last executing test programs: 3.793541575s ago: executing program 2 (id=1740): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.443523044s ago: executing program 1 (id=1741): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @private=0xa010100}}}], 0x40}, 0x48000) 3.417074914s ago: executing program 2 (id=1742): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0xa, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x9, 0x6, 0x50, 0x0, 0x80, 0x8000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5, 0x6, 0x4, 0x10000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xb, r2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.265752798s ago: executing program 1 (id=1744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x9, 0x5}, {0x8, 0x3, 0x7, 0x6}]}) 2.883250148s ago: executing program 1 (id=1746): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="03000000040000000400"], 0x50) socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x105101, 0x4, 0x0, 0x8, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000000)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03", 0x0, 0xe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffff", 0x2b}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="1400000028000b6394f90509a16dd8e50000cc577836970686eb8790519b82b4aa31cc3ce90019982fe7", 0x2a}], 0x1}, 0x4000000) socket$kcm(0xa, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x40a00}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800e8ffffff9c7b8af8ff00bd00000007020000f8ffffffb7000000bf98000000000000000000000000000000000eb3d76178058830c7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB, @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x0, 0x10, 0x3, 0x0, 0xc, 0x28000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xe}, 0x102a4, 0x2, 0xfffffffe, 0x8, 0x4, 0x6, 0x9, 0x0, 0xf, 0x0, 0x5}, 0x0, 0x11, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 2.875720988s ago: executing program 0 (id=1747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d08020a000000040000a1180002000000000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 64) r2 = getpid() perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x4040040) (async) close(r3) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000040001801000020696c250000000000202020db1af80bf1000000bda102000000000007010000f8ffffffb702000008000000b70300000000000085000000d200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) 2.763528801s ago: executing program 3 (id=1748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8000000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{0x0, 0x0, 0x9, 0x5}, {0x8, 0x3, 0x7, 0x6}]}) 2.41435118s ago: executing program 3 (id=1749): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) 2.40413523s ago: executing program 1 (id=1750): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, {0xa, 0x1000, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000011c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$kcm(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, 0x0, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000005ffffe8080000000800004040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.268981213s ago: executing program 2 (id=1751): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.268653963s ago: executing program 2 (id=1752): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010101}}}], 0x20}, 0x48000) 2.230419074s ago: executing program 0 (id=1753): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xc8, 0x80, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffff1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c2"], 0xfdef) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe50b8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x9081, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x2, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r3, r1}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000004000000000000007f00000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000010000008500000015000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000009c0)={r5, 0xffffffffffffffff, 0x0, r4}, 0x10) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x11, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000), 0xffc0) 2.175726596s ago: executing program 2 (id=1754): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="03000000040000000400"], 0x50) socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x105101, 0x4, 0x0, 0x8, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000000)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03", 0x0, 0xe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffff", 0x2b}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="1400000028000b6394f90509a16dd8e50000cc577836970686eb8790519b82b4aa31cc3ce90019982fe7", 0x2a}], 0x1}, 0x4000000) socket$kcm(0xa, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x40a00}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800e8ffffff9c7b8af8ff00bd00000007020000f8ffffffb7000000bf98000000000000000000000000000000000eb3d76178058830c7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB, @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x0, 0x10, 0x3, 0x0, 0xc, 0x28000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xe}, 0x102a4, 0x2, 0xfffffffe, 0x8, 0x4, 0x6, 0x9, 0x0, 0xf, 0x0, 0x5}, 0x0, 0x11, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 2.128962997s ago: executing program 3 (id=1755): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x7, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x6, 0x5000000) setsockopt$sock_attach_bpf(r0, 0x29, 0x12, 0x0, 0x0) 1.787926325s ago: executing program 3 (id=1756): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e", 0x19}], 0x1}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000)=r3, 0x8) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) 1.785852285s ago: executing program 0 (id=1764): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xc8, 0x80, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffff1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c2"], 0xfdef) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe50b8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x9081, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x2, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r3, r1}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000004000000000000007f00000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000010000008500000015000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000009c0)={r5, 0xffffffffffffffff, 0x0, r4}, 0x10) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x11, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000), 0xffc0) 1.784761246s ago: executing program 1 (id=1757): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x4, 0x3, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6b72}, 0x94) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000001700000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00ef00850000009b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, &(0x7f0000000a80), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800003, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.472154043s ago: executing program 3 (id=1758): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x894b, &(0x7f0000000100)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socketpair(0x1, 0x3, 0x4004, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x10884, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_tos_u8={{0x11, 0x84}}], 0x30}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0xfffffffffffffd45) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b000000000000000001"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) socketpair$unix(0x1, 0x429174ca96468191, 0x0, &(0x7f00000002c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.464553743s ago: executing program 2 (id=1759): perf_event_open(&(0x7f0000000000)={0x2, 0x50, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x100e4a, 0x0, 0x4000, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20060400, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000200)="c21feb284e3c81d949bc9cda07d12cc79d02e32cffc8120fa6f86737c7ed4312870600000000000000ab7bb13642481e9836f659cd959e28072c9040aba12b62ecf899a29a0000000000ba81060f4b8fa8e339cf82b11e35470323a3e89c75a5bf51468b3cc9764d773715715b2f6c2802743926a03ffa2fbd2bad13d664cb0e373faba264f41de20478641eac6acc293702b51154778a7b7e95b60161ab49da50b39b47f0dae3031c0629a2ffe10a5b478ea5ac2daf820c3ea98c7aca960000000000000009658c1e672f28a09998552267c9c5252b1153d19a8538db") 1.368994286s ago: executing program 0 (id=1760): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000280)="62031f00d7552c056510120800afbcf7916df67d3dbd11e12b7f96e5521c8cf2173001002a0093c1", 0x2a}], 0x1}, 0x4084) 1.271326878s ago: executing program 1 (id=1761): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000800000091114600000000009500000000000000bd0bb2ab6b605c8c8de71ec0fc0292c00c04"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x1458}, 0x20040811) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x240, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x6}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r5) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB="0d00ff000000000083"], 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100b04, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x5d, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0xfffffe4f}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xfffc) 1.21906192s ago: executing program 0 (id=1762): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010101}}}], 0x20}, 0x48000) 6.4959ms ago: executing program 0 (id=1763): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) 0s ago: executing program 3 (id=1772): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010101}}}], 0x20}, 0x48000) kernel console output (not intermixed with test programs): red allmulticast mode [ 206.889089][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 206.895357][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 206.895378][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 206.901426][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 208.833623][ T7588] netlink: 'syz.3.602': attribute type 9 has an invalid length. [ 208.859569][ T7591] netlink: 196 bytes leftover after parsing attributes in process `syz.3.602'. [ 208.875765][ T7588] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.602'. [ 209.085648][ T7588] netlink: 'syz.3.602': attribute type 1 has an invalid length. [ 209.111069][ T7588] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.602'. [ 209.723072][ T7594] FAULT_INJECTION: forcing a failure. [ 209.723072][ T7594] name failslab, interval 1, probability 0, space 0, times 0 [ 209.748829][ T7594] CPU: 0 PID: 7594 Comm: syz.0.603 Not tainted syzkaller #0 [ 209.756209][ T7594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.766322][ T7594] Call Trace: [ 209.769726][ T7594] [ 209.772705][ T7594] dump_stack_lvl+0x18c/0x250 [ 209.777524][ T7594] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 209.782798][ T7596] netlink: 72 bytes leftover after parsing attributes in process `syz.1.605'. [ 209.783704][ T7594] ? show_regs_print_info+0x20/0x20 [ 209.783735][ T7594] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 209.783776][ T7594] should_fail_ex+0x394/0x4c0 [ 209.783825][ T7594] should_failslab+0x9/0x20 [ 209.783853][ T7594] slab_pre_alloc_hook+0x59/0x300 [ 209.818447][ T7594] ? __lock_acquire+0x7d80/0x7d80 [ 209.823614][ T7594] kmem_cache_alloc_node+0x5e/0x310 [ 209.828876][ T7594] ? __alloc_skb+0x103/0x2c0 [ 209.833513][ T7594] __alloc_skb+0x103/0x2c0 [ 209.838146][ T7594] netlink_sendmsg+0x66a/0xbf0 [ 209.842961][ T7594] ? netlink_getsockopt+0x590/0x590 [ 209.848217][ T7594] ? apparmor_socket_sendmsg+0x8e/0x330 [ 209.853816][ T7594] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 209.859152][ T7594] ? security_socket_sendmsg+0x80/0xa0 [ 209.864663][ T7594] ? netlink_getsockopt+0x590/0x590 [ 209.869912][ T7594] ____sys_sendmsg+0x61b/0x980 [ 209.874732][ T7594] ? __import_iovec+0x62a/0x850 [ 209.879652][ T7594] ? __sys_sendmsg_sock+0x30/0x30 [ 209.884739][ T7594] ? import_iovec+0x73/0xa0 [ 209.889340][ T7594] ___sys_sendmsg+0x2a6/0x360 [ 209.894065][ T7594] ? __sys_sendmsg+0x2b0/0x2b0 [ 209.898892][ T7594] ? ktime_get+0x7f/0x280 [ 209.903261][ T7594] __se_sys_sendmsg+0x1d0/0x2c0 [ 209.908133][ T7594] ? perf_trace_preemptirq_template+0x269/0x330 [ 209.914404][ T7594] ? __x64_sys_sendmsg+0x80/0x80 [ 209.919403][ T7594] ? lockdep_hardirqs_on+0x98/0x150 [ 209.924625][ T7594] do_syscall_64+0x55/0xb0 [ 209.929055][ T7594] ? clear_bhb_loop+0x40/0x90 [ 209.933746][ T7594] ? clear_bhb_loop+0x40/0x90 [ 209.938535][ T7594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.944446][ T7594] RIP: 0033:0x7f867f99e0d9 [ 209.948875][ T7594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.968500][ T7594] RSP: 002b:00007f86807d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.976932][ T7594] RAX: ffffffffffffffda RBX: 00007f867fc25fa0 RCX: 00007f867f99e0d9 [ 209.984938][ T7594] RDX: 0000000000040800 RSI: 0000200000000140 RDI: 000000000000000b [ 209.992938][ T7594] RBP: 00007f86807d7090 R08: 0000000000000000 R09: 0000000000000000 [ 210.000927][ T7594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.008916][ T7594] R13: 00007f867fc26038 R14: 00007f867fc25fa0 R15: 00007ffea17ad328 [ 210.016916][ T7594] [ 210.434672][ T7598] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.604'. [ 210.467269][ T7598] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.604'. [ 210.476975][ T7598] tipc: Started in network mode [ 210.482018][ T7598] tipc: Node identity b, cluster identity 57 [ 210.490349][ T7598] tipc: Node number set to 11 [ 210.650798][ T7609] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 211.504902][ T7626] netlink: 166900 bytes leftover after parsing attributes in process `syz.1.615'. [ 211.783437][ T7631] netlink: 'syz.2.616': attribute type 9 has an invalid length. [ 211.807455][ T7636] netlink: 196 bytes leftover after parsing attributes in process `syz.2.616'. [ 211.815567][ T7631] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.616'. [ 212.906166][ T7646] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.619'. [ 212.959293][ T7646] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.619'. [ 213.358337][ T7666] netlink: 'syz.1.628': attribute type 29 has an invalid length. [ 213.387335][ T7666] netlink: 'syz.1.628': attribute type 29 has an invalid length. [ 213.418730][ T7669] netlink: 'syz.1.628': attribute type 29 has an invalid length. [ 213.454879][ T7666] netlink: 'syz.1.628': attribute type 29 has an invalid length. [ 213.459340][ T7671] netlink: 'syz.2.629': attribute type 3 has an invalid length. [ 213.463154][ T7672] netlink: 196 bytes leftover after parsing attributes in process `syz.0.630'. [ 213.480234][ T7671] netlink: 132 bytes leftover after parsing attributes in process `syz.2.629'. [ 213.489197][ T7666] netlink: 'syz.1.628': attribute type 6 has an invalid length. [ 213.756433][ T7678] FAULT_INJECTION: forcing a failure. [ 213.756433][ T7678] name failslab, interval 1, probability 0, space 0, times 0 [ 213.777172][ T7678] CPU: 1 PID: 7678 Comm: syz.1.632 Not tainted syzkaller #0 [ 213.784620][ T7678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.794708][ T7678] Call Trace: [ 213.798007][ T7678] [ 213.800951][ T7678] dump_stack_lvl+0x18c/0x250 [ 213.805657][ T7678] ? show_regs_print_info+0x20/0x20 [ 213.810882][ T7678] ? load_image+0x420/0x420 [ 213.815407][ T7678] ? __might_sleep+0xe0/0xe0 [ 213.820020][ T7678] ? __lock_acquire+0x7d80/0x7d80 [ 213.825066][ T7678] should_fail_ex+0x394/0x4c0 [ 213.829772][ T7678] should_failslab+0x9/0x20 [ 213.834293][ T7678] slab_pre_alloc_hook+0x59/0x300 [ 213.839351][ T7678] ? __lock_acquire+0x7d80/0x7d80 [ 213.844409][ T7678] kmem_cache_alloc_node+0x5e/0x310 [ 213.849629][ T7678] ? __alloc_skb+0x103/0x2c0 [ 213.854246][ T7678] __alloc_skb+0x103/0x2c0 [ 213.858682][ T7678] netlink_sendmsg+0x66a/0xbf0 [ 213.863471][ T7678] ? netlink_getsockopt+0x590/0x590 [ 213.868687][ T7678] ? apparmor_socket_sendmsg+0x8e/0x330 [ 213.875480][ T7678] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 213.880797][ T7678] ? security_socket_sendmsg+0x80/0xa0 [ 213.886279][ T7678] ? netlink_getsockopt+0x590/0x590 [ 213.891507][ T7678] ____sys_sendmsg+0x61b/0x980 [ 213.896303][ T7678] ? __asan_memset+0x22/0x40 [ 213.900913][ T7678] ? __sys_sendmsg_sock+0x30/0x30 [ 213.905966][ T7678] ? __import_iovec+0x5f2/0x850 [ 213.910852][ T7678] ? import_iovec+0x73/0xa0 [ 213.915396][ T7678] ___sys_sendmsg+0x2a6/0x360 [ 213.920108][ T7678] ? get_pid_task+0x20/0x1e0 [ 213.924719][ T7678] ? __sys_sendmsg+0x2b0/0x2b0 [ 213.929522][ T7678] ? __lock_acquire+0x7d80/0x7d80 [ 213.934593][ T7678] __se_sys_sendmsg+0x1d0/0x2c0 [ 213.939462][ T7678] ? __x64_sys_sendmsg+0x80/0x80 [ 213.944434][ T7678] ? lockdep_hardirqs_on+0x98/0x150 [ 213.950398][ T7678] do_syscall_64+0x55/0xb0 [ 213.954849][ T7678] ? clear_bhb_loop+0x40/0x90 [ 213.959555][ T7678] ? clear_bhb_loop+0x40/0x90 [ 213.964255][ T7678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.970175][ T7678] RIP: 0033:0x7fda70f9e0d9 [ 213.974612][ T7678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.994233][ T7678] RSP: 002b:00007fda71da1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.002665][ T7678] RAX: ffffffffffffffda RBX: 00007fda71225fa0 RCX: 00007fda70f9e0d9 [ 214.010660][ T7678] RDX: 000000000400c044 RSI: 0000200000000000 RDI: 0000000000000003 [ 214.018646][ T7678] RBP: 00007fda71da1090 R08: 0000000000000000 R09: 0000000000000000 [ 214.026627][ T7678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.034622][ T7678] R13: 00007fda71226038 R14: 00007fda71225fa0 R15: 00007ffcc91f2868 [ 214.042634][ T7678] [ 214.059358][ T7676] netlink: 'syz.2.633': attribute type 3 has an invalid length. [ 214.067516][ T7676] netlink: 132 bytes leftover after parsing attributes in process `syz.2.633'. [ 214.339807][ T7681] netlink: 'syz.1.634': attribute type 21 has an invalid length. [ 214.423562][ T7681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.888848][ T7696] netlink: 'syz.0.637': attribute type 9 has an invalid length. [ 215.121970][ T7705] FAULT_INJECTION: forcing a failure. [ 215.121970][ T7705] name failslab, interval 1, probability 0, space 0, times 0 [ 215.147000][ T7705] CPU: 1 PID: 7705 Comm: syz.0.643 Not tainted syzkaller #0 [ 215.154428][ T7705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.164668][ T7705] Call Trace: [ 215.168037][ T7705] [ 215.171052][ T7705] dump_stack_lvl+0x18c/0x250 [ 215.176018][ T7705] ? show_regs_print_info+0x20/0x20 [ 215.181415][ T7705] ? load_image+0x420/0x420 [ 215.186097][ T7705] should_fail_ex+0x394/0x4c0 [ 215.190998][ T7705] should_failslab+0x9/0x20 [ 215.195707][ T7705] slab_pre_alloc_hook+0x59/0x300 [ 215.200827][ T7705] ? find_exception+0x175/0xa30 [ 215.205801][ T7705] kmem_cache_alloc+0x5a/0x2c0 [ 215.210657][ T7705] ? dst_alloc+0x105/0x170 [ 215.215199][ T7705] dst_alloc+0x105/0x170 [ 215.219740][ T7705] ip_route_output_key_hash_rcu+0x14a2/0x2350 [ 215.226343][ T7705] ? ip_route_output_key_hash_rcu+0x1191/0x2350 [ 215.232754][ T7705] ? ip_route_output_key_hash+0x13d/0x330 [ 215.238594][ T7705] ip_route_output_key_hash+0x1f3/0x330 [ 215.244282][ T7705] ? ip_route_input_rcu+0x3120/0x3120 [ 215.249798][ T7705] ? ip_cmsg_send+0x9c0/0xa70 [ 215.254672][ T7705] ip_route_output_flow+0x2a/0x150 [ 215.259840][ T7705] ? security_sk_classify_flow+0x7b/0x90 [ 215.265550][ T7705] udp_sendmsg+0x160e/0x23d0 [ 215.270266][ T7705] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 215.275196][ T7705] ? udp_cmsg_send+0x350/0x350 [ 215.280050][ T7705] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 215.286252][ T7705] ? lock_chain_count+0x20/0x20 [ 215.291154][ T7705] ? inet_sendmsg+0x10d/0x2a0 [ 215.295932][ T7705] ? __local_bh_enable_ip+0x13a/0x1c0 [ 215.301354][ T7705] ? _local_bh_enable+0xa0/0xa0 [ 215.306284][ T7705] ? do_raw_spin_unlock+0x121/0x230 [ 215.311537][ T7705] ? inet_sendmsg+0x10d/0x2a0 [ 215.316275][ T7705] ? inet_sendmsg+0x10d/0x2a0 [ 215.321088][ T7705] ? inet_send_prepare+0x250/0x250 [ 215.326605][ T7705] ____sys_sendmsg+0x61b/0x980 [ 215.331458][ T7705] ? __sys_sendmsg_sock+0x30/0x30 [ 215.336526][ T7705] ? __import_iovec+0x3fa/0x850 [ 215.341484][ T7705] ? import_iovec+0x73/0xa0 [ 215.346058][ T7705] ___sys_sendmsg+0x2a6/0x360 [ 215.350815][ T7705] ? __sys_sendmsg+0x2b0/0x2b0 [ 215.355711][ T7705] ? __lock_acquire+0x7d80/0x7d80 [ 215.360887][ T7705] __se_sys_sendmsg+0x1d0/0x2c0 [ 215.365796][ T7705] ? __x64_sys_sendmsg+0x80/0x80 [ 215.370871][ T7705] ? lockdep_hardirqs_on+0x98/0x150 [ 215.376138][ T7705] do_syscall_64+0x55/0xb0 [ 215.380597][ T7705] ? clear_bhb_loop+0x40/0x90 [ 215.385318][ T7705] ? clear_bhb_loop+0x40/0x90 [ 215.390073][ T7705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.396011][ T7705] RIP: 0033:0x7f867f99e0d9 [ 215.400482][ T7705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.421108][ T7705] RSP: 002b:00007f86807d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.429682][ T7705] RAX: ffffffffffffffda RBX: 00007f867fc25fa0 RCX: 00007f867f99e0d9 [ 215.437705][ T7705] RDX: 0000000000040880 RSI: 0000200000007940 RDI: 0000000000000007 [ 215.445822][ T7705] RBP: 00007f86807d7090 R08: 0000000000000000 R09: 0000000000000000 [ 215.453861][ T7705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.461881][ T7705] R13: 00007f867fc26038 R14: 00007f867fc25fa0 R15: 00007ffea17ad328 [ 215.469960][ T7705] [ 215.954873][ T7718] __nla_validate_parse: 5 callbacks suppressed [ 215.954894][ T7718] netlink: 196 bytes leftover after parsing attributes in process `syz.3.649'. [ 216.008285][ T7716] netlink: 'syz.1.648': attribute type 21 has an invalid length. [ 216.038289][ T7716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.063664][ T7712] netlink: 830 bytes leftover after parsing attributes in process `syz.0.646'. [ 216.589901][ T7722] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.650'. [ 216.600913][ T7722] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.650'. [ 217.270424][ T7746] netlink: 196 bytes leftover after parsing attributes in process `syz.2.658'. [ 217.332249][ T7744] netlink: 'syz.2.658': attribute type 9 has an invalid length. [ 217.355029][ T7744] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.658'. [ 217.406905][ T7751] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.657'. [ 217.622332][ T7745] netlink: 132 bytes leftover after parsing attributes in process `syz.0.659'. [ 217.965653][ T7757] netlink: 'syz.2.660': attribute type 21 has an invalid length. [ 217.990961][ T7757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.065810][ T7760] netlink: 166900 bytes leftover after parsing attributes in process `syz.0.661'. [ 218.190278][ T7762] netlink: 'syz.1.662': attribute type 10 has an invalid length. [ 218.208612][ T7762] netlink: 40 bytes leftover after parsing attributes in process `syz.1.662'. [ 220.058178][ T7790] netlink: 'syz.3.669': attribute type 10 has an invalid length. [ 220.202697][ T7792] netlink: 'syz.2.668': attribute type 9 has an invalid length. [ 220.379252][ T7794] netlink: 'syz.0.675': attribute type 21 has an invalid length. [ 220.398971][ T7794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.444784][ T7814] __nla_validate_parse: 3 callbacks suppressed [ 221.444804][ T7814] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.677'. [ 221.509726][ T7821] sctp: [Deprecated]: syz.1.678 (pid 7821) Use of int in maxseg socket option. [ 221.509726][ T7821] Use struct sctp_assoc_value instead [ 221.573617][ T7822] netlink: 'syz.0.680': attribute type 10 has an invalid length. [ 221.596336][ T7822] netlink: 40 bytes leftover after parsing attributes in process `syz.0.680'. [ 221.896535][ T7824] netlink: 830 bytes leftover after parsing attributes in process `syz.3.679'. [ 222.208813][ T7834] tipc: Failed to clone mcast rcv buffer [ 222.675353][ T7837] netlink: 'syz.3.685': attribute type 21 has an invalid length. [ 222.700685][ T7837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 223.197773][ T7850] netlink: 'syz.0.690': attribute type 10 has an invalid length. [ 223.205620][ T7850] netlink: 40 bytes leftover after parsing attributes in process `syz.0.690'. [ 223.502521][ T7855] netlink: 123072 bytes leftover after parsing attributes in process `syz.3.692'. [ 223.547515][ T7860] netlink: 60 bytes leftover after parsing attributes in process `syz.1.695'. [ 223.556591][ T7860] netlink: 60 bytes leftover after parsing attributes in process `syz.1.695'. [ 223.574188][ T7860] netlink: 60 bytes leftover after parsing attributes in process `syz.1.695'. [ 224.989107][ T7889] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.703'. [ 225.892891][ T7898] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.707'. [ 226.592001][ T7910] sit0: left promiscuous mode [ 227.075546][ T7919] __nla_validate_parse: 2 callbacks suppressed [ 227.075592][ T7919] netlink: 196 bytes leftover after parsing attributes in process `syz.2.713'. [ 227.106532][ T7917] netlink: 'syz.2.713': attribute type 9 has an invalid length. [ 227.124037][ T7917] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.713'. [ 228.438284][ T7912] sit0: entered promiscuous mode [ 228.966539][ T7939] netlink: 'syz.1.719': attribute type 9 has an invalid length. [ 228.978965][ T7939] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.719'. [ 229.005032][ T7940] netlink: 196 bytes leftover after parsing attributes in process `syz.1.719'. [ 229.453602][ T7947] netlink: 60 bytes leftover after parsing attributes in process `syz.0.722'. [ 229.476992][ T7947] netlink: 60 bytes leftover after parsing attributes in process `syz.0.722'. [ 229.564718][ T7947] netlink: 60 bytes leftover after parsing attributes in process `syz.0.722'. [ 230.757269][ T7958] netlink: 'syz.2.726': attribute type 10 has an invalid length. [ 230.785331][ T7958] netlink: 40 bytes leftover after parsing attributes in process `syz.2.726'. [ 233.376516][ T7977] netlink: 196 bytes leftover after parsing attributes in process `syz.1.732'. [ 233.522791][ T7975] netlink: 'syz.1.732': attribute type 9 has an invalid length. [ 233.554563][ T7975] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.732'. [ 233.616686][ T7982] netlink: 196 bytes leftover after parsing attributes in process `syz.2.733'. [ 233.630141][ T7980] netlink: 'syz.2.733': attribute type 9 has an invalid length. [ 233.656348][ T7980] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.733'. [ 234.588603][ T7994] netlink: 'syz.1.737': attribute type 10 has an invalid length. [ 234.645483][ T7994] netlink: 40 bytes leftover after parsing attributes in process `syz.1.737'. [ 235.125519][ T8002] netlink: 60 bytes leftover after parsing attributes in process `syz.3.740'. [ 235.142893][ T8002] netlink: 60 bytes leftover after parsing attributes in process `syz.3.740'. [ 235.188247][ T8007] netlink: 60 bytes leftover after parsing attributes in process `syz.3.740'. [ 235.212132][ T8003] FAULT_INJECTION: forcing a failure. [ 235.212132][ T8003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.305675][ T8003] CPU: 1 PID: 8003 Comm: syz.1.741 Not tainted syzkaller #0 [ 235.313330][ T8003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.323994][ T8003] Call Trace: [ 235.327858][ T8003] [ 235.331102][ T8003] dump_stack_lvl+0x18c/0x250 [ 235.336026][ T8003] ? show_regs_print_info+0x20/0x20 [ 235.343663][ T8003] ? load_image+0x420/0x420 [ 235.349435][ T8003] ? __might_fault+0xaa/0x120 [ 235.354174][ T8003] ? __lock_acquire+0x7d80/0x7d80 [ 235.359721][ T8003] should_fail_ex+0x394/0x4c0 [ 235.364473][ T8003] _copy_from_user+0x2f/0xe0 [ 235.369113][ T8003] ___sys_sendmsg+0x1c7/0x360 [ 235.374128][ T8003] ? __sys_sendmsg+0x2b0/0x2b0 [ 235.379076][ T8003] ? __lock_acquire+0x7d80/0x7d80 [ 235.384203][ T8003] __se_sys_sendmsg+0x1d0/0x2c0 [ 235.389204][ T8003] ? __x64_sys_sendmsg+0x80/0x80 [ 235.394485][ T8003] ? lockdep_hardirqs_on+0x98/0x150 [ 235.399763][ T8003] do_syscall_64+0x55/0xb0 [ 235.404235][ T8003] ? clear_bhb_loop+0x40/0x90 [ 235.408965][ T8003] ? clear_bhb_loop+0x40/0x90 [ 235.413697][ T8003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.419644][ T8003] RIP: 0033:0x7fda70f9e0d9 [ 235.424123][ T8003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.444221][ T8003] RSP: 002b:00007fda71d80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.452708][ T8003] RAX: ffffffffffffffda RBX: 00007fda71226090 RCX: 00007fda70f9e0d9 [ 235.460818][ T8003] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 235.468844][ T8003] RBP: 00007fda71d80090 R08: 0000000000000000 R09: 0000000000000000 [ 235.478303][ T8003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.486331][ T8003] R13: 00007fda71226128 R14: 00007fda71226090 R15: 00007ffcc91f2868 [ 235.494377][ T8003] [ 238.811968][ T8027] netlink: 196 bytes leftover after parsing attributes in process `syz.0.746'. [ 239.001358][ T8026] netlink: 'syz.0.746': attribute type 9 has an invalid length. [ 239.029128][ T8026] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.746'. [ 240.039152][ T8045] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.753'. [ 240.146866][ T8045] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.753'. [ 241.504127][ T8064] netlink: 196 bytes leftover after parsing attributes in process `syz.1.759'. [ 241.601934][ T8063] netlink: 'syz.1.759': attribute type 9 has an invalid length. [ 241.649287][ T8063] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.759'. [ 242.537253][ T8075] netlink: 'syz.2.763': attribute type 10 has an invalid length. [ 242.545202][ T8075] netlink: 40 bytes leftover after parsing attributes in process `syz.2.763'. [ 243.158850][ T8086] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.766'. [ 243.197448][ T8086] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.766'. [ 243.985727][ T8103] netlink: 'syz.2.772': attribute type 9 has an invalid length. [ 244.007537][ T8103] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.772'. [ 244.121236][ T8103] netlink: 196 bytes leftover after parsing attributes in process `syz.2.772'. [ 244.632454][ T8110] netlink: 'syz.1.774': attribute type 10 has an invalid length. [ 244.642042][ T8110] netlink: 40 bytes leftover after parsing attributes in process `syz.1.774'. [ 245.797332][ T8123] netlink: 'syz.0.777': attribute type 10 has an invalid length. [ 246.051113][ T8123] team0: Device hsr_slave_0 failed to register rx_handler [ 246.602491][ T8134] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.780'. [ 246.617309][ T8134] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.780'. [ 246.643938][ T8123] syz.0.777 (8123) used greatest stack depth: 18024 bytes left [ 247.633791][ T8148] netlink: 'syz.2.786': attribute type 10 has an invalid length. [ 247.692044][ T8148] netlink: 40 bytes leftover after parsing attributes in process `syz.2.786'. [ 249.054785][ T8166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.102384][ T8166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.145165][ T8166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.188043][ T8166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.295174][ T8166] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 249.335895][ T8166] batman_adv: batadv0: Removing interface: virt_wifi0 [ 249.764170][ T8182] netlink: 14 bytes leftover after parsing attributes in process `syz.3.792'. [ 249.793556][ T8175] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.791'. [ 249.805517][ T8182] hsr_slave_0: left promiscuous mode [ 249.816022][ T8182] hsr_slave_1: left promiscuous mode [ 249.865674][ T8175] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.791'. [ 250.766338][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.837432][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.004021][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.038634][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.086454][ T8206] netlink: 'syz.0.800': attribute type 27 has an invalid length. [ 251.148163][ T8206] netlink: 164 bytes leftover after parsing attributes in process `syz.0.800'. [ 251.185534][ T8197] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 251.310006][ T8197] batman_adv: batadv0: Removing interface: virt_wifi0 [ 251.990661][ T8203] netlink: 10 bytes leftover after parsing attributes in process `syz.0.800'. [ 252.385012][ T8221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.419219][ T8221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.590604][ T8221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.633432][ T8221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.478769][ T8237] netlink: 14 bytes leftover after parsing attributes in process `syz.1.810'. [ 253.508679][ T8237] hsr_slave_0: left promiscuous mode [ 253.515450][ T8237] hsr_slave_1: left promiscuous mode [ 253.563613][ T8243] netlink: 'syz.2.812': attribute type 27 has an invalid length. [ 253.576233][ T8243] netlink: 164 bytes leftover after parsing attributes in process `syz.2.812'. [ 253.599464][ T8237] hsr0 (unregistering): left allmulticast mode [ 253.606044][ T8237] hsr0 (unregistering): left promiscuous mode [ 253.621494][ T8237] nr0: port 1(hsr0) entered disabled state [ 253.642057][ T8241] netlink: 10 bytes leftover after parsing attributes in process `syz.2.812'. [ 253.902389][ T8245] netlink: 830 bytes leftover after parsing attributes in process `syz.3.814'. [ 255.045302][ T8267] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.818'. [ 255.254093][ T8276] netlink: 'syz.0.821': attribute type 39 has an invalid length. [ 255.576607][ T8277] netlink: 'syz.2.820': attribute type 10 has an invalid length. [ 255.591711][ T8277] netlink: 40 bytes leftover after parsing attributes in process `syz.2.820'. [ 255.604027][ T8277] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 255.930902][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.938368][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.068621][ T8281] netlink: 'syz.3.825': attribute type 2 has an invalid length. [ 256.127304][ T8281] netlink: 'syz.3.825': attribute type 8 has an invalid length. [ 256.149472][ T8281] netlink: 132 bytes leftover after parsing attributes in process `syz.3.825'. [ 256.175729][ T8284] netlink: 'syz.3.825': attribute type 11 has an invalid length. [ 256.185591][ T8293] netlink: 132 bytes leftover after parsing attributes in process `syz.3.825'. [ 256.434987][ T8301] netlink: 132 bytes leftover after parsing attributes in process `syz.3.829'. [ 256.731154][ T8307] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.832'. [ 256.902588][ T8311] netlink: 'syz.2.834': attribute type 10 has an invalid length. [ 256.923950][ T8311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.834'. [ 257.145444][ T8311] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 257.299364][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.311891][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.453109][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.493054][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.807035][ T8312] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 257.830487][ T8312] batman_adv: batadv0: Removing interface: virt_wifi0 [ 258.148288][ T8330] Driver unsupported XDP return value 0 on prog (id 825) dev N/A, expect packet loss! [ 258.219220][ T8326] syz_tun: refused to change device tx_queue_len [ 258.801526][ T8341] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.843'. [ 261.181421][ T8348] netlink: 196 bytes leftover after parsing attributes in process `syz.1.844'. [ 261.976963][ T8356] netlink: 'syz.3.847': attribute type 29 has an invalid length. [ 262.060709][ T8356] netlink: 'syz.3.847': attribute type 29 has an invalid length. [ 262.324005][ T8361] netlink: 'syz.3.847': attribute type 29 has an invalid length. [ 262.339904][ T8365] netlink: 'syz.3.847': attribute type 29 has an invalid length. [ 262.659115][ T8367] netlink: 'syz.3.847': attribute type 29 has an invalid length. [ 263.060037][ T8383] netlink: 'syz.0.854': attribute type 10 has an invalid length. [ 263.096992][ T8383] netlink: 40 bytes leftover after parsing attributes in process `syz.0.854'. [ 263.259991][ T8379] netlink: 'syz.1.861': attribute type 29 has an invalid length. [ 263.459228][ T8395] netlink: 'syz.3.855': attribute type 10 has an invalid length. [ 263.477114][ T8395] netlink: 40 bytes leftover after parsing attributes in process `syz.3.855'. [ 263.646479][ T8395] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 263.668579][ T8379] netlink: 'syz.1.861': attribute type 29 has an invalid length. [ 263.742108][ T8386] netlink: 'syz.1.861': attribute type 29 has an invalid length. [ 266.983703][ T8453] netlink: 196 bytes leftover after parsing attributes in process `syz.0.871'. [ 267.257633][ T8456] validate_nla: 2 callbacks suppressed [ 267.257656][ T8456] netlink: 'syz.3.865': attribute type 10 has an invalid length. [ 267.287042][ T8456] netlink: 40 bytes leftover after parsing attributes in process `syz.3.865'. [ 267.317660][ T8456] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 268.134527][ T8475] netlink: 'syz.1.872': attribute type 10 has an invalid length. [ 268.143580][ T8475] netlink: 40 bytes leftover after parsing attributes in process `syz.1.872'. [ 268.181604][ T8475] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 268.932603][ T8484] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.874'. [ 269.094922][ T8484] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.874'. [ 269.716653][ T8496] netlink: 196 bytes leftover after parsing attributes in process `syz.2.877'. [ 270.218656][ T8506] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.882'. [ 271.120393][ T8515] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.885'. [ 271.151740][ T8515] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.885'. [ 271.342657][ T8524] netlink: 196 bytes leftover after parsing attributes in process `syz.2.888'. [ 272.328452][ T8538] FAULT_INJECTION: forcing a failure. [ 272.328452][ T8538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.345246][ T8538] CPU: 0 PID: 8538 Comm: syz.0.893 Not tainted syzkaller #0 [ 272.352616][ T8538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.362821][ T8538] Call Trace: [ 272.366192][ T8538] [ 272.369159][ T8538] dump_stack_lvl+0x18c/0x250 [ 272.373892][ T8538] ? show_regs_print_info+0x20/0x20 [ 272.379138][ T8538] ? load_image+0x420/0x420 [ 272.383866][ T8538] ? __might_fault+0xaa/0x120 [ 272.388585][ T8538] ? __lock_acquire+0x7d80/0x7d80 [ 272.393665][ T8538] should_fail_ex+0x394/0x4c0 [ 272.398566][ T8538] _copy_from_user+0x2f/0xe0 [ 272.403289][ T8538] kstrtouint_from_user+0xde/0x170 [ 272.408463][ T8538] ? kstrtol_from_user+0x190/0x190 [ 272.413728][ T8538] proc_fail_nth_write+0x8f/0x250 [ 272.418978][ T8538] ? proc_fail_nth_read+0x260/0x260 [ 272.424412][ T8538] ? proc_fail_nth_read+0x260/0x260 [ 272.430092][ T8538] vfs_write+0x299/0x9a0 [ 272.434496][ T8538] ? file_end_write+0x250/0x250 [ 272.436596][ T8536] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.894'. [ 272.439555][ T8538] ? __fget_files+0x28/0x460 [ 272.439616][ T8538] ? __fget_files+0x3fc/0x460 [ 272.439654][ T8538] ? __fdget_pos+0x2a3/0x330 [ 272.439679][ T8538] ? ksys_write+0x74/0x260 [ 272.439709][ T8538] ksys_write+0x151/0x260 [ 272.439740][ T8538] ? __ia32_sys_read+0x90/0x90 [ 272.439773][ T8538] ? lockdep_hardirqs_on+0x98/0x150 [ 272.439805][ T8538] do_syscall_64+0x55/0xb0 [ 272.439827][ T8538] ? clear_bhb_loop+0x40/0x90 [ 272.439849][ T8538] ? clear_bhb_loop+0x40/0x90 [ 272.439875][ T8538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.502831][ T8538] RIP: 0033:0x7f867f95e90e [ 272.507319][ T8538] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 272.527244][ T8538] RSP: 002b:00007f86807d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 272.535801][ T8538] RAX: ffffffffffffffda RBX: 00007f86807d76c0 RCX: 00007f867f95e90e [ 272.543821][ T8538] RDX: 0000000000000001 RSI: 00007f86807d70a0 RDI: 0000000000000004 [ 272.551927][ T8538] RBP: 00007f86807d7090 R08: 0000000000000000 R09: 0000000000000000 [ 272.559988][ T8538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.568000][ T8538] R13: 00007f867fc26038 R14: 00007f867fc25fa0 R15: 00007ffea17ad328 [ 272.576731][ T8538] [ 273.311261][ T8554] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.906'. [ 273.717867][ T8563] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.900'. [ 273.776142][ T8563] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.900'. [ 274.594684][ T8575] netlink: 'syz.3.903': attribute type 21 has an invalid length. [ 274.640269][ T8575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.859175][ T8582] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.911'. [ 275.260082][ T8582] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.911'. [ 277.432558][ T8614] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.910'. [ 278.105663][ T8624] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.915'. [ 278.135532][ T8624] netlink: 22808 bytes leftover after parsing attributes in process `syz.0.915'. [ 278.411646][ T8629] netlink: 196 bytes leftover after parsing attributes in process `syz.1.916'. [ 278.813632][ T8638] netlink: 'syz.0.919': attribute type 46 has an invalid length. [ 278.821674][ T8638] netlink: 2 bytes leftover after parsing attributes in process `syz.0.919'. [ 279.155020][ T8643] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.921'. [ 279.182981][ T8643] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.921'. [ 279.264422][ T8645] netlink: 'syz.2.920': attribute type 21 has an invalid length. [ 279.278486][ T8645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.551377][ T8648] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.923'. [ 280.214743][ T8668] netlink: 'syz.0.926': attribute type 46 has an invalid length. [ 280.223201][ T8668] netlink: 2 bytes leftover after parsing attributes in process `syz.0.926'. [ 280.524283][ T8667] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.927'. [ 282.558504][ T8667] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.927'. [ 282.568285][ T8674] netlink: 196 bytes leftover after parsing attributes in process `syz.3.929'. [ 282.810514][ T8685] netlink: 'syz.2.932': attribute type 21 has an invalid length. [ 282.821294][ T8685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.246160][ T8691] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.934'. [ 284.171634][ T8716] netlink: 196 bytes leftover after parsing attributes in process `syz.3.942'. [ 284.873794][ T8727] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.947'. [ 284.912795][ T8721] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.945'. [ 284.939998][ T8721] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.945'. [ 285.859450][ T8742] netlink: 196 bytes leftover after parsing attributes in process `syz.0.952'. [ 286.319292][ T8752] netlink: 132 bytes leftover after parsing attributes in process `syz.0.957'. [ 286.351617][ T8752] netlink: 'syz.0.957': attribute type 10 has an invalid length. [ 286.364320][ T8752] netlink: 2 bytes leftover after parsing attributes in process `syz.0.957'. [ 286.375148][ T8752] batadv_slave_1: entered promiscuous mode [ 286.644823][ T8759] netlink: 'syz.2.960': attribute type 1 has an invalid length. [ 287.680817][ T8784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 287.688976][ T8784] IPv6: NLM_F_CREATE should be set when creating new route [ 287.698685][ T8784] IPv6: NLM_F_CREATE should be set when creating new route [ 287.707155][ T8784] IPv6: NLM_F_CREATE should be set when creating new route [ 287.738858][ T8787] netlink: 'syz.1.969': attribute type 3 has an invalid length. [ 287.751868][ T8787] __nla_validate_parse: 4 callbacks suppressed [ 287.751887][ T8787] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.969'. [ 288.245450][ T8802] netlink: 196 bytes leftover after parsing attributes in process `syz.1.974'. [ 288.893661][ T8804] netlink: 'syz.1.976': attribute type 4 has an invalid length. [ 288.914759][ T8804] netlink: 152 bytes leftover after parsing attributes in process `syz.1.976'. [ 289.175223][ T8808] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.978'. [ 289.466335][ T8814] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 290.555044][ T8830] netlink: 'syz.1.985': attribute type 10 has an invalid length. [ 290.572345][ T8830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.985'. [ 290.596001][ T8832] netlink: 196 bytes leftover after parsing attributes in process `syz.0.984'. [ 290.598804][ T8830] ipvlan1: entered promiscuous mode [ 290.613094][ T8830] ipvlan1: entered allmulticast mode [ 290.623561][ T8830] veth0_vlan: entered allmulticast mode [ 290.715409][ T8830] bridge0: port 4(ipvlan1) entered blocking state [ 290.734721][ T8830] bridge0: port 4(ipvlan1) entered disabled state [ 290.789561][ T8830] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 290.905920][ T8830] syz.1.985 (8830) used greatest stack depth: 15528 bytes left [ 291.844073][ T8848] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.991'. [ 291.912426][ T8851] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.993'. [ 292.520196][ T8864] aaaaaaaaaaaaaaa: entered promiscuous mode [ 292.663096][ T8864] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.995'. [ 292.976869][ T8872] netlink: 196 bytes leftover after parsing attributes in process `syz.0.998'. [ 293.872567][ T8882] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1003'. [ 294.825893][ T8897] netlink: 539 bytes leftover after parsing attributes in process `syz.2.1010'. [ 295.360686][ T8904] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1012'. [ 295.997424][ T8909] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1014'. [ 296.416084][ T8916] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1016'. [ 298.872433][ T8945] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1026'. [ 299.947491][ T8964] syz.3.1034 uses obsolete (PF_INET,SOCK_PACKET) [ 299.969050][ T8964] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 299.991924][ T8964] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 300.135057][ T5789] Bluetooth: hci1: unexpected event 0x08 length: 151 > 4 [ 300.362582][ T8968] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1036'. [ 302.528725][ T9003] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1046'. [ 302.860056][ T9010] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1048'. [ 303.416407][ T9020] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1059'. [ 304.136461][ T9038] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1060'. [ 304.413877][ T9046] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1064'. [ 304.501397][ T9042] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1062'. [ 304.790939][ T9057] netlink: 208052 bytes leftover after parsing attributes in process `syz.2.1068'. [ 304.825158][ T9057] netlink: 'syz.2.1068': attribute type 1 has an invalid length. [ 304.833861][ T9057] netlink: 'syz.2.1068': attribute type 2 has an invalid length. [ 304.856839][ T9057] netlink: 'syz.2.1068': attribute type 3 has an invalid length. [ 304.865484][ T9057] netlink: 'syz.2.1068': attribute type 4 has an invalid length. [ 306.404900][ T9084] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1076'. [ 306.884576][ T9102] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1089'. [ 306.918503][ T9105] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1083'. [ 310.060095][ T9140] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1094'. [ 310.318328][ T9158] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1097'. [ 311.375786][ T9178] netlink: 'syz.2.1106': attribute type 10 has an invalid length. [ 311.393136][ T9178] veth0_macvtap: left promiscuous mode [ 311.835284][ T9190] syzkaller0: entered promiscuous mode [ 311.856978][ T9190] syzkaller0: entered allmulticast mode [ 311.869166][ T9187] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1109'. [ 317.441487][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.448403][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.067931][ T9241] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1123'. [ 318.215797][ T9244] syzkaller0: entered promiscuous mode [ 318.246765][ T9244] syzkaller0: entered allmulticast mode [ 321.305657][ T9297] FAULT_INJECTION: forcing a failure. [ 321.305657][ T9297] name failslab, interval 1, probability 0, space 0, times 0 [ 321.318828][ T9297] CPU: 1 PID: 9297 Comm: syz.3.1140 Not tainted syzkaller #0 [ 321.326525][ T9297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 321.336643][ T9297] Call Trace: [ 321.340010][ T9297] [ 321.342986][ T9297] dump_stack_lvl+0x18c/0x250 [ 321.347728][ T9297] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 321.353939][ T9297] ? show_regs_print_info+0x20/0x20 [ 321.359183][ T9297] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 321.365390][ T9297] ? dump_stack+0x9/0x20 [ 321.369703][ T9297] should_fail_ex+0x394/0x4c0 [ 321.374458][ T9297] should_failslab+0x9/0x20 [ 321.379021][ T9297] slab_pre_alloc_hook+0x59/0x300 [ 321.388034][ T9297] kmem_cache_alloc+0x5a/0x2c0 [ 321.392895][ T9297] ? skb_clone+0x1eb/0x370 [ 321.397395][ T9297] skb_clone+0x1eb/0x370 [ 321.401776][ T9297] ? dev_queue_xmit_nit+0x204/0xba0 [ 321.407038][ T9297] dev_queue_xmit_nit+0x23f/0xba0 [ 321.412124][ T9297] ? dev_queue_xmit_nit+0x2d/0xba0 [ 321.417405][ T9297] dev_hard_start_xmit+0x150/0x790 [ 321.422693][ T9297] ? __dev_queue_xmit+0x275/0x3640 [ 321.427868][ T9297] __dev_queue_xmit+0x198c/0x3640 [ 321.433150][ T9297] ? __dev_queue_xmit+0x275/0x3640 [ 321.438434][ T9297] ? netdev_core_pick_tx+0x370/0x370 [ 321.443783][ T9297] ? ref_tracker_alloc+0x347/0x4b0 [ 321.449023][ T9297] ? __copy_skb_header+0xa3/0x4a0 [ 321.454144][ T9297] ? __asan_memcpy+0x40/0x70 [ 321.458744][ T9297] ? __skb_clone+0x5c/0x6c0 [ 321.463355][ T9297] ? __skb_clone+0x446/0x6c0 [ 321.467958][ T9297] ? skb_clone+0x21f/0x370 [ 321.472404][ T9297] __netlink_deliver_tap+0x579/0x7f0 [ 321.477803][ T9297] ? netlink_deliver_tap+0x2e/0x1b0 [ 321.483006][ T9297] netlink_deliver_tap+0x19c/0x1b0 [ 321.488141][ T9297] netlink_unicast+0x77b/0x930 [ 321.492967][ T9297] netlink_sendmsg+0x8d0/0xbf0 [ 321.497795][ T9297] ? netlink_getsockopt+0x590/0x590 [ 321.503324][ T9297] ? apparmor_socket_sendmsg+0x8e/0x330 [ 321.508929][ T9297] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 321.514356][ T9297] ? security_socket_sendmsg+0x80/0xa0 [ 321.519862][ T9297] ? netlink_getsockopt+0x590/0x590 [ 321.525110][ T9297] ____sys_sendmsg+0x61b/0x980 [ 321.530196][ T9297] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 321.536416][ T9297] ? __asan_memset+0x22/0x40 [ 321.541061][ T9297] ? __sys_sendmsg_sock+0x30/0x30 [ 321.546139][ T9297] ? __import_iovec+0x3fa/0x850 [ 321.551062][ T9297] ? import_iovec+0x73/0xa0 [ 321.555718][ T9297] ___sys_sendmsg+0x2a6/0x360 [ 321.560443][ T9297] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 321.566829][ T9297] ? __sys_sendmsg+0x2b0/0x2b0 [ 321.571857][ T9297] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 321.578196][ T9297] __se_sys_sendmsg+0x1d0/0x2c0 [ 321.580690][ T9300] syzkaller0: entered promiscuous mode [ 321.583069][ T9297] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 321.588797][ T9300] syzkaller0: entered allmulticast mode [ 321.594792][ T9297] ? __x64_sys_sendmsg+0x80/0x80 [ 321.605452][ T9297] ? lockdep_hardirqs_on+0x98/0x150 [ 321.610715][ T9297] do_syscall_64+0x55/0xb0 [ 321.615269][ T9297] ? clear_bhb_loop+0x40/0x90 [ 321.620168][ T9297] ? clear_bhb_loop+0x40/0x90 [ 321.624913][ T9297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.631470][ T9297] RIP: 0033:0x7f0f67f9e0d9 [ 321.635938][ T9297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.655680][ T9297] RSP: 002b:00007f0f68da4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.664137][ T9297] RAX: ffffffffffffffda RBX: 00007f0f68225fa0 RCX: 00007f0f67f9e0d9 [ 321.672131][ T9297] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 321.680118][ T9297] RBP: 00007f0f68da4090 R08: 0000000000000000 R09: 0000000000000000 [ 321.688100][ T9297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.696081][ T9297] R13: 00007f0f68226038 R14: 00007f0f68225fa0 R15: 00007ffd7299dd38 [ 321.704080][ T9297] [ 322.222776][ T9297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 322.234476][ T9297] IPv6: NLM_F_CREATE should be set when creating new route [ 322.251394][ T9297] IPv6: NLM_F_CREATE should be set when creating new route [ 322.273625][ T9297] IPv6: NLM_F_CREATE should be set when creating new route [ 325.408258][ T9335] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1153'. [ 326.073414][ T9346] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1163'. [ 326.130755][ T9344] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1156'. [ 327.745040][ T9382] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1169'. [ 327.782107][ T9375] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1167'. [ 328.356473][ T9384] delete_channel: no stack [ 328.493619][ T9393] FAULT_INJECTION: forcing a failure. [ 328.493619][ T9393] name failslab, interval 1, probability 0, space 0, times 0 [ 328.531860][ T9393] CPU: 1 PID: 9393 Comm: syz.3.1173 Not tainted syzkaller #0 [ 328.539936][ T9393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 328.550130][ T9393] Call Trace: [ 328.553536][ T9393] [ 328.556506][ T9393] dump_stack_lvl+0x18c/0x250 [ 328.561236][ T9393] ? show_regs_print_info+0x20/0x20 [ 328.566489][ T9393] ? load_image+0x420/0x420 [ 328.571125][ T9393] ? verify_lock_unused+0x140/0x140 [ 328.576381][ T9393] should_fail_ex+0x394/0x4c0 [ 328.581111][ T9393] should_failslab+0x9/0x20 [ 328.585669][ T9393] slab_pre_alloc_hook+0x59/0x300 [ 328.590760][ T9393] kmem_cache_alloc+0x5a/0x2c0 [ 328.595583][ T9393] ? skb_clone+0x1eb/0x370 [ 328.600052][ T9393] skb_clone+0x1eb/0x370 [ 328.605131][ T9393] __netlink_deliver_tap+0x411/0x7f0 [ 328.610735][ T9393] ? netlink_deliver_tap+0x2e/0x1b0 [ 328.615977][ T9393] netlink_deliver_tap+0x19c/0x1b0 [ 328.621337][ T9393] netlink_unicast+0x77b/0x930 [ 328.626161][ T9393] netlink_sendmsg+0x8d0/0xbf0 [ 328.630983][ T9393] ? netlink_getsockopt+0x590/0x590 [ 328.636231][ T9393] ? apparmor_socket_sendmsg+0x8e/0x330 [ 328.641805][ T9393] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 328.647119][ T9393] ? security_socket_sendmsg+0x80/0xa0 [ 328.652590][ T9393] ? netlink_getsockopt+0x590/0x590 [ 328.657832][ T9393] ____sys_sendmsg+0x61b/0x980 [ 328.662616][ T9393] ? __asan_memset+0x22/0x40 [ 328.667225][ T9393] ? __sys_sendmsg_sock+0x30/0x30 [ 328.672272][ T9393] ? __import_iovec+0x5f2/0x850 [ 328.677148][ T9393] ? import_iovec+0x73/0xa0 [ 328.681679][ T9393] ___sys_sendmsg+0x2a6/0x360 [ 328.686372][ T9393] ? get_pid_task+0x20/0x1e0 [ 328.690994][ T9393] ? __sys_sendmsg+0x2b0/0x2b0 [ 328.695790][ T9393] ? __lock_acquire+0x7d80/0x7d80 [ 328.700850][ T9393] __se_sys_sendmsg+0x1d0/0x2c0 [ 328.705805][ T9393] ? __x64_sys_sendmsg+0x80/0x80 [ 328.710868][ T9393] ? lockdep_hardirqs_on+0x98/0x150 [ 328.716097][ T9393] do_syscall_64+0x55/0xb0 [ 328.720527][ T9393] ? clear_bhb_loop+0x40/0x90 [ 328.725219][ T9393] ? clear_bhb_loop+0x40/0x90 [ 328.729917][ T9393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.735854][ T9393] RIP: 0033:0x7f0f67f9e0d9 [ 328.740294][ T9393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.760004][ T9393] RSP: 002b:00007f0f68da4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.768624][ T9393] RAX: ffffffffffffffda RBX: 00007f0f68225fa0 RCX: 00007f0f67f9e0d9 [ 328.776961][ T9393] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 328.785009][ T9393] RBP: 00007f0f68da4090 R08: 0000000000000000 R09: 0000000000000000 [ 328.793362][ T9393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.801375][ T9393] R13: 00007f0f68226038 R14: 00007f0f68225fa0 R15: 00007ffd7299dd38 [ 328.809506][ T9393] [ 328.816935][ T9393] netlink: 'syz.3.1173': attribute type 10 has an invalid length. [ 328.954908][ T9400] netlink: 'syz.2.1176': attribute type 10 has an invalid length. [ 329.085158][ T9400] team0: Port device geneve1 added [ 329.114810][ T9404] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1178'. [ 329.320980][ T9409] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1179'. [ 329.574078][ T9411] netlink: 'syz.0.1188': attribute type 29 has an invalid length. [ 329.590524][ T9411] netlink: 'syz.0.1188': attribute type 29 has an invalid length. [ 329.706482][ T9411] netlink: 'syz.0.1188': attribute type 29 has an invalid length. [ 329.731138][ T9411] netlink: 'syz.0.1188': attribute type 29 has an invalid length. [ 330.948757][ T9435] netlink: 'syz.2.1186': attribute type 10 has an invalid length. [ 331.108220][ T9438] FAULT_INJECTION: forcing a failure. [ 331.108220][ T9438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.136278][ T9438] CPU: 0 PID: 9438 Comm: syz.3.1187 Not tainted syzkaller #0 [ 331.143753][ T9438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.153875][ T9438] Call Trace: [ 331.157193][ T9438] [ 331.160154][ T9438] dump_stack_lvl+0x18c/0x250 [ 331.164896][ T9438] ? show_regs_print_info+0x20/0x20 [ 331.170143][ T9438] ? load_image+0x420/0x420 [ 331.174672][ T9438] ? __lock_acquire+0x7d80/0x7d80 [ 331.179741][ T9438] ? snprintf+0xe9/0x140 [ 331.184000][ T9438] should_fail_ex+0x394/0x4c0 [ 331.188702][ T9438] _copy_to_user+0x2f/0xa0 [ 331.193140][ T9438] simple_read_from_buffer+0xe7/0x150 [ 331.198533][ T9438] proc_fail_nth_read+0x1e8/0x260 [ 331.203581][ T9438] ? proc_fault_inject_write+0x360/0x360 [ 331.209323][ T9438] ? fsnotify_perm+0x271/0x5e0 [ 331.214105][ T9438] ? proc_fault_inject_write+0x360/0x360 [ 331.219844][ T9438] vfs_read+0x298/0x990 [ 331.224038][ T9438] ? kernel_read+0x1e0/0x1e0 [ 331.228685][ T9438] ? __fget_files+0x28/0x460 [ 331.233295][ T9438] ? __fget_files+0x3fc/0x460 [ 331.238354][ T9438] ? __fdget_pos+0x2a3/0x330 [ 331.242967][ T9438] ? ksys_read+0x74/0x260 [ 331.247316][ T9438] ksys_read+0x151/0x260 [ 331.251584][ T9438] ? vfs_write+0x9a0/0x9a0 [ 331.256109][ T9438] ? lockdep_hardirqs_on+0x98/0x150 [ 331.261358][ T9438] do_syscall_64+0x55/0xb0 [ 331.265908][ T9438] ? clear_bhb_loop+0x40/0x90 [ 331.270644][ T9438] ? clear_bhb_loop+0x40/0x90 [ 331.275359][ T9438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.281276][ T9438] RIP: 0033:0x7f0f67f5e90e [ 331.285706][ T9438] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 331.305347][ T9438] RSP: 002b:00007f0f68da3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 331.313790][ T9438] RAX: ffffffffffffffda RBX: 00007f0f68da46c0 RCX: 00007f0f67f5e90e [ 331.321953][ T9438] RDX: 000000000000000f RSI: 00007f0f68da40a0 RDI: 0000000000000005 [ 331.330053][ T9438] RBP: 00007f0f68da4090 R08: 0000000000000000 R09: 0000000000000000 [ 331.338561][ T9438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.346546][ T9438] R13: 00007f0f68226038 R14: 00007f0f68225fa0 R15: 00007ffd7299dd38 [ 331.354563][ T9438] [ 331.694844][ T9445] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1190'. [ 334.192681][ T9454] netlink: 'syz.1.1193': attribute type 19 has an invalid length. [ 334.201120][ T9454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1193'. [ 335.014923][ T9476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.239145][ T9476] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.249570][ T9476] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.262406][ T9476] bridge0: entered allmulticast mode [ 335.486161][ T9483] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1202'. [ 337.988034][ T9506] bridge0: port 3(team0) entered disabled state [ 337.994723][ T9506] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.002503][ T9506] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.012690][ T9506] bridge0: entered allmulticast mode [ 338.370011][ T9514] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1213'. [ 339.530302][ T9542] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 339.934735][ T9550] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1224'. [ 340.798524][ T9575] netlink: 'syz.3.1233': attribute type 17 has an invalid length. [ 340.809193][ T9573] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1233'. [ 340.826802][ T9575] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1233'. [ 340.838707][ T9573] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 340.848985][ T9575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.885051][ T9573] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 341.064236][ T9581] FAULT_INJECTION: forcing a failure. [ 341.064236][ T9581] name failslab, interval 1, probability 0, space 0, times 0 [ 341.077554][ T9581] CPU: 1 PID: 9581 Comm: syz.1.1234 Not tainted syzkaller #0 [ 341.084972][ T9581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.095074][ T9581] Call Trace: [ 341.098378][ T9581] [ 341.101329][ T9581] dump_stack_lvl+0x18c/0x250 [ 341.106037][ T9581] ? show_regs_print_info+0x20/0x20 [ 341.111275][ T9581] ? load_image+0x420/0x420 [ 341.115806][ T9581] ? __might_sleep+0xe0/0xe0 [ 341.120421][ T9581] ? __lock_acquire+0x7d80/0x7d80 [ 341.125503][ T9581] ? __lock_acquire+0x1262/0x7d80 [ 341.130553][ T9581] should_fail_ex+0x394/0x4c0 [ 341.135259][ T9581] should_failslab+0x9/0x20 [ 341.139791][ T9581] slab_pre_alloc_hook+0x59/0x300 [ 341.144851][ T9581] kmem_cache_alloc_node+0x5e/0x310 [ 341.150082][ T9581] ? __alloc_skb+0x103/0x2c0 [ 341.154693][ T9581] __alloc_skb+0x103/0x2c0 [ 341.159133][ T9581] alloc_skb_with_frags+0xcd/0x7a0 [ 341.164383][ T9581] sock_alloc_send_pskb+0x883/0x9a0 [ 341.169638][ T9581] ? sock_kzfree_s+0x50/0x50 [ 341.174255][ T9581] ? trace_event_raw_event_lock+0x240/0x240 [ 341.180172][ T9581] ? ip6_dst_lookup_tail+0xd65/0x1660 [ 341.185603][ T9581] rawv6_send_hdrinc+0x2fc/0x1660 [ 341.190697][ T9581] ? ip6_dst_hoplimit+0x96/0x350 [ 341.195666][ T9581] ? txopt_get+0x3f0/0x3f0 [ 341.200112][ T9581] ? ip6_dst_hoplimit+0x96/0x350 [ 341.205075][ T9581] ? ip6_dst_hoplimit+0x96/0x350 [ 341.210048][ T9581] rawv6_sendmsg+0x128f/0x1740 [ 341.215036][ T9581] ? compat_rawv6_ioctl+0x70/0x70 [ 341.220121][ T9581] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 341.226562][ T9581] ? aa_sock_msg_perm+0x94/0x150 [ 341.231537][ T9581] ? inet_sendmsg+0x7e/0x2a0 [ 341.236321][ T9581] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 341.241672][ T9581] ? inet_send_prepare+0x250/0x250 [ 341.246833][ T9581] ____sys_sendmsg+0x61b/0x980 [ 341.251736][ T9581] ? __asan_memset+0x22/0x40 [ 341.256373][ T9581] ? __sys_sendmsg_sock+0x30/0x30 [ 341.261425][ T9581] ? __import_iovec+0x3fa/0x850 [ 341.266314][ T9581] ? import_iovec+0x73/0xa0 [ 341.270937][ T9581] ___sys_sendmsg+0x2a6/0x360 [ 341.275652][ T9581] ? __sys_sendmsg+0x2b0/0x2b0 [ 341.280577][ T9581] ? __lock_acquire+0x7d80/0x7d80 [ 341.285674][ T9581] __se_sys_sendmsg+0x1d0/0x2c0 [ 341.290646][ T9581] ? __x64_sys_sendmsg+0x80/0x80 [ 341.295640][ T9581] ? lockdep_hardirqs_on+0x98/0x150 [ 341.300873][ T9581] do_syscall_64+0x55/0xb0 [ 341.305315][ T9581] ? clear_bhb_loop+0x40/0x90 [ 341.310026][ T9581] ? clear_bhb_loop+0x40/0x90 [ 341.314814][ T9581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.320729][ T9581] RIP: 0033:0x7fda70f9e0d9 [ 341.325164][ T9581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.344991][ T9581] RSP: 002b:00007fda71da1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.353435][ T9581] RAX: ffffffffffffffda RBX: 00007fda71225fa0 RCX: 00007fda70f9e0d9 [ 341.361431][ T9581] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 341.369479][ T9581] RBP: 00007fda71da1090 R08: 0000000000000000 R09: 0000000000000000 [ 341.377480][ T9581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.385515][ T9581] R13: 00007fda71226038 R14: 00007fda71225fa0 R15: 00007ffcc91f2868 [ 341.393543][ T9581] [ 341.617172][ T9590] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1236'. [ 342.182982][ T9601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.222844][ T9603] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1248'. [ 342.358592][ T9601] bridge0: port 3(team0) entered disabled state [ 342.366803][ T9601] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.376251][ T9601] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.397838][ T9601] bridge0: entered allmulticast mode [ 345.291563][ T9654] FAULT_INJECTION: forcing a failure. [ 345.291563][ T9654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.304958][ T9654] CPU: 1 PID: 9654 Comm: syz.2.1258 Not tainted syzkaller #0 [ 345.312647][ T9654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.322755][ T9654] Call Trace: [ 345.326081][ T9654] [ 345.329050][ T9654] dump_stack_lvl+0x18c/0x250 [ 345.333874][ T9654] ? show_regs_print_info+0x20/0x20 [ 345.339119][ T9654] ? load_image+0x420/0x420 [ 345.343682][ T9654] ? __might_fault+0xaa/0x120 [ 345.348533][ T9654] should_fail_ex+0x394/0x4c0 [ 345.353281][ T9654] copyin+0x1a/0x90 [ 345.357142][ T9654] _copy_from_iter+0x3ec/0x1290 [ 345.362066][ T9654] ? copyout_mc+0x70/0x70 [ 345.366466][ T9654] ? __virt_addr_valid+0x10c/0x380 [ 345.371629][ T9654] ? __virt_addr_valid+0x10c/0x380 [ 345.376977][ T9654] ? __virt_addr_valid+0x10c/0x380 [ 345.382160][ T9654] ? __check_object_size+0x4fc/0xa40 [ 345.387539][ T9654] netlink_sendmsg+0x76b/0xbf0 [ 345.392358][ T9654] ? netlink_getsockopt+0x590/0x590 [ 345.397670][ T9654] ? apparmor_socket_sendmsg+0x8e/0x330 [ 345.403249][ T9654] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 345.408570][ T9654] ? security_socket_sendmsg+0x80/0xa0 [ 345.414056][ T9654] ? netlink_getsockopt+0x590/0x590 [ 345.419289][ T9654] ____sys_sendmsg+0x61b/0x980 [ 345.424188][ T9654] ? __asan_memset+0x22/0x40 [ 345.428814][ T9654] ? __sys_sendmsg_sock+0x30/0x30 [ 345.433864][ T9654] ? __import_iovec+0x3fa/0x850 [ 345.438758][ T9654] ? import_iovec+0x73/0xa0 [ 345.443297][ T9654] ___sys_sendmsg+0x2a6/0x360 [ 345.448004][ T9654] ? get_pid_task+0x20/0x1e0 [ 345.452636][ T9654] ? __sys_sendmsg+0x2b0/0x2b0 [ 345.457452][ T9654] ? __lock_acquire+0x7d80/0x7d80 [ 345.462541][ T9654] __se_sys_sendmsg+0x1d0/0x2c0 [ 345.467477][ T9654] ? __x64_sys_sendmsg+0x80/0x80 [ 345.472463][ T9654] ? lockdep_hardirqs_on+0x98/0x150 [ 345.477700][ T9654] do_syscall_64+0x55/0xb0 [ 345.482145][ T9654] ? clear_bhb_loop+0x40/0x90 [ 345.486858][ T9654] ? clear_bhb_loop+0x40/0x90 [ 345.491571][ T9654] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.497495][ T9654] RIP: 0033:0x7ff6b859e0d9 [ 345.501938][ T9654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.521743][ T9654] RSP: 002b:00007ff6b9442028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.530198][ T9654] RAX: ffffffffffffffda RBX: 00007ff6b8825fa0 RCX: 00007ff6b859e0d9 [ 345.538203][ T9654] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 345.546285][ T9654] RBP: 00007ff6b9442090 R08: 0000000000000000 R09: 0000000000000000 [ 345.554283][ T9654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.562279][ T9654] R13: 00007ff6b8826038 R14: 00007ff6b8825fa0 R15: 00007ffcd370e638 [ 345.570292][ T9654] [ 345.727920][ T9662] netlink: 'syz.2.1261': attribute type 29 has an invalid length. [ 345.757880][ T9662] netlink: 'syz.2.1261': attribute type 29 has an invalid length. [ 346.034803][ T9672] netlink: 'syz.3.1262': attribute type 10 has an invalid length. [ 346.050563][ T9672] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1262'. [ 348.382165][ T9712] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1274'. [ 352.863624][ T9760] netlink: 'syz.2.1288': attribute type 9 has an invalid length. [ 352.909610][ T9760] netlink: 652 bytes leftover after parsing attributes in process `syz.2.1288'. [ 353.410399][ T9771] netlink: 'syz.2.1292': attribute type 8 has an invalid length. [ 353.448260][ T9771] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1292'. [ 355.246371][ T9804] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1303'. [ 356.097363][ T9817] netlink: 'syz.2.1306': attribute type 9 has an invalid length. [ 356.105195][ T9817] netlink: 652 bytes leftover after parsing attributes in process `syz.2.1306'. [ 357.458844][ T9843] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1317'. [ 358.779684][ T9869] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1325'. [ 358.848173][ T9868] delete_channel: no stack [ 359.068711][ T9881] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1328'. [ 359.537779][ T9891] netlink: 'syz.3.1332': attribute type 10 has an invalid length. [ 359.565593][ T9891] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1332'. [ 359.582640][ T9891] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 359.728049][ T9897] FAULT_INJECTION: forcing a failure. [ 359.728049][ T9897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.741742][ T9897] CPU: 0 PID: 9897 Comm: syz.2.1335 Not tainted syzkaller #0 [ 359.749165][ T9897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.759261][ T9897] Call Trace: [ 359.762655][ T9897] [ 359.765601][ T9897] dump_stack_lvl+0x18c/0x250 [ 359.770404][ T9897] ? show_regs_print_info+0x20/0x20 [ 359.775648][ T9897] ? load_image+0x420/0x420 [ 359.780192][ T9897] ? __lock_acquire+0x7d80/0x7d80 [ 359.785343][ T9897] ? snprintf+0xe9/0x140 [ 359.789696][ T9897] should_fail_ex+0x394/0x4c0 [ 359.794426][ T9897] _copy_to_user+0x2f/0xa0 [ 359.798861][ T9897] simple_read_from_buffer+0xe7/0x150 [ 359.804281][ T9897] proc_fail_nth_read+0x1e8/0x260 [ 359.809342][ T9897] ? proc_fault_inject_write+0x360/0x360 [ 359.814998][ T9897] ? fsnotify_perm+0x271/0x5e0 [ 359.819804][ T9897] ? proc_fault_inject_write+0x360/0x360 [ 359.825458][ T9897] vfs_read+0x298/0x990 [ 359.829655][ T9897] ? kernel_read+0x1e0/0x1e0 [ 359.834268][ T9897] ? __fget_files+0x28/0x460 [ 359.839069][ T9897] ? __fget_files+0x3fc/0x460 [ 359.843791][ T9897] ? __fdget_pos+0x2a3/0x330 [ 359.848407][ T9897] ? ksys_read+0x74/0x260 [ 359.852771][ T9897] ksys_read+0x151/0x260 [ 359.857088][ T9897] ? vfs_write+0x9a0/0x9a0 [ 359.862096][ T9897] ? lockdep_hardirqs_on+0x98/0x150 [ 359.867335][ T9897] do_syscall_64+0x55/0xb0 [ 359.871860][ T9897] ? clear_bhb_loop+0x40/0x90 [ 359.876671][ T9897] ? clear_bhb_loop+0x40/0x90 [ 359.881376][ T9897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.887295][ T9897] RIP: 0033:0x7ff6b855e90e [ 359.891724][ T9897] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 359.911371][ T9897] RSP: 002b:00007ff6b9441fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 359.919895][ T9897] RAX: ffffffffffffffda RBX: 00007ff6b94426c0 RCX: 00007ff6b855e90e [ 359.927904][ T9897] RDX: 000000000000000f RSI: 00007ff6b94420a0 RDI: 0000000000000004 [ 359.935977][ T9897] RBP: 00007ff6b9442090 R08: 0000000000000000 R09: 0000000000000000 [ 359.944050][ T9897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.952036][ T9897] R13: 00007ff6b8826038 R14: 00007ff6b8825fa0 R15: 00007ffcd370e638 [ 359.960124][ T9897] [ 360.394720][ T9911] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1340'. [ 360.937260][ T9923] netlink: 'syz.2.1344': attribute type 10 has an invalid length. [ 360.966019][ T9923] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1344'. [ 360.987443][ T9923] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 361.374100][ T9936] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1350'. [ 361.518830][ T9941] netlink: 'syz.2.1352': attribute type 10 has an invalid length. [ 361.551278][ T9941] veth1_macvtap: left promiscuous mode [ 362.952289][ T9954] netlink: 'syz.1.1357': attribute type 10 has an invalid length. [ 362.971421][ T9954] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1357'. [ 363.046661][ T9954] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 363.124917][ T9963] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1359'. [ 363.125428][ T9962] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1360'. [ 364.149830][ T9993] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1370'. [ 364.394111][T10002] netlink: 'syz.3.1371': attribute type 29 has an invalid length. [ 364.450433][T10002] netlink: 'syz.3.1371': attribute type 29 has an invalid length. [ 364.521923][T10002] netlink: 'syz.3.1371': attribute type 29 has an invalid length. [ 364.537984][T10002] netlink: 'syz.3.1371': attribute type 29 has an invalid length. [ 364.587087][ T9998] netlink: 'syz.3.1371': attribute type 29 has an invalid length. [ 364.835530][T10005] netlink: 'syz.3.1371': attribute type 29 has an invalid length. [ 365.231756][T10021] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1379'. [ 366.258862][T10032] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1383'. [ 366.385290][T10032] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1383'. [ 366.455779][T10040] netlink: set zone limit has 8 unknown bytes [ 366.762081][T10048] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1389'. [ 366.774936][T10049] netlink: 'syz.1.1388': attribute type 1 has an invalid length. [ 366.783695][T10049] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.1388'. [ 367.244030][T10060] netlink: 'syz.0.1393': attribute type 21 has an invalid length. [ 367.268814][T10060] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1393'. [ 367.713554][T10072] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1398'. [ 367.883201][T10076] netlink: 'syz.0.1400': attribute type 10 has an invalid length. [ 367.912920][T10076] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1400'. [ 368.650744][T10094] netlink: 'syz.2.1407': attribute type 21 has an invalid length. [ 368.662631][T10094] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1407'. [ 368.989420][T10101] FAULT_INJECTION: forcing a failure. [ 368.989420][T10101] name failslab, interval 1, probability 0, space 0, times 0 [ 369.002450][T10101] CPU: 0 PID: 10101 Comm: syz.1.1410 Not tainted syzkaller #0 [ 369.006651][T10103] netlink: 'syz.2.1411': attribute type 10 has an invalid length. [ 369.009991][T10101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.010035][T10101] Call Trace: [ 369.010053][T10101] [ 369.010063][T10101] dump_stack_lvl+0x18c/0x250 [ 369.010099][T10101] ? show_regs_print_info+0x20/0x20 [ 369.010124][T10101] ? load_image+0x420/0x420 [ 369.010148][T10101] ? trace_call_bpf+0xc3/0x6c0 [ 369.010205][T10101] should_fail_ex+0x394/0x4c0 [ 369.010239][T10101] should_failslab+0x9/0x20 [ 369.010288][T10101] slab_pre_alloc_hook+0x59/0x300 [ 369.010321][T10101] ? ida_alloc_range+0x5e7/0x860 [ 369.073258][T10101] __kmem_cache_alloc_node+0x53/0x250 [ 369.078732][T10101] ? ida_alloc_range+0x5e7/0x860 [ 369.083722][T10101] kmalloc_trace+0x2a/0xe0 [ 369.088206][T10101] ida_alloc_range+0x5e7/0x860 [ 369.093028][T10101] ? lock_chain_count+0x20/0x20 [ 369.097945][T10101] ? idr_replace+0x1b0/0x1b0 [ 369.102607][T10101] __xdp_reg_mem_model+0x219/0x5a0 [ 369.107895][T10101] ? kvmalloc_node+0x70/0x180 [ 369.112627][T10101] ? kvmalloc_node+0x70/0x180 [ 369.117361][T10101] ? xdp_reg_mem_model+0x40/0x40 [ 369.122459][T10101] xdp_reg_mem_model+0x22/0x40 [ 369.127286][T10101] bpf_test_run_xdp_live+0x262/0x1b30 [ 369.132911][T10101] ? 0xffffffffa00044c0 [ 369.137105][T10101] ? 0xffffffffa00044c0 [ 369.141292][T10101] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 369.147249][T10101] ? xdp_convert_md_to_buff+0x330/0x330 [ 369.152970][T10101] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 369.159259][T10101] ? _copy_from_user+0xa5/0xe0 [ 369.164066][T10101] ? bpf_test_init+0x119/0x140 [ 369.168891][T10101] ? xdp_convert_md_to_buff+0x5b/0x330 [ 369.174391][T10101] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 369.179813][T10101] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 369.187067][T10101] ? dev_put+0x80/0x80 [ 369.191193][T10101] ? dev_put+0x80/0x80 [ 369.195304][T10101] bpf_prog_test_run+0x31f/0x390 [ 369.200281][T10101] __sys_bpf+0x49d/0x890 [ 369.204644][T10101] ? read_tsc+0x9/0x20 [ 369.208779][T10101] ? bpf_link_show_fdinfo+0x390/0x390 [ 369.214224][T10101] ? lock_chain_count+0x20/0x20 [ 369.219125][T10101] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 369.225160][T10101] __x64_sys_bpf+0x7c/0x90 [ 369.229626][T10101] do_syscall_64+0x55/0xb0 [ 369.234079][T10101] ? clear_bhb_loop+0x40/0x90 [ 369.238870][T10101] ? clear_bhb_loop+0x40/0x90 [ 369.243588][T10101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.249517][T10101] RIP: 0033:0x7fda70f9e0d9 [ 369.253964][T10101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.273704][T10101] RSP: 002b:00007fda71da1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.282149][T10101] RAX: ffffffffffffffda RBX: 00007fda71225fa0 RCX: 00007fda70f9e0d9 [ 369.290149][T10101] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 369.298150][T10101] RBP: 00007fda71da1090 R08: 0000000000000000 R09: 0000000000000000 [ 369.306170][T10101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.314184][T10101] R13: 00007fda71226038 R14: 00007fda71225fa0 R15: 00007ffcc91f2868 [ 369.322250][T10101] [ 369.463004][T10103] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.480969][T10103] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.010400][T10103] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.017711][T10103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.025303][T10103] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.032577][T10103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.055648][T10103] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 370.076161][T10111] netlink: set zone limit has 8 unknown bytes [ 370.309249][T10122] __nla_validate_parse: 1 callbacks suppressed [ 370.309317][T10122] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1419'. [ 371.382311][T10147] netlink: 'syz.1.1427': attribute type 10 has an invalid length. [ 371.510144][T10147] bridge0: left allmulticast mode [ 371.707693][T10150] FAULT_INJECTION: forcing a failure. [ 371.707693][T10150] name failslab, interval 1, probability 0, space 0, times 0 [ 372.307788][T10150] CPU: 0 PID: 10150 Comm: syz.3.1428 Not tainted syzkaller #0 [ 372.315346][T10150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.325422][T10150] Call Trace: [ 372.328721][T10150] [ 372.331686][T10150] dump_stack_lvl+0x18c/0x250 [ 372.336391][T10150] ? show_regs_print_info+0x20/0x20 [ 372.341607][T10150] ? load_image+0x420/0x420 [ 372.346322][T10150] ? verify_lock_unused+0x140/0x140 [ 372.351567][T10150] should_fail_ex+0x394/0x4c0 [ 372.356286][T10150] should_failslab+0x9/0x20 [ 372.360825][T10150] slab_pre_alloc_hook+0x59/0x300 [ 372.365883][T10150] kmem_cache_alloc+0x5a/0x2c0 [ 372.370670][T10150] ? skb_clone+0x1eb/0x370 [ 372.375137][T10150] skb_clone+0x1eb/0x370 [ 372.379417][T10150] __netlink_deliver_tap+0x411/0x7f0 [ 372.384817][T10150] ? netlink_deliver_tap+0x2e/0x1b0 [ 372.390031][T10150] netlink_deliver_tap+0x19c/0x1b0 [ 372.395243][T10150] netlink_unicast+0x77b/0x930 [ 372.400132][T10150] netlink_sendmsg+0x8d0/0xbf0 [ 372.404919][T10150] ? netlink_getsockopt+0x590/0x590 [ 372.410132][T10150] ? apparmor_socket_sendmsg+0x8e/0x330 [ 372.416090][T10150] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 372.421619][T10150] ? security_socket_sendmsg+0x80/0xa0 [ 372.427119][T10150] ? netlink_getsockopt+0x590/0x590 [ 372.432370][T10150] ____sys_sendmsg+0x61b/0x980 [ 372.437237][T10150] ? __asan_memset+0x22/0x40 [ 372.441855][T10150] ? __sys_sendmsg_sock+0x30/0x30 [ 372.446912][T10150] ? __import_iovec+0x5f2/0x850 [ 372.451797][T10150] ? import_iovec+0x73/0xa0 [ 372.456324][T10150] ___sys_sendmsg+0x2a6/0x360 [ 372.461025][T10150] ? __sys_sendmsg+0x2b0/0x2b0 [ 372.465822][T10150] ? trace_call_bpf+0xc3/0x6c0 [ 372.470625][T10150] __se_sys_sendmsg+0x1d0/0x2c0 [ 372.475526][T10150] ? perf_trace_preemptirq_template+0x269/0x330 [ 372.481809][T10150] ? __x64_sys_sendmsg+0x80/0x80 [ 372.486791][T10150] ? lockdep_hardirqs_on+0x98/0x150 [ 372.492275][T10150] do_syscall_64+0x55/0xb0 [ 372.496713][T10150] ? clear_bhb_loop+0x40/0x90 [ 372.501417][T10150] ? clear_bhb_loop+0x40/0x90 [ 372.506114][T10150] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.512035][T10150] RIP: 0033:0x7f0f67f9e0d9 [ 372.516463][T10150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.536086][T10150] RSP: 002b:00007f0f68d83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.544521][T10150] RAX: ffffffffffffffda RBX: 00007f0f68226090 RCX: 00007f0f67f9e0d9 [ 372.552511][T10150] RDX: 0000000000040000 RSI: 0000200000000140 RDI: 0000000000000010 [ 372.560498][T10150] RBP: 00007f0f68d83090 R08: 0000000000000000 R09: 0000000000000000 [ 372.568485][T10150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.576467][T10150] R13: 00007f0f68226128 R14: 00007f0f68226090 R15: 00007ffd7299dd38 [ 372.584465][T10150] [ 372.609214][T10150] netlink: 'syz.3.1428': attribute type 39 has an invalid length. [ 372.769398][T10155] netlink: set zone limit has 8 unknown bytes [ 372.786532][T10157] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1430'. [ 373.153254][T10163] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1434'. [ 373.163850][T10163] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1434'. [ 373.769316][T10163] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1434'. [ 373.788464][T10163] hsr_slave_0: left promiscuous mode [ 373.860699][T10163] hsr_slave_1: left promiscuous mode [ 374.120726][T10176] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1437'. [ 374.145361][T10181] netlink: 'syz.1.1438': attribute type 10 has an invalid length. [ 374.161937][T10181] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1438'. [ 374.172861][T10181] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 374.330388][T10186] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1440'. [ 374.472925][T10184] netlink: 'syz.0.1439': attribute type 10 has an invalid length. [ 374.522804][T10184] bridge0: left allmulticast mode [ 374.613310][T10184] bridge0: port 3(team0) entered blocking state [ 374.625078][T10184] bridge0: port 3(team0) entered forwarding state [ 374.633498][T10184] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.645095][T10184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.658834][T10184] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.666445][T10184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.044646][T10184] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 375.870171][T10211] netlink: 'syz.0.1448': attribute type 27 has an invalid length. [ 375.878417][T10211] netlink: 'syz.0.1448': attribute type 4 has an invalid length. [ 375.886180][T10211] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1448'. [ 375.988557][T10215] netlink: 'syz.1.1449': attribute type 3 has an invalid length. [ 376.016837][T10215] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1449'. [ 376.164569][T10211] netlink: 'syz.0.1448': attribute type 21 has an invalid length. [ 377.079071][T10229] veth1_vlan: mtu greater than device maximum [ 377.800723][T10231] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1452'. [ 377.859463][T10235] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1453'. [ 378.029413][T10238] netlink: 'syz.1.1455': attribute type 10 has an invalid length. [ 378.038117][T10238] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1455'. [ 378.064103][T10238] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 378.810513][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.817837][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.904497][T10256] netlink: 'syz.0.1462': attribute type 10 has an invalid length. [ 378.918199][T10256] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1462'. [ 379.082444][T10257] netlink: 'syz.3.1461': attribute type 39 has an invalid length. [ 379.361238][T10263] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1464'. [ 380.019790][T10277] netlink: 'syz.0.1468': attribute type 10 has an invalid length. [ 380.029548][T10277] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1468'. [ 380.352750][T10282] netlink: 'syz.1.1470': attribute type 10 has an invalid length. [ 380.418767][T10282] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1470'. [ 380.479595][T10282] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 380.919347][T10295] netlink: 'syz.1.1474': attribute type 10 has an invalid length. [ 380.988647][T10295] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1474'. [ 381.033661][T10295] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 381.097070][T10296] netlink: 'syz.2.1473': attribute type 39 has an invalid length. [ 381.624472][T10303] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1476'. [ 381.646924][T10303] hsr_slave_0: left promiscuous mode [ 381.658045][T10303] hsr_slave_1: left promiscuous mode [ 385.017197][T10315] netlink: 'syz.2.1482': attribute type 10 has an invalid length. [ 385.037055][T10315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1482'. [ 385.057126][T10315] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 385.194537][T10317] netlink: 'syz.0.1483': attribute type 10 has an invalid length. [ 385.196383][T10320] netlink: 'syz.3.1484': attribute type 3 has an invalid length. [ 385.216067][T10317] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1483'. [ 385.338054][T10320] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1484'. [ 385.696900][T10327] FAULT_INJECTION: forcing a failure. [ 385.696900][T10327] name failslab, interval 1, probability 0, space 0, times 0 [ 385.736907][T10327] CPU: 0 PID: 10327 Comm: syz.2.1485 Not tainted syzkaller #0 [ 385.744462][T10327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 385.754568][T10327] Call Trace: [ 385.757892][T10327] [ 385.760857][T10327] dump_stack_lvl+0x18c/0x250 [ 385.765599][T10327] ? show_regs_print_info+0x20/0x20 [ 385.770869][T10327] ? load_image+0x420/0x420 [ 385.775427][T10327] ? __might_sleep+0xe0/0xe0 [ 385.780091][T10327] ? __lock_acquire+0x7d80/0x7d80 [ 385.785168][T10327] should_fail_ex+0x394/0x4c0 [ 385.789907][T10327] should_failslab+0x9/0x20 [ 385.794458][T10327] slab_pre_alloc_hook+0x59/0x300 [ 385.799533][T10327] ? __lock_acquire+0x7d80/0x7d80 [ 385.804607][T10327] kmem_cache_alloc_node+0x5e/0x310 [ 385.809865][T10327] ? __alloc_skb+0x103/0x2c0 [ 385.814511][T10327] __alloc_skb+0x103/0x2c0 [ 385.818986][T10327] netlink_sendmsg+0x66a/0xbf0 [ 385.823820][T10327] ? netlink_getsockopt+0x590/0x590 [ 385.829067][T10327] ? apparmor_socket_sendmsg+0x8e/0x330 [ 385.834660][T10327] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 385.839991][T10327] ? security_socket_sendmsg+0x80/0xa0 [ 385.845488][T10327] ? netlink_getsockopt+0x590/0x590 [ 385.850733][T10327] ____sys_sendmsg+0x61b/0x980 [ 385.855608][T10327] ? __asan_memset+0x22/0x40 [ 385.860253][T10327] ? __sys_sendmsg_sock+0x30/0x30 [ 385.865316][T10327] ? __import_iovec+0x5f2/0x850 [ 385.870225][T10327] ? import_iovec+0x73/0xa0 [ 385.874785][T10327] ___sys_sendmsg+0x2a6/0x360 [ 385.879529][T10327] ? __sys_sendmsg+0x2b0/0x2b0 [ 385.884359][T10327] ? trace_call_bpf+0xc3/0x6c0 [ 385.889202][T10327] __se_sys_sendmsg+0x1d0/0x2c0 [ 385.894097][T10327] ? perf_trace_preemptirq_template+0x269/0x330 [ 385.900396][T10327] ? __x64_sys_sendmsg+0x80/0x80 [ 385.905407][T10327] ? lockdep_hardirqs_on+0x98/0x150 [ 385.910664][T10327] do_syscall_64+0x55/0xb0 [ 385.915128][T10327] ? clear_bhb_loop+0x40/0x90 [ 385.919857][T10327] ? clear_bhb_loop+0x40/0x90 [ 385.924584][T10327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.930523][T10327] RIP: 0033:0x7ff6b859e0d9 [ 385.934980][T10327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.954625][T10327] RSP: 002b:00007ff6b9442028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.963073][T10327] RAX: ffffffffffffffda RBX: 00007ff6b8825fa0 RCX: 00007ff6b859e0d9 [ 385.971062][T10327] RDX: 0000000000044004 RSI: 0000200000000600 RDI: 000000000000000a [ 385.979047][T10327] RBP: 00007ff6b9442090 R08: 0000000000000000 R09: 0000000000000000 [ 385.987026][T10327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.995188][T10327] R13: 00007ff6b8826038 R14: 00007ff6b8825fa0 R15: 00007ffcd370e638 [ 386.003225][T10327] [ 386.374849][T10348] FAULT_INJECTION: forcing a failure. [ 386.374849][T10348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.388834][T10348] CPU: 0 PID: 10348 Comm: syz.2.1491 Not tainted syzkaller #0 [ 386.396432][T10348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 386.406505][T10348] Call Trace: [ 386.409808][T10348] [ 386.412777][T10348] dump_stack_lvl+0x18c/0x250 [ 386.417491][T10348] ? show_regs_print_info+0x20/0x20 [ 386.422693][T10348] ? load_image+0x420/0x420 [ 386.427202][T10348] ? __lock_acquire+0x7d80/0x7d80 [ 386.432257][T10348] ? snprintf+0xe9/0x140 [ 386.436499][T10348] should_fail_ex+0x394/0x4c0 [ 386.441185][T10348] _copy_to_user+0x2f/0xa0 [ 386.445598][T10348] simple_read_from_buffer+0xe7/0x150 [ 386.450974][T10348] proc_fail_nth_read+0x1e8/0x260 [ 386.456018][T10348] ? proc_fault_inject_write+0x360/0x360 [ 386.461678][T10348] ? fsnotify_perm+0x271/0x5e0 [ 386.466469][T10348] ? proc_fault_inject_write+0x360/0x360 [ 386.472180][T10348] vfs_read+0x298/0x990 [ 386.476382][T10348] ? kernel_read+0x1e0/0x1e0 [ 386.481437][T10348] ? __fget_files+0x28/0x460 [ 386.486053][T10348] ? __fget_files+0x3fc/0x460 [ 386.490769][T10348] ? __fdget_pos+0x2a3/0x330 [ 386.495381][T10348] ? ksys_read+0x74/0x260 [ 386.499735][T10348] ksys_read+0x151/0x260 [ 386.504008][T10348] ? vfs_write+0x9a0/0x9a0 [ 386.508452][T10348] ? lockdep_hardirqs_on+0x98/0x150 [ 386.513683][T10348] do_syscall_64+0x55/0xb0 [ 386.518203][T10348] ? clear_bhb_loop+0x40/0x90 [ 386.522918][T10348] ? clear_bhb_loop+0x40/0x90 [ 386.527617][T10348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.533617][T10348] RIP: 0033:0x7ff6b855e90e [ 386.538046][T10348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 386.557693][T10348] RSP: 002b:00007ff6b9441fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 386.566212][T10348] RAX: ffffffffffffffda RBX: 00007ff6b94426c0 RCX: 00007ff6b855e90e [ 386.574284][T10348] RDX: 000000000000000f RSI: 00007ff6b94420a0 RDI: 0000000000000005 [ 386.582269][T10348] RBP: 00007ff6b9442090 R08: 0000000000000000 R09: 0000000000000000 [ 386.590374][T10348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 386.598367][T10348] R13: 00007ff6b8826038 R14: 00007ff6b8825fa0 R15: 00007ffcd370e638 [ 386.606373][T10348] [ 386.906812][T10355] netlink: 'syz.3.1495': attribute type 10 has an invalid length. [ 386.936228][T10355] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1495'. [ 386.982710][T10355] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 387.719503][T10385] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1512'. [ 387.734714][T10385] netlink: 'syz.1.1512': attribute type 17 has an invalid length. [ 387.790379][T10387] netlink: 'syz.2.1505': attribute type 3 has an invalid length. [ 387.810139][T10387] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1505'. [ 387.988611][T10395] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1508'. [ 389.059144][T10414] netlink: 'syz.2.1515': attribute type 10 has an invalid length. [ 389.152568][T10410] netlink: 'syz.0.1514': attribute type 4 has an invalid length. [ 389.170508][T10410] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1514'. [ 389.271594][T10410] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 389.492063][T10425] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1518'. [ 390.393324][T10434] FAULT_INJECTION: forcing a failure. [ 390.393324][T10434] name failslab, interval 1, probability 0, space 0, times 0 [ 390.395636][T10436] netlink: 'syz.0.1521': attribute type 3 has an invalid length. [ 390.414887][T10436] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1521'. [ 390.429153][T10434] CPU: 1 PID: 10434 Comm: syz.1.1522 Not tainted syzkaller #0 [ 390.436705][T10434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 390.446961][T10434] Call Trace: [ 390.450259][T10434] [ 390.453203][T10434] dump_stack_lvl+0x18c/0x250 [ 390.457913][T10434] ? show_regs_print_info+0x20/0x20 [ 390.463129][T10434] ? load_image+0x420/0x420 [ 390.467652][T10434] ? __might_sleep+0xe0/0xe0 [ 390.472261][T10434] ? __lock_acquire+0x7d80/0x7d80 [ 390.477327][T10434] ? kernel_text_address+0xa0/0xd0 [ 390.482466][T10434] should_fail_ex+0x394/0x4c0 [ 390.487166][T10434] should_failslab+0x9/0x20 [ 390.491687][T10434] slab_pre_alloc_hook+0x59/0x300 [ 390.496759][T10434] kmem_cache_alloc_node+0x5e/0x310 [ 390.501977][T10434] ? __alloc_skb+0x103/0x2c0 [ 390.506583][T10434] __alloc_skb+0x103/0x2c0 [ 390.511036][T10434] alloc_skb_with_frags+0xcd/0x7a0 [ 390.516171][T10434] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 390.522167][T10434] ? __lock_acquire+0x7d80/0x7d80 [ 390.527215][T10434] sock_alloc_send_pskb+0x883/0x9a0 [ 390.532455][T10434] ? sock_kzfree_s+0x50/0x50 [ 390.537064][T10434] ? __stack_depot_save+0x575/0x660 [ 390.542281][T10434] ? kasan_set_track+0x5f/0x70 [ 390.547058][T10434] ? kasan_set_track+0x4e/0x70 [ 390.551843][T10434] __ip_append_data+0x2a08/0x3bf0 [ 390.556924][T10434] ? do_syscall_64+0x55/0xb0 [ 390.561526][T10434] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.567638][T10434] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 390.572601][T10434] ? ip_setup_cork+0x840/0x840 [ 390.577392][T10434] ? ip_setup_cork+0x527/0x840 [ 390.582188][T10434] ip_make_skb+0x22b/0x440 [ 390.586632][T10434] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 390.591506][T10434] ? ip_flush_pending_frames+0x250/0x250 [ 390.597173][T10434] udp_sendmsg+0x1ae1/0x23d0 [ 390.601815][T10434] ? release_sock+0x2f/0x1c0 [ 390.606430][T10434] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 390.611315][T10434] ? udp_cmsg_send+0x350/0x350 [ 390.616105][T10434] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 390.622123][T10434] ? lock_chain_count+0x20/0x20 [ 390.626995][T10434] ? inet_sendmsg+0x10d/0x2a0 [ 390.631712][T10434] ? __local_bh_enable_ip+0x13a/0x1c0 [ 390.637100][T10434] ? _local_bh_enable+0xa0/0xa0 [ 390.641969][T10434] ? inet_sendmsg+0x10d/0x2a0 [ 390.646669][T10434] ? inet_sendmsg+0x10d/0x2a0 [ 390.651369][T10434] ? inet_send_prepare+0x250/0x250 [ 390.656497][T10434] ____sys_sendmsg+0x61b/0x980 [ 390.661299][T10434] ? __sys_sendmsg_sock+0x30/0x30 [ 390.666334][T10434] ? __import_iovec+0x5f2/0x850 [ 390.671208][T10434] ? import_iovec+0x73/0xa0 [ 390.675737][T10434] ___sys_sendmsg+0x2a6/0x360 [ 390.680428][T10434] ? get_pid_task+0x20/0x1e0 [ 390.685056][T10434] ? __sys_sendmsg+0x2b0/0x2b0 [ 390.689848][T10434] ? __lock_acquire+0x7d80/0x7d80 [ 390.694907][T10434] __se_sys_sendmsg+0x1d0/0x2c0 [ 390.699774][T10434] ? __x64_sys_sendmsg+0x80/0x80 [ 390.704735][T10434] ? lockdep_hardirqs_on+0x98/0x150 [ 390.709956][T10434] do_syscall_64+0x55/0xb0 [ 390.714384][T10434] ? clear_bhb_loop+0x40/0x90 [ 390.719075][T10434] ? clear_bhb_loop+0x40/0x90 [ 390.724026][T10434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.730022][T10434] RIP: 0033:0x7fda70f9e0d9 [ 390.734454][T10434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.754250][T10434] RSP: 002b:00007fda71da1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.762678][T10434] RAX: ffffffffffffffda RBX: 00007fda71225fa0 RCX: 00007fda70f9e0d9 [ 390.770661][T10434] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000000000000003 [ 390.778642][T10434] RBP: 00007fda71da1090 R08: 0000000000000000 R09: 0000000000000000 [ 390.786626][T10434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.794609][T10434] R13: 00007fda71226038 R14: 00007fda71225fa0 R15: 00007ffcc91f2868 [ 390.802608][T10434] [ 394.758007][T10485] FAULT_INJECTION: forcing a failure. [ 394.758007][T10485] name failslab, interval 1, probability 0, space 0, times 0 [ 394.789711][T10485] CPU: 1 PID: 10485 Comm: syz.2.1541 Not tainted syzkaller #0 [ 394.797257][T10485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.807344][T10485] Call Trace: [ 394.810680][T10485] [ 394.813655][T10485] dump_stack_lvl+0x18c/0x250 [ 394.818403][T10485] ? show_regs_print_info+0x20/0x20 [ 394.823640][T10485] ? load_image+0x420/0x420 [ 394.828175][T10485] ? __might_sleep+0xe0/0xe0 [ 394.832800][T10485] ? __lock_acquire+0x7d80/0x7d80 [ 394.837865][T10485] ? kernel_text_address+0xa0/0xd0 [ 394.843009][T10485] should_fail_ex+0x394/0x4c0 [ 394.847725][T10485] should_failslab+0x9/0x20 [ 394.852263][T10485] slab_pre_alloc_hook+0x59/0x300 [ 394.857336][T10485] kmem_cache_alloc_node+0x5e/0x310 [ 394.862568][T10485] ? __alloc_skb+0x103/0x2c0 [ 394.867194][T10485] __alloc_skb+0x103/0x2c0 [ 394.871640][T10485] alloc_skb_with_frags+0xcd/0x7a0 [ 394.876786][T10485] ? is_bpf_text_address+0x28f/0x2a0 [ 394.882108][T10485] ? is_bpf_text_address+0x26/0x2a0 [ 394.887337][T10485] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.893791][T10485] sock_alloc_send_pskb+0x883/0x9a0 [ 394.899034][T10485] ? stack_trace_save+0x100/0x100 [ 394.904107][T10485] ? sock_kzfree_s+0x50/0x50 [ 394.908734][T10485] ? __stack_depot_save+0x1f/0x660 [ 394.913882][T10485] ? kasan_set_track+0x5f/0x70 [ 394.918673][T10485] ? kasan_set_track+0x4e/0x70 [ 394.923468][T10485] __ip_append_data+0x2a08/0x3bf0 [ 394.928518][T10485] ? do_syscall_64+0x55/0xb0 [ 394.933137][T10485] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.939281][T10485] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 394.944200][T10485] ? ip_setup_cork+0x840/0x840 [ 394.949012][T10485] ? ip_setup_cork+0x527/0x840 [ 394.953811][T10485] ip_make_skb+0x22b/0x440 [ 394.958262][T10485] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 394.963142][T10485] ? ip_flush_pending_frames+0x250/0x250 [ 394.968844][T10485] udp_sendmsg+0x1ae1/0x23d0 [ 394.973474][T10485] ? release_sock+0x2f/0x1c0 [ 394.978105][T10485] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 394.982985][T10485] ? udp_cmsg_send+0x350/0x350 [ 394.987789][T10485] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 394.993800][T10485] ? lock_chain_count+0x20/0x20 [ 394.998676][T10485] ? inet_sendmsg+0x10d/0x2a0 [ 395.003402][T10485] ? __local_bh_enable_ip+0x13a/0x1c0 [ 395.008830][T10485] ? _local_bh_enable+0xa0/0xa0 [ 395.013731][T10485] ? inet_sendmsg+0x10d/0x2a0 [ 395.018458][T10485] ? inet_sendmsg+0x10d/0x2a0 [ 395.023171][T10485] ? inet_send_prepare+0x250/0x250 [ 395.028419][T10485] ____sys_sendmsg+0x61b/0x980 [ 395.033227][T10485] ? __sys_sendmsg_sock+0x30/0x30 [ 395.038277][T10485] ? __import_iovec+0x5f2/0x850 [ 395.043170][T10485] ? import_iovec+0x73/0xa0 [ 395.047710][T10485] ___sys_sendmsg+0x2a6/0x360 [ 395.052424][T10485] ? get_pid_task+0x20/0x1e0 [ 395.057050][T10485] ? __sys_sendmsg+0x2b0/0x2b0 [ 395.061861][T10485] ? __lock_acquire+0x7d80/0x7d80 [ 395.066937][T10485] __se_sys_sendmsg+0x1d0/0x2c0 [ 395.071820][T10485] ? __x64_sys_sendmsg+0x80/0x80 [ 395.076806][T10485] ? lockdep_hardirqs_on+0x98/0x150 [ 395.082041][T10485] do_syscall_64+0x55/0xb0 [ 395.086488][T10485] ? clear_bhb_loop+0x40/0x90 [ 395.091199][T10485] ? clear_bhb_loop+0x40/0x90 [ 395.095908][T10485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.101835][T10485] RIP: 0033:0x7ff6b859e0d9 [ 395.106278][T10485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.125911][T10485] RSP: 002b:00007ff6b9442028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.134353][T10485] RAX: ffffffffffffffda RBX: 00007ff6b8825fa0 RCX: 00007ff6b859e0d9 [ 395.142352][T10485] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000000000000003 [ 395.150351][T10485] RBP: 00007ff6b9442090 R08: 0000000000000000 R09: 0000000000000000 [ 395.158348][T10485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.166345][T10485] R13: 00007ff6b8826038 R14: 00007ff6b8825fa0 R15: 00007ffcd370e638 [ 395.174452][T10485] [ 395.538006][T10491] FAULT_INJECTION: forcing a failure. [ 395.538006][T10491] name failslab, interval 1, probability 0, space 0, times 0 [ 395.640520][T10491] CPU: 1 PID: 10491 Comm: syz.2.1543 Not tainted syzkaller #0 [ 395.648069][T10491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.658333][T10491] Call Trace: [ 395.661642][T10491] [ 395.664609][T10491] dump_stack_lvl+0x18c/0x250 [ 395.669332][T10491] ? show_regs_print_info+0x20/0x20 [ 395.674566][T10491] ? load_image+0x420/0x420 [ 395.679107][T10491] ? __might_sleep+0xe0/0xe0 [ 395.683736][T10491] ? __lock_acquire+0x7d80/0x7d80 [ 395.688807][T10491] should_fail_ex+0x394/0x4c0 [ 395.693537][T10491] should_failslab+0x9/0x20 [ 395.698101][T10491] slab_pre_alloc_hook+0x59/0x300 [ 395.703169][T10491] ? kvmalloc_node+0x70/0x180 [ 395.707891][T10491] ? kvmalloc_node+0x70/0x180 [ 395.712605][T10491] __kmem_cache_alloc_node+0x53/0x250 [ 395.718031][T10491] ? kvmalloc_node+0x70/0x180 [ 395.722763][T10491] __kmalloc_node+0xa6/0x240 [ 395.727401][T10491] kvmalloc_node+0x70/0x180 [ 395.731954][T10491] page_pool_create+0x1eb/0x5c0 [ 395.736930][T10491] bpf_test_run_xdp_live+0x203/0x1b30 [ 395.742350][T10491] ? 0xffffffffa00044c0 [ 395.746545][T10491] ? 0xffffffffa00044c0 [ 395.750733][T10491] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 395.756666][T10491] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 395.762869][T10491] ? xdp_convert_md_to_buff+0x330/0x330 [ 395.768490][T10491] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 395.774782][T10491] ? xdp_convert_md_to_buff+0x5b/0x330 [ 395.780290][T10491] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 395.785701][T10491] ? __lock_acquire+0x7d80/0x7d80 [ 395.790780][T10491] ? dev_put+0x80/0x80 [ 395.794913][T10491] ? dev_put+0x80/0x80 [ 395.799021][T10491] bpf_prog_test_run+0x31f/0x390 [ 395.804001][T10491] __sys_bpf+0x49d/0x890 [ 395.808282][T10491] ? bpf_link_show_fdinfo+0x390/0x390 [ 395.813700][T10491] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 395.819947][T10491] __x64_sys_bpf+0x7c/0x90 [ 395.824407][T10491] do_syscall_64+0x55/0xb0 [ 395.828858][T10491] ? clear_bhb_loop+0x40/0x90 [ 395.833568][T10491] ? clear_bhb_loop+0x40/0x90 [ 395.838288][T10491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.844213][T10491] RIP: 0033:0x7ff6b859e0d9 [ 395.848841][T10491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.868488][T10491] RSP: 002b:00007ff6b9442028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 395.876946][T10491] RAX: ffffffffffffffda RBX: 00007ff6b8825fa0 RCX: 00007ff6b859e0d9 [ 395.884951][T10491] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 395.892954][T10491] RBP: 00007ff6b9442090 R08: 0000000000000000 R09: 0000000000000000 [ 395.900959][T10491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.908973][T10491] R13: 00007ff6b8826038 R14: 00007ff6b8825fa0 R15: 00007ffcd370e638 [ 395.916995][T10491] [ 395.995742][T10491] page_pool_create() gave up with errno -12 [ 396.232833][T10502] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.240239][T10502] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.275694][T10502] bridge0: entered allmulticast mode [ 396.297995][T10503] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.305276][T10503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.313504][T10503] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.320763][T10503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.339544][T10503] bridge0: entered promiscuous mode [ 396.426203][T10505] netlink: 'syz.3.1548': attribute type 10 has an invalid length. [ 396.991230][T10513] netlink: 'syz.3.1550': attribute type 10 has an invalid length. [ 397.061682][T10513] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1550'. [ 397.097811][T10513] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 397.397603][T10519] netlink: 'syz.0.1551': attribute type 10 has an invalid length. [ 397.405537][T10519] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1551'. [ 397.967287][T10530] netlink: 'syz.3.1556': attribute type 1 has an invalid length. [ 397.985433][T10530] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1556'. [ 398.028363][T10530] netlink: 'syz.3.1556': attribute type 1 has an invalid length. [ 398.135461][T10535] netlink: 'syz.0.1559': attribute type 10 has an invalid length. [ 398.178259][T10535] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 398.365859][T10547] netlink: 'syz.3.1562': attribute type 10 has an invalid length. [ 398.374042][T10547] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1562'. [ 398.385659][T10547] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 398.547960][T10549] bridge0: port 3(team0) entered disabled state [ 398.554488][T10549] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.561871][T10549] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.583489][T10549] bridge0: entered allmulticast mode [ 398.633605][T10554] bridge0: port 3(team0) entered blocking state [ 398.640114][T10554] bridge0: port 3(team0) entered forwarding state [ 398.646949][T10554] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.654165][T10554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.661721][T10554] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.668889][T10554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.681719][T10554] bridge0: entered promiscuous mode [ 398.758033][T10558] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1565'. [ 399.327267][T10566] netlink: 'syz.3.1569': attribute type 10 has an invalid length. [ 399.338403][T10566] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1569'. [ 399.389743][T10566] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 399.605556][T10571] netlink: 'syz.2.1571': attribute type 10 has an invalid length. [ 399.653579][T10571] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 400.336973][T10593] bridge0: entered allmulticast mode [ 400.346770][T10593] bridge0: port 3(team0) entered blocking state [ 400.353236][T10593] bridge0: port 3(team0) entered forwarding state [ 400.360139][T10593] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.367403][T10593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.374960][T10593] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.382254][T10593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.393018][T10593] bridge0: entered promiscuous mode [ 400.898329][T10600] netlink: 'syz.1.1582': attribute type 1 has an invalid length. [ 400.914566][T10600] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1582'. [ 401.209188][T10606] FAULT_INJECTION: forcing a failure. [ 401.209188][T10606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.222619][T10606] CPU: 0 PID: 10606 Comm: syz.1.1584 Not tainted syzkaller #0 [ 401.230130][T10606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.240305][T10606] Call Trace: [ 401.243614][T10606] [ 401.246582][T10606] dump_stack_lvl+0x18c/0x250 [ 401.251308][T10606] ? show_regs_print_info+0x20/0x20 [ 401.256636][T10606] ? load_image+0x420/0x420 [ 401.261178][T10606] ? __might_fault+0xaa/0x120 [ 401.265918][T10606] ? __lock_acquire+0x7d80/0x7d80 [ 401.270983][T10606] should_fail_ex+0x394/0x4c0 [ 401.275739][T10606] _copy_from_iter+0x1cd/0x1290 [ 401.280652][T10606] ? copyout_mc+0x70/0x70 [ 401.285019][T10606] ? __virt_addr_valid+0x10c/0x380 [ 401.290172][T10606] ? __virt_addr_valid+0x10c/0x380 [ 401.295408][T10606] ? __virt_addr_valid+0x10c/0x380 [ 401.300557][T10606] ? __check_object_size+0x4fc/0xa40 [ 401.305880][T10606] rawv6_send_hdrinc+0x7aa/0x1660 [ 401.311063][T10606] ? txopt_get+0x3f0/0x3f0 [ 401.315526][T10606] ? ip6_dst_hoplimit+0x96/0x350 [ 401.320555][T10606] ? ip6_dst_hoplimit+0x96/0x350 [ 401.325538][T10606] rawv6_sendmsg+0x128f/0x1740 [ 401.330372][T10606] ? verify_lock_unused+0x140/0x140 [ 401.335612][T10606] ? compat_rawv6_ioctl+0x70/0x70 [ 401.340704][T10606] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 401.347163][T10606] ? aa_sock_msg_perm+0x94/0x150 [ 401.352143][T10606] ? inet_sendmsg+0x7e/0x2a0 [ 401.356775][T10606] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 401.362103][T10606] ? inet_send_prepare+0x250/0x250 [ 401.367253][T10606] ____sys_sendmsg+0x61b/0x980 [ 401.372059][T10606] ? __asan_memset+0x22/0x40 [ 401.376690][T10606] ? __sys_sendmsg_sock+0x30/0x30 [ 401.381757][T10606] ? __import_iovec+0x5f2/0x850 [ 401.386657][T10606] ? import_iovec+0x73/0xa0 [ 401.391212][T10606] ___sys_sendmsg+0x2a6/0x360 [ 401.395926][T10606] ? get_pid_task+0x20/0x1e0 [ 401.400562][T10606] ? __sys_sendmsg+0x2b0/0x2b0 [ 401.405380][T10606] ? __lock_acquire+0x7d80/0x7d80 [ 401.410561][T10606] __se_sys_sendmsg+0x1d0/0x2c0 [ 401.415827][T10606] ? __x64_sys_sendmsg+0x80/0x80 [ 401.421735][T10606] ? lockdep_hardirqs_on+0x98/0x150 [ 401.426994][T10606] do_syscall_64+0x55/0xb0 [ 401.431460][T10606] ? clear_bhb_loop+0x40/0x90 [ 401.436713][T10606] ? clear_bhb_loop+0x40/0x90 [ 401.441526][T10606] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.447458][T10606] RIP: 0033:0x7fda70f9e0d9 [ 401.451906][T10606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.471558][T10606] RSP: 002b:00007fda71da1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.480017][T10606] RAX: ffffffffffffffda RBX: 00007fda71225fa0 RCX: 00007fda70f9e0d9 [ 401.488023][T10606] RDX: 0000000020040000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 401.496022][T10606] RBP: 00007fda71da1090 R08: 0000000000000000 R09: 0000000000000000 [ 401.504110][T10606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.512197][T10606] R13: 00007fda71226038 R14: 00007fda71225fa0 R15: 00007ffcc91f2868 [ 401.520218][T10606] [ 403.458224][T10622] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1590'. [ 403.570103][T10624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.038069][T10631] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1592'. [ 404.317125][T10641] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 407.325851][T10687] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1611'. [ 407.354759][T10687] openvswitch: netlink: Flow actions attr not present in new flow. [ 409.693642][T10733] bridge0: port 3(team0) entered disabled state [ 409.700327][T10733] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.707746][T10733] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.805941][T10733] bridge0: left promiscuous mode [ 413.258247][T10744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.735839][T10778] bridge0: port 3(team0) entered disabled state [ 414.742504][T10778] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.749840][T10778] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.771122][T10782] FAULT_INJECTION: forcing a failure. [ 414.771122][T10782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.787091][T10778] bridge0: left promiscuous mode [ 414.789151][T10782] CPU: 1 PID: 10782 Comm: syz.2.1641 Not tainted syzkaller #0 [ 414.799578][T10782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.809675][T10782] Call Trace: [ 414.812991][T10782] [ 414.815962][T10782] dump_stack_lvl+0x18c/0x250 [ 414.820689][T10782] ? show_regs_print_info+0x20/0x20 [ 414.825905][T10782] ? load_image+0x420/0x420 [ 414.830424][T10782] ? __lock_acquire+0x7d80/0x7d80 [ 414.835475][T10782] ? snprintf+0xe9/0x140 [ 414.839729][T10782] should_fail_ex+0x394/0x4c0 [ 414.844430][T10782] _copy_to_user+0x2f/0xa0 [ 414.848874][T10782] simple_read_from_buffer+0xe7/0x150 [ 414.854354][T10782] proc_fail_nth_read+0x1e8/0x260 [ 414.859400][T10782] ? proc_fault_inject_write+0x360/0x360 [ 414.865060][T10782] ? fsnotify_perm+0x271/0x5e0 [ 414.869847][T10782] ? proc_fault_inject_write+0x360/0x360 [ 414.875496][T10782] vfs_read+0x298/0x990 [ 414.879677][T10782] ? kernel_read+0x1e0/0x1e0 [ 414.884285][T10782] ? __fget_files+0x28/0x460 [ 414.888897][T10782] ? __fget_files+0x3fc/0x460 [ 414.893632][T10782] ? __fdget_pos+0x2a3/0x330 [ 414.898237][T10782] ? ksys_read+0x74/0x260 [ 414.902582][T10782] ksys_read+0x151/0x260 [ 414.906842][T10782] ? vfs_write+0x9a0/0x9a0 [ 414.911279][T10782] ? lockdep_hardirqs_on+0x98/0x150 [ 414.916494][T10782] do_syscall_64+0x55/0xb0 [ 414.920927][T10782] ? clear_bhb_loop+0x40/0x90 [ 414.925624][T10782] ? clear_bhb_loop+0x40/0x90 [ 414.930317][T10782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.936232][T10782] RIP: 0033:0x7ff6b855e90e [ 414.940684][T10782] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 414.960303][T10782] RSP: 002b:00007ff6b9441fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 414.968732][T10782] RAX: ffffffffffffffda RBX: 00007ff6b94426c0 RCX: 00007ff6b855e90e [ 414.976716][T10782] RDX: 000000000000000f RSI: 00007ff6b94420a0 RDI: 0000000000000005 [ 414.984695][T10782] RBP: 00007ff6b9442090 R08: 0000000000000000 R09: 0000000000000000 [ 414.992675][T10782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 415.000654][T10782] R13: 00007ff6b8826038 R14: 00007ff6b8825fa0 R15: 00007ffcd370e638 [ 415.008652][T10782] [ 415.060980][T10783] bridge0: port 3(team0) entered blocking state [ 415.068449][T10783] bridge0: port 3(team0) entered forwarding state [ 415.075241][T10783] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.082576][T10783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.090151][T10783] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.097415][T10783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.197613][T10783] bridge0: entered promiscuous mode [ 415.228837][T10788] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.236148][T10788] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.244607][T10788] bridge0: left promiscuous mode [ 415.260626][T10788] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.267906][T10788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.275376][T10788] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.282641][T10788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.291505][T10788] bridge0: entered promiscuous mode [ 415.342051][T10790] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1644'. [ 417.649416][T10813] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.656729][T10813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.676958][T10813] bridge0: entered promiscuous mode [ 417.825059][T10823] bridge0: port 3(team0) entered disabled state [ 417.831593][T10823] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.838965][T10823] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.848228][T10823] bridge0: left promiscuous mode [ 417.879014][T10828] bridge0: port 3(team0) entered blocking state [ 417.885534][T10828] bridge0: port 3(team0) entered forwarding state [ 417.892334][T10828] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.899559][T10828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.907111][T10828] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.914340][T10828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.928872][T10828] bridge0: entered promiscuous mode [ 417.937438][T10827] validate_nla: 1 callbacks suppressed [ 417.937454][T10827] netlink: 'syz.3.1660': attribute type 1 has an invalid length. [ 417.954485][T10827] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1660'. [ 418.258397][T10835] netlink: 'syz.3.1662': attribute type 10 has an invalid length. [ 418.340169][T10835] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.361061][T10835] bridge_slave_1: left allmulticast mode [ 418.369010][T10835] bridge_slave_1: left promiscuous mode [ 418.376829][T10835] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.620223][T10844] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1668'. [ 419.327038][T10857] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.334415][T10857] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.377212][T10857] bridge0: left promiscuous mode [ 419.432494][T10859] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.439845][T10859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.447443][T10859] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.454687][T10859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.517023][T10859] bridge0: entered promiscuous mode [ 419.579225][T10866] bridge0: port 3(team0) entered blocking state [ 419.585615][T10866] bridge0: port 3(team0) entered forwarding state [ 419.592489][T10866] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.599808][T10866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.607511][T10866] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.614828][T10866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.677684][T10866] bridge0: entered promiscuous mode [ 421.492899][T10896] sit0: left promiscuous mode [ 421.599960][T10903] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1690'. [ 421.696922][T10898] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.704268][T10898] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.717327][T10898] bridge0: left promiscuous mode [ 421.756336][T10904] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.763615][T10904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.771246][T10904] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.778482][T10904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.792272][T10904] bridge0: entered promiscuous mode [ 421.799051][T10903] netlink: 'syz.0.1690': attribute type 10 has an invalid length. [ 421.818571][T10902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.940090][T10916] netlink: 'syz.0.1693': attribute type 21 has an invalid length. [ 421.948189][T10916] netlink: 'syz.0.1693': attribute type 1 has an invalid length. [ 421.956315][T10916] netlink: 'syz.0.1693': attribute type 2 has an invalid length. [ 421.986813][T10916] netlink: 9062 bytes leftover after parsing attributes in process `syz.0.1693'. [ 422.227252][T10924] FAULT_INJECTION: forcing a failure. [ 422.227252][T10924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.241941][T10924] CPU: 0 PID: 10924 Comm: syz.1.1696 Not tainted syzkaller #0 [ 422.249456][T10924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.259554][T10924] Call Trace: [ 422.262849][T10924] [ 422.265792][T10924] dump_stack_lvl+0x18c/0x250 [ 422.270508][T10924] ? show_regs_print_info+0x20/0x20 [ 422.275727][T10924] ? load_image+0x420/0x420 [ 422.280247][T10924] ? __might_fault+0xaa/0x120 [ 422.284938][T10924] ? __lock_acquire+0x7d80/0x7d80 [ 422.289987][T10924] should_fail_ex+0x394/0x4c0 [ 422.294687][T10924] _copy_from_user+0x2f/0xe0 [ 422.299294][T10924] __sys_bpf+0x23e/0x890 [ 422.303559][T10924] ? bpf_link_show_fdinfo+0x390/0x390 [ 422.308957][T10924] ? lock_chain_count+0x20/0x20 [ 422.313821][T10924] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 422.319821][T10924] __x64_sys_bpf+0x7c/0x90 [ 422.324249][T10924] do_syscall_64+0x55/0xb0 [ 422.328680][T10924] ? clear_bhb_loop+0x40/0x90 [ 422.333372][T10924] ? clear_bhb_loop+0x40/0x90 [ 422.338064][T10924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.343970][T10924] RIP: 0033:0x7fda70f9e0d9 [ 422.348406][T10924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.368028][T10924] RSP: 002b:00007fda71da1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 422.376462][T10924] RAX: ffffffffffffffda RBX: 00007fda71225fa0 RCX: 00007fda70f9e0d9 [ 422.384446][T10924] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 422.392432][T10924] RBP: 00007fda71da1090 R08: 0000000000000000 R09: 0000000000000000 [ 422.400432][T10924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.408419][T10924] R13: 00007fda71226038 R14: 00007fda71225fa0 R15: 00007ffcc91f2868 [ 422.416432][T10924] [ 422.910732][T10932] delete_channel: no stack [ 423.503533][T10949] bridge0: port 3(team0) entered disabled state [ 423.510251][T10949] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.517643][T10949] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.526003][T10949] bridge0: left promiscuous mode [ 423.688606][T10950] bridge0: port 3(team0) entered blocking state [ 423.695142][T10950] bridge0: port 3(team0) entered forwarding state [ 423.702028][T10950] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.709373][T10950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.717040][T10950] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.724348][T10950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.738913][T10950] bridge0: entered promiscuous mode [ 423.821679][T10956] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1706'. [ 423.925912][T10956] netlink: 'syz.2.1706': attribute type 10 has an invalid length. [ 423.984590][T10956] team0: Port device wlan1 added [ 424.233531][T10973] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.1711'. [ 424.243714][T10961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.476622][T10975] netlink: 'syz.1.1709': attribute type 10 has an invalid length. [ 424.980933][T10975] hsr_slave_0: entered promiscuous mode [ 424.992760][T10975] team0: Port device hsr_slave_0 added [ 425.591714][T10991] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.599185][T10991] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.639792][T10991] bridge0: left promiscuous mode [ 425.678612][T10994] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.685880][T10994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.693526][T10994] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.700770][T10994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.777036][T10994] bridge0: entered promiscuous mode [ 426.868907][T11015] FAULT_INJECTION: forcing a failure. [ 426.868907][T11015] name failslab, interval 1, probability 0, space 0, times 0 [ 426.906691][T11015] CPU: 1 PID: 11015 Comm: syz.3.1727 Not tainted syzkaller #0 [ 426.914232][T11015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 426.924412][T11015] Call Trace: [ 426.927812][T11015] [ 426.930775][T11015] dump_stack_lvl+0x18c/0x250 [ 426.935511][T11015] ? show_regs_print_info+0x20/0x20 [ 426.940749][T11015] ? load_image+0x420/0x420 [ 426.945289][T11015] ? kasan_set_track+0x5f/0x70 [ 426.950088][T11015] ? kasan_save_free_info+0x28/0x40 [ 426.955329][T11015] ? ____kasan_slab_free+0x126/0x1f0 [ 426.960652][T11015] ? slab_free_freelist_hook+0x130/0x1a0 [ 426.966326][T11015] ? __tipc_shutdown+0xdb6/0x1590 [ 426.971501][T11015] ? tipc_release+0x2fd/0x20e0 [ 426.976311][T11015] ? sock_close+0xa7/0x210 [ 426.980769][T11015] ? __fput+0x221/0x940 [ 426.984969][T11015] ? __se_sys_close+0x15c/0x1e0 [ 426.989867][T11015] should_fail_ex+0x394/0x4c0 [ 426.994596][T11015] should_failslab+0x9/0x20 [ 426.999143][T11015] slab_pre_alloc_hook+0x59/0x300 [ 427.004219][T11015] kmem_cache_alloc_node+0x5e/0x310 [ 427.009459][T11015] ? __alloc_skb+0x103/0x2c0 [ 427.014104][T11015] __alloc_skb+0x103/0x2c0 [ 427.018562][T11015] tipc_msg_reverse+0x22d/0x910 [ 427.023530][T11015] tipc_sk_respond+0xf0/0x2f0 [ 427.028259][T11015] ? tipc_sk_sock_err+0x2f0/0x2f0 [ 427.033329][T11015] ? __tipc_shutdown+0xdb6/0x1590 [ 427.038397][T11015] ? kmem_cache_free+0xf8/0x290 [ 427.043307][T11015] __tipc_shutdown+0x11cc/0x1590 [ 427.048323][T11015] ? tipc_recvstream+0xe70/0xe70 [ 427.053317][T11015] ? wait_woken+0x180/0x180 [ 427.057872][T11015] ? _local_bh_enable+0xa0/0xa0 [ 427.062816][T11015] tipc_release+0x2fd/0x20e0 [ 427.067451][T11015] ? ima_get_current_hash_algo+0x10/0x10 [ 427.073154][T11015] ? tipc_sock_destruct+0x180/0x180 [ 427.078408][T11015] ? down_write+0x16e/0x200 [ 427.083038][T11015] ? down_read_killable+0x340/0x340 [ 427.088298][T11015] sock_close+0xa7/0x210 [ 427.092594][T11015] ? sock_mmap+0xa0/0xa0 [ 427.096876][T11015] __fput+0x221/0x940 [ 427.100917][T11015] __se_sys_close+0x15c/0x1e0 [ 427.105659][T11015] do_syscall_64+0x55/0xb0 [ 427.110120][T11015] ? clear_bhb_loop+0x40/0x90 [ 427.114835][T11015] ? clear_bhb_loop+0x40/0x90 [ 427.119555][T11015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 427.125500][T11015] RIP: 0033:0x7f0f67f9e0d9 [ 427.129957][T11015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.149698][T11015] RSP: 002b:00007f0f68da4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 427.158157][T11015] RAX: ffffffffffffffda RBX: 00007f0f68225fa0 RCX: 00007f0f67f9e0d9 [ 427.166178][T11015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 427.174189][T11015] RBP: 00007f0f68da4090 R08: 0000000000000000 R09: 0000000000000000 [ 427.182200][T11015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.190211][T11015] R13: 00007f0f68226038 R14: 00007f0f68225fa0 R15: 00007ffd7299dd38 [ 427.198264][T11015] [ 428.112563][T11034] netlink: 'syz.1.1735': attribute type 10 has an invalid length. [ 428.129752][T11034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1735'. [ 428.339730][T11034] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 428.421000][T11039] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1737'. [ 428.447433][T11039] netlink: 'syz.3.1737': attribute type 10 has an invalid length. [ 428.457571][T11039] netdevsim netdevsim3 ÿÿÿÿÿÿ: left promiscuous mode [ 428.467628][T11039] netdevsim netdevsim3 ÿÿÿÿÿÿ: left allmulticast mode [ 428.510381][T11039] team0: Port device ÿÿÿÿÿÿ added [ 428.519189][T11041] netlink: 'syz.3.1737': attribute type 10 has an invalid length. [ 428.595829][T11041] team0: Port device ÿÿÿÿÿÿ removed [ 428.970799][T11040] netlink: 'syz.0.1736': attribute type 10 has an invalid length. [ 428.978977][T11040] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1736'. [ 430.040508][T11062] netlink: 'syz.1.1746': attribute type 10 has an invalid length. [ 430.057082][T11062] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1746'. [ 430.078173][T11062] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 430.180399][T11067] netlink: 'syz.0.1747': attribute type 2 has an invalid length. [ 430.210115][T11067] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1747'. [ 430.779829][T11084] netlink: 'syz.2.1754': attribute type 10 has an invalid length. [ 430.827481][T11084] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1754'. [ 430.997298][T11084] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 431.347424][T11099] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.385603][T11099] bridge0: left promiscuous mode [ 431.420648][T11103] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.427952][T11103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.446366][T11103] bridge0: entered promiscuous mode [ 432.729209][ C0] [ 432.729218][ C0] ================================ [ 432.729223][ C0] WARNING: inconsistent lock state [ 432.729229][ C0] syzkaller #0 Not tainted [ 432.729238][ C0] -------------------------------- [ 432.729243][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 432.729251][ C0] syz.0.1763/11117 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 432.729268][ C0] ffffffff8d2978f8 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x88/0xbd0 [ 432.729325][ C0] {INITIAL USE} state was registered at: [ 432.729332][ C0] lock_acquire+0x19e/0x420 [ 432.729352][ C0] _raw_write_lock_irq+0xaf/0xf0 [ 432.729434][ C0] kernfs_rename_ns+0x5e4/0x830 [ 432.729456][ C0] sysfs_rename_link_ns+0x175/0x1b0 [ 432.729472][ C0] device_rename+0x110/0x1e0 [ 432.729523][ C0] dev_change_name+0x308/0x8e0 [ 432.729568][ C0] do_setlink+0x925/0x3f40 [ 432.729593][ C0] rtnl_newlink+0x1848/0x2170 [ 432.729609][ C0] rtnetlink_rcv_msg+0x843/0xf90 [ 432.729627][ C0] netlink_rcv_skb+0x235/0x4c0 [ 432.729644][ C0] netlink_unicast+0x7b1/0x930 [ 432.729657][ C0] netlink_sendmsg+0x8d0/0xbf0 [ 432.729672][ C0] __sys_sendto+0x4a9/0x6b0 [ 432.729687][ C0] __x64_sys_sendto+0xde/0xf0 [ 432.729702][ C0] do_syscall_64+0x55/0xb0 [ 432.729719][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.729738][ C0] irq event stamp: 826 [ 432.729744][ C0] hardirqs last enabled at (825): [] syscall_enter_from_user_mode+0x25/0x80 [ 432.729773][ C0] hardirqs last disabled at (826): [] exc_debug+0x73/0x140 [ 432.729794][ C0] softirqs last enabled at (516): [] bpf_prog_load+0x1204/0x1610 [ 432.729817][ C0] softirqs last disabled at (514): [] bpf_ksym_add+0x2c/0x330 [ 432.729839][ C0] [ 432.729839][ C0] other info that might help us debug this: [ 432.729845][ C0] Possible unsafe locking scenario: [ 432.729845][ C0] [ 432.729848][ C0] CPU0 [ 432.729851][ C0] ---- [ 432.729854][ C0] lock(kernfs_rename_lock); [ 432.729866][ C0] [ 432.729869][ C0] lock(kernfs_rename_lock); [ 432.729879][ C0] [ 432.729879][ C0] *** DEADLOCK *** [ 432.729879][ C0] [ 432.729882][ C0] no locks held by syz.0.1763/11117. [ 432.729890][ C0] [ 432.729890][ C0] stack backtrace: [ 432.729895][ C0] CPU: 0 PID: 11117 Comm: syz.0.1763 Not tainted syzkaller #0 [ 432.729912][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 432.729921][ C0] Call Trace: [ 432.729928][ C0] <#DB> [ 432.729934][ C0] dump_stack_lvl+0x18c/0x250 [ 432.729955][ C0] ? show_regs_print_info+0x20/0x20 [ 432.729976][ C0] ? print_usage_bug+0x43d/0x6a0 [ 432.729995][ C0] ? verify_lock_unused+0x15/0x140 [ 432.730024][ C0] lock_acquire+0x2c2/0x420 [ 432.730044][ C0] ? trim_init_extable+0x6f0/0x6f0 [ 432.730066][ C0] ? kernfs_path_from_node+0x88/0xbd0 [ 432.730089][ C0] ? read_lock_is_recursive+0x20/0x20 [ 432.730107][ C0] ? __get_user_nocheck_8+0xa/0x20 [ 432.730133][ C0] ? fixup_exception+0x11bb/0x1d90 [ 432.730154][ C0] ? look_up_lock_class+0x75/0x140 [ 432.730179][ C0] _raw_read_lock_irqsave+0xbc/0x100 [ 432.730196][ C0] ? kernfs_path_from_node+0x88/0xbd0 [ 432.730219][ C0] ? _raw_read_lock+0x50/0x50 [ 432.730234][ C0] ? rcu_is_watching+0x15/0xb0 [ 432.730255][ C0] ? lock_release+0xb5/0x8c0 [ 432.730274][ C0] ? percpu_ref_tryget+0x15/0x180 [ 432.730296][ C0] kernfs_path_from_node+0x88/0xbd0 [ 432.730320][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 432.730339][ C0] ? rcu_is_watching+0x15/0xb0 [ 432.730362][ C0] ? kernfs_name+0x140/0x140 [ 432.730406][ C0] ? get_mem_cgroup_from_mm+0x38/0x290 [ 432.730425][ C0] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 432.730444][ C0] get_mm_memcg_path+0xb9/0x360 [ 432.730470][ C0] __mmap_lock_do_trace_acquire_returned+0xea/0x300 [ 432.730497][ C0] ? get_mm_memcg_path+0x360/0x360 [ 432.730530][ C0] ? __init_rwsem+0x160/0x160 [ 432.730549][ C0] ? _raw_spin_unlock+0x28/0x40 [ 432.730566][ C0] stack_map_get_build_id_offset+0x5fe/0x720 [ 432.730591][ C0] ? pcpu_freelist_pop+0x12a/0x190 [ 432.730615][ C0] ? __bpf_get_stackid+0x900/0x900 [ 432.730634][ C0] ? perf_prepare_sample+0x1558/0x1db0 [ 432.730656][ C0] __bpf_get_stackid+0x564/0x900 [ 432.730682][ C0] bpf_prog_12712c88fd19bd5b+0x29/0x2d [ 432.730702][ C0] bpf_overflow_handler+0x1fc/0x510 [ 432.730726][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 432.730745][ C0] ? bpf_overflow_handler+0xde/0x510 [ 432.730768][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 432.730790][ C0] ? rcu_is_watching+0x15/0xb0 [ 432.730812][ C0] ? lock_release+0xb5/0x8c0 [ 432.730833][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 432.730854][ C0] __perf_event_overflow+0x461/0x660 [ 432.730877][ C0] perf_swevent_event+0x319/0x570 [ 432.730898][ C0] ? perf_tp_event+0x1550/0x1550 [ 432.730918][ C0] ? perf_trace_lock+0xfc/0x3b0 [ 432.730938][ C0] perf_bp_event+0x319/0x430 [ 432.730958][ C0] ? look_up_lock_class+0x75/0x140 [ 432.730982][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 432.731002][ C0] ? rcu_is_watching+0x15/0xb0 [ 432.731032][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 432.731048][ C0] ? lock_release+0xb5/0x8c0 [ 432.731079][ C0] ? lock_acquire+0x2c2/0x420 [ 432.731101][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 432.731126][ C0] notifier_call_chain+0x18f/0x380 [ 432.731150][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 432.731173][ C0] atomic_notifier_call_chain+0xda/0x180 [ 432.731195][ C0] notify_die+0x145/0x1a0 [ 432.731217][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 432.731242][ C0] ? rcu_is_watching+0x15/0xb0 [ 432.731265][ C0] notify_debug+0x2e/0x50 [ 432.731300][ C0] exc_debug+0xde/0x140 [ 432.731321][ C0] asm_exc_debug+0x1e/0x40 [ 432.731338][ C0] RIP: 0010:iovec_from_user+0x102/0x240 [ 432.731364][ C0] Code: 01 e3 0f 88 2a 01 00 00 4c 39 e3 0f 82 21 01 00 00 0f 01 cb 0f ae e8 49 ff cf 48 8b 1c 24 49 89 dd 49 8b 6c 24 08 4d 8b 34 24 <31> ff 48 89 ee e8 d4 23 55 fd 48 85 ed 0f 88 ce 00 00 00 4c 89 e8 [ 432.731380][ C0] RSP: 0018:ffffc9000b7c7a58 EFLAGS: 00040282 [ 432.731395][ C0] RAX: ffffffff8432533a RBX: ffff88807ae14a40 RCX: 0000000000080000 [ 432.731408][ C0] RDX: ffffc9000c8ca000 RSI: 000000000000013b RDI: 000000000000013c [ 432.731420][ C0] RBP: 0000000000000000 R08: 0000000000000800 R09: 000000008f631010 [ 432.731431][ C0] R10: 000000004646afdd R11: fffffbfff1d190ce R12: 0000200000000300 [ 432.731443][ C0] R13: ffff88807ae14a40 R14: 00006370692f736e R15: 000000000000000c [ 432.731459][ C0] ? iovec_from_user+0x16a/0x240 [ 432.731486][ C0] [ 432.731491][ C0] [ 432.731499][ C0] __import_iovec+0x13d/0x850 [ 432.731524][ C0] import_iovec+0x73/0xa0 [ 432.731548][ C0] ___sys_sendmsg+0x256/0x360 [ 432.731570][ C0] ? __sys_sendmsg+0x2b0/0x2b0 [ 432.731610][ C0] __se_sys_sendmsg+0x1d0/0x2c0 [ 432.731630][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 432.731655][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 432.731679][ C0] do_syscall_64+0x55/0xb0 [ 432.731698][ C0] ? clear_bhb_loop+0x40/0x90 [ 432.731716][ C0] ? clear_bhb_loop+0x40/0x90 [ 432.731737][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.731756][ C0] RIP: 0033:0x7f867f99e0d9 [ 432.731770][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.731784][ C0] RSP: 002b:00007f86807d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.731802][ C0] RAX: ffffffffffffffda RBX: 00007f867fc25fa0 RCX: 00007f867f99e0d9 [ 432.731814][ C0] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 432.731825][ C0] RBP: 00007f867fa35024 R08: 0000000000000000 R09: 0000000000000000 [ 432.731836][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.731847][ C0] R13: 00007f867fc26038 R14: 00007f867fc25fa0 R15: 00007ffea17ad328 [ 432.731866][ C0] [ 440.248918][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.255288][ T1293] ieee802154 phy1 wpan1: encryption failed: -22