] name failslab, interval 1, probability 0, space 0, times 0 [ 194.827743][ T7924] CPU: 1 PID: 7924 Comm: syz.1.766 Not tainted syzkaller #0 [ 194.835105][ T7924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.845196][ T7924] Call Trace: [ 194.848499][ T7924] [ 194.851453][ T7924] dump_stack_lvl+0x18c/0x250 [ 194.856172][ T7924] ? sctp_sendmsg+0x1575/0x28c0 [ 194.861057][ T7924] ? ___sys_sendmsg+0x2a6/0x360 [ 194.866389][ T7924] ? show_regs_print_info+0x20/0x20 [ 194.871634][ T7924] ? load_image+0x400/0x400 [ 194.876206][ T7924] should_fail_ex+0x39d/0x4d0 [ 194.880935][ T7924] should_failslab+0x9/0x20 [ 194.885554][ T7924] slab_pre_alloc_hook+0x59/0x310 [ 194.890591][ T7924] ? sctp_add_bind_addr+0x8c/0x360 [ 194.895706][ T7924] __kmem_cache_alloc_node+0x53/0x250 [ 194.901094][ T7924] ? sctp_add_bind_addr+0x8c/0x360 [ 194.906209][ T7924] kmalloc_trace+0x2a/0xe0 [ 194.910635][ T7924] sctp_add_bind_addr+0x8c/0x360 [ 194.915584][ T7924] sctp_copy_local_addr_list+0x315/0x4f0 [ 194.921279][ T7924] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 194.927003][ T7924] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 194.933170][ T7924] ? sctp_v6_is_any+0x64/0x70 [ 194.937849][ T7924] ? sctp_copy_one_addr+0x8c/0x350 [ 194.942974][ T7924] sctp_bind_addr_copy+0xb3/0x3c0 [ 194.948018][ T7924] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 194.954355][ T7924] sctp_connect_new_asoc+0x2f9/0x6a0 [ 194.959734][ T7924] ? __sctp_connect+0xd80/0xd80 [ 194.964580][ T7924] ? __local_bh_enable_ip+0x13a/0x1c0 [ 194.969960][ T7924] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 194.975513][ T7924] ? security_sctp_bind_connect+0x89/0xb0 [ 194.981244][ T7924] sctp_sendmsg+0x1575/0x28c0 [ 194.985942][ T7924] ? sctp_getsockopt+0xb60/0xb60 [ 194.990881][ T7924] ? aa_sk_perm+0x83c/0x970 [ 194.995398][ T7924] ? aa_af_perm+0x330/0x330 [ 194.999901][ T7924] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 195.006321][ T7924] ? sock_rps_record_flow+0x19/0x3f0 [ 195.011645][ T7924] ? inet_sendmsg+0xe9/0x2f0 [ 195.016239][ T7924] ? inet_send_prepare+0x260/0x260 [ 195.021352][ T7924] ____sys_sendmsg+0x5ba/0x960 [ 195.026119][ T7924] ? __lock_acquire+0x7d40/0x7d40 [ 195.031152][ T7924] ? __asan_memset+0x22/0x40 [ 195.035741][ T7924] ? __sys_sendmsg_sock+0x30/0x30 [ 195.040772][ T7924] ? __import_iovec+0x5f2/0x850 [ 195.045639][ T7924] ? import_iovec+0x73/0xa0 [ 195.050151][ T7924] ___sys_sendmsg+0x2a6/0x360 [ 195.054833][ T7924] ? __sys_sendmsg+0x2a0/0x2a0 [ 195.059765][ T7924] ? __lock_acquire+0x7d40/0x7d40 [ 195.064826][ T7924] __se_sys_sendmsg+0x1c2/0x2b0 [ 195.069795][ T7924] ? __x64_sys_sendmsg+0x80/0x80 [ 195.074860][ T7924] ? lockdep_hardirqs_on+0x98/0x150 [ 195.080074][ T7924] do_syscall_64+0x55/0xa0 [ 195.084513][ T7924] ? clear_bhb_loop+0x40/0x90 [ 195.089195][ T7924] ? clear_bhb_loop+0x40/0x90 [ 195.093875][ T7924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.099772][ T7924] RIP: 0033:0x7f528819c799 [ 195.104192][ T7924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.123822][ T7924] RSP: 002b:00007f5289045028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.132353][ T7924] RAX: ffffffffffffffda RBX: 00007f5288415fa0 RCX: 00007f528819c799 [ 195.140355][ T7924] RDX: 0000000030008041 RSI: 0000200000002dc0 RDI: 0000000000000005 [ 195.148334][ T7924] RBP: 00007f5289045090 R08: 0000000000000000 R09: 0000000000000000 [ 195.156304][ T7924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.164273][ T7924] R13: 00007f5288416038 R14: 00007f5288415fa0 R15: 00007ffd0fb11cb8 [ 195.172275][ T7924] [ 195.387300][ T7928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.768'. [ 196.320285][ T7950] netlink: 'syz.0.773': attribute type 1 has an invalid length. [ 196.348231][ T7950] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.773'. [ 196.478545][ T7952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.843057][ T7963] netlink: 60 bytes leftover after parsing attributes in process `syz.1.778'. [ 197.128958][ T7975] netlink: 'syz.0.783': attribute type 10 has an invalid length. [ 197.178969][ T7975] netlink: 55 bytes leftover after parsing attributes in process `syz.0.783'. [ 197.585938][ T7982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.966070][ T7985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.875948][ T5956] tipc: Subscription rejected, illegal request [ 201.329476][ T8015] netlink: 'syz.1.796': attribute type 10 has an invalid length. [ 201.391494][ T8015] netlink: 55 bytes leftover after parsing attributes in process `syz.1.796'. [ 201.560159][ T8020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.509709][ T8028] netlink: 14 bytes leftover after parsing attributes in process `syz.1.800'. [ 202.675983][ T8024] syzkaller0: entered promiscuous mode [ 202.707248][ T8024] syzkaller0: entered allmulticast mode [ 204.303479][ T8040] delete_channel: no stack [ 205.620756][ T8047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.916515][ T8059] FAULT_INJECTION: forcing a failure. [ 205.916515][ T8059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.966302][ T8058] netlink: 64 bytes leftover after parsing attributes in process `syz.0.810'. [ 205.975860][ T8059] CPU: 0 PID: 8059 Comm: syz.1.811 Not tainted syzkaller #0 [ 205.983169][ T8059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.993252][ T8059] Call Trace: [ 205.996548][ T8059] [ 205.999499][ T8059] dump_stack_lvl+0x18c/0x250 [ 206.004215][ T8059] ? show_regs_print_info+0x20/0x20 [ 206.009592][ T8059] ? load_image+0x400/0x400 [ 206.014130][ T8059] ? __might_fault+0xaa/0x120 [ 206.018821][ T8059] ? __lock_acquire+0x7d40/0x7d40 [ 206.023858][ T8059] ? __might_fault+0xaa/0x120 [ 206.028551][ T8059] should_fail_ex+0x39d/0x4d0 [ 206.033254][ T8059] _copy_from_iter+0x1d9/0x12e0 [ 206.038127][ T8059] ? __might_fault+0xaa/0x120 [ 206.042816][ T8059] ? _copy_from_iter+0x24e/0x12e0 [ 206.047918][ T8059] ? __virt_addr_valid+0x18c/0x540 [ 206.053046][ T8059] ? __lock_acquire+0x7d40/0x7d40 [ 206.058084][ T8059] ? copyout_mc+0x70/0x70 [ 206.062439][ T8059] ? copyout_mc+0x70/0x70 [ 206.066786][ T8059] ? __virt_addr_valid+0x18c/0x540 [ 206.071932][ T8059] ? page_copy_sane+0x16a/0x270 [ 206.076801][ T8059] copy_page_from_iter+0x7b/0x100 [ 206.081865][ T8059] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 206.087712][ T8059] tun_get_user+0x15db/0x3ca0 [ 206.092422][ T8059] ? aa_file_perm+0x11b/0xee0 [ 206.097122][ T8059] ? rcu_read_unlock+0xa0/0xa0 [ 206.101923][ T8059] ? tun_get+0x1c/0x2e0 [ 206.106087][ T8059] ? __lock_acquire+0x7d40/0x7d40 [ 206.111135][ T8059] ? tun_get+0x1c/0x2e0 [ 206.115307][ T8059] tun_chr_write_iter+0x119/0x200 [ 206.120435][ T8059] vfs_write+0x46c/0x990 [ 206.124703][ T8059] ? file_end_write+0x250/0x250 [ 206.129573][ T8059] ? __fget_files+0x43d/0x4b0 [ 206.134276][ T8059] ? __fdget_pos+0x1d8/0x330 [ 206.138907][ T8059] ? ksys_write+0x75/0x260 [ 206.143336][ T8059] ksys_write+0x150/0x260 [ 206.147681][ T8059] ? __ia32_sys_read+0x90/0x90 [ 206.152461][ T8059] ? lockdep_hardirqs_on+0x98/0x150 [ 206.157674][ T8059] do_syscall_64+0x55/0xa0 [ 206.162114][ T8059] ? clear_bhb_loop+0x40/0x90 [ 206.166814][ T8059] ? clear_bhb_loop+0x40/0x90 [ 206.171510][ T8059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.177414][ T8059] RIP: 0033:0x7f528819c799 [ 206.181837][ T8059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.201636][ T8059] RSP: 002b:00007f5289045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 206.210063][ T8059] RAX: ffffffffffffffda RBX: 00007f5288415fa0 RCX: 00007f528819c799 [ 206.218153][ T8059] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 00000000000000c8 [ 206.226144][ T8059] RBP: 00007f5289045090 R08: 0000000000000000 R09: 0000000000000000 [ 206.234169][ T8059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.242152][ T8059] R13: 00007f5288416038 R14: 00007f5288415fa0 R15: 00007ffd0fb11cb8 [ 206.250159][ T8059] [ 206.440730][ T8065] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 206.612332][ T8069] netlink: 60 bytes leftover after parsing attributes in process `syz.0.816'. [ 206.703676][ T8078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.095310][ T8082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.709826][ T8097] netlink: 60 bytes leftover after parsing attributes in process `syz.2.826'. [ 208.485018][ T8110] netlink: 144 bytes leftover after parsing attributes in process `syz.1.829'. [ 208.494739][ T8110] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 208.851141][ T8113] netlink: 'syz.1.830': attribute type 13 has an invalid length. [ 208.922703][ T8113] netlink: 164 bytes leftover after parsing attributes in process `syz.1.830'. [ 208.981605][ T8113] syz_tun: refused to change device tx_queue_len [ 208.995057][ T8117] netlink: 60 bytes leftover after parsing attributes in process `syz.2.831'. [ 209.039712][ T8114] netlink: 'syz.1.830': attribute type 11 has an invalid length. [ 209.227897][ T8126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.371625][ T8130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.426863][ T8134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.171683][ T8146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.842'. [ 210.974188][ T8151] syzkaller0: entered promiscuous mode [ 211.017136][ T8151] syzkaller0: entered allmulticast mode [ 211.302392][ T8164] netlink: 60 bytes leftover after parsing attributes in process `syz.3.846'. [ 211.502302][ T8168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.628880][ T8170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.143294][ T8182] netlink: 'syz.2.853': attribute type 4 has an invalid length. [ 213.143934][ T8180] FAULT_INJECTION: forcing a failure. [ 213.143934][ T8180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.190483][ T8180] CPU: 1 PID: 8180 Comm: syz.3.852 Not tainted syzkaller #0 [ 213.197817][ T8180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 213.207895][ T8180] Call Trace: [ 213.211187][ T8180] [ 213.214131][ T8180] dump_stack_lvl+0x18c/0x250 [ 213.218846][ T8180] ? show_regs_print_info+0x20/0x20 [ 213.224075][ T8180] ? load_image+0x400/0x400 [ 213.228616][ T8180] ? __lock_acquire+0x7d40/0x7d40 [ 213.233670][ T8180] ? snprintf+0xe9/0x140 [ 213.237926][ T8180] should_fail_ex+0x39d/0x4d0 [ 213.242618][ T8180] _copy_to_user+0x2f/0xa0 [ 213.247050][ T8180] simple_read_from_buffer+0xe7/0x150 [ 213.252435][ T8180] proc_fail_nth_read+0x1e8/0x260 [ 213.257457][ T8180] ? proc_fault_inject_write+0x360/0x360 [ 213.263101][ T8180] ? fsnotify_perm+0x271/0x5e0 [ 213.267896][ T8180] ? proc_fault_inject_write+0x360/0x360 [ 213.273576][ T8180] vfs_read+0x28b/0x970 [ 213.277778][ T8180] ? kernel_read+0x1e0/0x1e0 [ 213.282403][ T8180] ? __fget_files+0x28/0x4b0 [ 213.287018][ T8180] ? __fget_files+0x28/0x4b0 [ 213.291634][ T8180] ? __fget_files+0x43d/0x4b0 [ 213.296318][ T8180] ? __fdget_pos+0x2a3/0x330 [ 213.300906][ T8180] ? ksys_read+0x75/0x260 [ 213.305244][ T8180] ksys_read+0x150/0x260 [ 213.309485][ T8180] ? vfs_write+0x990/0x990 [ 213.313898][ T8180] ? lockdep_hardirqs_on+0x98/0x150 [ 213.319091][ T8180] do_syscall_64+0x55/0xa0 [ 213.323506][ T8180] ? clear_bhb_loop+0x40/0x90 [ 213.328177][ T8180] ? clear_bhb_loop+0x40/0x90 [ 213.332848][ T8180] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.338731][ T8180] RIP: 0033:0x7fa743f5cfce [ 213.343139][ T8180] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 213.362750][ T8180] RSP: 002b:00007fa744f4cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.371334][ T8180] RAX: ffffffffffffffda RBX: 00007fa744f4d6c0 RCX: 00007fa743f5cfce [ 213.379297][ T8180] RDX: 000000000000000f RSI: 00007fa744f4d0a0 RDI: 0000000000000007 [ 213.387267][ T8180] RBP: 00007fa744f4d090 R08: 0000000000000000 R09: 0000000000000000 [ 213.395230][ T8180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.403202][ T8180] R13: 00007fa744216038 R14: 00007fa744215fa0 R15: 00007fff5c306f08 [ 213.411177][ T8180] [ 213.563709][ T8187] netlink: 830 bytes leftover after parsing attributes in process `syz.2.855'. [ 213.691650][ T8190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.725486][ T8192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.742159][ T8195] netlink: 'syz.3.859': attribute type 12 has an invalid length. [ 213.750780][ T8195] netlink: 120 bytes leftover after parsing attributes in process `syz.3.859'. [ 213.942515][ T8201] netlink: 'syz.3.861': attribute type 2 has an invalid length. [ 213.953663][ T8201] netlink: 164 bytes leftover after parsing attributes in process `syz.3.861'. [ 214.079313][ T8205] FAULT_INJECTION: forcing a failure. [ 214.079313][ T8205] name failslab, interval 1, probability 0, space 0, times 0 [ 214.103734][ T8205] CPU: 1 PID: 8205 Comm: syz.2.864 Not tainted syzkaller #0 [ 214.111064][ T8205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.121124][ T8205] Call Trace: [ 214.124411][ T8205] [ 214.127349][ T8205] dump_stack_lvl+0x18c/0x250 [ 214.132037][ T8205] ? sctp_sendmsg+0x1575/0x28c0 [ 214.137072][ T8205] ? ___sys_sendmsg+0x2a6/0x360 [ 214.141925][ T8205] ? show_regs_print_info+0x20/0x20 [ 214.147129][ T8205] ? load_image+0x400/0x400 [ 214.151661][ T8205] should_fail_ex+0x39d/0x4d0 [ 214.156360][ T8205] should_failslab+0x9/0x20 [ 214.160905][ T8205] slab_pre_alloc_hook+0x59/0x310 [ 214.165947][ T8205] ? sctp_add_bind_addr+0x8c/0x360 [ 214.171062][ T8205] __kmem_cache_alloc_node+0x53/0x250 [ 214.176442][ T8205] ? sctp_add_bind_addr+0x8c/0x360 [ 214.181611][ T8205] kmalloc_trace+0x2a/0xe0 [ 214.186057][ T8205] sctp_add_bind_addr+0x8c/0x360 [ 214.191030][ T8205] sctp_copy_local_addr_list+0x315/0x4f0 [ 214.196689][ T8205] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 214.202423][ T8205] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 214.208526][ T8205] ? sctp_v6_is_any+0x64/0x70 [ 214.213221][ T8205] ? sctp_copy_one_addr+0x8c/0x350 [ 214.218352][ T8205] sctp_bind_addr_copy+0xb3/0x3c0 [ 214.223391][ T8205] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 214.229776][ T8205] sctp_connect_new_asoc+0x2f9/0x6a0 [ 214.235106][ T8205] ? __sctp_connect+0xd80/0xd80 [ 214.239971][ T8205] ? __local_bh_enable_ip+0x13a/0x1c0 [ 214.245360][ T8205] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 214.250996][ T8205] ? security_sctp_bind_connect+0x89/0xb0 [ 214.256727][ T8205] sctp_sendmsg+0x1575/0x28c0 [ 214.261433][ T8205] ? sctp_getsockopt+0xb60/0xb60 [ 214.266379][ T8205] ? aa_sk_perm+0x83c/0x970 [ 214.270902][ T8205] ? aa_af_perm+0x330/0x330 [ 214.275408][ T8205] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 214.281831][ T8205] ? sock_rps_record_flow+0x19/0x3f0 [ 214.287121][ T8205] ? inet_sendmsg+0xe9/0x2f0 [ 214.291716][ T8205] ? inet_send_prepare+0x260/0x260 [ 214.296833][ T8205] ____sys_sendmsg+0x5ba/0x960 [ 214.301689][ T8205] ? __lock_acquire+0x7d40/0x7d40 [ 214.306727][ T8205] ? __sys_sendmsg_sock+0x30/0x30 [ 214.311835][ T8205] ? __import_iovec+0x5f2/0x850 [ 214.316705][ T8205] ? import_iovec+0x73/0xa0 [ 214.321230][ T8205] ___sys_sendmsg+0x2a6/0x360 [ 214.325926][ T8205] ? __sys_sendmsg+0x2a0/0x2a0 [ 214.330739][ T8205] ? __lock_acquire+0x7d40/0x7d40 [ 214.335801][ T8205] __se_sys_sendmsg+0x1c2/0x2b0 [ 214.340657][ T8205] ? __x64_sys_sendmsg+0x80/0x80 [ 214.345617][ T8205] ? lockdep_hardirqs_on+0x98/0x150 [ 214.350826][ T8205] do_syscall_64+0x55/0xa0 [ 214.355252][ T8205] ? clear_bhb_loop+0x40/0x90 [ 214.359930][ T8205] ? clear_bhb_loop+0x40/0x90 [ 214.364698][ T8205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.370610][ T8205] RIP: 0033:0x7f938379c799 [ 214.375125][ T8205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.394738][ T8205] RSP: 002b:00007f9384586028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.403158][ T8205] RAX: ffffffffffffffda RBX: 00007f9383a15fa0 RCX: 00007f938379c799 [ 214.411129][ T8205] RDX: 00000000000480c4 RSI: 00002000000017c0 RDI: 0000000000000004 [ 214.419100][ T8205] RBP: 00007f9384586090 R08: 0000000000000000 R09: 0000000000000000 [ 214.427173][ T8205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 214.435146][ T8205] R13: 00007f9383a16038 R14: 00007f9383a15fa0 R15: 00007fff03e904a8 [ 214.443150][ T8205] [ 215.052993][ T8220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.525946][ T8224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.683088][ T8228] netlink: 14 bytes leftover after parsing attributes in process `syz.2.871'. [ 216.165638][ T8237] netlink: 'syz.0.874': attribute type 10 has an invalid length. [ 216.256112][ T8239] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.876'. [ 216.370318][ T8242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.627158][ T8248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.793910][ T8256] netlink: 196 bytes leftover after parsing attributes in process `syz.2.884'. [ 216.838109][ T8256] netlink: 'syz.2.884': attribute type 6 has an invalid length. [ 216.858524][ T8256] netlink: 196 bytes leftover after parsing attributes in process `syz.2.884'. [ 216.962549][ T8266] netlink: 132 bytes leftover after parsing attributes in process `syz.0.887'. [ 217.019017][ T8267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.270397][ T8277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.939162][ T8291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.197427][ T8298] netlink: 132 bytes leftover after parsing attributes in process `syz.2.901'. [ 218.541913][ T8306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.913975][ T8314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.954757][ T8316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.976309][ T8313] netlink: 'syz.2.907': attribute type 1 has an invalid length. [ 219.013688][ T8313] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.907'. [ 219.035078][ T8318] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.907'. [ 219.116764][ T8318] netlink: zone id is out of range [ 219.144767][ T8318] netlink: zone id is out of range [ 219.178517][ T8318] netlink: zone id is out of range [ 219.183693][ T8318] netlink: zone id is out of range [ 219.226992][ T8318] netlink: zone id is out of range [ 219.238362][ T8318] netlink: zone id is out of range [ 219.783525][ T8334] netlink: 60 bytes leftover after parsing attributes in process `syz.1.914'. [ 219.828616][ T8336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.856998][ T8339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.014543][ T8345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.171793][ T8353] FAULT_INJECTION: forcing a failure. [ 220.171793][ T8353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.194753][ T8353] CPU: 0 PID: 8353 Comm: syz.1.922 Not tainted syzkaller #0 [ 220.202180][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 220.212261][ T8353] Call Trace: [ 220.215559][ T8353] [ 220.218513][ T8353] dump_stack_lvl+0x18c/0x250 [ 220.223222][ T8353] ? show_regs_print_info+0x20/0x20 [ 220.228457][ T8353] ? load_image+0x400/0x400 [ 220.232989][ T8353] ? __might_fault+0xaa/0x120 [ 220.237688][ T8353] ? __lock_acquire+0x7d40/0x7d40 [ 220.242739][ T8353] should_fail_ex+0x39d/0x4d0 [ 220.247453][ T8353] _copy_from_user+0x2f/0xe0 [ 220.252073][ T8353] ethtool_set_channels+0x19a/0x670 [ 220.257316][ T8353] ? ethtool_get_channels+0x190/0x190 [ 220.262728][ T8353] ? apparmor_capable+0x137/0x1a0 [ 220.267794][ T8353] ? security_capable+0x89/0xb0 [ 220.272692][ T8353] dev_ethtool+0x1761/0x18d0 [ 220.277318][ T8353] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 220.283593][ T8353] ? __lock_acquire+0x7d40/0x7d40 [ 220.288733][ T8353] ? __might_fault+0xaa/0x120 [ 220.293434][ T8353] ? full_name_hash+0x92/0xe0 [ 220.298151][ T8353] ? dev_load+0x21/0x1f0 [ 220.302433][ T8353] dev_ioctl+0x392/0x1140 [ 220.306885][ T8353] sock_do_ioctl+0x239/0x310 [ 220.311539][ T8353] ? sock_show_fdinfo+0xb0/0xb0 [ 220.316427][ T8353] sock_ioctl+0x5ba/0x7e0 [ 220.320783][ T8353] ? sock_poll+0x3e0/0x3e0 [ 220.325233][ T8353] ? bpf_lsm_file_ioctl+0x9/0x10 [ 220.330202][ T8353] ? security_file_ioctl+0x80/0xa0 [ 220.335347][ T8353] ? sock_poll+0x3e0/0x3e0 [ 220.339785][ T8353] __se_sys_ioctl+0xfd/0x170 [ 220.344489][ T8353] do_syscall_64+0x55/0xa0 [ 220.348932][ T8353] ? clear_bhb_loop+0x40/0x90 [ 220.353630][ T8353] ? clear_bhb_loop+0x40/0x90 [ 220.358418][ T8353] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.364333][ T8353] RIP: 0033:0x7f528819c799 [ 220.368767][ T8353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.388397][ T8353] RSP: 002b:00007f5289045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.396853][ T8353] RAX: ffffffffffffffda RBX: 00007f5288415fa0 RCX: 00007f528819c799 [ 220.405026][ T8353] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 220.413033][ T8353] RBP: 00007f5289045090 R08: 0000000000000000 R09: 0000000000000000 [ 220.421028][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.429015][ T8353] R13: 00007f5288416038 R14: 00007f5288415fa0 R15: 00007ffd0fb11cb8 [ 220.437014][ T8353] [ 220.528929][ T8358] IPv6: Can't replace route, no match found [ 220.800282][ T8365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.841614][ T8368] netlink: 60 bytes leftover after parsing attributes in process `syz.0.928'. [ 221.505292][ T8372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.819917][ T8369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.415520][ T8392] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.935'. [ 224.423000][ T8395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.781848][ T8404] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.940'. [ 224.828209][ T8404] openvswitch: netlink: Duplicate key (type 0). [ 224.914680][ T8405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.044399][ T8408] netlink: 60 bytes leftover after parsing attributes in process `syz.3.942'. [ 227.633380][ T8430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.900480][ T8435] netlink: 60 bytes leftover after parsing attributes in process `syz.3.953'. [ 228.071157][ T8439] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.955'. [ 229.019894][ T8458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.174630][ T8463] netlink: 60 bytes leftover after parsing attributes in process `syz.3.965'. [ 229.713211][ T8472] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.968'. [ 229.724730][ T8472] bridge_slave_1: default FDB implementation only supports local addresses [ 229.743073][ T8474] netlink: 'syz.3.968': attribute type 33 has an invalid length. [ 229.785851][ T8474] netlink: 152 bytes leftover after parsing attributes in process `syz.3.968'. [ 230.167445][ T8490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.242002][ T8489] netlink: 132 bytes leftover after parsing attributes in process `syz.3.973'. [ 230.495141][ T8500] netlink: 60 bytes leftover after parsing attributes in process `syz.2.977'. [ 230.824115][ T8505] delete_channel: no stack [ 230.939597][ T8508] syzkaller0: entered promiscuous mode [ 230.959335][ T8508] syzkaller0: entered allmulticast mode [ 231.038577][ T8521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.006859][ T8523] delete_channel: no stack [ 233.345502][ T8528] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.986'. [ 233.354827][ T8528] bridge_slave_1: default FDB implementation only supports local addresses [ 233.619770][ T8536] netlink: 'syz.3.989': attribute type 1 has an invalid length. [ 233.634155][ T8538] netlink: 60 bytes leftover after parsing attributes in process `syz.1.990'. [ 233.920639][ T8543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.173028][ T8555] pim6reg1: entered promiscuous mode [ 234.182256][ T8555] pim6reg1: entered allmulticast mode [ 234.203752][ T8555] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.997'. [ 234.887828][ T8569] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1002'. [ 234.953038][ T8571] netlink: 'syz.0.1003': attribute type 4 has an invalid length. [ 234.961147][ T8571] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1003'. [ 234.983976][ T8571] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 235.188378][ T8573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.491932][ T8588] bridge0: port 3(team0) entered blocking state [ 235.525746][ T8588] bridge0: port 3(team0) entered disabled state [ 235.557752][ T8588] team0: entered allmulticast mode [ 235.583065][ T8588] team_slave_1: entered allmulticast mode [ 235.609961][ T8588] team0: entered promiscuous mode [ 235.618128][ T8588] team_slave_1: entered promiscuous mode [ 235.636985][ T8588] bridge0: port 3(team0) entered blocking state [ 235.643751][ T8588] bridge0: port 3(team0) entered listening state [ 235.664243][ T8590] netlink: 'syz.3.1012': attribute type 10 has an invalid length. [ 235.672503][ T8590] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1012'. [ 235.698836][ T8590] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 235.808781][ T8597] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1014'. [ 235.984310][ T8602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.382865][ T8612] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1017'. [ 236.623052][ T8617] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1021'. [ 236.788613][ T8620] netlink: 'syz.3.1023': attribute type 29 has an invalid length. [ 236.827499][ T8620] netlink: 'syz.3.1023': attribute type 29 has an invalid length. [ 236.976117][ T8625] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1025'. [ 237.276536][ T8629] netlink: 'syz.3.1026': attribute type 29 has an invalid length. [ 237.386523][ T8629] netlink: 'syz.3.1026': attribute type 29 has an invalid length. [ 237.457527][ T8633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.317169][ T8658] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1035'. [ 238.597228][ T8662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.932480][ T8675] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.1042'. [ 239.185423][ T8684] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1046'. [ 239.230593][ T8671] syzkaller0: entered promiscuous mode [ 239.254189][ T8671] syzkaller0: entered allmulticast mode [ 241.491665][ T8687] netlink: 'syz.0.1047': attribute type 33 has an invalid length. [ 241.499817][ T8687] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1047'. [ 241.711566][ T8695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.294906][ T8720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.412831][ T8723] netlink: 'syz.1.1056': attribute type 29 has an invalid length. [ 242.455135][ T8723] netlink: 'syz.1.1056': attribute type 29 has an invalid length. [ 243.257133][ T8736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.528241][ T8746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.718323][ T8753] bridge0: port 3(team0) entered blocking state [ 243.724729][ T8753] bridge0: port 3(team0) entered disabled state [ 243.805503][ T8753] team0: entered allmulticast mode [ 243.848085][ T8753] team_slave_0: entered allmulticast mode [ 243.891687][ T8753] team_slave_1: entered allmulticast mode [ 243.910543][ T8753] team0: entered promiscuous mode [ 243.923023][ T8753] team_slave_0: entered promiscuous mode [ 243.938284][ T8753] team_slave_1: entered promiscuous mode [ 245.583612][ T8776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.340710][ T8784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.657519][ T8790] netlink: 'syz.1.1078': attribute type 21 has an invalid length. [ 246.669952][ T8790] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1078'. [ 247.132896][ T8800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.028719][ T8810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.139508][ T8823] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1089'. [ 249.615904][ T8830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.147436][ T8837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.869075][ C0] bridge0: port 3(team0) entered learning state [ 251.335163][ T8844] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1098'. [ 252.765612][ T8844] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1098'. [ 252.890230][ T8852] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1099'. [ 253.156090][ T8856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.430409][ T8867] FAULT_INJECTION: forcing a failure. [ 253.430409][ T8867] name failslab, interval 1, probability 0, space 0, times 0 [ 253.466931][ T8867] CPU: 1 PID: 8867 Comm: syz.1.1105 Not tainted syzkaller #0 [ 253.474369][ T8867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.484474][ T8867] Call Trace: [ 253.487790][ T8867] [ 253.490750][ T8867] dump_stack_lvl+0x18c/0x250 [ 253.495472][ T8867] ? sctp_sendmsg+0x1575/0x28c0 [ 253.500352][ T8867] ? ___sys_sendmsg+0x2a6/0x360 [ 253.505321][ T8867] ? show_regs_print_info+0x20/0x20 [ 253.510647][ T8867] ? load_image+0x400/0x400 [ 253.515184][ T8867] should_fail_ex+0x39d/0x4d0 [ 253.519877][ T8867] should_failslab+0x9/0x20 [ 253.524389][ T8867] slab_pre_alloc_hook+0x59/0x310 [ 253.529439][ T8867] ? sctp_add_bind_addr+0x8c/0x360 [ 253.534566][ T8867] __kmem_cache_alloc_node+0x53/0x250 [ 253.539974][ T8867] ? sctp_add_bind_addr+0x8c/0x360 [ 253.545186][ T8867] kmalloc_trace+0x2a/0xe0 [ 253.549614][ T8867] sctp_add_bind_addr+0x8c/0x360 [ 253.554557][ T8867] sctp_copy_local_addr_list+0x315/0x4f0 [ 253.560201][ T8867] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 253.566013][ T8867] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 253.572098][ T8867] ? sctp_v6_is_any+0x64/0x70 [ 253.576786][ T8867] ? sctp_copy_one_addr+0x8c/0x350 [ 253.581914][ T8867] sctp_bind_addr_copy+0xb3/0x3c0 [ 253.586945][ T8867] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 253.593276][ T8867] sctp_connect_new_asoc+0x2f9/0x6a0 [ 253.598572][ T8867] ? __sctp_connect+0xd80/0xd80 [ 253.603432][ T8867] ? __local_bh_enable_ip+0x13a/0x1c0 [ 253.608813][ T8867] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 253.614362][ T8867] ? security_sctp_bind_connect+0x89/0xb0 [ 253.620126][ T8867] sctp_sendmsg+0x1575/0x28c0 [ 253.624820][ T8867] ? sctp_getsockopt+0xb60/0xb60 [ 253.629769][ T8867] ? aa_sk_perm+0x83c/0x970 [ 253.634339][ T8867] ? aa_af_perm+0x330/0x330 [ 253.638947][ T8867] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 253.645385][ T8867] ? sock_rps_record_flow+0x19/0x3f0 [ 253.650688][ T8867] ? inet_sendmsg+0xe9/0x2f0 [ 253.655287][ T8867] ? inet_send_prepare+0x260/0x260 [ 253.660404][ T8867] ____sys_sendmsg+0x5ba/0x960 [ 253.665183][ T8867] ? __lock_acquire+0x7d40/0x7d40 [ 253.670218][ T8867] ? __asan_memset+0x22/0x40 [ 253.674813][ T8867] ? __sys_sendmsg_sock+0x30/0x30 [ 253.679836][ T8867] ? __import_iovec+0x5f2/0x850 [ 253.684708][ T8867] ? import_iovec+0x73/0xa0 [ 253.689219][ T8867] ___sys_sendmsg+0x2a6/0x360 [ 253.693917][ T8867] ? __sys_sendmsg+0x2a0/0x2a0 [ 253.698712][ T8867] ? __lock_acquire+0x7d40/0x7d40 [ 253.703774][ T8867] __se_sys_sendmsg+0x1c2/0x2b0 [ 253.708648][ T8867] ? __x64_sys_sendmsg+0x80/0x80 [ 253.713610][ T8867] ? lockdep_hardirqs_on+0x98/0x150 [ 253.718819][ T8867] do_syscall_64+0x55/0xa0 [ 253.723249][ T8867] ? clear_bhb_loop+0x40/0x90 [ 253.727925][ T8867] ? clear_bhb_loop+0x40/0x90 [ 253.732612][ T8867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.738509][ T8867] RIP: 0033:0x7f528819c799 [ 253.742924][ T8867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.762802][ T8867] RSP: 002b:00007f5289045028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.771221][ T8867] RAX: ffffffffffffffda RBX: 00007f5288415fa0 RCX: 00007f528819c799 [ 253.779257][ T8867] RDX: 0000000030008041 RSI: 0000200000002dc0 RDI: 0000000000000005 [ 253.787235][ T8867] RBP: 00007f5289045090 R08: 0000000000000000 R09: 0000000000000000 [ 253.795205][ T8867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.803260][ T8867] R13: 00007f5288416038 R14: 00007f5288415fa0 R15: 00007ffd0fb11cb8 [ 253.811262][ T8867] [ 255.740803][ T8881] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1109'. [ 255.991649][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.998244][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.637349][ T8890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.750316][ T8909] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1119'. [ 257.963889][ T8916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.981604][ T8907] netlink: 'syz.2.1118': attribute type 10 has an invalid length. [ 258.020205][ T8907] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1118'. [ 258.341155][ T8924] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1130'. [ 258.681237][ T8935] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1128'. [ 258.736726][ T8940] netlink: 'syz.3.1128': attribute type 29 has an invalid length. [ 258.997801][ T8935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.115021][ T8935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.221774][ T8935] bond0 (unregistering): Released all slaves [ 259.351493][ T8940] netlink: 'syz.3.1128': attribute type 29 has an invalid length. [ 259.367357][ T8941] netlink: 'syz.3.1128': attribute type 29 has an invalid length. [ 259.456004][ T8946] netlink: 'syz.3.1128': attribute type 29 has an invalid length. [ 259.718627][ T8951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.129615][ T8961] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1136'. [ 260.240832][ T8958] netlink: 'syz.3.1134': attribute type 10 has an invalid length. [ 260.258440][ T8958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1134'. [ 260.289532][ T8958] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 260.298965][ T8958] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.349366][ T8958] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 260.477546][ T8969] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 260.497039][ T8969] pim6reg1: linktype set to 774 [ 260.582998][ T8970] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1138'. [ 260.596914][ T8970] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 260.845811][ T8973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.152497][ T8978] netlink: 'syz.1.1140': attribute type 4 has an invalid length. [ 261.163486][ T8981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.378461][ T8978] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1140'. [ 261.742363][ T8986] netlink: 'syz.0.1144': attribute type 10 has an invalid length. [ 261.781475][ T8986] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1144'. [ 261.826304][ T8986] batman_adv: batadv0: Adding interface: veth0_vlan [ 261.875803][ T8986] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.968240][ T8986] batman_adv: batadv0: Interface activated: veth0_vlan [ 262.678395][ T9002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.151422][ T9010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.942564][ T9021] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1156'. [ 263.965617][ T9027] netlink: 'syz.0.1156': attribute type 33 has an invalid length. [ 263.988893][ T9027] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1156'. [ 264.221235][ T9032] FAULT_INJECTION: forcing a failure. [ 264.221235][ T9032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.236822][ T9032] CPU: 0 PID: 9032 Comm: syz.1.1159 Not tainted syzkaller #0 [ 264.244234][ T9032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.254317][ T9032] Call Trace: [ 264.257605][ T9032] [ 264.260545][ T9032] dump_stack_lvl+0x18c/0x250 [ 264.265237][ T9032] ? show_regs_print_info+0x20/0x20 [ 264.270444][ T9032] ? load_image+0x400/0x400 [ 264.274951][ T9032] ? __might_fault+0xaa/0x120 [ 264.279630][ T9032] ? __lock_acquire+0x7d40/0x7d40 [ 264.284652][ T9032] should_fail_ex+0x39d/0x4d0 [ 264.289333][ T9032] _copy_from_user+0x2f/0xe0 [ 264.293935][ T9032] ___sys_sendmsg+0x1c7/0x360 [ 264.298607][ T9032] ? get_pid_task+0x20/0x1e0 [ 264.303208][ T9032] ? __sys_sendmsg+0x2a0/0x2a0 [ 264.307979][ T9032] ? __lock_acquire+0x7d40/0x7d40 [ 264.313079][ T9032] __se_sys_sendmsg+0x1c2/0x2b0 [ 264.317923][ T9032] ? __x64_sys_sendmsg+0x80/0x80 [ 264.322874][ T9032] ? lockdep_hardirqs_on+0x98/0x150 [ 264.328070][ T9032] do_syscall_64+0x55/0xa0 [ 264.332488][ T9032] ? clear_bhb_loop+0x40/0x90 [ 264.337160][ T9032] ? clear_bhb_loop+0x40/0x90 [ 264.341829][ T9032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.347713][ T9032] RIP: 0033:0x7f528819c799 [ 264.352124][ T9032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.371835][ T9032] RSP: 002b:00007f5289045028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.380251][ T9032] RAX: ffffffffffffffda RBX: 00007f5288415fa0 RCX: 00007f528819c799 [ 264.388220][ T9032] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 264.396184][ T9032] RBP: 00007f5289045090 R08: 0000000000000000 R09: 0000000000000000 [ 264.404153][ T9032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.412132][ T9032] R13: 00007f5288416038 R14: 00007f5288415fa0 R15: 00007ffd0fb11cb8 [ 264.420139][ T9032] [ 264.479175][ T9031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.789374][ T9046] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1163'. [ 264.839268][ T9049] netlink: 'syz.1.1163': attribute type 29 has an invalid length. [ 264.873127][ T9049] netlink: 'syz.1.1163': attribute type 29 has an invalid length. [ 264.891168][ T9046] netlink: 'syz.1.1163': attribute type 29 has an invalid length. [ 264.893826][ T9051] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1164'. [ 264.952923][ T9046] netlink: 'syz.1.1163': attribute type 29 has an invalid length. [ 265.068268][ T9054] veth0_vlan: entered allmulticast mode [ 265.484045][ T9063] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1177'. [ 265.520765][ T9064] netlink: 'syz.0.1177': attribute type 29 has an invalid length. [ 265.532381][ T9063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.557783][ T9063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.602419][ T9063] bond0 (unregistering): Released all slaves [ 265.710688][ T9061] netlink: 'syz.1.1168': attribute type 10 has an invalid length. [ 265.719989][ T9061] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1168'. [ 265.742630][ T9061] batman_adv: batadv0: Adding interface: veth0_vlan [ 265.760634][ T9061] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.808177][ T9061] batman_adv: batadv0: Interface activated: veth0_vlan [ 265.838188][ T9064] netlink: 'syz.0.1177': attribute type 29 has an invalid length. [ 265.977080][ T9077] FAULT_INJECTION: forcing a failure. [ 265.977080][ T9077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.978455][ T9066] netlink: 'syz.0.1177': attribute type 29 has an invalid length. [ 266.005177][ T9077] CPU: 0 PID: 9077 Comm: syz.1.1172 Not tainted syzkaller #0 [ 266.005552][ T9069] netlink: 'syz.0.1177': attribute type 29 has an invalid length. [ 266.012595][ T9077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 266.012612][ T9077] Call Trace: [ 266.012620][ T9077] [ 266.012628][ T9077] dump_stack_lvl+0x18c/0x250 [ 266.012657][ T9077] ? show_regs_print_info+0x20/0x20 [ 266.012678][ T9077] ? load_image+0x400/0x400 [ 266.051064][ T9077] ? __might_fault+0xaa/0x120 [ 266.055800][ T9077] ? __lock_acquire+0x7d40/0x7d40 [ 266.060958][ T9077] should_fail_ex+0x39d/0x4d0 [ 266.065723][ T9077] _copy_from_iter+0x1d9/0x12e0 [ 266.070605][ T9077] ? __might_fault+0xaa/0x120 [ 266.075269][ T9077] ? _copy_from_iter+0x24e/0x12e0 [ 266.080285][ T9077] ? __virt_addr_valid+0x18c/0x540 [ 266.085382][ T9077] ? __lock_acquire+0x7d40/0x7d40 [ 266.090391][ T9077] ? copyout_mc+0x70/0x70 [ 266.094830][ T9077] ? copyout_mc+0x70/0x70 [ 266.099250][ T9077] ? __virt_addr_valid+0x18c/0x540 [ 266.104390][ T9077] ? page_copy_sane+0x16a/0x270 [ 266.109234][ T9077] copy_page_from_iter+0x7b/0x100 [ 266.114260][ T9077] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 266.120061][ T9077] tun_get_user+0x15db/0x3ca0 [ 266.124763][ T9077] ? aa_file_perm+0x11b/0xee0 [ 266.129433][ T9077] ? rcu_read_unlock+0xa0/0xa0 [ 266.134185][ T9077] ? tun_get+0x1c/0x2e0 [ 266.138333][ T9077] ? __lock_acquire+0x7d40/0x7d40 [ 266.143364][ T9077] ? tun_get+0x1c/0x2e0 [ 266.147517][ T9077] tun_chr_write_iter+0x119/0x200 [ 266.152544][ T9077] vfs_write+0x46c/0x990 [ 266.156783][ T9077] ? file_end_write+0x250/0x250 [ 266.161632][ T9077] ? __fget_files+0x43d/0x4b0 [ 266.166301][ T9077] ? __fdget_pos+0x1d8/0x330 [ 266.170874][ T9077] ? ksys_write+0x75/0x260 [ 266.175278][ T9077] ksys_write+0x150/0x260 [ 266.179598][ T9077] ? __ia32_sys_read+0x90/0x90 [ 266.184526][ T9077] ? lockdep_hardirqs_on+0x98/0x150 [ 266.189712][ T9077] do_syscall_64+0x55/0xa0 [ 266.194117][ T9077] ? clear_bhb_loop+0x40/0x90 [ 266.198790][ T9077] ? clear_bhb_loop+0x40/0x90 [ 266.203476][ T9077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.209361][ T9077] RIP: 0033:0x7f528819c799 [ 266.213758][ T9077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.233359][ T9077] RSP: 002b:00007f5289045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.241408][ T9074] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1171'. [ 266.241758][ T9077] RAX: ffffffffffffffda RBX: 00007f5288415fa0 RCX: 00007f528819c799 [ 266.258945][ T9077] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 00000000000000c8 [ 266.266948][ T9077] RBP: 00007f5289045090 R08: 0000000000000000 R09: 0000000000000000 [ 266.274934][ T9077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.282901][ T9077] R13: 00007f5288416038 R14: 00007f5288415fa0 R15: 00007ffd0fb11cb8 [ 266.290878][ T9077] [ 266.295890][ C0] bridge0: port 3(team0) entered forwarding state [ 266.302415][ C0] bridge0: topology change detected, propagating [ 266.543544][ T9078] delete_channel: no stack [ 266.635354][ T9082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.978617][ T9086] veth0_vlan: entered allmulticast mode [ 269.266132][ T9111] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1186'. [ 269.276742][ T9112] validate_nla: 1 callbacks suppressed [ 269.276754][ T9112] netlink: 'syz.2.1186': attribute type 29 has an invalid length. [ 269.388200][ T9116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.877659][ T9133] veth0_vlan: entered allmulticast mode [ 269.903533][ T9138] netlink: 'syz.0.1194': attribute type 29 has an invalid length. [ 269.996789][ T9137] netlink: 'syz.0.1194': attribute type 29 has an invalid length. [ 270.124034][ T9137] netlink: 'syz.0.1194': attribute type 29 has an invalid length. [ 270.130873][ T9143] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1195'. [ 270.286206][ T9149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.549751][ T9161] netlink: 'syz.1.1203': attribute type 10 has an invalid length. [ 270.557750][ T9161] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1203'. [ 270.567424][ T9161] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 270.588785][ T9162] netlink: 'syz.2.1201': attribute type 10 has an invalid length. [ 270.910201][ T9162] team0 (unregistering): Port device team_slave_0 removed [ 270.936984][ T9162] team0 (unregistering): Port device team_slave_1 removed [ 271.147821][ T9168] netlink: 'syz.0.1213': attribute type 2 has an invalid length. [ 271.168764][ T9168] netlink: 'syz.0.1213': attribute type 8 has an invalid length. [ 271.176792][ T9168] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1213'. [ 271.326429][ T9170] veth0_vlan: entered allmulticast mode [ 271.389733][ T9176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.629654][ T9181] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1209'. [ 272.409990][ T9199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.727532][ T9209] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1223'. [ 272.903292][ T9210] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1222'. [ 273.513210][ T9215] FAULT_INJECTION: forcing a failure. [ 273.513210][ T9215] name failslab, interval 1, probability 0, space 0, times 0 [ 273.589021][ T9215] CPU: 1 PID: 9215 Comm: syz.0.1224 Not tainted syzkaller #0 [ 273.596451][ T9215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 273.606542][ T9215] Call Trace: [ 273.609889][ T9215] [ 273.612845][ T9215] dump_stack_lvl+0x18c/0x250 [ 273.617565][ T9215] ? show_regs_print_info+0x20/0x20 [ 273.622807][ T9215] ? load_image+0x400/0x400 [ 273.627345][ T9215] ? verify_lock_unused+0x140/0x140 [ 273.632577][ T9215] ? perf_trace_lock+0x304/0x3b0 [ 273.637552][ T9215] should_fail_ex+0x39d/0x4d0 [ 273.642276][ T9215] should_failslab+0x9/0x20 [ 273.646982][ T9215] slab_pre_alloc_hook+0x59/0x310 [ 273.652041][ T9215] kmem_cache_alloc+0x5a/0x2d0 [ 273.656834][ T9215] ? skb_clone+0x1eb/0x370 [ 273.661289][ T9215] skb_clone+0x1eb/0x370 [ 273.665561][ T9215] __netlink_deliver_tap+0x41c/0x830 [ 273.670897][ T9215] ? netlink_deliver_tap+0x2e/0x1b0 [ 273.676126][ T9215] netlink_deliver_tap+0x19c/0x1b0 [ 273.681269][ T9215] netlink_unicast+0x72c/0x8d0 [ 273.686078][ T9215] netlink_sendmsg+0x8d0/0xbf0 [ 273.690872][ T9215] ? perf_trace_lock+0x304/0x3b0 [ 273.695869][ T9215] ? netlink_getsockopt+0x590/0x590 [ 273.701102][ T9215] ? aa_sock_msg_perm+0x94/0x150 [ 273.706070][ T9215] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 273.711431][ T9215] ? security_socket_sendmsg+0x80/0xa0 [ 273.716918][ T9215] ? netlink_getsockopt+0x590/0x590 [ 273.722153][ T9215] ____sys_sendmsg+0x5ba/0x960 [ 273.726958][ T9215] ? __asan_memset+0x22/0x40 [ 273.731584][ T9215] ? __sys_sendmsg_sock+0x30/0x30 [ 273.736626][ T9215] ? __import_iovec+0x5f2/0x850 [ 273.741522][ T9215] ? import_iovec+0x73/0xa0 [ 273.746064][ T9215] ___sys_sendmsg+0x2a6/0x360 [ 273.750772][ T9215] ? __sys_sendmsg+0x2a0/0x2a0 [ 273.755607][ T9215] ? __lock_acquire+0x7d40/0x7d40 [ 273.760705][ T9215] __se_sys_sendmsg+0x1c2/0x2b0 [ 273.765589][ T9215] ? __x64_sys_sendmsg+0x80/0x80 [ 273.770583][ T9215] ? lockdep_hardirqs_on+0x98/0x150 [ 273.775907][ T9215] do_syscall_64+0x55/0xa0 [ 273.780349][ T9215] ? clear_bhb_loop+0x40/0x90 [ 273.785044][ T9215] ? clear_bhb_loop+0x40/0x90 [ 273.789758][ T9215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.795672][ T9215] RIP: 0033:0x7f47bff9c799 [ 273.800114][ T9215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.819865][ T9215] RSP: 002b:00007f47c0ecc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.828484][ T9215] RAX: ffffffffffffffda RBX: 00007f47c0215fa0 RCX: 00007f47bff9c799 [ 273.836486][ T9215] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 273.844495][ T9215] RBP: 00007f47c0ecc090 R08: 0000000000000000 R09: 0000000000000000 [ 273.852497][ T9215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.860495][ T9215] R13: 00007f47c0216038 R14: 00007f47c0215fa0 R15: 00007ffc95c5b148 [ 273.868527][ T9215] [ 273.964676][ T9215] netlink: 'syz.0.1224': attribute type 4 has an invalid length. [ 274.365316][ T9227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.617050][ T9241] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1232'. [ 274.717781][ T9243] netlink: 'syz.0.1233': attribute type 12 has an invalid length. [ 274.726289][ T9243] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1233'. [ 275.592784][ T9258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.314461][ T9275] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1243'. [ 276.699513][ T9279] syzkaller0: entered promiscuous mode [ 276.722570][ T9279] syzkaller0: entered allmulticast mode [ 276.773385][ T9290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.839043][ T9307] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1255'. [ 279.130978][ T9318] netlink: 'syz.2.1260': attribute type 10 has an invalid length. [ 279.152737][ T9318] hsr0: entered promiscuous mode [ 279.329636][ T9319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.726091][ T9332] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1266'. [ 279.791863][ T9334] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1267'. [ 279.864646][ T9339] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1269'. [ 279.895319][ T9336] can: request_module (can-proto-0) failed. [ 280.033117][ T9344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.227030][ T9350] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1275'. [ 280.237186][ T9350] bridge_slave_1: default FDB implementation only supports local addresses [ 280.515848][ T9362] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1280'. [ 280.665109][ T9365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.030589][ T9373] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1284'. [ 281.052913][ T9373] netlink: 'syz.2.1284': attribute type 27 has an invalid length. [ 281.073264][ T9373] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1284'. [ 281.123897][ T9377] netlink: 'syz.3.1286': attribute type 21 has an invalid length. [ 281.132054][ T9377] IPv6: NLM_F_CREATE should be specified when creating new route [ 281.140724][ T9377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.148043][ T9377] IPv6: NLM_F_CREATE should be set when creating new route [ 281.155338][ T9377] IPv6: NLM_F_CREATE should be set when creating new route [ 281.162646][ T9377] IPv6: NLM_F_CREATE should be set when creating new route [ 281.367200][ T9386] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1289'. [ 281.426709][ T9386] netlink: 'syz.3.1289': attribute type 10 has an invalid length. [ 281.757532][ T9391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.848483][ T9394] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1291'. [ 282.032580][ T9400] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1294'. [ 282.150843][ T9399] netlink: 'syz.2.1295': attribute type 10 has an invalid length. [ 282.173952][ T9399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.245600][ T9399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.366202][ T9407] FAULT_INJECTION: forcing a failure. [ 282.366202][ T9407] name failslab, interval 1, probability 0, space 0, times 0 [ 282.408358][ T9407] CPU: 1 PID: 9407 Comm: syz.1.1297 Not tainted syzkaller #0 [ 282.415786][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 282.425950][ T9407] Call Trace: [ 282.429264][ T9407] [ 282.432219][ T9407] dump_stack_lvl+0x18c/0x250 [ 282.436941][ T9407] ? show_regs_print_info+0x20/0x20 [ 282.442180][ T9407] ? load_image+0x400/0x400 [ 282.446808][ T9407] ? lockdep_hardirqs_on+0x98/0x150 [ 282.452129][ T9407] should_fail_ex+0x39d/0x4d0 [ 282.456837][ T9407] should_failslab+0x9/0x20 [ 282.461418][ T9407] slab_pre_alloc_hook+0x59/0x310 [ 282.466581][ T9407] kmem_cache_alloc+0x5a/0x2d0 [ 282.471384][ T9407] ? getname_flags+0xbb/0x500 [ 282.476094][ T9407] getname_flags+0xbb/0x500 [ 282.480634][ T9407] __x64_sys_mkdir+0x5f/0x80 [ 282.485257][ T9407] do_syscall_64+0x55/0xa0 [ 282.489712][ T9407] ? clear_bhb_loop+0x40/0x90 [ 282.494419][ T9407] ? clear_bhb_loop+0x40/0x90 [ 282.499132][ T9407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.505142][ T9407] RIP: 0033:0x7f528819c799 [ 282.509591][ T9407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.529218][ T9407] RSP: 002b:00007f5289045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 282.537647][ T9407] RAX: ffffffffffffffda RBX: 00007f5288415fa0 RCX: 00007f528819c799 [ 282.545612][ T9407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.553576][ T9407] RBP: 00007f5289045090 R08: 0000000000000000 R09: 0000000000000000 [ 282.561545][ T9407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.569525][ T9407] R13: 00007f5288416038 R14: 00007f5288415fa0 R15: 00007ffd0fb11cb8 [ 282.577511][ T9407] [ 282.900520][ T9418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.231038][ T9440] netlink: 'syz.2.1310': attribute type 33 has an invalid length. [ 284.236193][ T9443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.321857][ T9442] netlink: 'syz.0.1311': attribute type 29 has an invalid length. [ 284.379391][ T9442] netlink: 'syz.0.1311': attribute type 29 has an invalid length. [ 284.408348][ T9447] netlink: 'syz.0.1311': attribute type 29 has an invalid length. [ 284.428125][ T9447] netlink: 'syz.0.1311': attribute type 29 has an invalid length. [ 284.669154][ T9449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.748312][ T9454] __nla_validate_parse: 5 callbacks suppressed [ 284.748330][ T9454] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1315'. [ 284.818611][ T9454] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 285.007645][ T9458] netlink: 'syz.1.1317': attribute type 10 has an invalid length. [ 285.053827][ T9456] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1316'. [ 285.059811][ T9458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.136429][ T9458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.209112][ T9461] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.1318'. [ 285.620197][ T9467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.970335][ T9485] validate_nla: 2 callbacks suppressed [ 286.970354][ T9485] netlink: 'syz.0.1326': attribute type 10 has an invalid length. [ 287.041846][ T9485] team0: Device ipvlan1 failed to register rx_handler [ 287.285027][ T9489] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1328'. [ 287.328723][ T9489] bridge_slave_1: default FDB implementation only supports local addresses [ 287.361602][ T9492] netlink: 'syz.1.1328': attribute type 33 has an invalid length. [ 287.391810][ T9492] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1328'. [ 287.834143][ T9501] FAULT_INJECTION: forcing a failure. [ 287.834143][ T9501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.892515][ T9501] CPU: 0 PID: 9501 Comm: syz.0.1331 Not tainted syzkaller #0 [ 287.899951][ T9501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 287.910375][ T9501] Call Trace: [ 287.913668][ T9501] [ 287.916613][ T9501] dump_stack_lvl+0x18c/0x250 [ 287.921328][ T9501] ? show_regs_print_info+0x20/0x20 [ 287.926558][ T9501] ? load_image+0x400/0x400 [ 287.931086][ T9501] ? __lock_acquire+0x7d40/0x7d40 [ 287.936135][ T9501] should_fail_ex+0x39d/0x4d0 [ 287.940847][ T9501] _copy_from_user+0x2f/0xe0 [ 287.945468][ T9501] __copy_msghdr+0x3bb/0x580 [ 287.950092][ T9501] ___sys_sendmsg+0x214/0x360 [ 287.954794][ T9501] ? get_pid_task+0x20/0x1e0 [ 287.959466][ T9501] ? __sys_sendmsg+0x2a0/0x2a0 [ 287.964278][ T9501] ? __lock_acquire+0x7d40/0x7d40 [ 287.969377][ T9501] __se_sys_sendmsg+0x1c2/0x2b0 [ 287.974263][ T9501] ? __x64_sys_sendmsg+0x80/0x80 [ 287.979264][ T9501] ? lockdep_hardirqs_on+0x98/0x150 [ 287.984495][ T9501] do_syscall_64+0x55/0xa0 [ 287.988995][ T9501] ? clear_bhb_loop+0x40/0x90 [ 287.993699][ T9501] ? clear_bhb_loop+0x40/0x90 [ 287.998425][ T9501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.004360][ T9501] RIP: 0033:0x7f47bff9c799 [ 288.008807][ T9501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.028438][ T9501] RSP: 002b:00007f47c0ecc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.036879][ T9501] RAX: ffffffffffffffda RBX: 00007f47c0215fa0 RCX: 00007f47bff9c799 [ 288.044966][ T9501] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 288.052969][ T9501] RBP: 00007f47c0ecc090 R08: 0000000000000000 R09: 0000000000000000 [ 288.060968][ T9501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.068962][ T9501] R13: 00007f47c0216038 R14: 00007f47c0215fa0 R15: 00007ffc95c5b148 [ 288.076970][ T9501] [ 288.451030][ T9508] netlink: 'syz.0.1333': attribute type 10 has an invalid length. [ 288.471909][ T9508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.627567][ T9508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.054292][ T9527] netlink: 'syz.0.1341': attribute type 10 has an invalid length. [ 290.129299][ T9527] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1341'. [ 290.837522][ T9519] netlink: 'syz.3.1339': attribute type 10 has an invalid length. [ 290.858525][ T9535] delete_channel: no stack [ 290.925859][ T9519] team0: Device ipvlan1 failed to register rx_handler [ 291.261639][ T9550] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1350'. [ 291.449548][ T9559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.794253][ T9575] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.1358'. [ 291.857145][ T9575] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 292.718647][ T9584] netlink: 'syz.2.1361': attribute type 10 has an invalid length. [ 293.004246][ T9594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.167869][ T9597] pim6reg1: entered promiscuous mode [ 293.186066][ T9597] pim6reg1: entered allmulticast mode [ 293.317555][ T9606] netlink: 'syz.0.1370': attribute type 10 has an invalid length. [ 293.327079][ T9606] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1370'. [ 293.347385][ T9606] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 294.121765][ T9620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.754092][ T9628] netlink: 'syz.1.1378': attribute type 10 has an invalid length. [ 294.786787][ T9628] team0: Device ipvlan1 failed to register rx_handler [ 294.808730][ T9633] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1380'. [ 295.258268][ T9645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.789452][ T9662] netlink: 'syz.1.1389': attribute type 4 has an invalid length. [ 295.912450][ T9669] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1390'. [ 295.979786][ T9670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.217127][ T9678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.363983][ T9683] syzkaller0: entered promiscuous mode [ 296.371574][ T9683] syzkaller0: entered allmulticast mode [ 296.583826][ T9688] netlink: 'syz.1.1401': attribute type 12 has an invalid length. [ 296.591987][ T9688] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1401'. [ 296.697425][ T9690] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1402'. [ 296.724178][ T9691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.126998][ T9699] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1405'. [ 297.371260][ T9711] IPv6: NLM_F_CREATE should be specified when creating new route [ 297.557639][ T9718] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1413'. [ 297.577100][ T9718] netlink: 'syz.3.1413': attribute type 10 has an invalid length. [ 297.607274][ T9718] team0: Device hsr_slave_0 failed to register rx_handler [ 298.007428][ T9727] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1417'. [ 299.479522][ T9751] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1427'. [ 301.639981][ T9770] syzkaller0: entered promiscuous mode [ 301.645531][ T9770] syzkaller0: entered allmulticast mode [ 301.659671][ T9777] netlink: 'syz.1.1435': attribute type 4 has an invalid length. [ 301.667582][ T9777] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1435'. [ 304.117306][ T9788] netlink: 'syz.2.1439': attribute type 10 has an invalid length. [ 304.479053][ T9801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.652504][ T9831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.088175][ T9834] netlink: 'syz.3.1455': attribute type 10 has an invalid length. [ 306.125366][ T9834] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1455'. [ 306.229753][ T9840] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1457'. [ 312.728781][ T9846] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1461'. [ 313.066204][ T9859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.305162][ T9863] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1465'. [ 313.480075][ T9867] netlink: 209848 bytes leftover after parsing attributes in process `syz.2.1467'. [ 313.542697][ T9872] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1469'. [ 313.853740][ T9875] netlink: 'syz.2.1470': attribute type 21 has an invalid length. [ 313.888807][ T9875] netlink: 'syz.2.1470': attribute type 6 has an invalid length. [ 313.966557][ T9875] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1470'. [ 313.979005][ T9881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.423317][ T9886] delete_channel: no stack [ 314.549570][ T9894] netlink: 'syz.2.1477': attribute type 10 has an invalid length. [ 315.370835][ T9913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.530700][ T9916] FAULT_INJECTION: forcing a failure. [ 315.530700][ T9916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.550716][ T9916] CPU: 1 PID: 9916 Comm: syz.0.1484 Not tainted syzkaller #0 [ 315.558146][ T9916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.568254][ T9916] Call Trace: [ 315.571555][ T9916] [ 315.574497][ T9916] dump_stack_lvl+0x18c/0x250 [ 315.579290][ T9916] ? show_regs_print_info+0x20/0x20 [ 315.584514][ T9916] ? load_image+0x400/0x400 [ 315.589137][ T9916] ? __might_fault+0xaa/0x120 [ 315.593840][ T9916] ? __lock_acquire+0x7d40/0x7d40 [ 315.598898][ T9916] should_fail_ex+0x39d/0x4d0 [ 315.603698][ T9916] _copy_from_user+0x2f/0xe0 [ 315.608313][ T9916] __sys_bpf+0x23e/0x890 [ 315.612579][ T9916] ? bpf_link_show_fdinfo+0x390/0x390 [ 315.617984][ T9916] ? lock_chain_count+0x20/0x20 [ 315.622872][ T9916] __x64_sys_bpf+0x7c/0x90 [ 315.627320][ T9916] do_syscall_64+0x55/0xa0 [ 315.631759][ T9916] ? clear_bhb_loop+0x40/0x90 [ 315.636453][ T9916] ? clear_bhb_loop+0x40/0x90 [ 315.641153][ T9916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.647070][ T9916] RIP: 0033:0x7f47bff9c799 [ 315.651537][ T9916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.671345][ T9916] RSP: 002b:00007f47c0ecc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 315.679793][ T9916] RAX: ffffffffffffffda RBX: 00007f47c0215fa0 RCX: 00007f47bff9c799 [ 315.687964][ T9916] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 000000000000000a [ 315.695961][ T9916] RBP: 00007f47c0ecc090 R08: 0000000000000000 R09: 0000000000000000 [ 315.703959][ T9916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.712058][ T9916] R13: 00007f47c0216038 R14: 00007f47c0215fa0 R15: 00007ffc95c5b148 [ 315.720084][ T9916] [ 315.737290][ T9915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.089157][ T9918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.382904][ T9922] netlink: 'syz.0.1486': attribute type 21 has an invalid length. [ 316.395498][ T9922] netlink: 'syz.0.1486': attribute type 6 has an invalid length. [ 316.404070][ T9922] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1486'. [ 316.474138][ T9924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.677908][ T9930] FAULT_INJECTION: forcing a failure. [ 316.677908][ T9930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.696319][ T9930] CPU: 0 PID: 9930 Comm: syz.2.1489 Not tainted syzkaller #0 [ 316.703743][ T9930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 316.713793][ T9930] Call Trace: [ 316.717067][ T9930] [ 316.720079][ T9930] dump_stack_lvl+0x18c/0x250 [ 316.724765][ T9930] ? show_regs_print_info+0x20/0x20 [ 316.730066][ T9930] ? load_image+0x400/0x400 [ 316.734577][ T9930] ? __might_fault+0xaa/0x120 [ 316.739252][ T9930] ? __lock_acquire+0x7d40/0x7d40 [ 316.744363][ T9930] should_fail_ex+0x39d/0x4d0 [ 316.749064][ T9930] _copy_from_iter+0x1d9/0x12e0 [ 316.753940][ T9930] ? __might_fault+0xaa/0x120 [ 316.758624][ T9930] ? _copy_from_iter+0x24e/0x12e0 [ 316.764036][ T9930] ? __virt_addr_valid+0x18c/0x540 [ 316.769167][ T9930] ? __lock_acquire+0x7d40/0x7d40 [ 316.774202][ T9930] ? copyout_mc+0x70/0x70 [ 316.778676][ T9930] ? copyout_mc+0x70/0x70 [ 316.783162][ T9930] ? __virt_addr_valid+0x18c/0x540 [ 316.788308][ T9930] ? page_copy_sane+0x16a/0x270 [ 316.793190][ T9930] copy_page_from_iter+0x7b/0x100 [ 316.798238][ T9930] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 316.804063][ T9930] tun_get_user+0x15db/0x3ca0 [ 316.808767][ T9930] ? aa_file_perm+0x11b/0xee0 [ 316.813471][ T9930] ? rcu_read_unlock+0xa0/0xa0 [ 316.818263][ T9930] ? tun_get+0x1c/0x2e0 [ 316.822415][ T9930] ? __lock_acquire+0x7d40/0x7d40 [ 316.827535][ T9930] ? tun_get+0x1c/0x2e0 [ 316.831692][ T9930] tun_chr_write_iter+0x119/0x200 [ 316.836719][ T9930] vfs_write+0x46c/0x990 [ 316.841155][ T9930] ? file_end_write+0x250/0x250 [ 316.846025][ T9930] ? __fget_files+0x43d/0x4b0 [ 316.850794][ T9930] ? __fdget_pos+0x1d8/0x330 [ 316.855380][ T9930] ? ksys_write+0x75/0x260 [ 316.859802][ T9930] ksys_write+0x150/0x260 [ 316.864151][ T9930] ? __ia32_sys_read+0x90/0x90 [ 316.869016][ T9930] ? lockdep_hardirqs_on+0x98/0x150 [ 316.874221][ T9930] do_syscall_64+0x55/0xa0 [ 316.878645][ T9930] ? clear_bhb_loop+0x40/0x90 [ 316.883343][ T9930] ? clear_bhb_loop+0x40/0x90 [ 316.888038][ T9930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.893942][ T9930] RIP: 0033:0x7f938379c799 [ 316.898356][ T9930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.917966][ T9930] RSP: 002b:00007f9384586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 316.926386][ T9930] RAX: ffffffffffffffda RBX: 00007f9383a15fa0 RCX: 00007f938379c799 [ 316.934467][ T9930] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 00000000000000c8 [ 316.942463][ T9930] RBP: 00007f9384586090 R08: 0000000000000000 R09: 0000000000000000 [ 316.950521][ T9930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 316.958490][ T9930] R13: 00007f9383a16038 R14: 00007f9383a15fa0 R15: 00007fff03e904a8 [ 316.966468][ T9930] [ 317.469018][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.475428][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.627461][ T9938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.061767][ T9944] delete_channel: no stack [ 318.234868][ T9951] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1499'. [ 318.420779][ T9956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.882429][ T9964] netlink: 'syz.2.1505': attribute type 13 has an invalid length. [ 318.902622][ T9964] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1505'. [ 319.870101][ T9986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.645163][ T9995] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1516'. [ 320.906013][T10003] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1520'. [ 320.955708][T10003] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 322.311883][T10016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.453368][T10054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.692882][T10058] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.1538'. [ 325.509892][T10074] netlink: 'syz.3.1544': attribute type 13 has an invalid length. [ 325.548221][T10074] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1544'. [ 325.699301][T10077] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1545'. [ 326.002933][T10077] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1545'. [ 326.036883][T10078] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1545'. [ 327.076688][T10081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.357519][T10087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.182484][T10098] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1551'. [ 328.196250][T10100] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1552'. [ 328.622060][T10110] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1555'. [ 328.784596][T10110] netlink: 'syz.2.1555': attribute type 10 has an invalid length. [ 329.786400][T10121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.247115][T10128] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1561'. [ 330.444401][T10129] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1561'. [ 330.522517][T10134] netlink: 'syz.1.1563': attribute type 9 has an invalid length. [ 330.544076][T10134] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1563'. [ 330.932654][T10146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.363130][T10152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.095424][T10169] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1578'. [ 332.640083][T10185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.872902][T10196] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1588'. [ 333.238877][T10209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.094224][T10249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.204190][T10256] netlink: 'syz.0.1613': attribute type 10 has an invalid length. [ 334.212994][T10254] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1612'. [ 334.853562][T10258] syzkaller0: entered promiscuous mode [ 334.859321][T10258] syzkaller0: entered allmulticast mode [ 337.209036][T10281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.935223][T10327] FAULT_INJECTION: forcing a failure. [ 339.935223][T10327] name failslab, interval 1, probability 0, space 0, times 0 [ 339.956866][T10327] CPU: 1 PID: 10327 Comm: syz.0.1635 Not tainted syzkaller #0 [ 339.964397][T10327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.974500][T10327] Call Trace: [ 339.977814][T10327] [ 339.980778][T10327] dump_stack_lvl+0x18c/0x250 [ 339.985497][T10327] ? sctp_sendmsg+0x1575/0x28c0 [ 339.990393][T10327] ? ___sys_sendmsg+0x2a6/0x360 [ 339.995388][T10327] ? show_regs_print_info+0x20/0x20 [ 340.000638][T10327] ? load_image+0x400/0x400 [ 340.005189][T10327] should_fail_ex+0x39d/0x4d0 [ 340.009877][T10327] should_failslab+0x9/0x20 [ 340.014411][T10327] slab_pre_alloc_hook+0x59/0x310 [ 340.019438][T10327] ? sctp_add_bind_addr+0x8c/0x360 [ 340.024595][T10327] __kmem_cache_alloc_node+0x53/0x250 [ 340.029990][T10327] ? sctp_add_bind_addr+0x8c/0x360 [ 340.035122][T10327] kmalloc_trace+0x2a/0xe0 [ 340.039572][T10327] sctp_add_bind_addr+0x8c/0x360 [ 340.044546][T10327] sctp_copy_local_addr_list+0x315/0x4f0 [ 340.050251][T10327] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 340.055992][T10327] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 340.062070][T10327] ? sctp_v6_is_any+0x64/0x70 [ 340.066757][T10327] ? sctp_copy_one_addr+0x8c/0x350 [ 340.071884][T10327] sctp_bind_addr_copy+0xb3/0x3c0 [ 340.076950][T10327] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 340.083330][T10327] sctp_connect_new_asoc+0x2f9/0x6a0 [ 340.088643][T10327] ? __sctp_connect+0xd80/0xd80 [ 340.093493][T10327] ? __local_bh_enable_ip+0x13a/0x1c0 [ 340.098971][T10327] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 340.104517][T10327] ? security_sctp_bind_connect+0x89/0xb0 [ 340.110266][T10327] sctp_sendmsg+0x1575/0x28c0 [ 340.114979][T10327] ? sctp_getsockopt+0xb60/0xb60 [ 340.120020][T10327] ? aa_sk_perm+0x83c/0x970 [ 340.124548][T10327] ? aa_af_perm+0x330/0x330 [ 340.129067][T10327] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 340.135540][T10327] ? sock_rps_record_flow+0x19/0x3f0 [ 340.140937][T10327] ? inet_sendmsg+0xe9/0x2f0 [ 340.145624][T10327] ? inet_send_prepare+0x260/0x260 [ 340.150743][T10327] ____sys_sendmsg+0x5ba/0x960 [ 340.155511][T10327] ? __lock_acquire+0x7d40/0x7d40 [ 340.160543][T10327] ? __asan_memset+0x22/0x40 [ 340.165141][T10327] ? __sys_sendmsg_sock+0x30/0x30 [ 340.170169][T10327] ? __import_iovec+0x5f2/0x850 [ 340.175089][T10327] ? import_iovec+0x73/0xa0 [ 340.179608][T10327] ___sys_sendmsg+0x2a6/0x360 [ 340.184311][T10327] ? __sys_sendmsg+0x2a0/0x2a0 [ 340.189109][T10327] ? __lock_acquire+0x7d40/0x7d40 [ 340.194180][T10327] __se_sys_sendmsg+0x1c2/0x2b0 [ 340.199054][T10327] ? __x64_sys_sendmsg+0x80/0x80 [ 340.204018][T10327] ? lockdep_hardirqs_on+0x98/0x150 [ 340.209227][T10327] do_syscall_64+0x55/0xa0 [ 340.213676][T10327] ? clear_bhb_loop+0x40/0x90 [ 340.218356][T10327] ? clear_bhb_loop+0x40/0x90 [ 340.223046][T10327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.228941][T10327] RIP: 0033:0x7f47bff9c799 [ 340.233370][T10327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.252984][T10327] RSP: 002b:00007f47c0ecc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.261430][T10327] RAX: ffffffffffffffda RBX: 00007f47c0215fa0 RCX: 00007f47bff9c799 [ 340.269492][T10327] RDX: 0000000030008041 RSI: 0000200000002dc0 RDI: 0000000000000005 [ 340.277469][T10327] RBP: 00007f47c0ecc090 R08: 0000000000000000 R09: 0000000000000000 [ 340.285533][T10327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 340.293508][T10327] R13: 00007f47c0216038 R14: 00007f47c0215fa0 R15: 00007ffc95c5b148 [ 340.301504][T10327] [ 340.646667][T10338] netlink: 'syz.2.1640': attribute type 3 has an invalid length. [ 340.654963][T10338] netlink: 'syz.2.1640': attribute type 5 has an invalid length. [ 341.233535][T10357] netlink: 'syz.0.1647': attribute type 25 has an invalid length. [ 341.243023][T10357] netlink: 'syz.0.1647': attribute type 28 has an invalid length. [ 342.054844][T10395] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1669'. [ 342.087778][T10395] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 342.192596][T10399] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1671'. [ 342.245637][T10399] netlink: 'syz.1.1671': attribute type 29 has an invalid length. [ 342.269705][T10399] netlink: 'syz.1.1671': attribute type 29 has an invalid length. [ 342.294539][T10399] netlink: 'syz.1.1671': attribute type 29 has an invalid length. [ 342.322433][T10399] netlink: 'syz.1.1671': attribute type 29 has an invalid length. [ 343.244271][T10433] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1677'. [ 345.438721][T10468] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1692'. [ 345.476146][T10470] FAULT_INJECTION: forcing a failure. [ 345.476146][T10470] name failslab, interval 1, probability 0, space 0, times 0 [ 345.496397][T10470] CPU: 1 PID: 10470 Comm: syz.0.1693 Not tainted syzkaller #0 [ 345.503918][T10470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 345.514083][T10470] Call Trace: [ 345.517464][T10470] [ 345.520408][T10470] dump_stack_lvl+0x18c/0x250 [ 345.525123][T10470] ? show_regs_print_info+0x20/0x20 [ 345.530360][T10470] ? load_image+0x400/0x400 [ 345.534890][T10470] ? __might_sleep+0xe0/0xe0 [ 345.539508][T10470] ? __lock_acquire+0x7d40/0x7d40 [ 345.544567][T10470] should_fail_ex+0x39d/0x4d0 [ 345.549281][T10470] should_failslab+0x9/0x20 [ 345.553817][T10470] slab_pre_alloc_hook+0x59/0x310 [ 345.558876][T10470] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 345.564443][T10470] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 345.570014][T10470] __kmem_cache_alloc_node+0x53/0x250 [ 345.575420][T10470] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 345.581021][T10470] __kmalloc+0xa4/0x230 [ 345.585199][T10470] bpf_prog_test_run_skb+0x238/0x12b0 [ 345.590579][T10470] ? __fget_files+0x28/0x4b0 [ 345.595176][T10470] ? __fget_files+0x28/0x4b0 [ 345.599772][T10470] ? __fget_files+0x43d/0x4b0 [ 345.604470][T10470] ? cpu_online+0x60/0x60 [ 345.608807][T10470] bpf_prog_test_run+0x321/0x390 [ 345.613850][T10470] __sys_bpf+0x49d/0x890 [ 345.618115][T10470] ? bpf_link_show_fdinfo+0x390/0x390 [ 345.623521][T10470] ? lock_chain_count+0x20/0x20 [ 345.628398][T10470] __x64_sys_bpf+0x7c/0x90 [ 345.632839][T10470] do_syscall_64+0x55/0xa0 [ 345.637279][T10470] ? clear_bhb_loop+0x40/0x90 [ 345.641971][T10470] ? clear_bhb_loop+0x40/0x90 [ 345.646661][T10470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.652655][T10470] RIP: 0033:0x7f47bff9c799 [ 345.657081][T10470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.676704][T10470] RSP: 002b:00007f47c0ecc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 345.685134][T10470] RAX: ffffffffffffffda RBX: 00007f47c0215fa0 RCX: 00007f47bff9c799 [ 345.693131][T10470] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 000000000000000a [ 345.701111][T10470] RBP: 00007f47c0ecc090 R08: 0000000000000000 R09: 0000000000000000 [ 345.709097][T10470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.717094][T10470] R13: 00007f47c0216038 R14: 00007f47c0215fa0 R15: 00007ffc95c5b148 [ 345.725102][T10470] [ 345.757711][T10469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.178329][T10474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.225037][T10478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.956086][T10499] netlink: 'syz.0.1702': attribute type 29 has an invalid length. [ 347.004274][T10499] netlink: 'syz.0.1702': attribute type 29 has an invalid length. [ 347.016139][T10506] netlink: 'syz.0.1702': attribute type 29 has an invalid length. [ 347.462148][T10511] delete_channel: no stack [ 348.003237][T10534] tap0: tun_chr_ioctl cmd 1074025675 [ 348.026201][T10534] tap0: persist disabled [ 351.184123][T10568] IPv6: Can't replace route, no match found [ 351.781152][T10584] netlink: 'syz.0.1735': attribute type 10 has an invalid length. [ 351.794370][T10584] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1735'. [ 351.811067][T10584] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 352.159510][T10599] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1742'. [ 352.179268][T10599] team_slave_0: left promiscuous mode [ 352.185038][T10599] team_slave_0: left allmulticast mode [ 352.214100][T10599] team0: Port device team_slave_0 removed [ 352.220781][T10599] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 352.905547][T10628] netlink: 'syz.3.1755': attribute type 4 has an invalid length. [ 352.931680][T10626] netlink: 'syz.1.1753': attribute type 21 has an invalid length. [ 352.970482][T10626] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1753'. [ 353.760510][T10640] IPv6: Can't replace route, no match found [ 354.416753][T10645] netlink: 'syz.1.1761': attribute type 22 has an invalid length. [ 354.440014][T10645] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1761'. [ 355.067613][T10665] netlink: 'syz.2.1769': attribute type 25 has an invalid length. [ 355.204762][T10670] netlink: 'syz.2.1770': attribute type 4 has an invalid length. [ 355.374882][T10676] FAULT_INJECTION: forcing a failure. [ 355.374882][T10676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.404864][T10676] CPU: 0 PID: 10676 Comm: syz.0.1772 Not tainted syzkaller #0 [ 355.412418][T10676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 355.422505][T10676] Call Trace: [ 355.425814][T10676] [ 355.428774][T10676] dump_stack_lvl+0x18c/0x250 [ 355.433773][T10676] ? show_regs_print_info+0x20/0x20 [ 355.439112][T10676] ? load_image+0x400/0x400 [ 355.443651][T10676] ? __might_fault+0xaa/0x120 [ 355.448447][T10676] ? __lock_acquire+0x7d40/0x7d40 [ 355.453558][T10676] should_fail_ex+0x39d/0x4d0 [ 355.458298][T10676] _copy_from_user+0x2f/0xe0 [ 355.462923][T10676] ___sys_sendmsg+0x1c7/0x360 [ 355.467643][T10676] ? __sys_sendmsg+0x2a0/0x2a0 [ 355.472480][T10676] __se_sys_sendmsg+0x1c2/0x2b0 [ 355.477443][T10676] ? __x64_sys_sendmsg+0x80/0x80 [ 355.482433][T10676] do_syscall_64+0x55/0xa0 [ 355.486967][T10676] ? clear_bhb_loop+0x40/0x90 [ 355.491679][T10676] ? clear_bhb_loop+0x40/0x90 [ 355.496403][T10676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.502422][T10676] RIP: 0033:0x7f47bff9c799 [ 355.506868][T10676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.526508][T10676] RSP: 002b:00007f47c0ecc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.534938][T10676] RAX: ffffffffffffffda RBX: 00007f47c0215fa0 RCX: 00007f47bff9c799 [ 355.542912][T10676] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 355.551055][T10676] RBP: 00007f47c0ecc090 R08: 0000000000000000 R09: 0000000000000000 [ 355.559083][T10676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.567140][T10676] R13: 00007f47c0216038 R14: 00007f47c0215fa0 R15: 00007ffc95c5b148 [ 355.575212][T10676] [ 356.550240][T10707] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1783'. [ 356.992849][T10714] netlink: 18187 bytes leftover after parsing attributes in process `syz.2.1784'. [ 357.023162][T10713] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1785'. [ 357.120774][T10713] netlink: 'syz.3.1785': attribute type 10 has an invalid length. [ 357.185000][T10713] team0: Device hsr_slave_0 failed to register rx_handler [ 362.086246][T10816] netlink: 33643 bytes leftover after parsing attributes in process `syz.2.1819'. [ 363.043923][T10836] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1826'. [ 363.075582][T10836] netlink: 'syz.0.1826': attribute type 10 has an invalid length. [ 363.131233][T10836] team0: Device hsr_slave_0 failed to register rx_handler [ 363.434776][T10841] netlink: 'syz.2.1827': attribute type 10 has an invalid length. [ 363.456742][T10848] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1827'. [ 363.565774][T10848] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1827'. [ 363.708947][T10841] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1827'. [ 363.835306][T10851] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1827'. [ 364.040144][T10860] netlink: 'syz.3.1835': attribute type 1 has an invalid length. [ 364.061599][T10860] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1835'. [ 364.086217][T10862] netlink: 'syz.1.1836': attribute type 10 has an invalid length. [ 364.115063][T10862] hsr0: entered promiscuous mode [ 365.931864][T10887] FAULT_INJECTION: forcing a failure. [ 365.931864][T10887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.947617][T10887] CPU: 0 PID: 10887 Comm: syz.0.1846 Not tainted syzkaller #0 [ 365.955125][T10887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 365.965211][T10887] Call Trace: [ 365.968512][T10887] [ 365.971458][T10887] dump_stack_lvl+0x18c/0x250 [ 365.976186][T10887] ? show_regs_print_info+0x20/0x20 [ 365.981427][T10887] ? load_image+0x400/0x400 [ 365.985968][T10887] ? __might_fault+0xaa/0x120 [ 365.990673][T10887] ? __lock_acquire+0x7d40/0x7d40 [ 365.995700][T10887] should_fail_ex+0x39d/0x4d0 [ 366.000398][T10887] _copy_from_user+0x2f/0xe0 [ 366.005002][T10887] ___sys_sendmsg+0x1c7/0x360 [ 366.009668][T10887] ? get_pid_task+0x20/0x1e0 [ 366.014252][T10887] ? __sys_sendmsg+0x2a0/0x2a0 [ 366.019034][T10887] ? __lock_acquire+0x7d40/0x7d40 [ 366.024087][T10887] __se_sys_sendmsg+0x1c2/0x2b0 [ 366.028950][T10887] ? __x64_sys_sendmsg+0x80/0x80 [ 366.033912][T10887] ? lockdep_hardirqs_on+0x98/0x150 [ 366.039119][T10887] do_syscall_64+0x55/0xa0 [ 366.043813][T10887] ? clear_bhb_loop+0x40/0x90 [ 366.048538][T10887] ? clear_bhb_loop+0x40/0x90 [ 366.053255][T10887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.059265][T10887] RIP: 0033:0x7f47bff9c799 [ 366.063695][T10887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.083312][T10887] RSP: 002b:00007f47c0ecc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.091742][T10887] RAX: ffffffffffffffda RBX: 00007f47c0215fa0 RCX: 00007f47bff9c799 [ 366.099725][T10887] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 366.107722][T10887] RBP: 00007f47c0ecc090 R08: 0000000000000000 R09: 0000000000000000 [ 366.115703][T10887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.123669][T10887] R13: 00007f47c0216038 R14: 00007f47c0215fa0 R15: 00007ffc95c5b148 [ 366.131654][T10887] [ 366.271711][T10893] syzkaller0: entered allmulticast mode [ 368.337955][ T5765] Bluetooth: hci1: Malformed LE Event: 0x02 [ 368.349439][T10935] Q6`Ҙ: renamed from lo (while UP) [ 369.982911][T10953] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1873'. [ 370.154770][T10963] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1877'. [ 370.157140][T10967] FAULT_INJECTION: forcing a failure. [ 370.157140][T10967] name failslab, interval 1, probability 0, space 0, times 0 [ 370.200271][T10967] CPU: 1 PID: 10967 Comm: syz.2.1878 Not tainted syzkaller #0 [ 370.207796][T10967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 370.217882][T10967] Call Trace: [ 370.221195][T10967] [ 370.224158][T10967] dump_stack_lvl+0x18c/0x250 [ 370.228875][T10967] ? show_regs_print_info+0x20/0x20 [ 370.234112][T10967] ? load_image+0x400/0x400 [ 370.238657][T10967] ? __might_sleep+0xe0/0xe0 [ 370.243278][T10967] ? __lock_acquire+0x7d40/0x7d40 [ 370.248337][T10967] should_fail_ex+0x39d/0x4d0 [ 370.253060][T10967] should_failslab+0x9/0x20 [ 370.257595][T10967] slab_pre_alloc_hook+0x59/0x310 [ 370.262656][T10967] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 370.268232][T10967] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 370.273804][T10967] __kmem_cache_alloc_node+0x53/0x250 [ 370.279214][T10967] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 370.284790][T10967] __kmalloc+0xa4/0x230 [ 370.288995][T10967] bpf_prog_test_run_skb+0x238/0x12b0 [ 370.294403][T10967] ? __fget_files+0x28/0x4b0 [ 370.299022][T10967] ? __fget_files+0x28/0x4b0 [ 370.303642][T10967] ? __fget_files+0x43d/0x4b0 [ 370.308433][T10967] ? cpu_online+0x60/0x60 [ 370.312786][T10967] bpf_prog_test_run+0x321/0x390 [ 370.317751][T10967] __sys_bpf+0x49d/0x890 [ 370.322004][T10967] ? bpf_link_show_fdinfo+0x390/0x390 [ 370.327389][T10967] ? lock_chain_count+0x20/0x20 [ 370.332240][T10967] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 370.338322][T10967] __x64_sys_bpf+0x7c/0x90 [ 370.342759][T10967] do_syscall_64+0x55/0xa0 [ 370.347186][T10967] ? clear_bhb_loop+0x40/0x90 [ 370.351876][T10967] ? clear_bhb_loop+0x40/0x90 [ 370.356556][T10967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.362448][T10967] RIP: 0033:0x7f938379c799 [ 370.366864][T10967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.386476][T10967] RSP: 002b:00007f9384586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 370.395074][T10967] RAX: ffffffffffffffda RBX: 00007f9383a15fa0 RCX: 00007f938379c799 [ 370.403043][T10967] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 000000000000000a [ 370.411007][T10967] RBP: 00007f9384586090 R08: 0000000000000000 R09: 0000000000000000 [ 370.418971][T10967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.426940][T10967] R13: 00007f9383a16038 R14: 00007f9383a15fa0 R15: 00007fff03e904a8 [ 370.434921][T10967] [ 370.464888][T10961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.005228][ T5765] Bluetooth: hci1: unexpected event 0x07 length: 151 < 255 [ 372.018564][T10995] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1890'. [ 372.037193][T10995] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 373.001674][T11001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.253243][T11015] netlink: 'syz.0.1898': attribute type 3 has an invalid length. [ 373.269861][T11015] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1898'. [ 373.353776][T11020] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1899'. [ 373.432355][T11020] netlink: 'syz.2.1899': attribute type 29 has an invalid length. [ 373.455821][T11020] netlink: 'syz.2.1899': attribute type 29 has an invalid length. [ 373.495651][T11021] netlink: 'syz.2.1899': attribute type 29 has an invalid length. [ 373.559590][T11020] netlink: 'syz.2.1899': attribute type 29 has an invalid length. [ 373.827294][T11026] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1901'. [ 373.853433][T11026] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1901'. serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.