last executing test programs: 3.795725783s ago: executing program 1 (id=923): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f088a847e0ffff20600000003a0000e0000001e000000129a13011", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.868059722s ago: executing program 1 (id=927): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x8042) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0xe, 0x0, &(0x7f0000000480)="6ebca58c08000008beca252388f7", 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) 2.786282844s ago: executing program 0 (id=930): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x81010000) 2.57998959s ago: executing program 0 (id=931): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="1802000000200000000000000000000800000000270000000020000000000007010000f8ffffffb702000008000000b70300140500000085000000710000009500"/96], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c09", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x10, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'bridge_slave_1\x00', 0x4000}) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x5411, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000020000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900"], 0x18}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001040)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)}, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b26, &(0x7f0000001200)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) recvmsg(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002) 2.520470962s ago: executing program 3 (id=932): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5511, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x9e1, 0x5, 0xa, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xb, r0, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.481656074s ago: executing program 1 (id=934): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff31, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10) 1.478725495s ago: executing program 0 (id=935): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000080)="5c250ed6087361df712bc884fed5", 0x0, 0x2ef8, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7c6}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x8e, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x29, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$sock(r4, &(0x7f0000000c00)={&(0x7f00000007c0)=@ll={0x11, 0x15, r6, 0x1, 0x8}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000840)="90552f9090ef6744c40d4679213a4610eab35750843dd70e2e79df4dba2d406ef3f895143205d636382167aa21876bae66f2b0e2a57722a141f3dcf5771d362778a2f131dd65ebce1e65fffc5589564901a29b05d5a4028c94e555e8919b5bea9f9b0557879cd1e16d76306eb3df7b46337dd6e3e2eef0c82b7ed98ebdc81d58bed9252c6383f7f6832d9cae1a8cec4f8a895f09454b27e98958217dfcff4f32bcb427a8a28a8a5bc39d96a72375e6f4f56ee0bd7571f17c08ca63d6ba38150c9f2ae048110525c98f", 0xc9}, {&(0x7f0000000940)="9af7c575be78092c7ea68c38d861bc1967f546843e2d", 0x16}, {&(0x7f0000000980)="91405d82df619e0a3c20734d75127a6a38b47f61b442629a684491a5f3fa05292453b22e90df98cff6c2326d17844ba5a40306b74f0c9a39eb205e05ac690e614bed0985d95cedcbc94f0657ba95d5bbc44e5be18c8cca6294941e62c3b856185bd949e172a2f239a2cced3561fa3ceaf5665be13e341f79f89c3120d8091535eb184e72efa7a6b3089b6693e71434a35307ac71fefc6fbeffdeec61c985eb319d75a0213a146a06007c568e580ac135338d3ce8f71dcda70f23635d6b", 0xbd}, {&(0x7f0000000a40)="0f4f11b9531c4a01ad35c0b9d9a7c2df24cc080fc8927de39c56b1f7555f5f358618b74e73a2e2bfe863dea466", 0x2d}, {&(0x7f0000000a80)="e7e3b14592fd2dbd35c2b4578773d2b342", 0x11}, {&(0x7f0000000ac0)="cfc2c87612fdf94d9350f46698def3832a427cd9fc64af8a38aa6190a9ccdfe8a881e6bb44daf5d2ae876c697d02187d", 0x30}], 0x6, &(0x7f0000000b80)=[@txtime={{0x18, 0x1, 0x3d, 0xb2}}, @timestamping={{0x14, 0x1, 0x25, 0x6a}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000000}}, @mark={{0x14, 0x1, 0x24, 0x1000}}], 0x60}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000900fec0ffff00000e1208000f0100810401a80016ea1f00014003", 0x39}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000580)=ANY=[], 0xfe33) 1.391585837s ago: executing program 1 (id=936): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x700, 0x1001000, @mcast2, 0x47}, 0x80, 0x0}, 0x800) 1.339760829s ago: executing program 3 (id=937): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000004800913a745c7388641f9c0e0a"], 0xfe33) 1.29315411s ago: executing program 2 (id=938): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xeb7}, 0x8) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x102) 1.28475631s ago: executing program 0 (id=939): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRESDEC=r0, @ANYBLOB="ac141410e00000010000000010000000070000001400000000000000000000000100000003000000000000001400000000000000000000000100"/76], 0x60}, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x3, 0x9, 0x2, 0xe, 0x0, 0x9, 0x4e0, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x400, 0x0, @perf_config_ext={0x7, 0x6}, 0x840, 0x4, 0x7ff, 0x3, 0xfffffffffffffffd, 0x400, 0x3, 0x0, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r2, &(0x7f00000004c0)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f0000000480)=[{&(0x7f00000001c0)="7e7559d5ae5635dcced36dc395b95ebd22d72308a400ab6ae3a53d1e5110edb4a2619aa6b58187cccf1fb2cba7ce853a7e549198c4c5f8e23ba7ce5585c70b449e035e0a9d20672c363af6843078048f1e399432eca641b7b052881aa565220b067e426ee97278969b5ea7196670eac0d7b5402e2fc651e09ecc80e5888a51e3509b158c3e1ab6395f110e7c43f8f2ffc991d4862c74ad4ec41acbf63dda9f9edeb95501b0554e58e469a501241b9520d0553f363aac9cafc067aa9646815a70f381fb9791e7dbc840a209fc5f25e46eec4b6f5d1b1df1b538be", 0xda}, {&(0x7f0000000340)="57f63675a197adf8b6f515edff1d0a68de2fcc5d08db6d6eb9e05443decaa1c103c71c67ef5887f4abb6a47c94c89a0e9ed3ee0eaf41b75b8abf96e5a67ad236d1c2e0e3", 0x44}, {&(0x7f00000003c0)="27e2fafc4284cdf8bfbf6e", 0xb}, {&(0x7f0000000400)="1ad6006e17e9787a5d524034795a1e919fdf9c64895dc6e37eafa121193600a1a40abb0fdbf64ace2641f74af3bc1ff51b1386fd9e9fe6756424a3129a37c0a2468663c5ab7daa423af84fd9f337baed", 0x50}], 0x4}, 0x4048801) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) setsockopt$sock_attach_bpf(r4, 0x1, 0x27, &(0x7f0000000040), 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000002c0)={r2, r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='/\x00') 1.176009114s ago: executing program 1 (id=940): socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0xf0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000042ecbb45f0008fe010000008000", @ANYRES32], 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0xb0ff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.138074235s ago: executing program 2 (id=941): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000ff000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0x104101, 0x4, 0x2000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100040000000000091931007b1140000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x3e8) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x200040c0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1500"/12, @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x80000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8800) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xe, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="38080000000000000000000099006fbf5ae46c00001800"/33], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="050000200000000000000000cb315068c15febf7e84f43aeac0855862a9ca3d9f379a341bd5f84b18894eb4d8900"/57, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8982, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000100)=0x7ce) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x101084, 0x10000, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.129072335s ago: executing program 1 (id=942): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000005000000000404000900000001000000", @ANYRES32, @ANYBLOB="000000000000000b0000faff0000000000000000d9f0648a85713ff7b3e38427c66983e8143dadcf9060b12ac90d3017a64d4011fb88fc860e743e88326547ffdbc077a648ad4c11f4544d72e7dc5a9af59a358f297b9f568fae37f0c52467bca9d6cee5ba49d4b9d0b44f826ae17becc333d2ff9057b68095dd0097864da4d98ec8138cf8303e9644eb232a38d0e1ca8f0b8df001e5a216", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) syz_clone(0x80200, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.022676809s ago: executing program 0 (id=943): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x7, 0x18, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0281bb9f7200254b9cd956c0", 0x1c}], 0x1}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x2}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0xffa6, 0x0, 0x7}, 0x10122) 1.011935779s ago: executing program 3 (id=944): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="1805000000000f000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 862.530724ms ago: executing program 3 (id=945): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3e3}, 0x94) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9a, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="e03f03002a000b27c105d25a806c8c6f94f90424fc6004", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe35, 0x0, 0x0, 0x0}, 0xffffffffffffff88) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000071185c000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x2ce, 0x0, 0x0, 0x41000}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 792.042886ms ago: executing program 2 (id=946): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x0, 0x0, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8d}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000140)=r0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@o_path={0x0, 0x0, 0x0, r1}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x30040805) 671.856479ms ago: executing program 2 (id=947): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000001a40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)='i-', 0xa00}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x73}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x30}, @empty}}}, @ip_tos_int={{0x14, 0xff97, 0x1, 0x8}}], 0x70}, 0x600000a0) 606.294951ms ago: executing program 0 (id=948): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) r4 = perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100000000}) 356.088669ms ago: executing program 2 (id=949): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8940, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000a07000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180200000000bf000000000000000000850000002f000000850000000700000095"], &(0x7f0000000600)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x40}, 0x94) 355.828419ms ago: executing program 3 (id=950): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$kcm(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'hsr0\x00'}) 213.659243ms ago: executing program 2 (id=951): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3704000880fc0b0b000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000f40)={r0, 0x20, &(0x7f0000000f00)={&(0x7f0000000100)=""/74, 0x4a, 0x0, &(0x7f0000000e00)=""/249, 0xf9}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a4fc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b87f7c40a1702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f600e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10f9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80729fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a85430600f1e49db5a5517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a00000000000000000000000047e628cd57cde4268f47c9aaec3a3dfe43e032b88ea53656a8740c1a4e0a99be5c97ba451d8b2b0f4e12ba96082e0f6b2dabe716699090058e61a38ce85611945106dd1309087d3a2cf3aaef6216ff3720c3917170544a509071166565eaa3c9285b5227f520cd47"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000046c0)="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", 0x595}], 0x1}, 0x400c000) sendmsg$sock(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=952): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000004800913a745c7388641f9c0e0a"], 0xfe33) kernel console output (not intermixed with test programs): utes in process `syz.0.90'. [ 109.363649][ T6118] netlink: 'syz.3.94': attribute type 26 has an invalid length. [ 109.372251][ T6118] netlink: 62827 bytes leftover after parsing attributes in process `syz.3.94'. [ 109.549833][ T6131] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.97'. [ 109.571456][ T6131] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.97'. [ 109.613151][ T6136] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.97'. [ 109.646799][ T6131] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.97'. [ 109.670107][ T6133] netlink: 'syz.2.98': attribute type 10 has an invalid length. [ 110.144982][ T6146] netlink: 'syz.2.103': attribute type 10 has an invalid length. [ 110.157456][ T6146] netlink: 40 bytes leftover after parsing attributes in process `syz.2.103'. [ 110.353906][ T6157] netlink: 'syz.2.107': attribute type 29 has an invalid length. [ 110.371535][ T6157] netlink: 'syz.2.107': attribute type 29 has an invalid length. [ 110.381316][ T6157] netlink: 'syz.2.107': attribute type 29 has an invalid length. [ 110.600772][ T6163] netlink: 'syz.1.110': attribute type 10 has an invalid length. [ 110.623167][ T6163] macvlan0: entered promiscuous mode [ 110.635778][ T6163] macvlan0: entered allmulticast mode [ 110.645739][ T6163] veth1_vlan: entered allmulticast mode [ 110.663969][ T6163] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 111.228057][ T6183] netlink: 'syz.3.116': attribute type 10 has an invalid length. [ 111.238762][ T6183] netlink: 40 bytes leftover after parsing attributes in process `syz.3.116'. [ 111.495512][ T6191] FAULT_INJECTION: forcing a failure. [ 111.495512][ T6191] name failslab, interval 1, probability 0, space 0, times 0 [ 111.587974][ T6191] CPU: 0 PID: 6191 Comm: syz.0.119 Not tainted syzkaller #0 [ 111.595457][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 111.605580][ T6191] Call Trace: [ 111.609004][ T6191] [ 111.611992][ T6191] dump_stack_lvl+0x18c/0x250 [ 111.616906][ T6191] ? sctp_sendmsg+0x15d2/0x2910 [ 111.621834][ T6191] ? ___sys_sendmsg+0x2a6/0x360 [ 111.626753][ T6191] ? show_regs_print_info+0x20/0x20 [ 111.632021][ T6191] ? load_image+0x420/0x420 [ 111.636689][ T6191] should_fail_ex+0x39d/0x4d0 [ 111.641544][ T6191] should_failslab+0x9/0x20 [ 111.646121][ T6191] slab_pre_alloc_hook+0x59/0x310 [ 111.651221][ T6191] ? sctp_add_bind_addr+0x8c/0x360 [ 111.656399][ T6191] __kmem_cache_alloc_node+0x53/0x250 [ 111.661894][ T6191] ? sctp_add_bind_addr+0x8c/0x360 [ 111.667133][ T6191] kmalloc_trace+0x2a/0xe0 [ 111.671629][ T6191] sctp_add_bind_addr+0x8c/0x360 [ 111.676638][ T6191] sctp_copy_local_addr_list+0x315/0x4f0 [ 111.682349][ T6191] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 111.688142][ T6191] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 111.694287][ T6191] ? sctp_v4_is_any+0x35/0x60 [ 111.699032][ T6191] ? sctp_copy_one_addr+0x8c/0x350 [ 111.704225][ T6191] sctp_bind_addr_copy+0xb3/0x3c0 [ 111.709331][ T6191] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 111.715764][ T6191] sctp_connect_new_asoc+0x2f9/0x6a0 [ 111.721125][ T6191] ? __sctp_connect+0xd80/0xd80 [ 111.726040][ T6191] ? __local_bh_enable_ip+0x13a/0x1c0 [ 111.732142][ T6191] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 111.737764][ T6191] ? security_sctp_bind_connect+0x89/0xb0 [ 111.743580][ T6191] sctp_sendmsg+0x15d2/0x2910 [ 111.748349][ T6191] ? sctp_getsockopt+0xb60/0xb60 [ 111.753368][ T6191] ? aa_sk_perm+0x83c/0x970 [ 111.757950][ T6191] ? aa_af_perm+0x330/0x330 [ 111.762513][ T6191] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 111.768996][ T6191] ? sock_rps_record_flow+0x19/0x3f0 [ 111.774350][ T6191] ? inet_sendmsg+0xe9/0x2f0 [ 111.779002][ T6191] ? inet_send_prepare+0x260/0x260 [ 111.784196][ T6191] ____sys_sendmsg+0x5ba/0x960 [ 111.789027][ T6191] ? __lock_acquire+0x7d40/0x7d40 [ 111.794125][ T6191] ? __asan_memset+0x22/0x40 [ 111.798788][ T6191] ? __sys_sendmsg_sock+0x30/0x30 [ 111.803861][ T6191] ? __import_iovec+0x5f2/0x850 [ 111.808772][ T6191] ? import_iovec+0x73/0xa0 [ 111.813332][ T6191] ___sys_sendmsg+0x2a6/0x360 [ 111.818050][ T6191] ? get_pid_task+0x20/0x1e0 [ 111.822699][ T6191] ? __sys_sendmsg+0x2a0/0x2a0 [ 111.827618][ T6191] ? __lock_acquire+0x7d40/0x7d40 [ 111.832737][ T6191] __se_sys_sendmsg+0x1c2/0x2b0 [ 111.837654][ T6191] ? __x64_sys_sendmsg+0x80/0x80 [ 111.842663][ T6191] ? lockdep_hardirqs_on+0x98/0x150 [ 111.847919][ T6191] do_syscall_64+0x55/0xb0 [ 111.852385][ T6191] ? clear_bhb_loop+0x40/0x90 [ 111.857093][ T6191] ? clear_bhb_loop+0x40/0x90 [ 111.861805][ T6191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.867753][ T6191] RIP: 0033:0x7f8f7939ce59 [ 111.872205][ T6191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.891854][ T6191] RSP: 002b:00007f8f7a20e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.900353][ T6191] RAX: ffffffffffffffda RBX: 00007f8f79615fa0 RCX: 00007f8f7939ce59 [ 111.908373][ T6191] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 111.916378][ T6191] RBP: 00007f8f7a20e090 R08: 0000000000000000 R09: 0000000000000000 [ 111.924388][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.932430][ T6191] R13: 00007f8f79616038 R14: 00007f8f79615fa0 R15: 00007ffc2741b198 [ 111.940466][ T6191] [ 112.763097][ T6209] netlink: 'syz.2.127': attribute type 10 has an invalid length. [ 112.788673][ T6209] team0: Device veth1_vlan failed to register rx_handler [ 112.944359][ T6213] netlink: 'syz.1.128': attribute type 10 has an invalid length. [ 112.991277][ T6213] team0: Device veth1_vlan failed to register rx_handler [ 113.190360][ T6221] netlink: 40 bytes leftover after parsing attributes in process `syz.0.129'. [ 113.437694][ T6224] netlink: 40 bytes leftover after parsing attributes in process `syz.0.133'. [ 114.317369][ T6248] team0: Device veth1_vlan failed to register rx_handler [ 114.890924][ T6254] netlink: 132 bytes leftover after parsing attributes in process `syz.2.142'. [ 115.895511][ T6271] validate_nla: 3 callbacks suppressed [ 115.895565][ T6271] netlink: 'syz.0.148': attribute type 10 has an invalid length. [ 115.928127][ T6271] netlink: 40 bytes leftover after parsing attributes in process `syz.0.148'. [ 115.948228][ T6271] bridge0: port 3(team0) entered blocking state [ 115.956328][ T6271] bridge0: port 3(team0) entered disabled state [ 115.968965][ T6271] team0: entered allmulticast mode [ 115.974954][ T6271] team_slave_0: entered allmulticast mode [ 115.998137][ T6271] team_slave_1: entered allmulticast mode [ 116.052508][ T6271] team0: entered promiscuous mode [ 116.063387][ T6271] team_slave_0: entered promiscuous mode [ 116.072676][ T6271] team_slave_1: entered promiscuous mode [ 116.089939][ T6271] bridge0: port 3(team0) entered blocking state [ 116.097599][ T6271] bridge0: port 3(team0) entered forwarding state [ 116.250739][ T6281] netlink: 14 bytes leftover after parsing attributes in process `syz.2.152'. [ 117.669482][ T6307] netlink: 'syz.2.160': attribute type 10 has an invalid length. [ 117.688818][ T6307] netlink: 40 bytes leftover after parsing attributes in process `syz.2.160'. [ 118.814541][ T6327] netlink: 'syz.1.165': attribute type 10 has an invalid length. [ 118.907167][ T6327] team0: Device veth1_vlan failed to register rx_handler [ 122.438519][ T6349] netlink: 132 bytes leftover after parsing attributes in process `syz.1.172'. [ 124.309075][ T6368] FAULT_INJECTION: forcing a failure. [ 124.309075][ T6368] name failslab, interval 1, probability 0, space 0, times 0 [ 124.325178][ T6368] CPU: 0 PID: 6368 Comm: syz.0.177 Not tainted syzkaller #0 [ 124.332545][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.342676][ T6368] Call Trace: [ 124.346000][ T6368] [ 124.349007][ T6368] dump_stack_lvl+0x18c/0x250 [ 124.353747][ T6368] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 124.359967][ T6368] ? show_regs_print_info+0x20/0x20 [ 124.365230][ T6368] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 124.371488][ T6368] should_fail_ex+0x39d/0x4d0 [ 124.376244][ T6368] should_failslab+0x9/0x20 [ 124.380817][ T6368] slab_pre_alloc_hook+0x59/0x310 [ 124.385903][ T6368] ? __lock_acquire+0x7d40/0x7d40 [ 124.390997][ T6368] ? dev_ethtool+0x129/0x18d0 [ 124.395736][ T6368] __kmem_cache_alloc_node+0x53/0x250 [ 124.401172][ T6368] ? __might_fault+0xaa/0x120 [ 124.405905][ T6368] ? dev_ethtool+0x129/0x18d0 [ 124.410675][ T6368] kmalloc_trace+0x2a/0xe0 [ 124.415180][ T6368] dev_ethtool+0x129/0x18d0 [ 124.419748][ T6368] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 124.426063][ T6368] ? __lock_acquire+0x7d40/0x7d40 [ 124.431153][ T6368] ? dev_load+0xda/0x1f0 [ 124.435457][ T6368] ? dev_load+0x21/0x1f0 [ 124.439760][ T6368] dev_ioctl+0x392/0x1140 [ 124.444154][ T6368] sock_do_ioctl+0x239/0x310 [ 124.448806][ T6368] ? sock_show_fdinfo+0xb0/0xb0 [ 124.453734][ T6368] sock_ioctl+0x5ba/0x7e0 [ 124.458131][ T6368] ? sock_poll+0x3e0/0x3e0 [ 124.462614][ T6368] ? bpf_lsm_file_ioctl+0x9/0x10 [ 124.467601][ T6368] ? security_file_ioctl+0x80/0xa0 [ 124.472766][ T6368] ? sock_poll+0x3e0/0x3e0 [ 124.477237][ T6368] __se_sys_ioctl+0xfd/0x170 [ 124.481893][ T6368] do_syscall_64+0x55/0xb0 [ 124.486365][ T6368] ? clear_bhb_loop+0x40/0x90 [ 124.491085][ T6368] ? clear_bhb_loop+0x40/0x90 [ 124.495805][ T6368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.501757][ T6368] RIP: 0033:0x7f8f7939ce59 [ 124.506217][ T6368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.527096][ T6368] RSP: 002b:00007f8f7a1cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.535574][ T6368] RAX: ffffffffffffffda RBX: 00007f8f79616180 RCX: 00007f8f7939ce59 [ 124.543651][ T6368] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002d [ 124.551688][ T6368] RBP: 00007f8f7a1cc090 R08: 0000000000000000 R09: 0000000000000000 [ 124.559744][ T6368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.567769][ T6368] R13: 00007f8f79616218 R14: 00007f8f79616180 R15: 00007ffc2741b198 [ 124.575815][ T6368] [ 125.936438][ T6371] netlink: 'syz.3.178': attribute type 10 has an invalid length. [ 125.981656][ T6371] team0: Device veth1_vlan failed to register rx_handler [ 126.189273][ T6378] netlink: 'syz.2.181': attribute type 10 has an invalid length. [ 126.197618][ T6378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.181'. [ 126.207211][ T6378] team0: entered promiscuous mode [ 126.212716][ T6378] team_slave_0: entered promiscuous mode [ 126.219623][ T6378] team_slave_1: entered promiscuous mode [ 126.226916][ T6378] team0: entered allmulticast mode [ 126.232934][ T6378] team_slave_0: entered allmulticast mode [ 126.244831][ T6378] team_slave_1: entered allmulticast mode [ 126.252257][ T6378] bridge0: port 3(team0) entered blocking state [ 126.275513][ T6378] bridge0: port 3(team0) entered disabled state [ 126.315197][ T6378] bridge0: port 3(team0) entered blocking state [ 126.322583][ T6378] bridge0: port 3(team0) entered forwarding state [ 126.351254][ T6376] netlink: 'syz.0.180': attribute type 10 has an invalid length. [ 126.381441][ T6376] netlink: 40 bytes leftover after parsing attributes in process `syz.0.180'. [ 127.357028][ T6395] netlink: 'syz.0.186': attribute type 10 has an invalid length. [ 127.397642][ T6395] team0: Device veth1_vlan failed to register rx_handler [ 127.813645][ T6399] veth1_to_bond: entered allmulticast mode [ 128.041377][ T6412] netlink: 'syz.2.191': attribute type 10 has an invalid length. [ 128.064145][ T6412] team0: Device veth1_vlan failed to register rx_handler [ 128.228384][ T6414] netlink: 'syz.3.193': attribute type 10 has an invalid length. [ 128.252239][ T6414] netlink: 40 bytes leftover after parsing attributes in process `syz.3.193'. [ 128.512628][ T6424] netlink: 'syz.3.197': attribute type 10 has an invalid length. [ 128.607612][ T6424] team0: Device veth1_vlan failed to register rx_handler [ 128.769438][ T6429] netlink: 'syz.0.207': attribute type 10 has an invalid length. [ 128.857803][ T6429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.871637][ T6429] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 128.881398][ T6432] netlink: 'syz.1.199': attribute type 10 has an invalid length. [ 128.943319][ T6432] team0: Device veth1_vlan failed to register rx_handler [ 129.019999][ T6437] netlink: 'syz.2.201': attribute type 16 has an invalid length. [ 129.046392][ T6437] netlink: 2 bytes leftover after parsing attributes in process `syz.2.201'. [ 129.138519][ T6435] team0: Device veth1_vlan failed to register rx_handler [ 129.287500][ T6440] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.202'. [ 129.398960][ T6446] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.204'. [ 129.634319][ T6448] netlink: 40 bytes leftover after parsing attributes in process `syz.3.205'. [ 129.920163][ T6458] team0: Device veth1_vlan failed to register rx_handler [ 130.193966][ T6465] syz.2.213 uses obsolete (PF_INET,SOCK_PACKET) [ 130.523950][ T6476] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.216'. [ 130.977220][ T6481] validate_nla: 4 callbacks suppressed [ 130.977240][ T6481] netlink: 'syz.0.217': attribute type 29 has an invalid length. [ 131.038374][ T6481] netlink: 'syz.0.217': attribute type 29 has an invalid length. [ 131.064507][ T6483] netlink: 'syz.2.219': attribute type 10 has an invalid length. [ 131.099659][ T6483] netlink: 40 bytes leftover after parsing attributes in process `syz.2.219'. [ 131.150197][ T6481] netlink: 'syz.0.217': attribute type 29 has an invalid length. [ 131.170522][ T6481] netlink: 'syz.0.217': attribute type 29 has an invalid length. [ 131.184916][ T6481] netlink: 'syz.0.217': attribute type 29 has an invalid length. [ 131.421388][ T6489] netlink: 'syz.1.229': attribute type 10 has an invalid length. [ 131.435182][ T6489] netlink: 40 bytes leftover after parsing attributes in process `syz.1.229'. [ 131.541001][ T6493] netlink: 'syz.0.222': attribute type 10 has an invalid length. [ 131.603017][ T6493] team0: Device veth1_vlan failed to register rx_handler [ 131.671153][ T6494] veth1_to_bond: entered allmulticast mode [ 131.949640][ T6506] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.226'. [ 132.689667][ T6508] netlink: 'syz.1.227': attribute type 7 has an invalid length. [ 133.231551][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.238861][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.843150][ T6516] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.232'. [ 134.905802][ T6512] netlink: 'syz.2.230': attribute type 10 has an invalid length. [ 134.936410][ T6512] netlink: 40 bytes leftover after parsing attributes in process `syz.2.230'. [ 135.146758][ T6513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.184669][ T6518] netlink: 40 bytes leftover after parsing attributes in process `syz.3.233'. [ 135.294236][ T6522] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.235'. [ 135.428668][ T6526] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.972635][ T6546] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.243'. [ 136.198689][ T6549] validate_nla: 5 callbacks suppressed [ 136.198706][ T6549] netlink: 'syz.0.244': attribute type 10 has an invalid length. [ 136.216663][ T6549] netlink: 40 bytes leftover after parsing attributes in process `syz.0.244'. [ 136.306835][ T6552] netlink: 'syz.3.245': attribute type 10 has an invalid length. [ 136.336971][ T6552] netlink: 40 bytes leftover after parsing attributes in process `syz.3.245'. [ 136.988551][ T6569] netlink: 'syz.3.251': attribute type 1 has an invalid length. [ 136.996399][ T6569] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.251'. [ 138.002929][ T6572] netlink: 'syz.0.253': attribute type 10 has an invalid length. [ 138.046798][ T6572] team0: Device veth1_vlan failed to register rx_handler [ 141.536794][ T6587] bond0: entered allmulticast mode [ 141.580648][ T6587] bond_slave_0: entered allmulticast mode [ 141.608454][ T6587] bond_slave_1: entered allmulticast mode [ 141.679870][ T6590] netlink: 763 bytes leftover after parsing attributes in process `syz.0.258'. [ 142.527592][ T6612] netlink: 'syz.2.266': attribute type 10 has an invalid length. [ 142.656613][ T6612] team0: Device veth1_vlan failed to register rx_handler [ 142.770130][ T6611] netlink: 'syz.0.264': attribute type 10 has an invalid length. [ 142.779750][ T6611] netlink: 40 bytes leftover after parsing attributes in process `syz.0.264'. [ 142.804682][ T6616] netlink: 'syz.3.267': attribute type 10 has an invalid length. [ 142.829796][ T6616] netlink: 40 bytes leftover after parsing attributes in process `syz.3.267'. [ 143.440963][ T6636] FAULT_INJECTION: forcing a failure. [ 143.440963][ T6636] name failslab, interval 1, probability 0, space 0, times 0 [ 143.488064][ T6636] CPU: 0 PID: 6636 Comm: syz.0.273 Not tainted syzkaller #0 [ 143.495494][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.505606][ T6636] Call Trace: [ 143.508938][ T6636] [ 143.511921][ T6636] dump_stack_lvl+0x18c/0x250 [ 143.516687][ T6636] ? show_regs_print_info+0x20/0x20 [ 143.521943][ T6636] ? load_image+0x420/0x420 [ 143.526532][ T6636] ? __lock_acquire+0x7d40/0x7d40 [ 143.531628][ T6636] should_fail_ex+0x39d/0x4d0 [ 143.536381][ T6636] should_failslab+0x9/0x20 [ 143.540947][ T6636] slab_pre_alloc_hook+0x59/0x310 [ 143.546034][ T6636] ? __build_skb_around+0x255/0x3d0 [ 143.551306][ T6636] kmem_cache_alloc+0x5a/0x2d0 [ 143.556138][ T6636] ? _sctp_make_chunk+0x14e/0x420 [ 143.561226][ T6636] _sctp_make_chunk+0x14e/0x420 [ 143.566158][ T6636] sctp_make_datafrag_empty+0x12b/0x240 [ 143.571784][ T6636] ? sctp_make_ecne+0x340/0x340 [ 143.576710][ T6636] ? sctp_auth_send_cid+0x69/0x250 [ 143.581896][ T6636] sctp_datamsg_from_user+0x722/0xee0 [ 143.587363][ T6636] sctp_sendmsg_to_asoc+0x107f/0x1830 [ 143.592804][ T6636] ? __asan_memcpy+0x40/0x70 [ 143.597479][ T6636] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 143.602947][ T6636] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 143.608832][ T6636] ? __sctp_connect+0xd80/0xd80 [ 143.613757][ T6636] ? __local_bh_enable_ip+0x13a/0x1c0 [ 143.619199][ T6636] ? _local_bh_enable+0xa0/0xa0 [ 143.624106][ T6636] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 143.629989][ T6636] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 143.633396][ T6634] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.274'. [ 143.635854][ T6636] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 143.635911][ T6636] ? security_sctp_bind_connect+0x89/0xb0 [ 143.635945][ T6636] sctp_sendmsg+0x1bd2/0x2910 [ 143.661469][ T6636] ? sctp_getsockopt+0xb60/0xb60 [ 143.666479][ T6636] ? aa_sk_perm+0x83c/0x970 [ 143.671107][ T6636] ? aa_af_perm+0x330/0x330 [ 143.675778][ T6636] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 143.682265][ T6636] ? sock_rps_record_flow+0x19/0x3f0 [ 143.687632][ T6636] ? inet_sendmsg+0x7c/0x2f0 [ 143.692333][ T6636] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 143.697696][ T6636] ? security_socket_sendmsg+0x80/0xa0 [ 143.703261][ T6636] ? inet_send_prepare+0x260/0x260 [ 143.708449][ T6636] ____sys_sendmsg+0x5ba/0x960 [ 143.713273][ T6636] ? __lock_acquire+0x7d40/0x7d40 [ 143.718369][ T6636] ? __asan_memset+0x22/0x40 [ 143.723033][ T6636] ? __sys_sendmsg_sock+0x30/0x30 [ 143.728128][ T6636] ? __import_iovec+0x5f2/0x850 [ 143.733053][ T6636] ? import_iovec+0x73/0xa0 [ 143.737622][ T6636] ___sys_sendmsg+0x2a6/0x360 [ 143.742387][ T6636] ? get_pid_task+0x20/0x1e0 [ 143.747069][ T6636] ? __sys_sendmsg+0x2a0/0x2a0 [ 143.751916][ T6636] ? __lock_acquire+0x7d40/0x7d40 [ 143.757045][ T6636] __se_sys_sendmsg+0x1c2/0x2b0 [ 143.761964][ T6636] ? __x64_sys_sendmsg+0x80/0x80 [ 143.766991][ T6636] ? lockdep_hardirqs_on+0x98/0x150 [ 143.772273][ T6636] do_syscall_64+0x55/0xb0 [ 143.776759][ T6636] ? clear_bhb_loop+0x40/0x90 [ 143.781500][ T6636] ? clear_bhb_loop+0x40/0x90 [ 143.786287][ T6636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.792262][ T6636] RIP: 0033:0x7f8f7939ce59 [ 143.796728][ T6636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.816388][ T6636] RSP: 002b:00007f8f7a20e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.824858][ T6636] RAX: ffffffffffffffda RBX: 00007f8f79615fa0 RCX: 00007f8f7939ce59 [ 143.832882][ T6636] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 143.840903][ T6636] RBP: 00007f8f7a20e090 R08: 0000000000000000 R09: 0000000000000000 [ 143.848922][ T6636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.856924][ T6636] R13: 00007f8f79616038 R14: 00007f8f79615fa0 R15: 00007ffc2741b198 [ 143.864941][ T6636] [ 144.053784][ T6639] netlink: 'syz.1.276': attribute type 10 has an invalid length. [ 144.128018][ T6639] team0: Device veth1_vlan failed to register rx_handler [ 144.579223][ T6647] netlink: 'syz.2.277': attribute type 10 has an invalid length. [ 144.607033][ T6647] netlink: 40 bytes leftover after parsing attributes in process `syz.2.277'. [ 144.651699][ T6651] netlink: 'syz.3.279': attribute type 10 has an invalid length. [ 144.685999][ T6651] netlink: 40 bytes leftover after parsing attributes in process `syz.3.279'. [ 144.864906][ T6657] delete_channel: no stack [ 145.025003][ T6663] netlink: 'syz.0.283': attribute type 10 has an invalid length. [ 145.044062][ T6663] netlink: 40 bytes leftover after parsing attributes in process `syz.0.283'. [ 145.072823][ T6666] netlink: 'syz.1.286': attribute type 10 has an invalid length. [ 145.257113][ T6670] netlink: 'syz.2.287': attribute type 22 has an invalid length. [ 145.266644][ T6670] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.287'. [ 145.363778][ T6671] netlink: 'syz.1.288': attribute type 10 has an invalid length. [ 145.393378][ T6671] team0: Device veth1_vlan failed to register rx_handler [ 145.639459][ T6679] netlink: 40 bytes leftover after parsing attributes in process `syz.3.291'. [ 145.886883][ T6689] netlink: 40 bytes leftover after parsing attributes in process `syz.3.294'. [ 146.146178][ T6698] bond0: entered allmulticast mode [ 146.165268][ T6698] bond_slave_0: entered allmulticast mode [ 146.184337][ T6698] bond_slave_1: entered allmulticast mode [ 147.305901][ T6716] netlink: 40 bytes leftover after parsing attributes in process `syz.1.303'. [ 147.506265][ T6718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.304'. [ 147.597799][ T6726] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.307'. [ 147.632658][ T6726] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 147.719703][ T6731] FAULT_INJECTION: forcing a failure. [ 147.719703][ T6731] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 147.756482][ T6731] CPU: 1 PID: 6731 Comm: syz.3.310 Not tainted syzkaller #0 [ 147.763902][ T6731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 147.774063][ T6731] Call Trace: [ 147.777375][ T6731] [ 147.780338][ T6731] dump_stack_lvl+0x18c/0x250 [ 147.785066][ T6731] ? show_regs_print_info+0x20/0x20 [ 147.790290][ T6731] ? load_image+0x420/0x420 [ 147.794814][ T6731] ? __lock_acquire+0x7d40/0x7d40 [ 147.799878][ T6731] should_fail_ex+0x39d/0x4d0 [ 147.804614][ T6731] _copy_from_user+0x2f/0xe0 [ 147.809247][ T6731] __copy_msghdr+0x3bb/0x580 [ 147.813904][ T6731] ___sys_sendmsg+0x214/0x360 [ 147.818646][ T6731] ? get_pid_task+0x20/0x1e0 [ 147.823286][ T6731] ? __sys_sendmsg+0x2a0/0x2a0 [ 147.828102][ T6731] ? __lock_acquire+0x7d40/0x7d40 [ 147.833179][ T6731] __se_sys_sendmsg+0x1c2/0x2b0 [ 147.838158][ T6731] ? __x64_sys_sendmsg+0x80/0x80 [ 147.843154][ T6731] ? lockdep_hardirqs_on+0x98/0x150 [ 147.848403][ T6731] do_syscall_64+0x55/0xb0 [ 147.852861][ T6731] ? clear_bhb_loop+0x40/0x90 [ 147.857615][ T6731] ? clear_bhb_loop+0x40/0x90 [ 147.862337][ T6731] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.868282][ T6731] RIP: 0033:0x7fc074f9ce59 [ 147.872739][ T6731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.892391][ T6731] RSP: 002b:00007fc075dde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.900847][ T6731] RAX: ffffffffffffffda RBX: 00007fc075215fa0 RCX: 00007fc074f9ce59 [ 147.908854][ T6731] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 147.916861][ T6731] RBP: 00007fc075dde090 R08: 0000000000000000 R09: 0000000000000000 [ 147.924886][ T6731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.932907][ T6731] R13: 00007fc075216038 R14: 00007fc075215fa0 R15: 00007ffdaf10cdb8 [ 147.941365][ T6731] [ 148.202786][ T6741] validate_nla: 4 callbacks suppressed [ 148.202825][ T6741] netlink: 'syz.1.312': attribute type 10 has an invalid length. [ 148.253311][ T6741] team0: Device veth1_vlan failed to register rx_handler [ 148.725136][ T6756] netlink: 'syz.1.318': attribute type 10 has an invalid length. [ 148.747102][ T6756] netlink: 40 bytes leftover after parsing attributes in process `syz.1.318'. [ 149.040987][ T6765] netlink: 'syz.3.321': attribute type 10 has an invalid length. [ 149.057322][ T6765] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 149.146998][ T6765] netlink: 'syz.3.321': attribute type 9 has an invalid length. [ 149.186486][ T6765] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.321'. [ 150.289150][ T6785] netlink: 'syz.1.327': attribute type 10 has an invalid length. [ 150.312429][ T6785] team0: Device veth1_vlan failed to register rx_handler [ 150.771584][ T6803] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.334'. [ 150.782372][ T6803] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.334'. [ 151.456920][ T6826] FAULT_INJECTION: forcing a failure. [ 151.456920][ T6826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.494308][ T6826] CPU: 0 PID: 6826 Comm: syz.0.341 Not tainted syzkaller #0 [ 151.501708][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 151.511825][ T6826] Call Trace: [ 151.515153][ T6826] [ 151.518134][ T6826] dump_stack_lvl+0x18c/0x250 [ 151.522871][ T6826] ? show_regs_print_info+0x20/0x20 [ 151.528121][ T6826] ? load_image+0x420/0x420 [ 151.532690][ T6826] ? __might_fault+0xaa/0x120 [ 151.537443][ T6826] ? __lock_acquire+0x7d40/0x7d40 [ 151.542533][ T6826] should_fail_ex+0x39d/0x4d0 [ 151.547293][ T6826] _copy_to_user+0x2f/0xa0 [ 151.551816][ T6826] bpf_verifier_vlog+0x45c/0x870 [ 151.556834][ T6826] __btf_verifier_log+0xe3/0x140 [ 151.561841][ T6826] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 151.568073][ T6826] ? btf_check_sec_info+0x350/0x350 [ 151.573352][ T6826] ? btf_parse_hdr+0x1f5/0x710 [ 151.578176][ T6826] btf_parse_hdr+0x2a2/0x710 [ 151.582822][ T6826] btf_new_fd+0x397/0x9f0 [ 151.587216][ T6826] ? bpf_btf_show_fdinfo+0x80/0x80 [ 151.592392][ T6826] ? capable+0x88/0xe0 [ 151.596524][ T6826] __sys_bpf+0x670/0x890 [ 151.600816][ T6826] ? bpf_link_show_fdinfo+0x390/0x390 [ 151.606265][ T6826] ? lock_chain_count+0x20/0x20 [ 151.611165][ T6826] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 151.617205][ T6826] __x64_sys_bpf+0x7c/0x90 [ 151.621664][ T6826] do_syscall_64+0x55/0xb0 [ 151.626117][ T6826] ? clear_bhb_loop+0x40/0x90 [ 151.630832][ T6826] ? clear_bhb_loop+0x40/0x90 [ 151.635634][ T6826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.641571][ T6826] RIP: 0033:0x7f8f7939ce59 [ 151.646021][ T6826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.665714][ T6826] RSP: 002b:00007f8f7a20e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.674164][ T6826] RAX: ffffffffffffffda RBX: 00007f8f79615fa0 RCX: 00007f8f7939ce59 [ 151.682170][ T6826] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 151.690191][ T6826] RBP: 00007f8f7a20e090 R08: 0000000000000000 R09: 0000000000000000 [ 151.698206][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.706223][ T6826] R13: 00007f8f79616038 R14: 00007f8f79615fa0 R15: 00007ffc2741b198 [ 151.714243][ T6826] [ 152.403745][ T6852] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.347'. [ 152.738294][ T6851] bond0: entered allmulticast mode [ 152.743547][ T6851] bond_slave_0: entered allmulticast mode [ 152.769035][ T6851] bond_slave_1: entered allmulticast mode [ 152.778312][ T6851] batadv0: entered allmulticast mode [ 152.816684][ T6848] netlink: 188 bytes leftover after parsing attributes in process `syz.2.347'. [ 153.343156][ T6868] FAULT_INJECTION: forcing a failure. [ 153.343156][ T6868] name failslab, interval 1, probability 0, space 0, times 0 [ 153.356521][ T6868] CPU: 1 PID: 6868 Comm: syz.1.351 Not tainted syzkaller #0 [ 153.363874][ T6868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.373991][ T6868] Call Trace: [ 153.377327][ T6868] [ 153.380319][ T6868] dump_stack_lvl+0x18c/0x250 [ 153.385067][ T6868] ? show_regs_print_info+0x20/0x20 [ 153.390325][ T6868] ? load_image+0x420/0x420 [ 153.394894][ T6868] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 153.400954][ T6868] ? lock_chain_count+0x20/0x20 [ 153.405877][ T6868] should_fail_ex+0x39d/0x4d0 [ 153.410631][ T6868] should_failslab+0x9/0x20 [ 153.415202][ T6868] slab_pre_alloc_hook+0x59/0x310 [ 153.420297][ T6868] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 153.426535][ T6868] kmem_cache_alloc+0x5a/0x2d0 [ 153.431369][ T6868] ? skb_clone+0x1eb/0x370 [ 153.435851][ T6868] skb_clone+0x1eb/0x370 [ 153.440159][ T6868] bpf_clone_redirect+0x167/0x4a0 [ 153.445259][ T6868] bpf_prog_6d7b890af21d8cfe+0x61/0x66 [ 153.450779][ T6868] ? lock_chain_count+0x20/0x20 [ 153.455688][ T6868] ? preempt_schedule+0xc0/0xd0 [ 153.460592][ T6868] ? bpf_test_run+0x174/0x870 [ 153.465328][ T6868] ? preempt_schedule_common+0x82/0xc0 [ 153.470863][ T6868] ? schedule_preempt_disabled+0x20/0x20 [ 153.476561][ T6868] ? lockdep_softirqs_on+0x580/0x580 [ 153.481905][ T6868] ? bpf_test_run+0x174/0x870 [ 153.486656][ T6868] ? preempt_schedule_thunk+0x1a/0x30 [ 153.492102][ T6868] ? __local_bh_disable_ip+0x108/0x1a0 [ 153.497625][ T6868] ? __cant_sleep+0x220/0x220 [ 153.502364][ T6868] ? __local_bh_enable_ip+0x14b/0x1c0 [ 153.507792][ T6868] ? _local_bh_enable+0xa0/0xa0 [ 153.512706][ T6868] ? bpf_test_timer_continue+0x135/0x380 [ 153.518401][ T6868] ? bpf_test_run+0x174/0x870 [ 153.523137][ T6868] bpf_test_run+0x2df/0x870 [ 153.527715][ T6868] ? bpf_test_run+0x174/0x870 [ 153.532456][ T6868] ? dst_hold+0x70/0x70 [ 153.536676][ T6868] ? eth_get_headlen+0x210/0x210 [ 153.541677][ T6868] ? kcov_remote_stop+0x6e0/0x6e0 [ 153.546777][ T6868] ? slab_build_skb+0x25f/0x3f0 [ 153.551690][ T6868] ? convert___skb_to_skb+0x3d/0x590 [ 153.557032][ T6868] bpf_prog_test_run_skb+0xdc8/0x18c0 [ 153.562467][ T6868] ? cpu_online+0x60/0x60 [ 153.566846][ T6868] bpf_prog_test_run+0x321/0x390 [ 153.571824][ T6868] __sys_bpf+0x49d/0x890 [ 153.576104][ T6868] ? bpf_link_show_fdinfo+0x390/0x390 [ 153.581520][ T6868] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 153.587733][ T6868] __x64_sys_bpf+0x7c/0x90 [ 153.592192][ T6868] do_syscall_64+0x55/0xb0 [ 153.596655][ T6868] ? clear_bhb_loop+0x40/0x90 [ 153.601375][ T6868] ? clear_bhb_loop+0x40/0x90 [ 153.606182][ T6868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.612123][ T6868] RIP: 0033:0x7f646d99ce59 [ 153.616599][ T6868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.636257][ T6868] RSP: 002b:00007f646e885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 153.644722][ T6868] RAX: ffffffffffffffda RBX: 00007f646dc15fa0 RCX: 00007f646d99ce59 [ 153.652755][ T6868] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 153.660769][ T6868] RBP: 00007f646e885090 R08: 0000000000000000 R09: 0000000000000000 [ 153.668780][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 153.676785][ T6868] R13: 00007f646dc16038 R14: 00007f646dc15fa0 R15: 00007ffff63b1ad8 [ 153.684824][ T6868] [ 153.692173][ T6871] netlink: 'syz.2.350': attribute type 10 has an invalid length. [ 153.704268][ T6871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.350'. [ 154.014662][ T6878] netlink: 'syz.1.355': attribute type 10 has an invalid length. [ 154.054140][ T6878] team0: Device veth1_vlan failed to register rx_handler [ 155.330574][ T6896] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.360'. [ 155.566624][ T6905] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.362'. [ 155.576550][ T6905] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.362'. [ 155.778372][ T6905] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.362'. [ 155.972432][ T6909] netlink: 'syz.3.364': attribute type 10 has an invalid length. [ 155.980251][ T6911] netlink: 'syz.0.365': attribute type 29 has an invalid length. [ 155.992508][ T6909] netlink: 40 bytes leftover after parsing attributes in process `syz.3.364'. [ 156.024635][ T6911] netlink: 'syz.0.365': attribute type 29 has an invalid length. [ 156.041079][ T6911] netlink: 'syz.0.365': attribute type 29 has an invalid length. [ 156.091535][ T6911] netlink: 'syz.0.365': attribute type 29 has an invalid length. [ 156.131809][ T6911] netlink: 'syz.0.365': attribute type 29 has an invalid length. [ 156.410477][ T6918] netlink: 100 bytes leftover after parsing attributes in process `syz.0.368'. [ 156.464807][ T6917] FAULT_INJECTION: forcing a failure. [ 156.464807][ T6917] name failslab, interval 1, probability 0, space 0, times 0 [ 156.504800][ T6917] CPU: 1 PID: 6917 Comm: syz.2.367 Not tainted syzkaller #0 [ 156.512244][ T6917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.522340][ T6917] Call Trace: [ 156.525688][ T6917] [ 156.528655][ T6917] dump_stack_lvl+0x18c/0x250 [ 156.533378][ T6917] ? show_regs_print_info+0x20/0x20 [ 156.538616][ T6917] ? load_image+0x420/0x420 [ 156.543330][ T6917] ? __might_sleep+0xe0/0xe0 [ 156.547956][ T6917] ? __lock_acquire+0x7d40/0x7d40 [ 156.553024][ T6917] ? trace_event_raw_event_lock+0x250/0x250 [ 156.558970][ T6917] should_fail_ex+0x39d/0x4d0 [ 156.563707][ T6917] should_failslab+0x9/0x20 [ 156.568256][ T6917] slab_pre_alloc_hook+0x59/0x310 [ 156.573327][ T6917] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 156.578922][ T6917] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 156.584511][ T6917] __kmem_cache_alloc_node+0x53/0x250 [ 156.589934][ T6917] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 156.595526][ T6917] __kmalloc+0xa4/0x230 [ 156.599727][ T6917] bpf_prog_test_run_skb+0x245/0x18c0 [ 156.605142][ T6917] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 156.611342][ T6917] ? lockdep_hardirqs_on+0x98/0x150 [ 156.616580][ T6917] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 156.622790][ T6917] ? cpu_online+0x60/0x60 [ 156.627165][ T6917] bpf_prog_test_run+0x321/0x390 [ 156.632156][ T6917] __sys_bpf+0x49d/0x890 [ 156.636437][ T6917] ? bpf_link_show_fdinfo+0x390/0x390 [ 156.641874][ T6917] ? lock_chain_count+0x20/0x20 [ 156.646767][ T6917] __x64_sys_bpf+0x7c/0x90 [ 156.651224][ T6917] do_syscall_64+0x55/0xb0 [ 156.655685][ T6917] ? clear_bhb_loop+0x40/0x90 [ 156.660407][ T6917] ? clear_bhb_loop+0x40/0x90 [ 156.665119][ T6917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.671064][ T6917] RIP: 0033:0x7f18f059ce59 [ 156.675528][ T6917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.695181][ T6917] RSP: 002b:00007f18f1501028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.703640][ T6917] RAX: ffffffffffffffda RBX: 00007f18f0815fa0 RCX: 00007f18f059ce59 [ 156.711651][ T6917] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 156.719654][ T6917] RBP: 00007f18f1501090 R08: 0000000000000000 R09: 0000000000000000 [ 156.727654][ T6917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.735656][ T6917] R13: 00007f18f0816038 R14: 00007f18f0815fa0 R15: 00007ffe841c41d8 [ 156.743680][ T6917] [ 157.882575][ T6937] netlink: 'syz.1.373': attribute type 10 has an invalid length. [ 157.922637][ T6937] team0: Device veth1_vlan failed to register rx_handler [ 158.136129][ T6943] FAULT_INJECTION: forcing a failure. [ 158.136129][ T6943] name failslab, interval 1, probability 0, space 0, times 0 [ 158.158579][ T6943] CPU: 0 PID: 6943 Comm: syz.2.375 Not tainted syzkaller #0 [ 158.165970][ T6943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 158.176078][ T6943] Call Trace: [ 158.179421][ T6943] [ 158.182451][ T6943] dump_stack_lvl+0x18c/0x250 [ 158.187186][ T6943] ? show_regs_print_info+0x20/0x20 [ 158.192439][ T6943] ? load_image+0x420/0x420 [ 158.196992][ T6943] ? __might_sleep+0xe0/0xe0 [ 158.201636][ T6943] ? __lock_acquire+0x7d40/0x7d40 [ 158.206729][ T6943] should_fail_ex+0x39d/0x4d0 [ 158.211475][ T6943] should_failslab+0x9/0x20 [ 158.216040][ T6943] slab_pre_alloc_hook+0x59/0x310 [ 158.221144][ T6943] ? __lock_acquire+0x7d40/0x7d40 [ 158.226245][ T6943] kmem_cache_alloc_node+0x60/0x320 [ 158.231531][ T6943] ? __alloc_skb+0x103/0x2c0 [ 158.236189][ T6943] __alloc_skb+0x103/0x2c0 [ 158.240677][ T6943] netlink_sendmsg+0x66a/0xbf0 [ 158.245521][ T6943] ? netlink_getsockopt+0x590/0x590 [ 158.250781][ T6943] ? aa_sock_msg_perm+0x94/0x150 [ 158.255791][ T6943] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 158.261142][ T6943] ? security_socket_sendmsg+0x80/0xa0 [ 158.266658][ T6943] ? netlink_getsockopt+0x590/0x590 [ 158.271924][ T6943] ____sys_sendmsg+0x5ba/0x960 [ 158.276760][ T6943] ? __asan_memset+0x22/0x40 [ 158.281418][ T6943] ? __sys_sendmsg_sock+0x30/0x30 [ 158.286540][ T6943] ? __import_iovec+0x5f2/0x850 [ 158.291457][ T6943] ? import_iovec+0x73/0xa0 [ 158.296036][ T6943] ___sys_sendmsg+0x2a6/0x360 [ 158.300789][ T6943] ? get_pid_task+0x20/0x1e0 [ 158.305452][ T6943] ? __sys_sendmsg+0x2a0/0x2a0 [ 158.310313][ T6943] ? __lock_acquire+0x7d40/0x7d40 [ 158.315428][ T6943] __se_sys_sendmsg+0x1c2/0x2b0 [ 158.320350][ T6943] ? __x64_sys_sendmsg+0x80/0x80 [ 158.325363][ T6943] ? lockdep_hardirqs_on+0x98/0x150 [ 158.330638][ T6943] do_syscall_64+0x55/0xb0 [ 158.335117][ T6943] ? clear_bhb_loop+0x40/0x90 [ 158.339862][ T6943] ? clear_bhb_loop+0x40/0x90 [ 158.344592][ T6943] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.350552][ T6943] RIP: 0033:0x7f18f059ce59 [ 158.355019][ T6943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.374737][ T6943] RSP: 002b:00007f18f1501028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.383210][ T6943] RAX: ffffffffffffffda RBX: 00007f18f0815fa0 RCX: 00007f18f059ce59 [ 158.391263][ T6943] RDX: 0200000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 158.399293][ T6943] RBP: 00007f18f1501090 R08: 0000000000000000 R09: 0000000000000000 [ 158.407329][ T6943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.415363][ T6943] R13: 00007f18f0816038 R14: 00007f18f0815fa0 R15: 00007ffe841c41d8 [ 158.423409][ T6943] [ 158.441553][ T6947] netlink: 'syz.1.376': attribute type 10 has an invalid length. [ 158.450948][ T6947] netlink: 40 bytes leftover after parsing attributes in process `syz.1.376'. [ 158.461550][ T6941] netlink: 55 bytes leftover after parsing attributes in process `syz.0.374'. [ 158.475000][ T6941] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 159.078847][ T6959] validate_nla: 1 callbacks suppressed [ 159.078866][ T6959] netlink: 'syz.1.381': attribute type 29 has an invalid length. [ 159.394141][ T6967] netlink: 60 bytes leftover after parsing attributes in process `syz.3.382'. [ 159.482775][ T6941] batman_adv: batadv0: Removing interface: veth0_vlan [ 159.527991][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 159.578412][ T6959] netlink: 'syz.1.381': attribute type 29 has an invalid length. [ 159.586435][ T6967] netlink: 60 bytes leftover after parsing attributes in process `syz.3.382'. [ 159.638999][ T6968] netlink: 60 bytes leftover after parsing attributes in process `syz.3.382'. [ 160.206478][ T6978] netlink: 'syz.2.386': attribute type 10 has an invalid length. [ 160.256690][ T6978] team0: Device veth1_vlan failed to register rx_handler [ 160.769359][ T6991] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 160.798631][ T6991] syzkaller1: linktype set to 786 [ 160.950976][ T5782] Bluetooth: hci3: unexpected event 0x18 length: 151 > 23 [ 161.569913][ T7006] FAULT_INJECTION: forcing a failure. [ 161.569913][ T7006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.643610][ T7006] CPU: 1 PID: 7006 Comm: syz.3.393 Not tainted syzkaller #0 [ 161.651010][ T7006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 161.661110][ T7006] Call Trace: [ 161.664431][ T7006] [ 161.667413][ T7006] dump_stack_lvl+0x18c/0x250 [ 161.672159][ T7006] ? show_regs_print_info+0x20/0x20 [ 161.677412][ T7006] ? load_image+0x420/0x420 [ 161.682004][ T7006] ? __lock_acquire+0x7d40/0x7d40 [ 161.687097][ T7006] ? aa_sk_perm+0x970/0x970 [ 161.691667][ T7006] should_fail_ex+0x39d/0x4d0 [ 161.696419][ T7006] _copy_from_user+0x2f/0xe0 [ 161.701075][ T7006] copy_from_sockptr+0x69/0x80 [ 161.705911][ T7006] packet_setsockopt+0x54b/0x1500 [ 161.710993][ T7006] ? packet_ioctl+0x340/0x340 [ 161.715738][ T7006] ? aa_sk_perm+0x83c/0x970 [ 161.720290][ T7006] ? __fget_files+0x28/0x4b0 [ 161.724944][ T7006] ? aa_af_perm+0x330/0x330 [ 161.729506][ T7006] ? __fget_files+0x28/0x4b0 [ 161.734153][ T7006] ? __fget_files+0x28/0x4b0 [ 161.738807][ T7006] ? aa_sock_opt_perm+0x74/0x100 [ 161.743805][ T7006] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 161.749423][ T7006] ? security_socket_setsockopt+0x7e/0xa0 [ 161.755205][ T7006] ? packet_ioctl+0x340/0x340 [ 161.759940][ T7006] do_sock_setsockopt+0x175/0x1a0 [ 161.765005][ T7006] ? __fdget+0x180/0x210 [ 161.769291][ T7006] __x64_sys_setsockopt+0x182/0x200 [ 161.774530][ T7006] do_syscall_64+0x55/0xb0 [ 161.778982][ T7006] ? clear_bhb_loop+0x40/0x90 [ 161.783689][ T7006] ? clear_bhb_loop+0x40/0x90 [ 161.788398][ T7006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.794335][ T7006] RIP: 0033:0x7fc074f9ce59 [ 161.798790][ T7006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.818443][ T7006] RSP: 002b:00007fc075dde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 161.826922][ T7006] RAX: ffffffffffffffda RBX: 00007fc075215fa0 RCX: 00007fc074f9ce59 [ 161.834950][ T7006] RDX: 000000000000000e RSI: 0000000000000107 RDI: 0000000000000003 [ 161.842951][ T7006] RBP: 00007fc075dde090 R08: 0000000000000004 R09: 0000000000000000 [ 161.850957][ T7006] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.858960][ T7006] R13: 00007fc075216038 R14: 00007fc075215fa0 R15: 00007ffdaf10cdb8 [ 161.866978][ T7006] [ 161.996701][ T7009] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.394'. [ 162.247977][ T7009] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.394'. [ 162.308876][ T7013] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.394'. [ 162.595398][ T7018] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.397'. [ 164.805878][ T7058] netlink: 'syz.1.411': attribute type 2 has an invalid length. [ 164.830949][ T7058] netlink: 'syz.1.411': attribute type 33 has an invalid length. [ 164.865112][ T7058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.411'. [ 165.257093][ T7065] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.412'. [ 165.825335][ T7067] team0: Port device team_slave_0 removed [ 165.850191][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'. [ 165.903270][ T7075] netlink: 'syz.0.417': attribute type 10 has an invalid length. [ 166.417335][ T7084] netlink: 'syz.3.421': attribute type 10 has an invalid length. [ 166.433448][ T7084] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 166.699152][ T7090] netlink: 'syz.3.421': attribute type 9 has an invalid length. [ 166.706898][ T7090] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.421'. [ 167.007124][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.014504][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.514269][ T7103] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.428'. [ 167.564464][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 167.880310][ T7107] netlink: 'syz.1.429': attribute type 10 has an invalid length. [ 167.904416][ T7107] team0: Device veth1_vlan failed to register rx_handler [ 170.582256][ T7143] netlink: 'syz.2.442': attribute type 10 has an invalid length. [ 170.679216][ T7143] team0: Device veth1_vlan failed to register rx_handler [ 171.168921][ T7147] netlink: 60 bytes leftover after parsing attributes in process `syz.1.443'. [ 171.925253][ T7170] syzkaller0: entered promiscuous mode [ 171.944825][ T7170] syzkaller0: entered allmulticast mode [ 171.995037][ T7168] netlink: 'syz.2.451': attribute type 9 has an invalid length. [ 172.003757][ T7168] netlink: 160016 bytes leftover after parsing attributes in process `syz.2.451'. [ 172.202662][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.209990][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.632188][ T7185] FAULT_INJECTION: forcing a failure. [ 172.632188][ T7185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.751542][ T7185] CPU: 0 PID: 7185 Comm: syz.3.456 Not tainted syzkaller #0 [ 172.758970][ T7185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 172.769104][ T7185] Call Trace: [ 172.772457][ T7185] [ 172.775473][ T7185] dump_stack_lvl+0x18c/0x250 [ 172.780256][ T7185] ? show_regs_print_info+0x20/0x20 [ 172.785559][ T7185] ? load_image+0x420/0x420 [ 172.790164][ T7185] ? __lock_acquire+0x7d40/0x7d40 [ 172.795281][ T7185] ? snprintf+0xe9/0x140 [ 172.799638][ T7185] should_fail_ex+0x39d/0x4d0 [ 172.804432][ T7185] _copy_to_user+0x2f/0xa0 [ 172.808968][ T7185] simple_read_from_buffer+0xe7/0x150 [ 172.814450][ T7185] proc_fail_nth_read+0x1e8/0x260 [ 172.819590][ T7185] ? proc_fault_inject_write+0x360/0x360 [ 172.825327][ T7185] ? fsnotify_perm+0x271/0x5e0 [ 172.830167][ T7185] ? proc_fault_inject_write+0x360/0x360 [ 172.835893][ T7185] vfs_read+0x28b/0x970 [ 172.840171][ T7185] ? kernel_read+0x1e0/0x1e0 [ 172.844854][ T7185] ? __fget_files+0x28/0x4b0 [ 172.849534][ T7185] ? __fget_files+0x28/0x4b0 [ 172.854218][ T7185] ? __fget_files+0x43d/0x4b0 [ 172.859019][ T7185] ? __fdget_pos+0x2a3/0x330 [ 172.863715][ T7185] ? ksys_read+0x75/0x260 [ 172.868158][ T7185] ksys_read+0x150/0x260 [ 172.872501][ T7185] ? vfs_write+0x990/0x990 [ 172.877032][ T7185] ? lockdep_hardirqs_on+0x98/0x150 [ 172.882335][ T7185] do_syscall_64+0x55/0xb0 [ 172.886835][ T7185] ? clear_bhb_loop+0x40/0x90 [ 172.891629][ T7185] ? clear_bhb_loop+0x40/0x90 [ 172.896386][ T7185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.902377][ T7185] RIP: 0033:0x7fc074f5d68e [ 172.906874][ T7185] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 172.926576][ T7185] RSP: 002b:00007fc075dddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.935189][ T7185] RAX: ffffffffffffffda RBX: 00007fc075dde6c0 RCX: 00007fc074f5d68e [ 172.943264][ T7185] RDX: 000000000000000f RSI: 00007fc075dde0a0 RDI: 0000000000000004 [ 172.951340][ T7185] RBP: 00007fc075dde090 R08: 0000000000000000 R09: 0000000000000000 [ 172.959400][ T7185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.967467][ T7185] R13: 00007fc075216038 R14: 00007fc075215fa0 R15: 00007ffdaf10cdb8 [ 172.975595][ T7185] [ 173.435093][ T7194] FAULT_INJECTION: forcing a failure. [ 173.435093][ T7194] name failslab, interval 1, probability 0, space 0, times 0 [ 173.474812][ T7194] CPU: 1 PID: 7194 Comm: syz.2.458 Not tainted syzkaller #0 [ 173.482238][ T7194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 173.492384][ T7194] Call Trace: [ 173.495737][ T7194] [ 173.498748][ T7194] dump_stack_lvl+0x18c/0x250 [ 173.503535][ T7194] ? sctp_sendmsg+0x15d2/0x2910 [ 173.508489][ T7194] ? ___sys_sendmsg+0x2a6/0x360 [ 173.513440][ T7194] ? show_regs_print_info+0x20/0x20 [ 173.518735][ T7194] ? load_image+0x420/0x420 [ 173.523384][ T7194] should_fail_ex+0x39d/0x4d0 [ 173.528176][ T7194] should_failslab+0x9/0x20 [ 173.532783][ T7194] slab_pre_alloc_hook+0x59/0x310 [ 173.537899][ T7194] ? sctp_add_bind_addr+0x8c/0x360 [ 173.543105][ T7194] __kmem_cache_alloc_node+0x53/0x250 [ 173.548582][ T7194] ? sctp_add_bind_addr+0x8c/0x360 [ 173.553790][ T7194] kmalloc_trace+0x2a/0xe0 [ 173.558310][ T7194] sctp_add_bind_addr+0x8c/0x360 [ 173.563357][ T7194] sctp_copy_local_addr_list+0x315/0x4f0 [ 173.569099][ T7194] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 173.574921][ T7194] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 173.581116][ T7194] ? sctp_v4_is_any+0x35/0x60 [ 173.585899][ T7194] ? sctp_copy_one_addr+0x8c/0x350 [ 173.591167][ T7194] sctp_bind_addr_copy+0xb3/0x3c0 [ 173.596324][ T7194] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 173.602857][ T7194] sctp_connect_new_asoc+0x2f9/0x6a0 [ 173.608260][ T7194] ? __sctp_connect+0xd80/0xd80 [ 173.613209][ T7194] ? __local_bh_enable_ip+0x13a/0x1c0 [ 173.618709][ T7194] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 173.624354][ T7194] ? security_sctp_bind_connect+0x89/0xb0 [ 173.630175][ T7194] sctp_sendmsg+0x15d2/0x2910 [ 173.634999][ T7194] ? sctp_getsockopt+0xb60/0xb60 [ 173.640044][ T7194] ? aa_sk_perm+0x83c/0x970 [ 173.644681][ T7194] ? aa_af_perm+0x330/0x330 [ 173.649270][ T7194] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 173.655804][ T7194] ? sock_rps_record_flow+0x19/0x3f0 [ 173.661203][ T7194] ? inet_sendmsg+0xe9/0x2f0 [ 173.665889][ T7194] ? inet_send_prepare+0x260/0x260 [ 173.671111][ T7194] ____sys_sendmsg+0x5ba/0x960 [ 173.675969][ T7194] ? __lock_acquire+0x7d40/0x7d40 [ 173.681123][ T7194] ? __asan_memset+0x22/0x40 [ 173.685815][ T7194] ? __sys_sendmsg_sock+0x30/0x30 [ 173.690935][ T7194] ? __import_iovec+0x5f2/0x850 [ 173.695914][ T7194] ? import_iovec+0x73/0xa0 [ 173.700569][ T7194] ___sys_sendmsg+0x2a6/0x360 [ 173.705371][ T7194] ? __sys_sendmsg+0x2a0/0x2a0 [ 173.710321][ T7194] ? __lock_acquire+0x7d40/0x7d40 [ 173.715534][ T7194] __se_sys_sendmsg+0x1c2/0x2b0 [ 173.720509][ T7194] ? __x64_sys_sendmsg+0x80/0x80 [ 173.725619][ T7194] ? lockdep_hardirqs_on+0x98/0x150 [ 173.730939][ T7194] do_syscall_64+0x55/0xb0 [ 173.735448][ T7194] ? clear_bhb_loop+0x40/0x90 [ 173.740205][ T7194] ? clear_bhb_loop+0x40/0x90 [ 173.745009][ T7194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.751007][ T7194] RIP: 0033:0x7f18f059ce59 [ 173.755505][ T7194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.775199][ T7194] RSP: 002b:00007f18f1501028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.783734][ T7194] RAX: ffffffffffffffda RBX: 00007f18f0815fa0 RCX: 00007f18f059ce59 [ 173.791814][ T7194] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 173.799871][ T7194] RBP: 00007f18f1501090 R08: 0000000000000000 R09: 0000000000000000 [ 173.807930][ T7194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.815986][ T7194] R13: 00007f18f0816038 R14: 00007f18f0815fa0 R15: 00007ffe841c41d8 [ 173.824102][ T7194] [ 173.869888][ T7195] netlink: 'syz.1.457': attribute type 2 has an invalid length. [ 173.895643][ T7195] netlink: 'syz.1.457': attribute type 8 has an invalid length. [ 173.910142][ T7197] FAULT_INJECTION: forcing a failure. [ 173.910142][ T7197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.926126][ T7195] netlink: 132 bytes leftover after parsing attributes in process `syz.1.457'. [ 173.947163][ T7197] CPU: 1 PID: 7197 Comm: syz.3.459 Not tainted syzkaller #0 [ 173.954553][ T7197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 173.964642][ T7197] Call Trace: [ 173.967959][ T7197] [ 173.970922][ T7197] dump_stack_lvl+0x18c/0x250 [ 173.975640][ T7197] ? show_regs_print_info+0x20/0x20 [ 173.980885][ T7197] ? load_image+0x420/0x420 [ 173.985560][ T7197] ? __lock_acquire+0x7d40/0x7d40 [ 173.990625][ T7197] ? __might_fault+0x22/0x120 [ 173.995347][ T7197] should_fail_ex+0x39d/0x4d0 [ 174.000081][ T7197] _copy_to_user+0x2f/0xa0 [ 174.004537][ T7197] simple_read_from_buffer+0xe7/0x150 [ 174.009977][ T7197] proc_fail_nth_read+0x1e8/0x260 [ 174.015044][ T7197] ? proc_fault_inject_write+0x360/0x360 [ 174.020727][ T7197] ? fsnotify_perm+0x271/0x5e0 [ 174.025536][ T7197] ? proc_fault_inject_write+0x360/0x360 [ 174.031212][ T7197] vfs_read+0x28b/0x970 [ 174.035409][ T7197] ? kernel_read+0x1e0/0x1e0 [ 174.040041][ T7197] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 174.046270][ T7197] ? __fdget_pos+0x198/0x330 [ 174.050905][ T7197] ? __fdget_pos+0x2a3/0x330 [ 174.055568][ T7197] ? ksys_read+0x75/0x260 [ 174.059939][ T7197] ksys_read+0x150/0x260 [ 174.064219][ T7197] ? vfs_write+0x990/0x990 [ 174.068937][ T7197] ? lockdep_hardirqs_on+0x98/0x150 [ 174.074184][ T7197] do_syscall_64+0x55/0xb0 [ 174.078633][ T7197] ? clear_bhb_loop+0x40/0x90 [ 174.083425][ T7197] ? clear_bhb_loop+0x40/0x90 [ 174.088571][ T7197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.094514][ T7197] RIP: 0033:0x7fc074f5d68e [ 174.098962][ T7197] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 174.118648][ T7197] RSP: 002b:00007fc075dddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.127110][ T7197] RAX: ffffffffffffffda RBX: 00007fc075dde6c0 RCX: 00007fc074f5d68e [ 174.135121][ T7197] RDX: 000000000000000f RSI: 00007fc075dde0a0 RDI: 0000000000000007 [ 174.143133][ T7197] RBP: 00007fc075dde090 R08: 0000000000000000 R09: 0000000000000000 [ 174.151142][ T7197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.159151][ T7197] R13: 00007fc075216038 R14: 00007fc075215fa0 R15: 00007ffdaf10cdb8 [ 174.167177][ T7197] [ 174.539859][ T7202] netlink: 'syz.2.460': attribute type 33 has an invalid length. [ 174.557957][ T7202] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.460'. [ 175.097080][ T7207] syzkaller0: entered promiscuous mode [ 175.103284][ T7207] syzkaller0: entered allmulticast mode [ 175.468979][ T7217] netlink: 'syz.0.467': attribute type 2 has an invalid length. [ 175.506249][ T7217] netlink: 'syz.0.467': attribute type 8 has an invalid length. [ 175.561126][ T7217] netlink: 132 bytes leftover after parsing attributes in process `syz.0.467'. [ 175.939310][ T7219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.058810][ T7230] sit0: entered allmulticast mode [ 176.299503][ T7231] sit0: entered promiscuous mode [ 176.536609][ T7241] syzkaller0: entered promiscuous mode [ 176.549928][ T7241] syzkaller0: entered allmulticast mode [ 177.499691][ T7257] netlink: 'syz.0.480': attribute type 10 has an invalid length. [ 177.763773][ T7264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.326679][ T7276] syzkaller0: entered promiscuous mode [ 178.332780][ T7276] syzkaller0: entered allmulticast mode [ 180.018484][ T7293] Driver unsupported XDP return value 0 on prog (id 304) dev N/A, expect packet loss! [ 180.308574][ T7300] syzkaller0: entered promiscuous mode [ 180.320224][ T7300] syzkaller0: entered allmulticast mode [ 183.770407][ T7314] netlink: 'syz.0.501': attribute type 1 has an invalid length. [ 183.793192][ T7314] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.501'. [ 183.838078][ T7314] netlink: 'syz.0.501': attribute type 1 has an invalid length. [ 186.973402][ T7333] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.506'. [ 187.084442][ T7339] netlink: 'syz.1.509': attribute type 21 has an invalid length. [ 187.098557][ T7339] netlink: 156 bytes leftover after parsing attributes in process `syz.1.509'. [ 188.259184][ T7351] syzkaller0: entered promiscuous mode [ 188.264768][ T7351] syzkaller0: entered allmulticast mode [ 190.636124][ T7357] netlink: 'syz.1.515': attribute type 10 has an invalid length. [ 191.754771][ T7357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.777324][ T7357] batadv0: entered allmulticast mode [ 191.808502][ T7357] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 192.045653][ T7372] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.519'. [ 192.139748][ T7375] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.520'. [ 192.465659][ T7377] netlink: 'syz.2.521': attribute type 10 has an invalid length. [ 192.851605][ T7377] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 193.085486][ T7386] netlink: set zone limit has 8 unknown bytes [ 194.662473][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.670237][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.766799][ T7392] syzkaller0: entered promiscuous mode [ 194.820847][ T7392] syzkaller0: entered allmulticast mode [ 195.187390][ T7395] syzkaller0: entered promiscuous mode [ 195.206390][ T7395] syzkaller0: entered allmulticast mode [ 195.549961][ T7408] syzkaller0: entered promiscuous mode [ 195.559975][ T7408] syzkaller0: entered allmulticast mode [ 198.516707][ T7425] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.532'. [ 200.705837][ T7435] netlink: 'syz.3.537': attribute type 1 has an invalid length. [ 200.938529][ T7443] syzkaller0: entered promiscuous mode [ 200.944116][ T7443] syzkaller0: entered allmulticast mode [ 202.193914][ T7461] netlink: 'syz.0.544': attribute type 10 has an invalid length. [ 202.331757][ T7461] geneve0: entered promiscuous mode [ 202.451962][ T7472] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.547'. [ 202.831314][ T7461] geneve0: entered allmulticast mode [ 202.934192][ T7461] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 203.320372][ T7481] FAULT_INJECTION: forcing a failure. [ 203.320372][ T7481] name failslab, interval 1, probability 0, space 0, times 0 [ 203.379013][ T7481] CPU: 0 PID: 7481 Comm: syz.3.552 Not tainted syzkaller #0 [ 203.386408][ T7481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 203.396611][ T7481] Call Trace: [ 203.399949][ T7481] [ 203.402915][ T7481] dump_stack_lvl+0x18c/0x250 [ 203.407658][ T7481] ? show_regs_print_info+0x20/0x20 [ 203.412896][ T7481] ? load_image+0x420/0x420 [ 203.417430][ T7481] ? __might_sleep+0xe0/0xe0 [ 203.422059][ T7481] ? __lock_acquire+0x7d40/0x7d40 [ 203.427124][ T7481] should_fail_ex+0x39d/0x4d0 [ 203.431849][ T7481] should_failslab+0x9/0x20 [ 203.436393][ T7481] slab_pre_alloc_hook+0x59/0x310 [ 203.441465][ T7481] ? tomoyo_encode+0x28b/0x540 [ 203.446262][ T7481] ? tomoyo_encode+0x28b/0x540 [ 203.451052][ T7481] __kmem_cache_alloc_node+0x53/0x250 [ 203.456462][ T7481] ? tomoyo_encode+0x28b/0x540 [ 203.461257][ T7481] __kmalloc+0xa4/0x230 [ 203.465453][ T7481] tomoyo_encode+0x28b/0x540 [ 203.470083][ T7481] tomoyo_realpath_from_path+0x592/0x5d0 [ 203.475769][ T7481] tomoyo_path_number_perm+0x248/0x620 [ 203.481264][ T7481] ? tomoyo_path_number_perm+0x217/0x620 [ 203.486929][ T7481] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 203.492425][ T7481] ? ksys_write+0x1c4/0x260 [ 203.496993][ T7481] ? __fget_files+0x28/0x4b0 [ 203.501623][ T7481] ? __fget_files+0x28/0x4b0 [ 203.506302][ T7481] security_file_ioctl+0x70/0xa0 [ 203.511278][ T7481] __se_sys_ioctl+0x48/0x170 [ 203.515914][ T7481] do_syscall_64+0x55/0xb0 [ 203.520404][ T7481] ? clear_bhb_loop+0x40/0x90 [ 203.525139][ T7481] ? clear_bhb_loop+0x40/0x90 [ 203.529849][ T7481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.535784][ T7481] RIP: 0033:0x7fc074f9ce59 [ 203.540245][ T7481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.559888][ T7481] RSP: 002b:00007fc075dde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.568338][ T7481] RAX: ffffffffffffffda RBX: 00007fc075215fa0 RCX: 00007fc074f9ce59 [ 203.576428][ T7481] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000003 [ 203.584437][ T7481] RBP: 00007fc075dde090 R08: 0000000000000000 R09: 0000000000000000 [ 203.592442][ T7481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.600443][ T7481] R13: 00007fc075216038 R14: 00007fc075215fa0 R15: 00007ffdaf10cdb8 [ 203.608460][ T7481] [ 203.648021][ T7481] ERROR: Out of memory at tomoyo_realpath_from_path. [ 203.879195][ T7489] syzkaller0: entered promiscuous mode [ 203.892826][ T7489] syzkaller0: entered allmulticast mode [ 204.179243][ T7497] FAULT_INJECTION: forcing a failure. [ 204.179243][ T7497] name failslab, interval 1, probability 0, space 0, times 0 [ 204.233189][ T7497] CPU: 0 PID: 7497 Comm: syz.2.559 Not tainted syzkaller #0 [ 204.240586][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 204.250694][ T7497] Call Trace: [ 204.254029][ T7497] [ 204.257012][ T7497] dump_stack_lvl+0x18c/0x250 [ 204.261763][ T7497] ? show_regs_print_info+0x20/0x20 [ 204.267028][ T7497] ? load_image+0x420/0x420 [ 204.271593][ T7497] ? __might_sleep+0xe0/0xe0 [ 204.276228][ T7497] ? __lock_acquire+0x7d40/0x7d40 [ 204.281289][ T7497] should_fail_ex+0x39d/0x4d0 [ 204.286056][ T7497] should_failslab+0x9/0x20 [ 204.290612][ T7497] slab_pre_alloc_hook+0x59/0x310 [ 204.295699][ T7497] kmem_cache_alloc_node+0x60/0x320 [ 204.300947][ T7497] ? __alloc_skb+0x103/0x2c0 [ 204.305578][ T7497] __alloc_skb+0x103/0x2c0 [ 204.310080][ T7497] sctp_packet_transmit+0x2cc/0x2a30 [ 204.315414][ T7497] ? __sctp_packet_append_chunk+0x90b/0xd00 [ 204.321353][ T7497] ? sctp_packet_append_chunk+0x9b2/0xfe0 [ 204.327110][ T7497] ? sctp_packet_config+0x5b1/0xcf0 [ 204.332360][ T7497] sctp_packet_singleton+0x235/0x340 [ 204.337693][ T7497] ? sctp_outq_select_transport+0x570/0x570 [ 204.343651][ T7497] ? sctp_outq_select_transport+0x45d/0x570 [ 204.349585][ T7497] ? sctp_transport_burst_limited+0x197/0x280 [ 204.355700][ T7497] sctp_outq_flush+0x50e/0x3120 [ 204.360596][ T7497] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 204.366548][ T7497] ? _raw_spin_unlock+0x40/0x40 [ 204.371441][ T7497] ? rcu_is_watching+0x15/0xb0 [ 204.376247][ T7497] ? enqueue_timer+0x23d/0x550 [ 204.381044][ T7497] ? sctp_outq_tail+0x8a0/0x8a0 [ 204.386013][ T7497] ? sctp_outq_tail+0x604/0x8a0 [ 204.390899][ T7497] ? sctp_outq_uncork+0x4d/0xa0 [ 204.395791][ T7497] sctp_do_sm+0x533b/0x5a60 [ 204.400350][ T7497] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 204.406278][ T7497] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 204.411367][ T7497] ? __sk_mem_raise_allocated+0xa29/0x1340 [ 204.417211][ T7497] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 204.422623][ T7497] sctp_sendmsg_to_asoc+0x10a6/0x1830 [ 204.428026][ T7497] ? __asan_memcpy+0x40/0x70 [ 204.432663][ T7497] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 204.438092][ T7497] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 204.443930][ T7497] ? __sctp_connect+0xd80/0xd80 [ 204.448818][ T7497] ? __local_bh_enable_ip+0x13a/0x1c0 [ 204.454230][ T7497] ? _local_bh_enable+0xa0/0xa0 [ 204.459111][ T7497] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 204.464959][ T7497] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 204.470802][ T7497] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 204.476383][ T7497] ? security_sctp_bind_connect+0x89/0xb0 [ 204.482171][ T7497] sctp_sendmsg+0x1bd2/0x2910 [ 204.486898][ T7497] ? sctp_getsockopt+0xb60/0xb60 [ 204.491881][ T7497] ? aa_sk_perm+0x83c/0x970 [ 204.496426][ T7497] ? aa_af_perm+0x330/0x330 [ 204.500969][ T7497] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 204.507423][ T7497] ? sock_rps_record_flow+0x19/0x3f0 [ 204.512754][ T7497] ? inet_sendmsg+0x7c/0x2f0 [ 204.517380][ T7497] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 204.522704][ T7497] ? security_socket_sendmsg+0x80/0xa0 [ 204.528208][ T7497] ? inet_send_prepare+0x260/0x260 [ 204.533359][ T7497] ____sys_sendmsg+0x5ba/0x960 [ 204.538159][ T7497] ? __lock_acquire+0x7d40/0x7d40 [ 204.543225][ T7497] ? __asan_memset+0x22/0x40 [ 204.547857][ T7497] ? __sys_sendmsg_sock+0x30/0x30 [ 204.552923][ T7497] ? __import_iovec+0x5f2/0x850 [ 204.557846][ T7497] ? import_iovec+0x73/0xa0 [ 204.562393][ T7497] ___sys_sendmsg+0x2a6/0x360 [ 204.567105][ T7497] ? get_pid_task+0x20/0x1e0 [ 204.571732][ T7497] ? __sys_sendmsg+0x2a0/0x2a0 [ 204.576551][ T7497] ? __lock_acquire+0x7d40/0x7d40 [ 204.581630][ T7497] __se_sys_sendmsg+0x1c2/0x2b0 [ 204.586522][ T7497] ? __x64_sys_sendmsg+0x80/0x80 [ 204.591507][ T7497] ? lockdep_hardirqs_on+0x98/0x150 [ 204.596753][ T7497] do_syscall_64+0x55/0xb0 [ 204.601203][ T7497] ? clear_bhb_loop+0x40/0x90 [ 204.605910][ T7497] ? clear_bhb_loop+0x40/0x90 [ 204.610620][ T7497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.616552][ T7497] RIP: 0033:0x7f18f059ce59 [ 204.621002][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.640648][ T7497] RSP: 002b:00007f18f1501028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.649102][ T7497] RAX: ffffffffffffffda RBX: 00007f18f0815fa0 RCX: 00007f18f059ce59 [ 204.657105][ T7497] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 204.665107][ T7497] RBP: 00007f18f1501090 R08: 0000000000000000 R09: 0000000000000000 [ 204.673110][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.681143][ T7497] R13: 00007f18f0816038 R14: 00007f18f0815fa0 R15: 00007ffe841c41d8 [ 204.689168][ T7497] [ 204.886260][ T7502] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.561'. [ 204.925813][ T7509] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.562'. [ 206.065372][ T7532] syzkaller0: entered promiscuous mode [ 206.073906][ T7532] syzkaller0: entered allmulticast mode [ 206.575067][ T7540] syzkaller0: entered promiscuous mode [ 206.608120][ T7540] syzkaller0: entered allmulticast mode [ 206.780930][ T7552] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.575'. [ 206.978736][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 206.985065][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 206.993870][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 207.000799][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 209.171976][ T7569] netlink: 'syz.3.580': attribute type 10 has an invalid length. [ 209.207598][ T7569] geneve0: entered promiscuous mode [ 209.326781][ T7569] geneve0: entered allmulticast mode [ 209.356200][ T7569] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 209.756177][ T7591] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.588'. [ 209.877750][ T7593] netlink: 'syz.0.597': attribute type 21 has an invalid length. [ 209.888562][ T7593] netlink: 'syz.0.597': attribute type 1 has an invalid length. [ 209.949372][ T7595] netlink: 'syz.3.589': attribute type 10 has an invalid length. [ 210.402778][ T7605] netlink: 'syz.1.592': attribute type 29 has an invalid length. [ 210.440597][ T7605] netlink: 'syz.1.592': attribute type 29 has an invalid length. [ 210.476766][ T7605] netlink: 'syz.1.592': attribute type 29 has an invalid length. [ 210.499136][ T7605] netlink: 'syz.1.592': attribute type 29 has an invalid length. [ 210.517019][ T7605] netlink: 'syz.1.592': attribute type 29 has an invalid length. [ 210.618635][ T7608] netlink: 14 bytes leftover after parsing attributes in process `syz.0.594'. [ 210.675355][ T7614] netlink: 'syz.0.594': attribute type 9 has an invalid length. [ 210.769611][ T7614] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.594'. [ 211.213602][ T7622] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.599'. [ 211.530189][ T7634] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.604'. [ 211.539988][ T7634] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.604'. [ 212.366133][ T7650] netlink: 132 bytes leftover after parsing attributes in process `syz.1.610'. [ 212.527659][ T7652] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.611'. [ 213.262323][ T7674] FAULT_INJECTION: forcing a failure. [ 213.262323][ T7674] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 213.297782][ T7674] CPU: 0 PID: 7674 Comm: syz.0.619 Not tainted syzkaller #0 [ 213.305175][ T7674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 213.315281][ T7674] Call Trace: [ 213.318621][ T7674] [ 213.321611][ T7674] dump_stack_lvl+0x18c/0x250 [ 213.326431][ T7674] ? show_regs_print_info+0x20/0x20 [ 213.331679][ T7674] ? load_image+0x420/0x420 [ 213.336227][ T7674] ? __lock_acquire+0x7d40/0x7d40 [ 213.341300][ T7674] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 213.347509][ T7674] should_fail_ex+0x39d/0x4d0 [ 213.352307][ T7674] prepare_alloc_pages+0x1e2/0x5f0 [ 213.357470][ T7674] __alloc_pages+0x134/0x460 [ 213.362170][ T7674] ? zone_statistics+0x170/0x170 [ 213.367165][ T7674] ? handle_mm_fault+0xe7/0x4c00 [ 213.372154][ T7674] __folio_alloc+0x10/0x20 [ 213.376616][ T7674] vma_alloc_folio+0x47a/0x8f0 [ 213.381438][ T7674] handle_mm_fault+0x1b3b/0x4c00 [ 213.386422][ T7674] ? handle_mm_fault+0xe7/0x4c00 [ 213.391423][ T7674] ? numa_migrate_prep+0x350/0x350 [ 213.396611][ T7674] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 213.401948][ T7674] do_user_addr_fault+0x730/0x12c0 [ 213.407128][ T7674] exc_page_fault+0x64/0x100 [ 213.411784][ T7674] asm_exc_page_fault+0x26/0x30 [ 213.416693][ T7674] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 213.422565][ T7674] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 213.442721][ T7674] RSP: 0018:ffffc900049efa70 EFLAGS: 00050202 [ 213.448839][ T7674] RAX: 30203a636967616d RBX: 000000000000000f RCX: 000000000000000f [ 213.456861][ T7674] RDX: 0000000000000000 RSI: ffff88802d838234 RDI: 0000200000001f40 [ 213.464877][ T7674] RBP: ffff88802d838230 R08: ffff88802d838242 R09: 1ffff11005b07048 [ 213.472896][ T7674] R10: dffffc0000000000 R11: ffffed1005b07049 R12: 0000200000001f4f [ 213.480935][ T7674] R13: ffff88802d838234 R14: 0000200000001f40 R15: ffff88802d838234 [ 213.488976][ T7674] _copy_to_user+0x85/0xa0 [ 213.493520][ T7674] bpf_verifier_vlog+0x45c/0x870 [ 213.498528][ T7674] __btf_verifier_log+0xe3/0x140 [ 213.503524][ T7674] ? btf_check_sec_info+0x350/0x350 [ 213.508780][ T7674] ? __lock_acquire+0x7d40/0x7d40 [ 213.513861][ T7674] ? btf_parse_hdr+0x1f5/0x710 [ 213.518684][ T7674] btf_parse_hdr+0x2a2/0x710 [ 213.523335][ T7674] btf_new_fd+0x397/0x9f0 [ 213.527737][ T7674] ? bpf_btf_show_fdinfo+0x80/0x80 [ 213.532907][ T7674] ? capable+0x88/0xe0 [ 213.537030][ T7674] __sys_bpf+0x670/0x890 [ 213.541318][ T7674] ? bpf_link_show_fdinfo+0x390/0x390 [ 213.546751][ T7674] ? lock_chain_count+0x20/0x20 [ 213.551649][ T7674] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 213.557691][ T7674] __x64_sys_bpf+0x7c/0x90 [ 213.562176][ T7674] do_syscall_64+0x55/0xb0 [ 213.566638][ T7674] ? clear_bhb_loop+0x40/0x90 [ 213.571362][ T7674] ? clear_bhb_loop+0x40/0x90 [ 213.576092][ T7674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.582038][ T7674] RIP: 0033:0x7f8f7939ce59 [ 213.586526][ T7674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.606297][ T7674] RSP: 002b:00007f8f7a20e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 213.614768][ T7674] RAX: ffffffffffffffda RBX: 00007f8f79615fa0 RCX: 00007f8f7939ce59 [ 213.622802][ T7674] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 213.630821][ T7674] RBP: 00007f8f7a20e090 R08: 0000000000000000 R09: 0000000000000000 [ 213.638845][ T7674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.646859][ T7674] R13: 00007f8f79616038 R14: 00007f8f79615fa0 R15: 00007ffc2741b198 [ 213.654903][ T7674] [ 213.876909][ T7686] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.623'. [ 214.250434][ T7698] validate_nla: 5 callbacks suppressed [ 214.250496][ T7698] netlink: 'syz.3.628': attribute type 21 has an invalid length. [ 214.324743][ T7698] netlink: 'syz.3.628': attribute type 1 has an invalid length. [ 214.805702][ T7718] netlink: 188 bytes leftover after parsing attributes in process `syz.1.637'. [ 214.898474][ T7720] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.635'. [ 215.363375][ T7733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.597076][ T7739] netlink: 'syz.1.642': attribute type 10 has an invalid length. [ 215.833140][ T7739] geneve0: entered allmulticast mode [ 215.877115][ T7739] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 216.092583][ T7753] __nla_validate_parse: 1 callbacks suppressed [ 216.092603][ T7753] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.648'. [ 216.305194][ T7757] Dead loop on virtual device ip6_vti0, fix it urgently! [ 217.214869][ T7780] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.660'. [ 217.436044][ T7787] netlink: 'syz.3.661': attribute type 29 has an invalid length. [ 217.508333][ T7787] netlink: 'syz.3.661': attribute type 29 has an invalid length. [ 217.564285][ T7787] netlink: 'syz.3.661': attribute type 29 has an invalid length. [ 217.687499][ T7790] netlink: 'syz.3.661': attribute type 29 has an invalid length. [ 217.717764][ T7798] netlink: 'syz.3.661': attribute type 29 has an invalid length. [ 217.726055][ T7797] netlink: 'syz.0.666': attribute type 21 has an invalid length. [ 217.734597][ T7797] netlink: 164 bytes leftover after parsing attributes in process `syz.0.666'. [ 217.753263][ T7793] netlink: 'syz.1.663': attribute type 29 has an invalid length. [ 218.470159][ T7811] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.671'. [ 219.000179][ T7828] netlink: 132 bytes leftover after parsing attributes in process `syz.1.678'. [ 220.334983][ T7842] FAULT_INJECTION: forcing a failure. [ 220.334983][ T7842] name failslab, interval 1, probability 0, space 0, times 0 [ 220.378733][ T7842] CPU: 1 PID: 7842 Comm: syz.1.684 Not tainted syzkaller #0 [ 220.386154][ T7842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 220.396303][ T7842] Call Trace: [ 220.399659][ T7842] [ 220.402660][ T7842] dump_stack_lvl+0x18c/0x250 [ 220.407439][ T7842] ? show_regs_print_info+0x20/0x20 [ 220.412737][ T7842] ? load_image+0x420/0x420 [ 220.417345][ T7842] ? __might_sleep+0xe0/0xe0 [ 220.422028][ T7842] ? __lock_acquire+0x7d40/0x7d40 [ 220.427164][ T7842] should_fail_ex+0x39d/0x4d0 [ 220.431974][ T7842] should_failslab+0x9/0x20 [ 220.436579][ T7842] slab_pre_alloc_hook+0x59/0x310 [ 220.441699][ T7842] ? trace_call_bpf+0x5e9/0x6c0 [ 220.446654][ T7842] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 220.452473][ T7842] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 220.458282][ T7842] __kmem_cache_alloc_node+0x53/0x250 [ 220.463770][ T7842] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 220.469586][ T7842] __kmalloc+0xa4/0x230 [ 220.473861][ T7842] tomoyo_realpath_from_path+0xe3/0x5d0 [ 220.479552][ T7842] tomoyo_path_number_perm+0x248/0x620 [ 220.485089][ T7842] ? tomoyo_path_number_perm+0x217/0x620 [ 220.490827][ T7842] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 220.496351][ T7842] ? ksys_write+0x1c4/0x260 [ 220.501006][ T7842] ? __fget_files+0x28/0x4b0 [ 220.505653][ T7842] ? __fget_files+0x28/0x4b0 [ 220.510340][ T7842] security_file_ioctl+0x70/0xa0 [ 220.515339][ T7842] __se_sys_ioctl+0x48/0x170 [ 220.520002][ T7842] do_syscall_64+0x55/0xb0 [ 220.524470][ T7842] ? clear_bhb_loop+0x40/0x90 [ 220.529197][ T7842] ? clear_bhb_loop+0x40/0x90 [ 220.533932][ T7842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.539890][ T7842] RIP: 0033:0x7f646d99ce59 [ 220.544361][ T7842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.564020][ T7842] RSP: 002b:00007f646e885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.572504][ T7842] RAX: ffffffffffffffda RBX: 00007f646dc15fa0 RCX: 00007f646d99ce59 [ 220.580548][ T7842] RDX: 0000200000000280 RSI: 0000000000008b26 RDI: 0000000000000009 [ 220.588572][ T7842] RBP: 00007f646e885090 R08: 0000000000000000 R09: 0000000000000000 [ 220.596599][ T7842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.604622][ T7842] R13: 00007f646dc16038 R14: 00007f646dc15fa0 R15: 00007ffff63b1ad8 [ 220.612691][ T7842] [ 220.639636][ T7842] ERROR: Out of memory at tomoyo_realpath_from_path. [ 220.964840][ T7850] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.686'. [ 221.185819][ T7854] FAULT_INJECTION: forcing a failure. [ 221.185819][ T7854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.218391][ T7854] CPU: 1 PID: 7854 Comm: syz.3.689 Not tainted syzkaller #0 [ 221.225865][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 221.235987][ T7854] Call Trace: [ 221.239358][ T7854] [ 221.242339][ T7854] dump_stack_lvl+0x18c/0x250 [ 221.247082][ T7854] ? show_regs_print_info+0x20/0x20 [ 221.252339][ T7854] ? load_image+0x420/0x420 [ 221.256901][ T7854] ? __lock_acquire+0x7d40/0x7d40 [ 221.261984][ T7854] should_fail_ex+0x39d/0x4d0 [ 221.266738][ T7854] _copy_from_user+0x2f/0xe0 [ 221.271388][ T7854] bpf_prog_test_run_skb+0x26c/0x18c0 [ 221.276818][ T7854] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 221.283037][ T7854] ? lockdep_hardirqs_on+0x98/0x150 [ 221.288300][ T7854] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 221.294539][ T7854] ? cpu_online+0x60/0x60 [ 221.298980][ T7854] bpf_prog_test_run+0x321/0x390 [ 221.303976][ T7854] __sys_bpf+0x49d/0x890 [ 221.308285][ T7854] ? bpf_link_show_fdinfo+0x390/0x390 [ 221.313742][ T7854] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 221.319978][ T7854] __x64_sys_bpf+0x7c/0x90 [ 221.324468][ T7854] do_syscall_64+0x55/0xb0 [ 221.328949][ T7854] ? clear_bhb_loop+0x40/0x90 [ 221.333738][ T7854] ? clear_bhb_loop+0x40/0x90 [ 221.338477][ T7854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.344451][ T7854] RIP: 0033:0x7fc074f9ce59 [ 221.348925][ T7854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.368597][ T7854] RSP: 002b:00007fc075dde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.377080][ T7854] RAX: ffffffffffffffda RBX: 00007fc075215fa0 RCX: 00007fc074f9ce59 [ 221.385118][ T7854] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 221.393151][ T7854] RBP: 00007fc075dde090 R08: 0000000000000000 R09: 0000000000000000 [ 221.401188][ T7854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.409237][ T7854] R13: 00007fc075216038 R14: 00007fc075215fa0 R15: 00007ffdaf10cdb8 [ 221.417310][ T7854] [ 221.509163][ T7860] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.690'. [ 221.541665][ T7862] validate_nla: 10 callbacks suppressed [ 221.541683][ T7862] netlink: 'syz.1.691': attribute type 10 has an invalid length. [ 221.569916][ T7862] netlink: 40 bytes leftover after parsing attributes in process `syz.1.691'. [ 221.579762][ T7862] team0: entered promiscuous mode [ 221.585466][ T7862] team_slave_0: entered promiscuous mode [ 221.618817][ T7862] team_slave_1: entered promiscuous mode [ 221.673143][ T7862] team0: entered allmulticast mode [ 221.695138][ T7862] team_slave_0: entered allmulticast mode [ 221.758711][ T7862] team_slave_1: entered allmulticast mode [ 221.777034][ T7862] bridge0: port 3(team0) entered blocking state [ 221.795015][ T7862] bridge0: port 3(team0) entered disabled state [ 221.816298][ T7862] bridge0: port 3(team0) entered blocking state [ 221.822868][ T7862] bridge0: port 3(team0) entered forwarding state [ 221.840462][ T7865] netlink: 'syz.0.693': attribute type 10 has an invalid length. [ 221.848695][ T7865] netlink: 40 bytes leftover after parsing attributes in process `syz.0.693'. [ 222.028096][ T7872] netlink: 'syz.1.696': attribute type 10 has an invalid length. [ 222.054121][ T5782] Bluetooth: hci3: unexpected event 0x23 length: 15 > 13 [ 222.297421][ T7881] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.697'. [ 222.828015][ T5775] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 222.831438][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 223.002890][ T7887] netlink: 'syz.0.700': attribute type 10 has an invalid length. [ 223.010989][ T7887] netlink: 40 bytes leftover after parsing attributes in process `syz.0.700'. [ 223.236646][ T7891] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.702'. [ 223.858922][ T7915] netlink: 'syz.2.712': attribute type 15 has an invalid length. [ 223.866773][ T7915] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.712'. [ 224.309936][ T7925] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.717'. [ 224.642060][ T7940] netlink: 'syz.0.722': attribute type 27 has an invalid length. [ 224.859248][ T5782] Bluetooth: hci1: unexpected event 0x18 length: 151 > 23 [ 224.895598][ T7945] sit0: entered allmulticast mode [ 225.008411][ T7946] sit0: entered promiscuous mode [ 225.247661][ T7951] FAULT_INJECTION: forcing a failure. [ 225.247661][ T7951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.270491][ T7951] CPU: 0 PID: 7951 Comm: syz.3.728 Not tainted syzkaller #0 [ 225.277877][ T7951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 225.288076][ T7951] Call Trace: [ 225.291406][ T7951] [ 225.294402][ T7951] dump_stack_lvl+0x18c/0x250 [ 225.299149][ T7951] ? show_regs_print_info+0x20/0x20 [ 225.304431][ T7951] ? load_image+0x420/0x420 [ 225.309039][ T7951] ? __lock_acquire+0x7d40/0x7d40 [ 225.314128][ T7951] ? snprintf+0xe9/0x140 [ 225.318440][ T7951] should_fail_ex+0x39d/0x4d0 [ 225.323189][ T7951] _copy_to_user+0x2f/0xa0 [ 225.327709][ T7951] simple_read_from_buffer+0xe7/0x150 [ 225.333156][ T7951] proc_fail_nth_read+0x1e8/0x260 [ 225.338249][ T7951] ? proc_fault_inject_write+0x360/0x360 [ 225.343957][ T7951] ? fsnotify_perm+0x271/0x5e0 [ 225.348773][ T7951] ? proc_fault_inject_write+0x360/0x360 [ 225.354533][ T7951] vfs_read+0x28b/0x970 [ 225.358759][ T7951] ? kernel_read+0x1e0/0x1e0 [ 225.363415][ T7951] ? __fget_files+0x28/0x4b0 [ 225.368074][ T7951] ? __fget_files+0x28/0x4b0 [ 225.372732][ T7951] ? __fget_files+0x43d/0x4b0 [ 225.377527][ T7951] ? __fdget_pos+0x2a3/0x330 [ 225.382187][ T7951] ? ksys_read+0x75/0x260 [ 225.386584][ T7951] ksys_read+0x150/0x260 [ 225.390895][ T7951] ? vfs_write+0x990/0x990 [ 225.395425][ T7951] ? lockdep_hardirqs_on+0x98/0x150 [ 225.400708][ T7951] do_syscall_64+0x55/0xb0 [ 225.405186][ T7951] ? clear_bhb_loop+0x40/0x90 [ 225.409924][ T7951] ? clear_bhb_loop+0x40/0x90 [ 225.414656][ T7951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.420625][ T7951] RIP: 0033:0x7fc074f5d68e [ 225.425101][ T7951] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 225.444764][ T7951] RSP: 002b:00007fc075dddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 225.453248][ T7951] RAX: ffffffffffffffda RBX: 00007fc075dde6c0 RCX: 00007fc074f5d68e [ 225.461293][ T7951] RDX: 000000000000000f RSI: 00007fc075dde0a0 RDI: 0000000000000005 [ 225.469310][ T7951] RBP: 00007fc075dde090 R08: 0000000000000000 R09: 0000000000000000 [ 225.477330][ T7951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.485365][ T7951] R13: 00007fc075216038 R14: 00007fc075215fa0 R15: 00007ffdaf10cdb8 [ 225.493410][ T7951] [ 225.645951][ T7961] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.729'. [ 225.969799][ T7971] netlink: 168 bytes leftover after parsing attributes in process `syz.1.734'. [ 226.767343][ T7995] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.743'. [ 227.811198][ T8010] FAULT_INJECTION: forcing a failure. [ 227.811198][ T8010] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 227.881546][ T8010] CPU: 1 PID: 8010 Comm: syz.0.748 Not tainted syzkaller #0 [ 227.888938][ T8010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 227.899058][ T8010] Call Trace: [ 227.902385][ T8010] [ 227.905363][ T8010] dump_stack_lvl+0x18c/0x250 [ 227.910108][ T8010] ? show_regs_print_info+0x20/0x20 [ 227.915360][ T8010] ? load_image+0x420/0x420 [ 227.919925][ T8010] ? __lock_acquire+0x7d40/0x7d40 [ 227.925034][ T8010] should_fail_ex+0x39d/0x4d0 [ 227.929793][ T8010] prepare_alloc_pages+0x1e2/0x5f0 [ 227.934974][ T8010] __alloc_pages+0x134/0x460 [ 227.939628][ T8010] ? rcu_is_watching+0x15/0xb0 [ 227.944463][ T8010] ? zone_statistics+0x170/0x170 [ 227.949472][ T8010] ? __build_skb_around+0x255/0x3d0 [ 227.954752][ T8010] alloc_skb_with_frags+0x23c/0x7b0 [ 227.960037][ T8010] sock_alloc_send_pskb+0x883/0x9a0 [ 227.965316][ T8010] ? sock_kzfree_s+0x50/0x50 [ 227.969984][ T8010] tun_get_user+0x82c/0x3ca0 [ 227.974650][ T8010] ? aa_file_perm+0x11b/0xee0 [ 227.979393][ T8010] ? rcu_read_unlock+0xa0/0xa0 [ 227.984237][ T8010] ? tun_get+0x1c/0x2e0 [ 227.988462][ T8010] ? __lock_acquire+0x7d40/0x7d40 [ 227.993569][ T8010] ? tun_get+0x1c/0x2e0 [ 227.997799][ T8010] tun_chr_write_iter+0x119/0x200 [ 228.002890][ T8010] vfs_write+0x46c/0x990 [ 228.007195][ T8010] ? file_end_write+0x250/0x250 [ 228.012113][ T8010] ? __fget_files+0x43d/0x4b0 [ 228.016863][ T8010] ? __fdget_pos+0x1d8/0x330 [ 228.021514][ T8010] ? ksys_write+0x75/0x260 [ 228.026010][ T8010] ksys_write+0x150/0x260 [ 228.030412][ T8010] ? __ia32_sys_read+0x90/0x90 [ 228.035305][ T8010] ? lockdep_hardirqs_on+0x98/0x150 [ 228.040576][ T8010] do_syscall_64+0x55/0xb0 [ 228.045046][ T8010] ? clear_bhb_loop+0x40/0x90 [ 228.049777][ T8010] ? clear_bhb_loop+0x40/0x90 [ 228.054509][ T8010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.060481][ T8010] RIP: 0033:0x7f8f7939ce59 [ 228.064953][ T8010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.084673][ T8010] RSP: 002b:00007f8f7a20e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 228.093201][ T8010] RAX: ffffffffffffffda RBX: 00007f8f79615fa0 RCX: 00007f8f7939ce59 [ 228.101246][ T8010] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 00000000000000c8 [ 228.109276][ T8010] RBP: 00007f8f7a20e090 R08: 0000000000000000 R09: 0000000000000000 [ 228.117299][ T8010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.125325][ T8010] R13: 00007f8f79616038 R14: 00007f8f79615fa0 R15: 00007ffc2741b198 [ 228.133371][ T8010] [ 229.038045][ T8028] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.756'. [ 229.373819][ T8032] netlink: 'syz.2.758': attribute type 1 has an invalid length. [ 229.401766][ T8037] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 229.412929][ T8037] dvmrp1: persist disabled [ 229.439947][ T8040] syzkaller0: entered promiscuous mode [ 229.445643][ T8040] syzkaller0: entered allmulticast mode [ 229.458646][ T8040] FAULT_INJECTION: forcing a failure. [ 229.458646][ T8040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.487079][ T8040] CPU: 0 PID: 8040 Comm: syz.1.761 Not tainted syzkaller #0 [ 229.494475][ T8040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 229.504680][ T8040] Call Trace: [ 229.508001][ T8040] [ 229.510983][ T8040] dump_stack_lvl+0x18c/0x250 [ 229.515726][ T8040] ? show_regs_print_info+0x20/0x20 [ 229.521005][ T8040] ? load_image+0x420/0x420 [ 229.525613][ T8040] ? __might_fault+0xaa/0x120 [ 229.530451][ T8040] ? __lock_acquire+0x7d40/0x7d40 [ 229.535540][ T8040] should_fail_ex+0x39d/0x4d0 [ 229.540288][ T8040] _copy_from_iter+0x1d9/0x12e0 [ 229.545202][ T8040] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 229.551875][ T8040] ? copyout_mc+0x70/0x70 [ 229.556311][ T8040] tun_get_user+0x1f2/0x3ca0 [ 229.560995][ T8040] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 229.567683][ T8040] ? aa_file_perm+0x11b/0xee0 [ 229.572436][ T8040] ? rcu_read_unlock+0xa0/0xa0 [ 229.577284][ T8040] ? tun_get+0x1c/0x2e0 [ 229.581688][ T8040] ? __lock_acquire+0x7d40/0x7d40 [ 229.586881][ T8040] ? tun_get+0x1c/0x2e0 [ 229.591117][ T8040] tun_chr_write_iter+0x119/0x200 [ 229.596207][ T8040] vfs_write+0x46c/0x990 [ 229.600517][ T8040] ? file_end_write+0x250/0x250 [ 229.605436][ T8040] ? __fget_files+0x43d/0x4b0 [ 229.610191][ T8040] ? __fdget_pos+0x1d8/0x330 [ 229.614852][ T8040] ? ksys_write+0x75/0x260 [ 229.619367][ T8040] ksys_write+0x150/0x260 [ 229.623790][ T8040] ? __ia32_sys_read+0x90/0x90 [ 229.628629][ T8040] ? lockdep_hardirqs_on+0x98/0x150 [ 229.633899][ T8040] do_syscall_64+0x55/0xb0 [ 229.638381][ T8040] ? clear_bhb_loop+0x40/0x90 [ 229.643538][ T8040] ? clear_bhb_loop+0x40/0x90 [ 229.648320][ T8040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.648537][ T8036] syzkaller0: entered promiscuous mode [ 229.654272][ T8040] RIP: 0033:0x7f646d99ce59 [ 229.654301][ T8040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.654318][ T8040] RSP: 002b:00007f646e885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.654341][ T8040] RAX: ffffffffffffffda RBX: 00007f646dc15fa0 RCX: 00007f646d99ce59 [ 229.654357][ T8040] RDX: 000000000000ffdd RSI: 0000200000000200 RDI: 0000000000000003 [ 229.654370][ T8040] RBP: 00007f646e885090 R08: 0000000000000000 R09: 0000000000000000 [ 229.671084][ T8036] syzkaller0: entered allmulticast mode [ 229.684017][ T8040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.684039][ T8040] R13: 00007f646dc16038 R14: 00007f646dc15fa0 R15: 00007ffff63b1ad8 [ 229.684072][ T8040] [ 230.029578][ T8046] syzkaller0: entered promiscuous mode [ 230.035186][ T8046] syzkaller0: entered allmulticast mode [ 230.370297][ T8054] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.768'. [ 230.455658][ T8056] team_slave_0: left promiscuous mode [ 230.483127][ T8056] team_slave_0: left allmulticast mode [ 231.153290][ T8056] team0: Port device team_slave_0 removed [ 231.214926][ T8060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.714812][ T8087] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.779'. [ 232.490738][ T8108] netlink: 'syz.3.785': attribute type 10 has an invalid length. [ 232.508753][ T8108] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 232.733000][ T8108] netlink: 'syz.3.785': attribute type 9 has an invalid length. [ 232.762535][ T8108] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.785'. [ 232.794676][ T8120] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.791'. [ 232.911195][ T5782] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6 [ 233.230568][ T8129] FAULT_INJECTION: forcing a failure. [ 233.230568][ T8129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.249865][ T8129] CPU: 1 PID: 8129 Comm: syz.1.795 Not tainted syzkaller #0 [ 233.257243][ T8129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 233.267387][ T8129] Call Trace: [ 233.270729][ T8129] [ 233.273707][ T8129] dump_stack_lvl+0x18c/0x250 [ 233.278451][ T8129] ? show_regs_print_info+0x20/0x20 [ 233.283710][ T8129] ? load_image+0x420/0x420 [ 233.288269][ T8129] ? __might_fault+0xaa/0x120 [ 233.292995][ T8129] ? __lock_acquire+0x7d40/0x7d40 [ 233.298087][ T8129] should_fail_ex+0x39d/0x4d0 [ 233.302835][ T8129] _copy_from_user+0x2f/0xe0 [ 233.307489][ T8129] ____sys_sendmsg+0x2fd/0x960 [ 233.312320][ T8129] ? __sys_sendmsg_sock+0x30/0x30 [ 233.317408][ T8129] ? ___sys_sendmsg+0x28b/0x360 [ 233.322405][ T8129] ___sys_sendmsg+0x2a6/0x360 [ 233.327135][ T8129] ? __sys_sendmsg+0x2a0/0x2a0 [ 233.331998][ T8129] __se_sys_sendmsg+0x1c2/0x2b0 [ 233.336916][ T8129] ? __x64_sys_sendmsg+0x80/0x80 [ 233.341931][ T8129] ? lockdep_hardirqs_on+0x98/0x150 [ 233.347284][ T8129] do_syscall_64+0x55/0xb0 [ 233.351751][ T8129] ? clear_bhb_loop+0x40/0x90 [ 233.356468][ T8129] ? clear_bhb_loop+0x40/0x90 [ 233.361193][ T8129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.367240][ T8129] RIP: 0033:0x7f646d99ce59 [ 233.371704][ T8129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.391370][ T8129] RSP: 002b:00007f646e885028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.399844][ T8129] RAX: ffffffffffffffda RBX: 00007f646dc15fa0 RCX: 00007f646d99ce59 [ 233.407871][ T8129] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000005 [ 233.415892][ T8129] RBP: 00007f646e885090 R08: 0000000000000000 R09: 0000000000000000 [ 233.423919][ T8129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.431940][ T8129] R13: 00007f646dc16038 R14: 00007f646dc15fa0 R15: 00007ffff63b1ad8 [ 233.439986][ T8129] [ 233.670310][ T8140] FAULT_INJECTION: forcing a failure. [ 233.670310][ T8140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.700025][ T8140] CPU: 1 PID: 8140 Comm: syz.1.799 Not tainted syzkaller #0 [ 233.707406][ T8140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 233.717495][ T8140] Call Trace: [ 233.720811][ T8140] [ 233.723772][ T8140] dump_stack_lvl+0x18c/0x250 [ 233.728498][ T8140] ? show_regs_print_info+0x20/0x20 [ 233.733733][ T8140] ? load_image+0x420/0x420 [ 233.738263][ T8140] ? __might_fault+0xaa/0x120 [ 233.742969][ T8140] ? __lock_acquire+0x7d40/0x7d40 [ 233.748043][ T8140] should_fail_ex+0x39d/0x4d0 [ 233.752770][ T8140] _copy_from_user+0x2f/0xe0 [ 233.757394][ T8140] generic_map_update_batch+0x59a/0x810 [ 233.762987][ T8140] ? rcu_read_unlock+0xa0/0xa0 [ 233.767788][ T8140] ? __fdget+0x180/0x210 [ 233.772079][ T8140] ? rcu_read_unlock+0xa0/0xa0 [ 233.776867][ T8140] bpf_map_do_batch+0x3d7/0x610 [ 233.781767][ T8140] __sys_bpf+0x381/0x890 [ 233.786042][ T8140] ? bpf_link_show_fdinfo+0x390/0x390 [ 233.791460][ T8140] ? lock_chain_count+0x20/0x20 [ 233.796349][ T8140] __x64_sys_bpf+0x7c/0x90 [ 233.800798][ T8140] do_syscall_64+0x55/0xb0 [ 233.805259][ T8140] ? clear_bhb_loop+0x40/0x90 [ 233.809960][ T8140] ? clear_bhb_loop+0x40/0x90 [ 233.814668][ T8140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.820603][ T8140] RIP: 0033:0x7f646d99ce59 [ 233.825058][ T8140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.844724][ T8140] RSP: 002b:00007f646e864028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.853179][ T8140] RAX: ffffffffffffffda RBX: 00007f646dc16090 RCX: 00007f646d99ce59 [ 233.861187][ T8140] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 233.869193][ T8140] RBP: 00007f646e864090 R08: 0000000000000000 R09: 0000000000000000 [ 233.877191][ T8140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.885195][ T8140] R13: 00007f646dc16128 R14: 00007f646dc16090 R15: 00007ffff63b1ad8 [ 233.893241][ T8140] [ 234.162024][ T8147] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.802'. [ 237.514225][ T8172] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.537197][ T8174] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.812'. [ 237.551340][ T8175] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.558684][ T8175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.579863][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.812'. [ 237.718380][ T8181] netlink: 'syz.3.813': attribute type 10 has an invalid length. [ 237.848989][ T8187] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.814'. [ 238.205656][ T8199] netlink: 'syz.2.820': attribute type 19 has an invalid length. [ 238.271557][ T8199] netlink: 'syz.2.820': attribute type 153 has an invalid length. [ 238.289573][ T8201] netlink: 'syz.2.820': attribute type 153 has an invalid length. [ 238.297485][ T8201] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.820'. [ 238.350853][ T8199] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.820'. [ 238.398716][ T8205] netlink: 'syz.1.823': attribute type 29 has an invalid length. [ 238.407231][ T8205] netlink: 'syz.1.823': attribute type 29 has an invalid length. [ 238.675100][ T8218] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.828'. [ 238.729112][ T32] tipc: Subscription rejected, illegal request [ 238.760890][ T8222] bridge_slave_1: left allmulticast mode [ 238.767649][ T8222] bridge_slave_1: left promiscuous mode [ 238.808068][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.967880][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.302887][ T8238] FAULT_INJECTION: forcing a failure. [ 239.302887][ T8238] name failslab, interval 1, probability 0, space 0, times 0 [ 239.323956][ T8238] CPU: 1 PID: 8238 Comm: syz.1.835 Not tainted syzkaller #0 [ 239.331329][ T8238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 239.341437][ T8238] Call Trace: [ 239.344757][ T8238] [ 239.347741][ T8238] dump_stack_lvl+0x18c/0x250 [ 239.352485][ T8238] ? show_regs_print_info+0x20/0x20 [ 239.357736][ T8238] ? load_image+0x420/0x420 [ 239.362293][ T8238] ? __might_sleep+0xe0/0xe0 [ 239.366939][ T8238] ? __lock_acquire+0x7d40/0x7d40 [ 239.372047][ T8238] should_fail_ex+0x39d/0x4d0 [ 239.376792][ T8238] should_failslab+0x9/0x20 [ 239.381353][ T8238] slab_pre_alloc_hook+0x59/0x310 [ 239.386437][ T8238] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 239.392218][ T8238] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 239.397988][ T8238] __kmem_cache_alloc_node+0x53/0x250 [ 239.403430][ T8238] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 239.409212][ T8238] __kmalloc+0xa4/0x230 [ 239.413434][ T8238] tomoyo_realpath_from_path+0xe3/0x5d0 [ 239.419044][ T8238] tomoyo_path_number_perm+0x248/0x620 [ 239.424555][ T8238] ? tomoyo_path_number_perm+0x217/0x620 [ 239.430240][ T8238] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 239.435783][ T8238] ? trace_call_bpf+0xc3/0x6c0 [ 239.440613][ T8238] ? trace_call_bpf+0xc3/0x6c0 [ 239.445434][ T8238] ? trace_call_bpf+0x5e9/0x6c0 [ 239.450375][ T8238] ? __fget_files+0x28/0x4b0 [ 239.455025][ T8238] ? __fget_files+0x28/0x4b0 [ 239.459731][ T8238] security_file_ioctl+0x70/0xa0 [ 239.464715][ T8238] __se_sys_ioctl+0x48/0x170 [ 239.469364][ T8238] do_syscall_64+0x55/0xb0 [ 239.473836][ T8238] ? clear_bhb_loop+0x40/0x90 [ 239.478562][ T8238] ? clear_bhb_loop+0x40/0x90 [ 239.483286][ T8238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.489236][ T8238] RIP: 0033:0x7f646d99ce59 [ 239.493695][ T8238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.513347][ T8238] RSP: 002b:00007f646e885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.521780][ T8238] RAX: ffffffffffffffda RBX: 00007f646dc15fa0 RCX: 00007f646d99ce59 [ 239.529783][ T8238] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000004 [ 239.537806][ T8238] RBP: 00007f646e885090 R08: 0000000000000000 R09: 0000000000000000 [ 239.545835][ T8238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.553861][ T8238] R13: 00007f646dc16038 R14: 00007f646dc15fa0 R15: 00007ffff63b1ad8 [ 239.561911][ T8238] [ 239.623215][ T8238] ERROR: Out of memory at tomoyo_realpath_from_path. [ 239.807554][ T8223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.829'. [ 239.822777][ T8236] bond0: entered allmulticast mode [ 239.831193][ T8236] bond_slave_0: entered allmulticast mode [ 239.837002][ T8236] bond_slave_1: entered allmulticast mode [ 239.843000][ T8236] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 240.121151][ T8256] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.841'. [ 240.251862][ T8253] syzkaller0: entered promiscuous mode [ 240.257483][ T8253] syzkaller0: entered allmulticast mode [ 240.518377][ T8270] FAULT_INJECTION: forcing a failure. [ 240.518377][ T8270] name failslab, interval 1, probability 0, space 0, times 0 [ 240.536854][ T8270] CPU: 0 PID: 8270 Comm: syz.2.843 Not tainted syzkaller #0 [ 240.544230][ T8270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 240.554349][ T8270] Call Trace: [ 240.557680][ T8270] [ 240.560652][ T8270] dump_stack_lvl+0x18c/0x250 [ 240.565374][ T8270] ? sctp_sendmsg+0x15d2/0x2910 [ 240.570250][ T8270] ? ___sys_sendmsg+0x2a6/0x360 [ 240.575563][ T8270] ? show_regs_print_info+0x20/0x20 [ 240.580810][ T8270] ? load_image+0x420/0x420 [ 240.585361][ T8270] should_fail_ex+0x39d/0x4d0 [ 240.590134][ T8270] should_failslab+0x9/0x20 [ 240.594673][ T8270] slab_pre_alloc_hook+0x59/0x310 [ 240.599761][ T8270] ? sctp_add_bind_addr+0x8c/0x360 [ 240.604908][ T8270] __kmem_cache_alloc_node+0x53/0x250 [ 240.610315][ T8270] ? sctp_add_bind_addr+0x8c/0x360 [ 240.615556][ T8270] kmalloc_trace+0x2a/0xe0 [ 240.620008][ T8270] sctp_add_bind_addr+0x8c/0x360 [ 240.624977][ T8270] sctp_copy_local_addr_list+0x315/0x4f0 [ 240.630646][ T8270] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 240.636922][ T8270] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 240.643052][ T8270] ? sctp_v4_is_any+0x35/0x60 [ 240.647766][ T8270] ? sctp_copy_one_addr+0x8c/0x350 [ 240.652938][ T8270] sctp_bind_addr_copy+0xb3/0x3c0 [ 240.658016][ T8270] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 240.664453][ T8270] sctp_connect_new_asoc+0x2f9/0x6a0 [ 240.669782][ T8270] ? __sctp_connect+0xd80/0xd80 [ 240.674667][ T8270] ? __local_bh_enable_ip+0x13a/0x1c0 [ 240.680092][ T8270] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 240.685700][ T8270] ? security_sctp_bind_connect+0x89/0xb0 [ 240.691512][ T8270] sctp_sendmsg+0x15d2/0x2910 [ 240.696230][ T8270] ? sctp_getsockopt+0xb60/0xb60 [ 240.701200][ T8270] ? aa_sk_perm+0x83c/0x970 [ 240.705779][ T8270] ? aa_af_perm+0x330/0x330 [ 240.710318][ T8270] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 240.716758][ T8270] ? sock_rps_record_flow+0x19/0x3f0 [ 240.722096][ T8270] ? inet_sendmsg+0xe9/0x2f0 [ 240.726753][ T8270] ? inet_send_prepare+0x260/0x260 [ 240.731942][ T8270] ____sys_sendmsg+0x5ba/0x960 [ 240.736783][ T8270] ? __lock_acquire+0x7d40/0x7d40 [ 240.741853][ T8270] ? __asan_memset+0x22/0x40 [ 240.746498][ T8270] ? __sys_sendmsg_sock+0x30/0x30 [ 240.751629][ T8270] ? __import_iovec+0x5f2/0x850 [ 240.756550][ T8270] ? import_iovec+0x73/0xa0 [ 240.761106][ T8270] ___sys_sendmsg+0x2a6/0x360 [ 240.765844][ T8270] ? __sys_sendmsg+0x2a0/0x2a0 [ 240.770693][ T8270] ? __lock_acquire+0x7d40/0x7d40 [ 240.775762][ T8270] __se_sys_sendmsg+0x1c2/0x2b0 [ 240.780647][ T8270] ? __x64_sys_sendmsg+0x80/0x80 [ 240.785626][ T8270] ? lockdep_hardirqs_on+0x98/0x150 [ 240.790877][ T8270] do_syscall_64+0x55/0xb0 [ 240.795338][ T8270] ? clear_bhb_loop+0x40/0x90 [ 240.800033][ T8270] ? clear_bhb_loop+0x40/0x90 [ 240.804729][ T8270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.810665][ T8270] RIP: 0033:0x7f18f059ce59 [ 240.815131][ T8270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.834829][ T8270] RSP: 002b:00007f18f1501028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.843312][ T8270] RAX: ffffffffffffffda RBX: 00007f18f0815fa0 RCX: 00007f18f059ce59 [ 240.851350][ T8270] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 240.859410][ T8270] RBP: 00007f18f1501090 R08: 0000000000000000 R09: 0000000000000000 [ 240.867403][ T8270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.875393][ T8270] R13: 00007f18f0816038 R14: 00007f18f0815fa0 R15: 00007ffe841c41d8 [ 240.883410][ T8270] [ 241.617698][ T8282] syz.2.848: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 241.650468][ T8282] CPU: 0 PID: 8282 Comm: syz.2.848 Not tainted syzkaller #0 [ 241.657855][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 241.667963][ T8282] Call Trace: [ 241.671296][ T8282] [ 241.674265][ T8282] dump_stack_lvl+0x18c/0x250 [ 241.679032][ T8282] ? show_regs_print_info+0x20/0x20 [ 241.684305][ T8282] ? load_image+0x420/0x420 [ 241.688883][ T8282] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 241.695391][ T8282] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 241.701974][ T8282] warn_alloc+0x246/0x340 [ 241.706390][ T8282] ? stack_trace_save+0xaa/0x100 [ 241.711394][ T8282] ? zone_watermark_ok_safe+0x230/0x230 [ 241.717017][ T8282] ? kasan_set_track+0x5f/0x70 [ 241.721836][ T8282] ? kasan_set_track+0x4e/0x70 [ 241.726664][ T8282] ? __kasan_kmalloc+0x8f/0xa0 [ 241.731479][ T8282] ? xsk_init_queue+0xad/0x100 [ 241.736289][ T8282] ? xsk_setsockopt+0x4e5/0x760 [ 241.741195][ T8282] ? do_sock_setsockopt+0x175/0x1a0 [ 241.746449][ T8282] ? __x64_sys_setsockopt+0x182/0x200 [ 241.751876][ T8282] __vmalloc_node_range+0x126/0x1330 [ 241.757262][ T8282] ? free_vm_area+0x50/0x50 [ 241.761845][ T8282] vmalloc_user+0x74/0x80 [ 241.766235][ T8282] ? xskq_create+0xbf/0x170 [ 241.770793][ T8282] xskq_create+0xbf/0x170 [ 241.775177][ T8282] xsk_init_queue+0xad/0x100 [ 241.779822][ T8282] xsk_setsockopt+0x4e5/0x760 [ 241.784547][ T8282] ? xsk_poll+0x680/0x680 [ 241.788929][ T8282] ? __fget_files+0x28/0x4b0 [ 241.793586][ T8282] ? __fget_files+0x28/0x4b0 [ 241.798233][ T8282] ? aa_sock_opt_perm+0x74/0x100 [ 241.803227][ T8282] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 241.808847][ T8282] ? security_socket_setsockopt+0x7e/0xa0 [ 241.814621][ T8282] ? xsk_poll+0x680/0x680 [ 241.819093][ T8282] do_sock_setsockopt+0x175/0x1a0 [ 241.824178][ T8282] ? __fdget+0x180/0x210 [ 241.828482][ T8282] __x64_sys_setsockopt+0x182/0x200 [ 241.833778][ T8282] do_syscall_64+0x55/0xb0 [ 241.838257][ T8282] ? clear_bhb_loop+0x40/0x90 [ 241.842995][ T8282] ? clear_bhb_loop+0x40/0x90 [ 241.847733][ T8282] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.853694][ T8282] RIP: 0033:0x7f18f059ce59 [ 241.858164][ T8282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.877837][ T8282] RSP: 002b:00007f18f149e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 241.886327][ T8282] RAX: ffffffffffffffda RBX: 00007f18f0816270 RCX: 00007f18f059ce59 [ 241.894351][ T8282] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000d [ 241.902381][ T8282] RBP: 00007f18f0632d6f R08: 0000000000000004 R09: 0000000000000000 [ 241.910404][ T8282] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 241.918426][ T8282] R13: 00007f18f0816308 R14: 00007f18f0816270 R15: 00007ffe841c41d8 [ 241.926486][ T8282] [ 241.956571][ T8282] Mem-Info: [ 241.966634][ T8282] active_anon:7714 inactive_anon:0 isolated_anon:0 [ 241.966634][ T8282] active_file:16326 inactive_file:40007 isolated_file:0 [ 241.966634][ T8282] unevictable:768 dirty:87 writeback:0 [ 241.966634][ T8282] slab_reclaimable:10730 slab_unreclaimable:95705 [ 241.966634][ T8282] mapped:26822 shmem:1361 pagetables:599 [ 241.966634][ T8282] sec_pagetables:0 bounce:0 [ 241.966634][ T8282] kernel_misc_reclaimable:0 [ 241.966634][ T8282] free:1349765 free_pcp:7274 free_cma:0 [ 242.012400][ T8282] Node 0 active_anon:30856kB inactive_anon:0kB active_file:65304kB inactive_file:159828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107288kB dirty:348kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10592kB pagetables:2396kB sec_pagetables:0kB all_unreclaimable? no [ 242.062896][ T8282] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 242.101871][ T8282] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.136691][ T8282] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 242.143093][ T8282] Node 0 DMA32 free:1489520kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:30816kB inactive_anon:0kB active_file:65304kB inactive_file:159000kB unevictable:1536kB writepending:348kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:9092kB local_pcp:5184kB free_cma:0kB [ 242.207055][ T8282] lowmem_reserve[]: 0 0 0 0 0 [ 242.215229][ T8282] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.247975][ T8282] lowmem_reserve[]: 0 0 0 0 0 [ 242.252964][ T8282] Node 1 Normal free:3894176kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19660kB local_pcp:13164kB free_cma:0kB [ 242.297946][ T8282] lowmem_reserve[]: 0 0 0 0 0 [ 242.302788][ T8282] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 242.322877][ T8282] Node 0 DMA32: 1154*4kB (UME) 1753*8kB (UME) 842*16kB (UME) 1342*32kB (UME) 599*64kB (UME) 413*128kB (UME) 295*256kB (UME) 163*512kB (UM) 101*1024kB (UM) 6*2048kB (UM) 256*4096kB (UM) = 1489520kB [ 242.349692][ T8282] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 242.364914][ T8282] Node 1 Normal: 146*4kB (UME) 59*8kB (UME) 40*16kB (UME) 90*32kB (UME) 21*64kB (UE) 3*128kB (ME) 1*256kB (U) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3894176kB [ 242.389013][ T8282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.407815][ T8282] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.417393][ T8282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.435967][ T8282] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.446242][ T8282] 57694 total pagecache pages [ 242.451662][ T8282] 0 pages in swap cache [ 242.462108][ T8282] Free swap = 124996kB [ 242.466544][ T8282] Total swap = 124996kB [ 242.471261][ T8282] 2097051 pages RAM [ 242.475255][ T8282] 0 pages HighMem/MovableOnly [ 242.485946][ T8282] 416933 pages reserved [ 242.490972][ T8282] 0 pages cma reserved [ 244.057438][ T8288] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.850'. [ 244.273702][ T8294] netlink: 'syz.2.851': attribute type 2 has an invalid length. [ 244.296195][ T8294] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.851'. [ 244.785138][ T8310] netlink: 'syz.1.859': attribute type 10 has an invalid length. [ 244.957151][ T8316] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.861'. [ 244.978333][ T8310] batman_adv: batadv0: Adding interface: netdevsim0 [ 245.004472][ T8310] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.081752][ T8310] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 245.389156][ T8325] netlink: 'syz.3.864': attribute type 10 has an invalid length. [ 245.397678][ T8325] netlink: 40 bytes leftover after parsing attributes in process `syz.3.864'. [ 245.424585][ T8325] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 245.692092][ T8332] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.867'. [ 245.703218][ T8332] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.867'. [ 245.881191][ T8332] sit0: left promiscuous mode [ 246.366488][ T8339] netlink: 132 bytes leftover after parsing attributes in process `syz.0.869'. [ 246.400723][ T8337] sit0: entered promiscuous mode [ 246.438897][ T8349] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.870'. [ 246.607011][ T8354] netlink: 'syz.0.872': attribute type 10 has an invalid length. [ 246.719288][ T8356] netlink: 'syz.3.873': attribute type 2 has an invalid length. [ 246.727031][ T8356] netlink: 132 bytes leftover after parsing attributes in process `syz.3.873'. [ 246.871156][ T8362] netlink: 'syz.0.875': attribute type 27 has an invalid length. [ 246.881544][ T8362] netlink: 152 bytes leftover after parsing attributes in process `syz.0.875'. [ 246.891897][ T8362] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 248.451144][ T8398] netlink: 'syz.2.889': attribute type 29 has an invalid length. [ 248.480496][ T8398] netlink: 'syz.2.889': attribute type 29 has an invalid length. [ 248.514481][ T8399] netlink: 'syz.2.889': attribute type 29 has an invalid length. [ 249.303650][ T8422] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 249.477381][ T8427] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 249.504517][ T8427] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 249.612633][ T8434] __nla_validate_parse: 3 callbacks suppressed [ 249.612654][ T8434] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.900'. [ 250.549163][ T8442] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.903'. [ 250.611281][ T8446] FAULT_INJECTION: forcing a failure. [ 250.611281][ T8446] name failslab, interval 1, probability 0, space 0, times 0 [ 250.625169][ T8446] CPU: 1 PID: 8446 Comm: syz.2.905 Not tainted syzkaller #0 [ 250.632527][ T8446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 250.642674][ T8446] Call Trace: [ 250.646000][ T8446] [ 250.648983][ T8446] dump_stack_lvl+0x18c/0x250 [ 250.653734][ T8446] ? show_regs_print_info+0x20/0x20 [ 250.658999][ T8446] ? load_image+0x420/0x420 [ 250.663563][ T8446] ? trace_call_bpf+0xc3/0x6c0 [ 250.668390][ T8446] ? trace_call_bpf+0x5e9/0x6c0 [ 250.673378][ T8446] ? trace_call_bpf+0xc3/0x6c0 [ 250.678219][ T8446] ? skb_network_protocol+0x51f/0x780 [ 250.683665][ T8446] should_fail_ex+0x39d/0x4d0 [ 250.688399][ T8446] should_failslab+0x9/0x20 [ 250.692947][ T8446] slab_pre_alloc_hook+0x59/0x310 [ 250.698024][ T8446] kmem_cache_alloc+0x5a/0x2d0 [ 250.702836][ T8446] ? skb_clone+0x1eb/0x370 [ 250.707300][ T8446] skb_clone+0x1eb/0x370 [ 250.711612][ T8446] ? dev_queue_xmit_nit+0x212/0xbb0 [ 250.716859][ T8446] dev_queue_xmit_nit+0x24d/0xbb0 [ 250.721929][ T8446] ? lock_chain_count+0x20/0x20 [ 250.726818][ T8446] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 250.731985][ T8446] dev_hard_start_xmit+0x148/0x740 [ 250.737177][ T8446] __dev_queue_xmit+0x19a3/0x3660 [ 250.742295][ T8446] ? __dev_queue_xmit+0x265/0x3660 [ 250.747462][ T8446] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 250.753492][ T8446] ? netdev_core_pick_tx+0x340/0x340 [ 250.758853][ T8446] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 250.765057][ T8446] ? lockdep_hardirqs_on+0x98/0x150 [ 250.770302][ T8446] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 250.776521][ T8446] __netlink_deliver_tap+0x5ab/0x830 [ 250.781962][ T8446] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.787208][ T8446] netlink_deliver_tap+0x19c/0x1b0 [ 250.792455][ T8446] netlink_unicast+0x72c/0x8d0 [ 250.797276][ T8446] netlink_sendmsg+0x8d0/0xbf0 [ 250.802095][ T8446] ? lockdep_hardirqs_on+0x98/0x150 [ 250.807356][ T8446] ? netlink_getsockopt+0x590/0x590 [ 250.812598][ T8446] ? security_socket_sendmsg+0x45/0xa0 [ 250.818096][ T8446] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 250.823420][ T8446] ? security_socket_sendmsg+0x80/0xa0 [ 250.828919][ T8446] ? netlink_getsockopt+0x590/0x590 [ 250.834159][ T8446] ____sys_sendmsg+0x5ba/0x960 [ 250.838965][ T8446] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 250.845173][ T8446] ? __asan_memset+0x22/0x40 [ 250.849810][ T8446] ? __sys_sendmsg_sock+0x30/0x30 [ 250.854868][ T8446] ? __import_iovec+0x5f2/0x850 [ 250.859771][ T8446] ? import_iovec+0x73/0xa0 [ 250.864312][ T8446] ___sys_sendmsg+0x2a6/0x360 [ 250.869036][ T8446] ? __sys_sendmsg+0x2a0/0x2a0 [ 250.873901][ T8446] __se_sys_sendmsg+0x1c2/0x2b0 [ 250.878796][ T8446] ? __x64_sys_sendmsg+0x80/0x80 [ 250.883800][ T8446] ? syscall_enter_from_user_mode+0x2e/0x80 [ 250.889754][ T8446] do_syscall_64+0x55/0xb0 [ 250.894211][ T8446] ? clear_bhb_loop+0x40/0x90 [ 250.898923][ T8446] ? clear_bhb_loop+0x40/0x90 [ 250.903634][ T8446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.909588][ T8446] RIP: 0033:0x7f18f059ce59 [ 250.914037][ T8446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.933685][ T8446] RSP: 002b:00007f18f1501028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.942146][ T8446] RAX: ffffffffffffffda RBX: 00007f18f0815fa0 RCX: 00007f18f059ce59 [ 250.950197][ T8446] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 250.958216][ T8446] RBP: 00007f18f1501090 R08: 0000000000000000 R09: 0000000000000000 [ 250.966231][ T8446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.974241][ T8446] R13: 00007f18f0816038 R14: 00007f18f0815fa0 R15: 00007ffe841c41d8 [ 250.982276][ T8446] [ 251.080139][ T8444] netlink: 'syz.0.904': attribute type 10 has an invalid length. [ 251.128880][ T8444] netlink: 40 bytes leftover after parsing attributes in process `syz.0.904'. [ 251.425761][ T8451] veth1_to_bond: entered allmulticast mode [ 251.893529][ T8461] netlink: 'syz.1.911': attribute type 10 has an invalid length. [ 251.918656][ T8465] netlink: 'syz.2.913': attribute type 10 has an invalid length. [ 251.934080][ T8465] netlink: 40 bytes leftover after parsing attributes in process `syz.2.913'. [ 252.082009][ T8467] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.914'. [ 252.107149][ T8469] FAULT_INJECTION: forcing a failure. [ 252.107149][ T8469] name failslab, interval 1, probability 0, space 0, times 0 [ 252.125819][ T8469] CPU: 1 PID: 8469 Comm: syz.2.915 Not tainted syzkaller #0 [ 252.133219][ T8469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 252.143351][ T8469] Call Trace: [ 252.146694][ T8469] [ 252.149685][ T8469] dump_stack_lvl+0x18c/0x250 [ 252.154452][ T8469] ? show_regs_print_info+0x20/0x20 [ 252.159740][ T8469] ? load_image+0x420/0x420 [ 252.164333][ T8469] ? __might_sleep+0xe0/0xe0 [ 252.169007][ T8469] ? __lock_acquire+0x7d40/0x7d40 [ 252.174187][ T8469] should_fail_ex+0x39d/0x4d0 [ 252.178964][ T8469] should_failslab+0x9/0x20 [ 252.183557][ T8469] slab_pre_alloc_hook+0x59/0x310 [ 252.188669][ T8469] ? lockdep_hardirqs_on+0x98/0x150 [ 252.193964][ T8469] kmem_cache_alloc_node+0x60/0x320 [ 252.199256][ T8469] ? __alloc_skb+0x103/0x2c0 [ 252.203962][ T8469] __alloc_skb+0x103/0x2c0 [ 252.208470][ T8469] netlink_ack+0x376/0x1180 [ 252.213079][ T8469] ? __dev_queue_xmit+0x265/0x3660 [ 252.218304][ T8469] ? netlink_dump+0xe50/0xe50 [ 252.223056][ T8469] ? perf_trace_lock+0xfc/0x3b0 [ 252.228019][ T8469] netlink_rcv_skb+0x2c5/0x4d0 [ 252.232859][ T8469] ? rtnetlink_bind+0x80/0x80 [ 252.237639][ T8469] ? netlink_ack+0x1180/0x1180 [ 252.242560][ T8469] ? __lock_acquire+0x7d40/0x7d40 [ 252.247711][ T8469] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.253000][ T8469] netlink_unicast+0x751/0x8d0 [ 252.257874][ T8469] netlink_sendmsg+0x8d0/0xbf0 [ 252.262742][ T8469] ? netlink_getsockopt+0x590/0x590 [ 252.268031][ T8469] ? aa_sock_msg_perm+0x94/0x150 [ 252.273063][ T8469] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 252.278435][ T8469] ? security_socket_sendmsg+0x80/0xa0 [ 252.283969][ T8469] ? netlink_getsockopt+0x590/0x590 [ 252.289250][ T8469] ____sys_sendmsg+0x5ba/0x960 [ 252.294103][ T8469] ? __asan_memset+0x22/0x40 [ 252.298778][ T8469] ? __sys_sendmsg_sock+0x30/0x30 [ 252.303927][ T8469] ? __import_iovec+0x5f2/0x850 [ 252.308870][ T8469] ? import_iovec+0x73/0xa0 [ 252.313454][ T8469] ___sys_sendmsg+0x2a6/0x360 [ 252.318222][ T8469] ? __sys_sendmsg+0x2a0/0x2a0 [ 252.323125][ T8469] ? __lock_acquire+0x7d40/0x7d40 [ 252.328290][ T8469] __se_sys_sendmsg+0x1c2/0x2b0 [ 252.333232][ T8469] ? __x64_sys_sendmsg+0x80/0x80 [ 252.338277][ T8469] ? lockdep_hardirqs_on+0x98/0x150 [ 252.343557][ T8469] do_syscall_64+0x55/0xb0 [ 252.348048][ T8469] ? clear_bhb_loop+0x40/0x90 [ 252.352794][ T8469] ? clear_bhb_loop+0x40/0x90 [ 252.357540][ T8469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.363508][ T8469] RIP: 0033:0x7f18f059ce59 [ 252.367987][ T8469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.387720][ T8469] RSP: 002b:00007f18f1501028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.396253][ T8469] RAX: ffffffffffffffda RBX: 00007f18f0815fa0 RCX: 00007f18f059ce59 [ 252.404307][ T8469] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 252.412352][ T8469] RBP: 00007f18f1501090 R08: 0000000000000000 R09: 0000000000000000 [ 252.420401][ T8469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.428450][ T8469] R13: 00007f18f0816038 R14: 00007f18f0815fa0 R15: 00007ffe841c41d8 [ 252.436555][ T8469] [ 253.336155][ T8488] netlink: 'syz.0.922': attribute type 21 has an invalid length. [ 253.367393][ T8488] netlink: 'syz.0.922': attribute type 1 has an invalid length. [ 256.101274][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.108253][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.119243][ T8501] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.926'. [ 256.130822][ T8502] netlink: 'syz.0.925': attribute type 8 has an invalid length. [ 256.144039][ T8502] netlink: 'syz.0.925': attribute type 3 has an invalid length. [ 256.152227][ T8502] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.925'. [ 257.110188][ T8516] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.927'. [ 257.149726][ T8516] netlink: 'syz.1.927': attribute type 1 has an invalid length. [ 257.194921][ T8516] netlink: 16520 bytes leftover after parsing attributes in process `syz.1.927'. [ 258.196945][ T8526] netlink: 132 bytes leftover after parsing attributes in process `syz.0.935'. [ 258.358826][ T8530] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.937'. [ 258.511058][ T8539] netlink: 132 bytes leftover after parsing attributes in process `syz.2.941'. [ 258.911359][ T8550] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.945'. [ 259.463326][ T8571] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.951'. [ 259.583720][ T8559] ================================================================== [ 259.591881][ T8559] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 259.599919][ T8559] Write of size 32 at addr ffff88802e3d9b60 by task syz.0.948/8559 [ 259.607886][ T8559] [ 259.610252][ T8559] CPU: 1 PID: 8559 Comm: syz.0.948 Not tainted syzkaller #0 [ 259.617587][ T8559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 259.627685][ T8559] Call Trace: [ 259.631010][ T8559] [ 259.633995][ T8559] dump_stack_lvl+0x18c/0x250 [ 259.638736][ T8559] ? __lock_acquire+0x7d40/0x7d40 [ 259.643848][ T8559] ? show_regs_print_info+0x20/0x20 [ 259.649110][ T8559] ? load_image+0x420/0x420 [ 259.653661][ T8559] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 259.659268][ T8559] ? __virt_addr_valid+0x18c/0x540 [ 259.664438][ T8559] ? __virt_addr_valid+0x469/0x540 [ 259.669611][ T8559] print_report+0xa8/0x210 [ 259.674070][ T8559] ? __bpf_get_stackid+0x6bf/0x900 [ 259.679226][ T8559] kasan_report+0x117/0x150 [ 259.683795][ T8559] ? __bpf_get_stackid+0x6bf/0x900 [ 259.688952][ T8559] kasan_check_range+0x241/0x290 [ 259.693928][ T8559] ? __bpf_get_stackid+0x6bf/0x900 [ 259.699081][ T8559] __asan_memcpy+0x40/0x70 [ 259.703540][ T8559] __bpf_get_stackid+0x6bf/0x900 [ 259.708515][ T8559] bpf_get_stackid_pe+0x2f0/0x410 [ 259.713584][ T8559] bpf_prog_620e6a2847f43590+0x33/0x48 [ 259.719072][ T8559] bpf_overflow_handler+0x1fc/0x510 [ 259.724314][ T8559] ? bpf_overflow_handler+0xde/0x510 [ 259.729728][ T8559] ? tp_perf_event_destroy+0x20/0x20 [ 259.735058][ T8559] ? __perf_event_account_interrupt+0x187/0x280 [ 259.741334][ T8559] __perf_event_overflow+0x447/0x630 [ 259.746661][ T8559] perf_swevent_event+0x319/0x570 [ 259.751721][ T8559] ? perf_tp_event+0x1520/0x1520 [ 259.756693][ T8559] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 259.762627][ T8559] ? _raw_spin_unlock+0x40/0x40 [ 259.767520][ T8559] ___perf_sw_event+0x4a7/0x730 [ 259.772406][ T8559] ? ___perf_sw_event+0x199/0x730 [ 259.777478][ T8559] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 259.783926][ T8559] ? task_mm_cid_work+0x31d/0x770 [ 259.789044][ T8559] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 259.795124][ T8559] ? _raw_spin_unlock_irq+0x23/0x50 [ 259.800369][ T8559] ? lock_chain_count+0x20/0x20 [ 259.805253][ T8559] __perf_sw_event+0x139/0x270 [ 259.810049][ T8559] do_user_addr_fault+0x123e/0x12c0 [ 259.815300][ T8559] ? rcu_is_watching+0x15/0xb0 [ 259.820105][ T8559] exc_page_fault+0x64/0x100 [ 259.824733][ T8559] ? clear_bhb_loop+0x40/0x90 [ 259.829437][ T8559] asm_exc_page_fault+0x26/0x30 [ 259.834322][ T8559] RIP: 0033:0x7ffc27483a21 [ 259.838775][ T8559] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36 [ 259.858424][ T8559] RSP: 002b:00007f8f7a20dff0 EFLAGS: 00010207 [ 259.864525][ T8559] RAX: 001f66e90c46fae2 RBX: 00007ffc2747f0b0 RCX: 0000000000000018 [ 259.872540][ T8559] RDX: 000000001ff11c50 RSI: 00007f8f7a20e0b0 RDI: 7fffffffffffffff [ 259.880574][ T8559] RBP: 00007f8f7a20e030 R08: 0000000000000103 R09: 0000000000745d1e [ 259.888591][ T8559] R10: 00000086eef8ad02 R11: 000000000000c254 R12: 0000000000000010 [ 259.896604][ T8559] R13: 00007f8f79616038 R14: 00007ffc2747f080 R15: 000000000000c254 [ 259.904618][ T8559] [ 259.907660][ T8559] [ 259.910008][ T8559] Allocated by task 8559: [ 259.914354][ T8559] kasan_set_track+0x4e/0x70 [ 259.918982][ T8559] __kasan_kmalloc+0x8f/0xa0 [ 259.923603][ T8559] __kmalloc_node+0xb4/0x230 [ 259.928224][ T8559] bpf_map_area_alloc+0x5e/0x110 [ 259.933192][ T8559] prealloc_elems_and_freelist+0x86/0x1c0 [ 259.938949][ T8559] stack_map_alloc+0x33a/0x4c0 [ 259.943752][ T8559] map_create+0x877/0x12f0 [ 259.948199][ T8559] __sys_bpf+0x651/0x890 [ 259.952465][ T8559] __x64_sys_bpf+0x7c/0x90 [ 259.956910][ T8559] do_syscall_64+0x55/0xb0 [ 259.961356][ T8559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.967288][ T8559] [ 259.969633][ T8559] Last potentially related work creation: [ 259.975368][ T8559] kasan_save_stack+0x3e/0x60 [ 259.980078][ T8559] __kasan_record_aux_stack+0xaf/0xc0 [ 259.985489][ T8559] kvfree_call_rcu+0xee/0x790 [ 259.990204][ T8559] drop_sysctl_table+0x394/0x540 [ 259.995170][ T8559] unregister_sysctl_table+0x41/0x60 [ 260.000484][ T8559] unix_sysctl_unregister+0x5e/0x90 [ 260.005719][ T8559] unix_net_exit+0x73/0xb0 [ 260.010159][ T8559] cleanup_net+0x70a/0xbb0 [ 260.014599][ T8559] process_scheduled_works+0xa5d/0x15d0 [ 260.020178][ T8559] worker_thread+0xa55/0xfc0 [ 260.024797][ T8559] kthread+0x2fa/0x390 [ 260.028896][ T8559] ret_from_fork+0x48/0x80 [ 260.033353][ T8559] ret_from_fork_asm+0x11/0x20 [ 260.038154][ T8559] [ 260.040504][ T8559] Second to last potentially related work creation: [ 260.047105][ T8559] kasan_save_stack+0x3e/0x60 [ 260.051807][ T8559] __kasan_record_aux_stack+0xaf/0xc0 [ 260.057214][ T8559] kvfree_call_rcu+0xee/0x790 [ 260.061925][ T8559] drop_sysctl_table+0x394/0x540 [ 260.066890][ T8559] unregister_sysctl_table+0x41/0x60 [ 260.072202][ T8559] mpls_dev_sysctl_unregister+0x8b/0xc0 [ 260.077787][ T8559] mpls_dev_notify+0x533/0x7a0 [ 260.082584][ T8559] notifier_call_chain+0x197/0x380 [ 260.087729][ T8559] unregister_netdevice_many_notify+0x100d/0x1900 [ 260.094263][ T8559] unregister_netdevice_queue+0x32c/0x370 [ 260.100014][ T8559] __tun_detach+0xd45/0x1500 [ 260.104646][ T8559] tun_chr_close+0x10d/0x1c0 [ 260.109271][ T8559] __fput+0x234/0x970 [ 260.113281][ T8559] task_work_run+0x1d4/0x260 [ 260.117907][ T8559] exit_to_user_mode_loop+0xe6/0x110 [ 260.123226][ T8559] exit_to_user_mode_prepare+0xee/0x180 [ 260.128804][ T8559] syscall_exit_to_user_mode+0x1a/0x50 [ 260.134298][ T8559] do_syscall_64+0x61/0xb0 [ 260.138757][ T8559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.144695][ T8559] [ 260.147049][ T8559] The buggy address belongs to the object at ffff88802e3d9b00 [ 260.147049][ T8559] which belongs to the cache kmalloc-cg-128 of size 128 [ 260.161391][ T8559] The buggy address is located 96 bytes inside of [ 260.161391][ T8559] allocated 120-byte region [ffff88802e3d9b00, ffff88802e3d9b78) [ 260.175493][ T8559] [ 260.177853][ T8559] The buggy address belongs to the physical page: [ 260.184343][ T8559] page:ffffea0000b8f640 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e3d9 [ 260.194531][ T8559] memcg:ffff8880208f1001 [ 260.198804][ T8559] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 260.206376][ T8559] page_type: 0xffffffff() [ 260.210730][ T8559] raw: 00fff00000000800 ffff888017c4dc80 ffffea0000c1a480 dead000000000004 [ 260.219343][ T8559] raw: 0000000000000000 0000000000100010 00000001ffffffff ffff8880208f1001 [ 260.227945][ T8559] page dumped because: kasan: bad access detected [ 260.234407][ T8559] page_owner tracks the page as allocated [ 260.240148][ T8559] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5773, tgid 5773 (syz-executor), ts 92315674566, free_ts 92315356155 [ 260.258496][ T8559] post_alloc_hook+0x1c1/0x200 [ 260.263303][ T8559] get_page_from_freelist+0x1951/0x19e0 [ 260.268871][ T8559] __alloc_pages+0x1f0/0x460 [ 260.273491][ T8559] alloc_slab_page+0x5d/0x160 [ 260.278193][ T8559] new_slab+0x87/0x2d0 [ 260.282294][ T8559] ___slab_alloc+0xc5d/0x12f0 [ 260.287002][ T8559] __kmem_cache_alloc_node+0x19e/0x250 [ 260.292534][ T8559] __kmalloc_node+0xa4/0x230 [ 260.297159][ T8559] kvmalloc_node+0x70/0x180 [ 260.301706][ T8559] nf_hook_entries_grow+0x27d/0x6d0 [ 260.306943][ T8559] __nf_register_net_hook+0x2c9/0x910 [ 260.312353][ T8559] nf_register_net_hook+0xb2/0x190 [ 260.317506][ T8559] nf_register_net_hooks+0x44/0x1b0 [ 260.322739][ T8559] nf_nat_register_fn+0x3cf/0x580 [ 260.327796][ T8559] iptable_nat_table_init+0xd4/0x2d0 [ 260.333116][ T8559] xt_find_table_lock+0x306/0x3e0 [ 260.338187][ T8559] page last free stack trace: [ 260.342880][ T8559] free_unref_page_prepare+0x7b2/0x8c0 [ 260.348377][ T8559] free_unref_page+0x32/0x2e0 [ 260.353087][ T8559] vfree+0x1a6/0x320 [ 260.357013][ T8559] do_ipt_get_ctl+0xf15/0x1200 [ 260.361818][ T8559] nf_getsockopt+0x262/0x280 [ 260.366432][ T8559] ip_getsockopt+0x19f/0x230 [ 260.371061][ T8559] do_sock_getsockopt+0x379/0x450 [ 260.376118][ T8559] __x64_sys_getsockopt+0x1d6/0x280 [ 260.381346][ T8559] do_syscall_64+0x55/0xb0 [ 260.385791][ T8559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.391723][ T8559] [ 260.394102][ T8559] Memory state around the buggy address: [ 260.399779][ T8559] ffff88802e3d9a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 260.407867][ T8559] ffff88802e3d9a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 260.415952][ T8559] >ffff88802e3d9b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 260.424037][ T8559] ^ [ 260.432046][ T8559] ffff88802e3d9b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 260.440130][ T8559] ffff88802e3d9c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 260.448211][ T8559] ================================================================== [ 260.456304][ T8559] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 260.463523][ T8559] CPU: 1 PID: 8559 Comm: syz.0.948 Not tainted syzkaller #0 [ 260.470828][ T8559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 260.480911][ T8559] Call Trace: [ 260.484217][ T8559] [ 260.487180][ T8559] dump_stack_lvl+0x18c/0x250 [ 260.491891][ T8559] ? show_regs_print_info+0x20/0x20 [ 260.497155][ T8559] ? load_image+0x420/0x420 [ 260.501689][ T8559] panic+0x2dc/0x730 [ 260.505616][ T8559] ? __lock_acquire+0x7d40/0x7d40 [ 260.510676][ T8559] ? bpf_jit_dump+0xd0/0xd0 [ 260.515214][ T8559] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 260.521147][ T8559] ? _raw_spin_unlock+0x40/0x40 [ 260.526036][ T8559] ? __bpf_get_stackid+0x6bf/0x900 [ 260.531183][ T8559] check_panic_on_warn+0x84/0xa0 [ 260.536159][ T8559] ? __bpf_get_stackid+0x6bf/0x900 [ 260.541306][ T8559] end_report+0x6f/0x130 [ 260.545581][ T8559] kasan_report+0x128/0x150 [ 260.550287][ T8559] ? __bpf_get_stackid+0x6bf/0x900 [ 260.555432][ T8559] kasan_check_range+0x241/0x290 [ 260.560404][ T8559] ? __bpf_get_stackid+0x6bf/0x900 [ 260.565550][ T8559] __asan_memcpy+0x40/0x70 [ 260.570001][ T8559] __bpf_get_stackid+0x6bf/0x900 [ 260.574983][ T8559] bpf_get_stackid_pe+0x2f0/0x410 [ 260.580046][ T8559] bpf_prog_620e6a2847f43590+0x33/0x48 [ 260.585536][ T8559] bpf_overflow_handler+0x1fc/0x510 [ 260.590774][ T8559] ? bpf_overflow_handler+0xde/0x510 [ 260.596095][ T8559] ? tp_perf_event_destroy+0x20/0x20 [ 260.601416][ T8559] ? __perf_event_account_interrupt+0x187/0x280 [ 260.607686][ T8559] __perf_event_overflow+0x447/0x630 [ 260.613010][ T8559] perf_swevent_event+0x319/0x570 [ 260.618095][ T8559] ? perf_tp_event+0x1520/0x1520 [ 260.623061][ T8559] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 260.628986][ T8559] ? _raw_spin_unlock+0x40/0x40 [ 260.633881][ T8559] ___perf_sw_event+0x4a7/0x730 [ 260.638765][ T8559] ? ___perf_sw_event+0x199/0x730 [ 260.643844][ T8559] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 260.650316][ T8559] ? task_mm_cid_work+0x31d/0x770 [ 260.655393][ T8559] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 260.661404][ T8559] ? _raw_spin_unlock_irq+0x23/0x50 [ 260.666666][ T8559] ? lock_chain_count+0x20/0x20 [ 260.671571][ T8559] __perf_sw_event+0x139/0x270 [ 260.676372][ T8559] do_user_addr_fault+0x123e/0x12c0 [ 260.681605][ T8559] ? rcu_is_watching+0x15/0xb0 [ 260.686420][ T8559] exc_page_fault+0x64/0x100 [ 260.691067][ T8559] ? clear_bhb_loop+0x40/0x90 [ 260.695777][ T8559] asm_exc_page_fault+0x26/0x30 [ 260.700676][ T8559] RIP: 0033:0x7ffc27483a21 [ 260.705119][ T8559] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36 [ 260.724761][ T8559] RSP: 002b:00007f8f7a20dff0 EFLAGS: 00010207 [ 260.730888][ T8559] RAX: 001f66e90c46fae2 RBX: 00007ffc2747f0b0 RCX: 0000000000000018 [ 260.738888][ T8559] RDX: 000000001ff11c50 RSI: 00007f8f7a20e0b0 RDI: 7fffffffffffffff [ 260.746883][ T8559] RBP: 00007f8f7a20e030 R08: 0000000000000103 R09: 0000000000745d1e [ 260.754883][ T8559] R10: 00000086eef8ad02 R11: 000000000000c254 R12: 0000000000000010 [ 260.762883][ T8559] R13: 00007f8f79616038 R14: 00007ffc2747f080 R15: 000000000000c254 [ 260.770886][ T8559] [ 260.774514][ T8559] Kernel Offset: disabled [ 260.778853][ T8559] Rebooting in 86400 seconds..