last executing test programs: 10.603676731s ago: executing program 1 (id=6893): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x121001, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x20008, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa44, 0x4}, 0x401, 0x0, 0x0, 0x0, 0x200, 0xfffffffc, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xa, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1375cc65}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x7}, @alu={0x7, 0x0, 0x7, 0x8, 0x2, 0xffffffffffffffe0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb57a, 0x0, 0x0, 0x0, 0x40000000}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc6, &(0x7f0000000800)=""/198, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) socket$kcm(0x2, 0x3, 0x106) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x80000008}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x800, 0x1}, 0x50) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x22, &(0x7f0000000000)=r7, 0x10) 10.529763981s ago: executing program 3 (id=6894): socket$kcm(0x2, 0x1000000000000002, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x12, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7fff, 0xfffd, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x880000000000, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x2, 0x0, 0x4c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000340)={0x2, &(0x7f00000001c0)=[{0x30, 0x8, 0x80, 0xfffff018}, {0x6, 0x4, 0x4, 0x8}]}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200005, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4090000000000008910ae0000000000c4090000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x500, 0xe, 0x0, &(0x7f0000000900)="ffffffffffffffff098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.740090301s ago: executing program 3 (id=6895): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000006"], 0x66) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa"]) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x9, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x19}, 0x0, 0xc8, 0x6, 0x0, 0x3, 0x0, 0x400, 0x0, 0xffffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_devices(r1, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0xff, 0x0, 0x0, 0x0, 0x7, 0x4c1e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x6, 0x6, 0xa, 0x9a82, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x9}, 0x8210, 0x4, 0x403, 0xaaf04684de878bda, 0x4e3, 0x6, 0x74, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x80, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20016100) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @random="6f4913451e8b"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18024cf7b0b1fcc0feae00000031"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00d3ff008c71ef28ff4b"], 0xffdd) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socket$kcm(0x10, 0x2, 0x0) 7.738789941s ago: executing program 0 (id=6903): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800003, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.737570982s ago: executing program 1 (id=6896): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@fwd={0x1}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x6c, 0x0, 0x19, 0x2}]}}, 0x0, 0x42, 0x0, 0x1, 0xfff, 0x10000}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3e0002"], 0x9a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), &(0x7f0000000280)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x4010, r0}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x9, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8}, &(0x7f0000001d80), &(0x7f0000001d40)=r7}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r8, &(0x7f0000000300), 0x0}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x30000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80080008}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, 0x0, 0x38}, 0x41) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0xf0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc00800190003000200060009a100800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) 7.538424306s ago: executing program 2 (id=6898): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x540bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9e, 0x2, @perf_config_ext={0x0, 0x3fff7ffd}, 0x0, 0x32, 0x43a1bd76, 0x7, 0xf1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000280)="0a29cb59f5864cad771e381fa155aa4a516cea76d3094b6def92fd66bdce117e978fe9c453e55c433081a640c7985c78108a476d10daa6c69c03a96d7ec5a406b72708fd6d9f64d1e8068d32e07c23717b731fa41156a71556e0f9f9763f434f0d2d736e5f25c62814d9fdd3894d64758f59c36d4290d00f72af4092b797394f720120896abc2e42e34644fff669cd6a27b21cfceed6df54d318fd4c4a60766cd65f1e09b957a2a0aae0d8793905beaa203cb432aa65cb1f1f3821cb114c96cc2a5af18a64f659470a173ffb625333f9fe4d86651a72e3bece9a8cd2ea17be2fce53a7fce4907f66f145069917d0cfec447696755ac4c2ffe8", 0xf9}, {&(0x7f0000000400)="d5b8f8405dc467ca5f0029a89e102e46ae156e4106872279ac9a8d0576d3c8038fb2632bcf70b89a712bf9e10980e6c06b5d9337d569b90bfa0275a4748f118e1950d67a737d0ee69ebae7f5cf40691592193a08ca824a66182a0f0b6830251a3d7a8718f06f431d021e8894f2f291ac7f4190c7d9b0cfce07dfb5771fe655f0f57fec09856c4b80feb29751d969f53c93f682e11723ab3277842b6a50ffefb30789c7726d6da4ee48dfb1cade1ac247ebdaf98b4b5f2aec1ce5b1cd5514c7519b1430a96041f5fb7538392732e7b82792a02295972510", 0xd7}, {&(0x7f0000000580)="2f90ee170d036fdb4e1365ab4399f161f51d820d25e7888276", 0x19}, {&(0x7f00000005c0)="af84a2b558f11411191c9a277070b270028571b8be1c2aaa8e1d686aa31da3fdf88c0e3f57da49a448b5922d10effe01ef71d65f4bbe83ec5ad9e1af8dda4519926a433779d38be692873545eb2668fc911d1781bcfc1e9e51fdfeb15c858e0aa4a248919acd3dcdca9dde6d13443296db3fec65d78729a04fc670e7c4d984dae517264e8b7727ef584f7a90c02857c37422b46422e6f8c5271d8852f8fc94cdda5b5ba579335583d7740237fc3908202118d2dc561371de31d030", 0xbb}], 0x4, &(0x7f00000007c0)=[@rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}], 0x88}, 0x800) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x4, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000202000000000000095"], &(0x7f0000000240)='GPL\x00', 0x6}, 0x94) setsockopt$sock_attach_bpf(r2, 0x6, 0x22, &(0x7f0000000200)=r1, 0x4) 4.542911632s ago: executing program 1 (id=6899): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x8a0a5, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10002, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYRES8], 0x9a) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000000)={'pim6reg0', 0x32, 0x30}, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000680)="b90103600040f000009e0ff008001fffffe1000040004d3277fb430500017f02832d", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0x5, 0x6d, &(0x7f0000000040)="a6143a2f4f", &(0x7f0000000080)=""/109, 0x2, 0x0, 0xa6, 0x85, &(0x7f0000000380)="9540aa65a9c4bc9e740a31d85f5f69675394f7936a08900dc09011639c901489c70772fb1e611dd1535310ae39ace2f32369f5a750ad6f916cd82bf2e5760f35cbf4adde29dd7d29a3c337fbb7f0521f5e70ea8e8afa2fa1e6f1bfe4e117939af0a683653d7ed596efa673be284b0e560cd6777a4f9ea9750cfd4c92bcfafbefd8a8e040fa95deaacd11af4e8d79c58aa4ec5f4df22bd0d2f5ff6cbefb7c3ee34ec7ed0fe3e9", &(0x7f0000000500)="f17b89f4d12007261f2b9acd8ea9e49f2c3dccfff5f53e3a8a0d06f35c32ff82d4a81ce3e590a06902fdcde564b0ee0d78c59e3d02070fe1ec73c6baaf1cd538f08d63b923e15410999923100550aea7e6a96230a68d201e03c3aae3e1ed93e449d4fcc46c2fcbbec83d885975d6598bd205bb7b171d2b870903386219cae3030b1d63ad97", 0x4, 0x0, 0x7}, 0x50) 4.509718532s ago: executing program 2 (id=6900): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60100c034002bf0900053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x600300) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000680)="b14b34c6dc80e53b0fe66609b554", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000003480)={0x0, 0x0, 0x0}, 0x40000120) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x34}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 4.314506384s ago: executing program 1 (id=6901): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = syz_clone(0x20800000, 0x0, 0xc, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x3, 0x2}, 0x8000, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xea, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000f00)="9eb8a2c0e241fb0402ac67d48d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad3a3db73f406c4aec4ba5a715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c53e7017cf0fe0275d2d6f9531b12f12e29b903ffd774272360efe35269a1835d8f3e07382952f4fd47c9025f538c0bf576243026ed3d16af515d4e31055e765380602c4b42cb4e178350c5f38", 0xed}, {&(0x7f0000001cc0)="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", 0x192}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98cfb4951e1dd166d062838bc49356383883778cbbaf9e010b4adb98889254740ac86a3c330836b8cc6764cf", 0xad}, {&(0x7f00000009c0)="a484d15488fb016289fa4e2b0b25648e7abf5a74ab5e75516b79103a9b0711dd70d5a141294998c249dda70370b7f076f3ec132111d4866784da73cd0f18993549e7b185584053fb7b48d2b271af8a14858473eb1edd82f3f4cd1150bee83bf4f624d8f873ec45fe60bb431221e35526a58313e39813e83be21f2834bbf6fc621f6d9894eb03b4c8690635c5ce509de10000000000000004d8d8550dc3763f779ad276b6f32236b8534ab6701184dac56e1af78c6013715d94b4d6cd59821581983f7e3b6c5369cda3f0bc763bdda2ec97d4542041be5568230b1a9b24e1d5efff9226066adcdfd53abc7078ff74aca53708cb4e62ed", 0xf6}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S', 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x7, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0xc00}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0)=r2, 0x12) r7 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_freezer_state(r7, &(0x7f00000000c0)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 4.314199805s ago: executing program 3 (id=6902): r0 = socket$kcm(0x11, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8993, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x800, 0x1}, 0x50) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x22, &(0x7f0000000000)=r7, 0x10) 1.204274372s ago: executing program 3 (id=6905): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x121001, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x20008, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa44, 0x4}, 0x401, 0x0, 0x0, 0x0, 0x200, 0xfffffffc, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0xcb, &(0x7f0000000040)=""/203, 0x41000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x17, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1375cc65}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x65180c88}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x7}, @alu={0x7, 0x0, 0x7, 0x8, 0x2, 0xffffffffffffffe0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb57a, 0x0, 0x0, 0x0, 0x40000000}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc6, &(0x7f0000000800)=""/198, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) socket$kcm(0x2, 0x3, 0x106) r5 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x80000008}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x800, 0x1}, 0x50) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x22, &(0x7f0000000000)=r8, 0x10) 1.149429477s ago: executing program 1 (id=6906): socket$kcm(0x2, 0x1000000000000002, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x12, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7fff, 0xfffd, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x880000000000, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x2, 0x0, 0x4c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000340)={0x2, &(0x7f00000001c0)=[{0x30, 0x8, 0x80, 0xfffff018}, {0x6, 0x4, 0x4, 0x8}]}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_bp={0x0, 0x6}, 0x9408, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4090000000000008910ae0000000000c4090000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x500, 0xe, 0x0, &(0x7f0000000900)="ffffffffffffffff098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.125807223s ago: executing program 0 (id=6907): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0xff00}, 0x48) 1.099111s ago: executing program 2 (id=6908): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x8, 0x4, 0x6, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8, 0xf, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xd}, 0x84a8, 0x2f, 0x43a1bd79, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f000000040000000600000007000000801300", @ANYRES32, @ANYBLOB="0000000000000000008000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r4 = socket$kcm(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ee0000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e4e4e29d8b33fbdd02e86a6432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad84cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d85618ba2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978addf2f2a29a387c6f0576b36038f819286eea99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a540f64000000000000fbb4c256409e54daefbb107c381fa729ff5fe607d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc34102f44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234e282182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574ea68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f0cf74f845d1cc9ec4eee79c290fb0ba939b13707004e2e9cc0d350538c1c8c6bb9a38c6ac5ca07df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e983892c383882809f557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b06a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f938ad16eeb8342278f1c1cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706e587f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2cc0e7c207b8942fafd70530a0fc4622ecf132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af999dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2be0d1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bff348229fa84034faf8421a22c4b4c17a3d24a4aeee0d0850371feefd77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2b59654d49a11c6736ac63e8eb383760fc2b5c976dacf3dda7191c757f28e44f6a5f95db7055f7ed983f5665210f20a494fabb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a5826fdbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db3c22673884dca370558936b85737e14819ab1c57b348a8ff16d36364a20fe846d11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb251ab9eefc8e400191f0f0f8c679b0000000000000000000000b41b0ae67d9351c49e1ff285d05a3cc39a5b0cd20afe0a00086650f8fad20c0e1e7131836c85b2cbacd41593928207312189fdd66abc45a139f0c9dbcc58237cec5bd56ffe0c6de23254a7951a298501ca04ab30b5723df6dd01d0b1a87c197b83b286374ba9a9dd1bd09ea1b71b24a1f527bf59d9633e3d15ed3757acc494f464482e49884c13780cc392bfe67b5d91e5b513daea48cac7645db35f07ba41aa187f65c5344717d7a0ee353a7e36b14fdce5898a613cef224d3addb3d2de74cef73f7520dc8cc8ffaa62cbd25e691ef4c45fdd25675b32c129a8464f08c4da9c08713b54416f3b56a04086dab1d196884e062287ad4758e883d2f99833d8aaf0c56718f6b0434740900faf4ab824662a719bf370fd0b2de04c1455ec14908ce5cbec79466f2f2cc337c53437d626254e00000000000000000000000000000000c34646f8ae68c095e7298300feab8a3dfe2c43fc971385b13b4f3b61ddbf5044ff572defcc67930f0e715774e1e970751534398faf79350255cfa9021378f10c2043e7ecd5649c9720530da7ea227b792f31cb5d688b5f1eba9ff5f85c97b35e00ecf76282912b483e31c76e303e527e98a9ca14f718d495ad45db16c4500011de506f0ca35f7ea96ed1831e3c1219f985b26cb8a70e7c8efcb287984871e0fed3f1985cf63f00289292b378188ad0dfae12c265b88961a9223b48cf7055d641595e0cb926d63c1f8a207f48bd482290b79867285c2155e655e017bca6cbba43f9b49042fb2fb390c436b3306e8a0800000090d159004da838a50235b91f5273c1fe083067ce1e2d8011c9e2b6d3ea69dfc3712e5ce440432fbd29ffd004000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x23, 0x0, 0xffffffffffffffff, 0x8, '\x00', r8, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a1180002", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00)=r9, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r3, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r5}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x0, 0x5, 0x7, 0x5, 0x4, 0x8}, @ldst={0x1, 0x3, 0x6, 0x8, 0x7, 0xffffffffffffffec, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000300)='syzkaller\x00', 0x80000000, 0xa0, &(0x7f0000000940)=""/160, 0x100, 0x2, '\x00', 0x0, 0x1b, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x5, 0x0, 0x9, 0x4}, 0x10, r9, 0x0, 0x4, &(0x7f0000000b40)=[r12, r10, r3, r10, r0], &(0x7f0000000b80)=[{0x4, 0x5, 0xc, 0xa}, {0x5, 0x1, 0x3, 0x5}, {0x3, 0x1, 0xf, 0x4}, {0x4, 0x2, 0x3, 0x9}], 0x10, 0xa467}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33) 903.015434ms ago: executing program 0 (id=6909): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000280)="0a29cb59f5864cad771e381fa155aa4a516cea76d3094b6def92fd66bdce117e978fe9c453e55c433081a640c7985c78108a476d10daa6c69c03a96d7ec5a406b72708fd6d9f64d1e8068d32e07c23717b731fa41156a71556e0f9f9763f434f0d2d736e5f25c62814d9fdd3894d64758f59c36d4290d00f72af4092b797394f720120896abc2e42e34644fff669cd6a27b21cfceed6df54d318fd4c4a60766cd65f1e09b957a2a0aae0d8793905beaa203cb432aa65cb1f1f3821cb114c96cc2a5af18a64f659470a173ffb625333f9fe4d86651a72e3bece9a8cd2ea17be2fce53a7fce4907f66f145069917d0cfec447696755ac4c2ffe8", 0xf9}, {&(0x7f0000000400)="d5b8f8405dc467ca5f0029a89e102e46ae156e4106872279ac9a8d0576d3c8038fb2632bcf70b89a712bf9e10980e6c06b5d9337d569b90bfa0275a4748f118e1950d67a737d0ee69ebae7f5cf40691592193a08ca824a66182a0f0b6830251a3d7a8718f06f431d021e8894f2f291ac7f4190c7d9b0cfce07dfb5771fe655f0f57fec09856c4b80feb29751d969f53c93f682e11723ab3277842b6a50ffefb30789c7726d6da4ee48dfb1cade1ac247ebdaf98b4b5f2aec1ce5b1cd5514c7519b1430a96041f5fb7538392732e7b82792a02295972510", 0xd7}, {&(0x7f0000000580)="2f90ee170d036fdb4e1365ab4399f161f51d820d25e7888276", 0x19}, {&(0x7f00000005c0)="af84a2b558f11411191c9a277070b270028571b8be1c2aaa8e1d686aa31da3fdf88c0e3f57da49a448b5922d10effe01ef71d65f4bbe83ec5ad9e1af8dda4519926a433779d38be692873545eb2668fc911d1781bcfc1e9e51fdfeb15c858e0aa4a248919acd3dcdca9dde6d13443296db3fec65d78729a04fc670e7c4d984dae517264e8b7727ef584f7a90c02857c37422b46422e6f8c5271d8852f8fc94cdda5b5ba579335583d7740237fc3908202118d2dc561371de31d030", 0xbb}], 0x4, &(0x7f00000007c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}], 0x88}, 0x800) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x4, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000202000000000000095"], &(0x7f0000000240)='GPL\x00', 0x6}, 0x94) setsockopt$sock_attach_bpf(r3, 0x6, 0x22, &(0x7f0000000200)=r2, 0x4) 627.347289ms ago: executing program 0 (id=6911): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f26"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x8a0a5, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10002, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYRES8], 0x9a) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000000)={'pim6reg0', 0x32, 0x30}, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000680)="b90103600040f000009e0ff008001fffffe1000040004d3277fb430500017f02832d", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0x5, 0x6d, &(0x7f0000000040)="a6143a2f4f", &(0x7f0000000080)=""/109, 0x2, 0x0, 0xa6, 0x85, &(0x7f0000000380)="9540aa65a9c4bc9e740a31d85f5f69675394f7936a08900dc09011639c901489c70772fb1e611dd1535310ae39ace2f32369f5a750ad6f916cd82bf2e5760f35cbf4adde29dd7d29a3c337fbb7f0521f5e70ea8e8afa2fa1e6f1bfe4e117939af0a683653d7ed596efa673be284b0e560cd6777a4f9ea9750cfd4c92bcfafbefd8a8e040fa95deaacd11af4e8d79c58aa4ec5f4df22bd0d2f5ff6cbefb7c3ee34ec7ed0fe3e9", &(0x7f0000000500)="f17b89f4d12007261f2b9acd8ea9e49f2c3dccfff5f53e3a8a0d06f35c32ff82d4a81ce3e590a06902fdcde564b0ee0d78c59e3d02070fe1ec73c6baaf1cd538f08d63b923e15410999923100550aea7e6a96230a68d201e03c3aae3e1ed93e449d4fcc46c2fcbbec83d885975d6598bd205bb7b171d2b870903386219cae3030b1d63ad97", 0x4, 0x0, 0x7}, 0x50) 415.651297ms ago: executing program 1 (id=6912): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000006"], 0x66) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa"]) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x9, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x19}, 0x0, 0xc8, 0x6, 0x0, 0x3, 0x0, 0x400, 0x0, 0xffffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_devices(r1, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0xff, 0x0, 0x0, 0x0, 0x7, 0x4c1e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x6, 0x6, 0xa, 0x9a82, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x9}, 0x8210, 0x4, 0x403, 0xaaf04684de878bda, 0x4e3, 0x6, 0x74, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x80, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20016100) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @random="6f4913451e8b"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18024cf7b0b1fcc0feae00000031"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00d3ff008c71ef28ff4b"], 0xffdd) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socket$kcm(0x10, 0x2, 0x0) 223.317969ms ago: executing program 0 (id=6913): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a00200000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 222.994939ms ago: executing program 2 (id=6914): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60100c034002bf0900053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x600300) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000680)="b14b34c6dc80e53b0fe66609b554", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000003480)={0x0, 0x0, 0x0}, 0x40000120) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x34}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 221.5585ms ago: executing program 3 (id=6921): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x8a0a5, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10002, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYBLOB, @ANYRES8], 0x9a) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000000)={'pim6reg0', 0x32, 0x30}, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000680)="b90103600040f000009e0ff008001fffffe1000040004d3277fb430500017f02832d", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0x5, 0x6d, &(0x7f0000000040)="a6143a2f4f", &(0x7f0000000080)=""/109, 0x2, 0x0, 0xa6, 0x85, &(0x7f0000000380)="9540aa65a9c4bc9e740a31d85f5f69675394f7936a08900dc09011639c901489c70772fb1e611dd1535310ae39ace2f32369f5a750ad6f916cd82bf2e5760f35cbf4adde29dd7d29a3c337fbb7f0521f5e70ea8e8afa2fa1e6f1bfe4e117939af0a683653d7ed596efa673be284b0e560cd6777a4f9ea9750cfd4c92bcfafbefd8a8e040fa95deaacd11af4e8d79c58aa4ec5f4df22bd0d2f5ff6cbefb7c3ee34ec7ed0fe3e9", &(0x7f0000000500)="f17b89f4d12007261f2b9acd8ea9e49f2c3dccfff5f53e3a8a0d06f35c32ff82d4a81ce3e590a06902fdcde564b0ee0d78c59e3d02070fe1ec73c6baaf1cd538f08d63b923e15410999923100550aea7e6a96230a68d201e03c3aae3e1ed93e449d4fcc46c2fcbbec83d885975d6598bd205bb7b171d2b870903386219cae3030b1d63ad97", 0x4, 0x0, 0x7}, 0x50) 342.07µs ago: executing program 2 (id=6915): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xaba, 0x7}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000404000006"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x7, 0x4, 0x801, 0x1, r2, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000900)}, 0x20) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="18006fcabc66c1077b937c9508ad00000000f9ff0dff00e3"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=6916): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000001700000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00ef00850000009b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800003, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.814437][T22473] RSP: 002b:00007f158b023028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1031.822905][T22473] RAX: ffffffffffffffda RBX: 00007f158a425fa0 RCX: 00007f158a19e159 [ 1031.830921][T22473] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1031.838924][T22473] RBP: 00007f158b023090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.846922][T22473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1031.854919][T22473] R13: 00007f158a426038 R14: 00007f158a425fa0 R15: 00007ffc67c7fc58 [ 1031.862934][T22473] [ 1032.000417][T22476] delete_channel: no stack [ 1032.015317][T22476] delete_channel: no stack [ 1032.340539][T22485] netlink: 'syz.1.5676': attribute type 10 has an invalid length. [ 1032.381303][T22485] netlink: 'syz.1.5676': attribute type 19 has an invalid length. [ 1032.403205][T22485] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.5676'. [ 1032.603344][T22491] netlink: 'syz.3.5678': attribute type 10 has an invalid length. [ 1032.707177][T22492] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5677'. [ 1032.728768][T22492] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1032.746786][T22492] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1032.924416][T22502] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5680'. [ 1032.946125][T22502] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 1033.213862][T22510] netlink: 'syz.3.5683': attribute type 27 has an invalid length. [ 1033.232306][T22510] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5683'. [ 1033.682265][T22528] netlink: 'syz.1.5691': attribute type 10 has an invalid length. [ 1033.720965][T22528] team0: Device hsr_slave_0 failed to register rx_handler [ 1033.774971][T22533] FAULT_INJECTION: forcing a failure. [ 1033.774971][T22533] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.792338][T22533] CPU: 1 PID: 22533 Comm: syz.2.5692 Not tainted syzkaller #0 [ 1033.799897][T22533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1033.810048][T22533] Call Trace: [ 1033.813364][T22533] [ 1033.816342][T22533] dump_stack_lvl+0x18c/0x250 [ 1033.821086][T22533] ? show_regs_print_info+0x20/0x20 [ 1033.826363][T22533] ? load_image+0x420/0x420 [ 1033.830913][T22533] ? __might_sleep+0xe0/0xe0 [ 1033.835552][T22533] ? __lock_acquire+0x7d80/0x7d80 [ 1033.840640][T22533] should_fail_ex+0x394/0x4c0 [ 1033.845373][T22533] should_failslab+0x9/0x20 [ 1033.849934][T22533] slab_pre_alloc_hook+0x59/0x300 [ 1033.855033][T22533] ? stack_trace_save+0x100/0x100 [ 1033.860121][T22533] ? kvmalloc_node+0x70/0x180 [ 1033.864836][T22533] ? kvmalloc_node+0x70/0x180 [ 1033.869545][T22533] __kmem_cache_alloc_node+0x53/0x250 [ 1033.874965][T22533] ? kvmalloc_node+0x70/0x180 [ 1033.879689][T22533] __kmalloc_node+0xa6/0x240 [ 1033.884318][T22533] kvmalloc_node+0x70/0x180 [ 1033.889035][T22533] bpf_test_run_xdp_live+0x1c2/0x1b30 [ 1033.894457][T22533] ? verify_lock_unused+0x140/0x140 [ 1033.899696][T22533] ? kasan_set_track+0x4e/0x70 [ 1033.904493][T22533] ? __kasan_kmalloc+0x8f/0xa0 [ 1033.909333][T22533] ? __kmalloc+0xb7/0x240 [ 1033.913791][T22533] ? bpf_test_init+0x9f/0x140 [ 1033.918506][T22533] ? bpf_prog_test_run+0x31f/0x390 [ 1033.923682][T22533] ? __sys_bpf+0x49d/0x890 [ 1033.928132][T22533] ? __x64_sys_bpf+0x7c/0x90 [ 1033.932832][T22533] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1033.938936][T22533] ? xdp_convert_md_to_buff+0x330/0x330 [ 1033.944531][T22533] ? __lock_acquire+0x7d80/0x7d80 [ 1033.949595][T22533] ? __virt_addr_valid+0x10c/0x380 [ 1033.954742][T22533] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1033.961022][T22533] ? _copy_from_user+0xa5/0xe0 [ 1033.965824][T22533] ? bpf_test_init+0x119/0x140 [ 1033.970620][T22533] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1033.976136][T22533] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 1033.981545][T22533] ? __lock_acquire+0x7d80/0x7d80 [ 1033.986606][T22533] ? dev_put+0x80/0x80 [ 1033.990762][T22533] ? dev_put+0x80/0x80 [ 1033.994862][T22533] bpf_prog_test_run+0x31f/0x390 [ 1033.999831][T22533] __sys_bpf+0x49d/0x890 [ 1034.004107][T22533] ? bpf_link_show_fdinfo+0x560/0x560 [ 1034.009516][T22533] ? lock_chain_count+0x20/0x20 [ 1034.014401][T22533] __x64_sys_bpf+0x7c/0x90 [ 1034.018875][T22533] do_syscall_64+0x55/0xb0 [ 1034.023321][T22533] ? clear_bhb_loop+0x40/0x90 [ 1034.028037][T22533] ? clear_bhb_loop+0x40/0x90 [ 1034.032760][T22533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1034.038685][T22533] RIP: 0033:0x7fe44ef9e159 [ 1034.043139][T22533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.062803][T22533] RSP: 002b:00007fe44feb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1034.071257][T22533] RAX: ffffffffffffffda RBX: 00007fe44f225fa0 RCX: 00007fe44ef9e159 [ 1034.079279][T22533] RDX: 0000000000000050 RSI: 0000200000000400 RDI: 000000000000000a [ 1034.087279][T22533] RBP: 00007fe44feb7090 R08: 0000000000000000 R09: 0000000000000000 [ 1034.095282][T22533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1034.103313][T22533] R13: 00007fe44f226038 R14: 00007fe44f225fa0 R15: 00007ffc360fe678 [ 1034.111367][T22533] [ 1034.276500][T22537] bridge0: port 3(ip6gretap0) entered blocking state [ 1034.294446][T22537] bridge0: port 3(ip6gretap0) entered disabled state [ 1034.312802][T22537] ip6gretap0: entered allmulticast mode [ 1034.336737][T22537] ip6gretap0: entered promiscuous mode [ 1034.359126][T22537] bridge0: port 3(ip6gretap0) entered blocking state [ 1034.366637][T22537] bridge0: port 3(ip6gretap0) entered forwarding state [ 1034.683497][T22548] netlink: 'syz.2.5696': attribute type 10 has an invalid length. [ 1034.718356][T22548] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5696'. [ 1034.749914][T22548] bridge0: port 3(ip6gretap0) entered disabled state [ 1034.757718][T22548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.768958][T22548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.894616][T22548] bridge0: port 3(ip6gretap0) entered blocking state [ 1034.902148][T22548] bridge0: port 3(ip6gretap0) entered forwarding state [ 1034.910740][T22548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.918566][T22548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.928443][T22548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.936215][T22548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.019467][T22548] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1035.717564][T22569] netlink: 'syz.2.5703': attribute type 10 has an invalid length. [ 1035.728469][T22569] team0: Device hsr_slave_0 failed to register rx_handler [ 1036.780657][T22579] netlink: 'syz.2.5707': attribute type 21 has an invalid length. [ 1037.102692][T22597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1037.128101][T22597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1037.152196][T22597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1037.171712][T22597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1037.293815][T22597] team0: Port device batadv0 removed [ 1037.330378][T22604] netlink: 'syz.1.5714': attribute type 10 has an invalid length. [ 1037.610503][T22605] netlink: 'syz.0.5713': attribute type 10 has an invalid length. [ 1037.626309][T22605] team0: Device hsr_slave_0 failed to register rx_handler [ 1037.747467][T22615] FAULT_INJECTION: forcing a failure. [ 1037.747467][T22615] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.760731][T22615] CPU: 0 PID: 22615 Comm: syz.1.5717 Not tainted syzkaller #0 [ 1037.768240][T22615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1037.778346][T22615] Call Trace: [ 1037.781665][T22615] [ 1037.784637][T22615] dump_stack_lvl+0x18c/0x250 [ 1037.789381][T22615] ? show_regs_print_info+0x20/0x20 [ 1037.794630][T22615] ? load_image+0x420/0x420 [ 1037.799200][T22615] should_fail_ex+0x394/0x4c0 [ 1037.803951][T22615] should_failslab+0x9/0x20 [ 1037.808509][T22615] slab_pre_alloc_hook+0x59/0x300 [ 1037.813592][T22615] kmem_cache_alloc+0x5a/0x2c0 [ 1037.818406][T22615] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1037.823843][T22615] radix_tree_node_alloc+0x7e/0x3a0 [ 1037.829091][T22615] ? is_vmalloc_or_module_addr+0xd/0x50 [ 1037.834693][T22615] idr_get_free+0x28f/0xa10 [ 1037.839265][T22615] idr_alloc_cyclic+0x28a/0x610 [ 1037.844173][T22615] ? idr_alloc+0x2e0/0x2e0 [ 1037.848635][T22615] ? do_raw_spin_lock+0x11f/0x2b0 [ 1037.853734][T22615] ? bpf_map_alloc_id+0x21/0xd0 [ 1037.858636][T22615] bpf_map_alloc_id+0x40/0xd0 [ 1037.863362][T22615] map_create+0xe24/0x12f0 [ 1037.867833][T22615] __sys_bpf+0x651/0x890 [ 1037.872135][T22615] ? bpf_link_show_fdinfo+0x560/0x560 [ 1037.877576][T22615] ? lock_chain_count+0x20/0x20 [ 1037.882491][T22615] __x64_sys_bpf+0x7c/0x90 [ 1037.886973][T22615] do_syscall_64+0x55/0xb0 [ 1037.891434][T22615] ? clear_bhb_loop+0x40/0x90 [ 1037.896167][T22615] ? clear_bhb_loop+0x40/0x90 [ 1037.900899][T22615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1037.906848][T22615] RIP: 0033:0x7feb0459e159 [ 1037.911306][T22615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.930954][T22615] RSP: 002b:00007feb054be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1037.939415][T22615] RAX: ffffffffffffffda RBX: 00007feb04825fa0 RCX: 00007feb0459e159 [ 1037.947435][T22615] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000000 [ 1037.955447][T22615] RBP: 00007feb054be090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.963454][T22615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1037.971467][T22615] R13: 00007feb04826038 R14: 00007feb04825fa0 R15: 00007ffcca08bc08 [ 1037.979520][T22615] [ 1038.834378][T22635] sctp: [Deprecated]: syz.1.5726 (pid 22635) Use of int in maxseg socket option. [ 1038.834378][T22635] Use struct sctp_assoc_value instead [ 1038.957272][T22639] netlink: 'syz.3.5727': attribute type 10 has an invalid length. [ 1040.528522][T22666] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.5737'. [ 1040.603046][T22675] FAULT_INJECTION: forcing a failure. [ 1040.603046][T22675] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.675814][T22675] CPU: 0 PID: 22675 Comm: syz.0.5739 Not tainted syzkaller #0 [ 1040.683373][T22675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1040.693492][T22675] Call Trace: [ 1040.696822][T22675] [ 1040.699801][T22675] dump_stack_lvl+0x18c/0x250 [ 1040.704549][T22675] ? sctp_sendmsg+0x1519/0x27b0 [ 1040.709472][T22675] ? ___sys_sendmsg+0x2a6/0x360 [ 1040.714384][T22675] ? show_regs_print_info+0x20/0x20 [ 1040.719648][T22675] ? load_image+0x420/0x420 [ 1040.724255][T22675] should_fail_ex+0x394/0x4c0 [ 1040.729004][T22675] should_failslab+0x9/0x20 [ 1040.733570][T22675] slab_pre_alloc_hook+0x59/0x300 [ 1040.738649][T22675] ? sctp_add_bind_addr+0x8c/0x360 [ 1040.743803][T22675] __kmem_cache_alloc_node+0x53/0x250 [ 1040.749264][T22675] ? sctp_add_bind_addr+0x8c/0x360 [ 1040.754430][T22675] kmalloc_trace+0x2a/0xe0 [ 1040.758906][T22675] sctp_add_bind_addr+0x8c/0x360 [ 1040.763890][T22675] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1040.769563][T22675] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1040.775335][T22675] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1040.781460][T22675] ? sctp_v6_is_any+0x64/0x70 [ 1040.786175][T22675] ? sctp_copy_one_addr+0x8c/0x350 [ 1040.791373][T22675] sctp_bind_addr_copy+0xb3/0x3c0 [ 1040.796464][T22675] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1040.802830][T22675] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1040.808161][T22675] ? __sctp_connect+0xd80/0xd80 [ 1040.813061][T22675] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1040.818474][T22675] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1040.824054][T22675] ? security_sctp_bind_connect+0x89/0xb0 [ 1040.829808][T22675] sctp_sendmsg+0x1519/0x27b0 [ 1040.834566][T22675] ? sctp_getsockopt+0xb60/0xb60 [ 1040.839562][T22675] ? aa_af_perm+0x330/0x330 [ 1040.844122][T22675] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1040.850581][T22675] ? sock_rps_record_flow+0x19/0x3f0 [ 1040.855907][T22675] ? inet_sendmsg+0xce/0x2a0 [ 1040.860541][T22675] ? inet_send_prepare+0x250/0x250 [ 1040.865715][T22675] ____sys_sendmsg+0x61b/0x980 [ 1040.870540][T22675] ? __asan_memset+0x22/0x40 [ 1040.875252][T22675] ? __sys_sendmsg_sock+0x30/0x30 [ 1040.880330][T22675] ? __import_iovec+0x5f2/0x850 [ 1040.885228][T22675] ? import_iovec+0x73/0xa0 [ 1040.889782][T22675] ___sys_sendmsg+0x2a6/0x360 [ 1040.894497][T22675] ? __sys_sendmsg+0x2b0/0x2b0 [ 1040.899307][T22675] ? trace_call_bpf+0xc3/0x6c0 [ 1040.904118][T22675] __se_sys_sendmsg+0x1d0/0x2c0 [ 1040.909000][T22675] ? __x64_sys_sendmsg+0x80/0x80 [ 1040.913981][T22675] ? lockdep_hardirqs_on+0x98/0x150 [ 1040.919223][T22675] do_syscall_64+0x55/0xb0 [ 1040.923672][T22675] ? clear_bhb_loop+0x40/0x90 [ 1040.928466][T22675] ? clear_bhb_loop+0x40/0x90 [ 1040.933181][T22675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1040.939112][T22675] RIP: 0033:0x7f158a19e159 [ 1040.943553][T22675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.963192][T22675] RSP: 002b:00007f158b023028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1040.971634][T22675] RAX: ffffffffffffffda RBX: 00007f158a425fa0 RCX: 00007f158a19e159 [ 1040.979637][T22675] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 1040.987635][T22675] RBP: 00007f158b023090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.995716][T22675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1041.003713][T22675] R13: 00007f158a426038 R14: 00007f158a425fa0 R15: 00007ffc67c7fc58 [ 1041.011729][T22675] [ 1041.399246][T22680] netlink: 'syz.0.5741': attribute type 10 has an invalid length. [ 1041.418302][T22680] team0: Device hsr_slave_0 failed to register rx_handler [ 1041.970770][T22701] netlink: 'syz.3.5748': attribute type 30 has an invalid length. [ 1042.360655][T22719] netlink: 'syz.0.5755': attribute type 10 has an invalid length. [ 1042.380308][T22719] team0: Device hsr_slave_0 failed to register rx_handler [ 1042.910249][T22731] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5756'. [ 1050.818282][T22740] FAULT_INJECTION: forcing a failure. [ 1050.818282][T22740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1050.854705][T22740] CPU: 1 PID: 22740 Comm: syz.0.5760 Not tainted syzkaller #0 [ 1050.862283][T22740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1050.872370][T22740] Call Trace: [ 1050.875682][T22740] [ 1050.878641][T22740] dump_stack_lvl+0x18c/0x250 [ 1050.883360][T22740] ? show_regs_print_info+0x20/0x20 [ 1050.888644][T22740] ? load_image+0x420/0x420 [ 1050.893182][T22740] ? __might_fault+0xaa/0x120 [ 1050.897902][T22740] ? __lock_acquire+0x7d80/0x7d80 [ 1050.902962][T22740] should_fail_ex+0x394/0x4c0 [ 1050.907674][T22740] _copy_from_iter+0x1cd/0x1290 [ 1050.912568][T22740] ? copyout_mc+0x70/0x70 [ 1050.916935][T22740] ? __virt_addr_valid+0x10c/0x380 [ 1050.922080][T22740] ? __virt_addr_valid+0x10c/0x380 [ 1050.927224][T22740] ? __virt_addr_valid+0x10c/0x380 [ 1050.932381][T22740] ? __check_object_size+0x4fc/0xa40 [ 1050.937724][T22740] sctp_user_addto_chunk+0x84/0x220 [ 1050.942960][T22740] sctp_datamsg_from_user+0x74d/0xee0 [ 1050.948373][T22740] sctp_sendmsg_to_asoc+0xfdd/0x17f0 [ 1050.953697][T22740] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1050.959542][T22740] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 1050.965378][T22740] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1050.970779][T22740] ? _local_bh_enable+0xa0/0xa0 [ 1050.975661][T22740] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1050.981595][T22740] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1050.987437][T22740] ? sctp_sendmsg_check_sflags+0x18d/0x2d0 [ 1050.993299][T22740] sctp_sendmsg+0x1afa/0x27b0 [ 1050.998035][T22740] ? sctp_getsockopt+0xb60/0xb60 [ 1051.003026][T22740] ? aa_af_perm+0x330/0x330 [ 1051.007577][T22740] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1051.014031][T22740] ? sock_rps_record_flow+0x19/0x3f0 [ 1051.019345][T22740] ? inet_sendmsg+0x7e/0x2a0 [ 1051.023960][T22740] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1051.029277][T22740] ? inet_send_prepare+0x250/0x250 [ 1051.034425][T22740] ____sys_sendmsg+0x61b/0x980 [ 1051.039229][T22740] ? __asan_memset+0x22/0x40 [ 1051.043851][T22740] ? __sys_sendmsg_sock+0x30/0x30 [ 1051.048987][T22740] ? __import_iovec+0x5f2/0x850 [ 1051.053896][T22740] ? import_iovec+0x73/0xa0 [ 1051.058465][T22740] ___sys_sendmsg+0x2a6/0x360 [ 1051.063185][T22740] ? get_pid_task+0x20/0x1e0 [ 1051.067816][T22740] ? __sys_sendmsg+0x2b0/0x2b0 [ 1051.072647][T22740] ? __lock_acquire+0x7d80/0x7d80 [ 1051.077721][T22740] __se_sys_sendmsg+0x1d0/0x2c0 [ 1051.082623][T22740] ? __x64_sys_sendmsg+0x80/0x80 [ 1051.087604][T22740] ? lockdep_hardirqs_on+0x98/0x150 [ 1051.092839][T22740] do_syscall_64+0x55/0xb0 [ 1051.097289][T22740] ? clear_bhb_loop+0x40/0x90 [ 1051.101997][T22740] ? clear_bhb_loop+0x40/0x90 [ 1051.106709][T22740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1051.112645][T22740] RIP: 0033:0x7f158a19e159 [ 1051.117089][T22740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.136769][T22740] RSP: 002b:00007f158b023028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1051.145319][T22740] RAX: ffffffffffffffda RBX: 00007f158a425fa0 RCX: 00007f158a19e159 [ 1051.153381][T22740] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 1051.161397][T22740] RBP: 00007f158b023090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.169408][T22740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.177418][T22740] R13: 00007f158a426038 R14: 00007f158a425fa0 R15: 00007ffc67c7fc58 [ 1051.185462][T22740] [ 1051.234286][T22743] netlink: 'syz.2.5761': attribute type 28 has an invalid length. [ 1051.242607][T22743] netlink: 'syz.2.5761': attribute type 29 has an invalid length. [ 1051.251724][T22743] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5761'. [ 1051.647505][T22757] netlink: 'syz.2.5765': attribute type 10 has an invalid length. [ 1051.701730][T22757] team0: Device hsr_slave_0 failed to register rx_handler [ 1052.519163][T22767] FAULT_INJECTION: forcing a failure. [ 1052.519163][T22767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.648985][T22767] CPU: 0 PID: 22767 Comm: syz.3.5768 Not tainted syzkaller #0 [ 1052.656547][T22767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1052.666650][T22767] Call Trace: [ 1052.669980][T22767] [ 1052.672951][T22767] dump_stack_lvl+0x18c/0x250 [ 1052.677718][T22767] ? show_regs_print_info+0x20/0x20 [ 1052.682997][T22767] ? load_image+0x420/0x420 [ 1052.687553][T22767] ? __might_fault+0xaa/0x120 [ 1052.692285][T22767] ? __lock_acquire+0x7d80/0x7d80 [ 1052.697375][T22767] should_fail_ex+0x394/0x4c0 [ 1052.702117][T22767] _copy_from_user+0x2f/0xe0 [ 1052.706767][T22767] __sys_bpf+0x23e/0x890 [ 1052.711108][T22767] ? bpf_link_show_fdinfo+0x560/0x560 [ 1052.716554][T22767] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1052.722801][T22767] __x64_sys_bpf+0x7c/0x90 [ 1052.727268][T22767] do_syscall_64+0x55/0xb0 [ 1052.731745][T22767] ? clear_bhb_loop+0x40/0x90 [ 1052.736488][T22767] ? clear_bhb_loop+0x40/0x90 [ 1052.741226][T22767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1052.747175][T22767] RIP: 0033:0x7efe3539e159 [ 1052.751640][T22767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.771298][T22767] RSP: 002b:00007efe361e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1052.779758][T22767] RAX: ffffffffffffffda RBX: 00007efe35625fa0 RCX: 00007efe3539e159 [ 1052.787797][T22767] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000001 [ 1052.795811][T22767] RBP: 00007efe361e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.803887][T22767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.811882][T22767] R13: 00007efe35626038 R14: 00007efe35625fa0 R15: 00007fff696d9a48 [ 1052.819899][T22767] [ 1053.176563][T22784] netlink: 'syz.2.5772': attribute type 28 has an invalid length. [ 1053.863758][T22793] netlink: 'syz.2.5777': attribute type 10 has an invalid length. [ 1053.890741][T22793] team0: Device hsr_slave_0 failed to register rx_handler [ 1054.437831][T22804] netlink: 'syz.3.5781': attribute type 5 has an invalid length. [ 1054.551628][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.565718][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.597390][T22804] netlink: 'syz.3.5781': attribute type 46 has an invalid length. [ 1054.718056][T22809] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1054.825323][T22811] netlink: 'syz.2.5784': attribute type 5 has an invalid length. [ 1055.687822][T22825] netlink: 'syz.0.5790': attribute type 10 has an invalid length. [ 1055.953710][T22825] team0: Device hsr_slave_0 failed to register rx_handler [ 1059.038115][T22854] FAULT_INJECTION: forcing a failure. [ 1059.038115][T22854] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.073325][T22856] FAULT_INJECTION: forcing a failure. [ 1059.073325][T22856] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.086104][T22856] CPU: 1 PID: 22856 Comm: syz.1.5798 Not tainted syzkaller #0 [ 1059.093700][T22856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1059.103812][T22856] Call Trace: [ 1059.107132][T22856] [ 1059.110103][T22856] dump_stack_lvl+0x18c/0x250 [ 1059.114833][T22856] ? show_regs_print_info+0x20/0x20 [ 1059.120094][T22856] ? load_image+0x420/0x420 [ 1059.124684][T22856] ? ip_tunnel_xmit+0x1d18/0x25b0 [ 1059.129787][T22856] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1059.135829][T22856] should_fail_ex+0x394/0x4c0 [ 1059.140585][T22856] should_failslab+0x9/0x20 [ 1059.145160][T22856] slab_pre_alloc_hook+0x59/0x300 [ 1059.150245][T22856] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1059.155669][T22856] kmem_cache_alloc+0x5a/0x2c0 [ 1059.160494][T22856] ? dst_alloc+0x105/0x170 [ 1059.164975][T22856] dst_alloc+0x105/0x170 [ 1059.169278][T22856] ip_route_output_key_hash_rcu+0x14a2/0x2350 [ 1059.175423][T22856] ? ip_route_output_key_hash+0x13d/0x330 [ 1059.181204][T22856] ip_route_output_key_hash+0x1f3/0x330 [ 1059.186801][T22856] ? ip_route_input_rcu+0x3120/0x3120 [ 1059.192250][T22856] ? __asan_memset+0x22/0x40 [ 1059.196898][T22856] ip_route_output_flow+0x2a/0x150 [ 1059.202068][T22856] ip_tunnel_xmit+0x9c2/0x25b0 [ 1059.206912][T22856] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 1059.211994][T22856] ? validate_xmit_xfrm+0xbb/0x1340 [ 1059.217253][T22856] ? skb_push+0x8e/0xe0 [ 1059.221468][T22856] ipgre_xmit+0x7eb/0xb70 [ 1059.225849][T22856] dev_hard_start_xmit+0x269/0x790 [ 1059.231063][T22856] __dev_queue_xmit+0x1be8/0x37e0 [ 1059.236152][T22856] ? __dev_queue_xmit+0x272/0x37e0 [ 1059.241340][T22856] ? netdev_core_pick_tx+0x370/0x370 [ 1059.246679][T22856] ? pskb_expand_head+0x17a/0x1150 [ 1059.251836][T22856] ? pskb_expand_head+0x17a/0x1150 [ 1059.256990][T22856] ? skb_release_data+0x1de/0x7f0 [ 1059.262195][T22856] ? __bpf_redirect+0x4d1/0xdf0 [ 1059.267089][T22856] __bpf_tx_skb+0x181/0x260 [ 1059.271651][T22856] bpf_clone_redirect+0x315/0x4a0 [ 1059.276761][T22856] bpf_prog_973cd02a7a0e8181+0x5e/0x63 [ 1059.282278][T22856] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1059.288314][T22856] ? preempt_schedule+0xc0/0xd0 [ 1059.293221][T22856] ? bpf_test_run+0x174/0x870 [ 1059.297979][T22856] ? preempt_schedule_common+0x82/0xc0 [ 1059.303509][T22856] ? schedule_preempt_disabled+0x20/0x20 [ 1059.309208][T22856] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1059.315231][T22856] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 1059.320590][T22856] ? lock_chain_count+0x20/0x20 [ 1059.325500][T22856] ? preempt_schedule_thunk+0x1a/0x30 [ 1059.330935][T22856] ? __local_bh_disable_ip+0x108/0x1a0 [ 1059.336446][T22856] ? __cant_sleep+0x220/0x220 [ 1059.341183][T22856] ? __local_bh_enable_ip+0x14b/0x1c0 [ 1059.346612][T22856] ? _local_bh_enable+0xa0/0xa0 [ 1059.351536][T22856] ? bpf_test_timer_continue+0x135/0x380 [ 1059.357277][T22856] ? bpf_test_run+0x174/0x870 [ 1059.362015][T22856] bpf_test_run+0x2df/0x870 [ 1059.366597][T22856] ? bpf_test_run+0x174/0x870 [ 1059.371427][T22856] ? dst_hold+0x70/0x70 [ 1059.375646][T22856] ? eth_get_headlen+0x210/0x210 [ 1059.380657][T22856] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 1059.386103][T22856] ? cpu_online+0x60/0x60 [ 1059.390486][T22856] bpf_prog_test_run+0x31f/0x390 [ 1059.395480][T22856] __sys_bpf+0x49d/0x890 [ 1059.399784][T22856] ? bpf_link_show_fdinfo+0x560/0x560 [ 1059.405230][T22856] ? lock_chain_count+0x20/0x20 [ 1059.410152][T22856] __x64_sys_bpf+0x7c/0x90 [ 1059.414620][T22856] do_syscall_64+0x55/0xb0 [ 1059.419085][T22856] ? clear_bhb_loop+0x40/0x90 [ 1059.423826][T22856] ? clear_bhb_loop+0x40/0x90 [ 1059.428553][T22856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1059.434501][T22856] RIP: 0033:0x7feb0459e159 [ 1059.438982][T22856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.458641][T22856] RSP: 002b:00007feb054be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1059.467106][T22856] RAX: ffffffffffffffda RBX: 00007feb04825fa0 RCX: 00007feb0459e159 [ 1059.475134][T22856] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1059.483160][T22856] RBP: 00007feb054be090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.491201][T22856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1059.499212][T22856] R13: 00007feb04826038 R14: 00007feb04825fa0 R15: 00007ffcca08bc08 [ 1059.507265][T22856] [ 1059.510316][T22854] CPU: 0 PID: 22854 Comm: syz.3.5796 Not tainted syzkaller #0 [ 1059.517829][T22854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1059.527914][T22854] Call Trace: [ 1059.531214][T22854] [ 1059.534217][T22854] dump_stack_lvl+0x18c/0x250 [ 1059.538930][T22854] ? sctp_sendmsg+0x1519/0x27b0 [ 1059.543832][T22854] ? ___sys_sendmsg+0x2a6/0x360 [ 1059.548715][T22854] ? show_regs_print_info+0x20/0x20 [ 1059.553946][T22854] ? load_image+0x420/0x420 [ 1059.558493][T22854] should_fail_ex+0x394/0x4c0 [ 1059.563231][T22854] should_failslab+0x9/0x20 [ 1059.567767][T22854] slab_pre_alloc_hook+0x59/0x300 [ 1059.572857][T22854] ? sctp_add_bind_addr+0x8c/0x360 [ 1059.578002][T22854] __kmem_cache_alloc_node+0x53/0x250 [ 1059.583405][T22854] ? sctp_add_bind_addr+0x8c/0x360 [ 1059.588640][T22854] kmalloc_trace+0x2a/0xe0 [ 1059.593100][T22854] sctp_add_bind_addr+0x8c/0x360 [ 1059.598073][T22854] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1059.603745][T22854] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1059.609496][T22854] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1059.615614][T22854] ? sctp_v6_is_any+0x64/0x70 [ 1059.620356][T22854] ? sctp_copy_one_addr+0x8c/0x350 [ 1059.625507][T22854] sctp_bind_addr_copy+0xb3/0x3c0 [ 1059.630662][T22854] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1059.637016][T22854] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1059.642330][T22854] ? __sctp_connect+0xd80/0xd80 [ 1059.647291][T22854] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1059.652697][T22854] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1059.658281][T22854] ? security_sctp_bind_connect+0x89/0xb0 [ 1059.664055][T22854] sctp_sendmsg+0x1519/0x27b0 [ 1059.668777][T22854] ? sctp_getsockopt+0xb60/0xb60 [ 1059.673759][T22854] ? aa_af_perm+0x330/0x330 [ 1059.678301][T22854] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1059.684745][T22854] ? sock_rps_record_flow+0x19/0x3f0 [ 1059.690058][T22854] ? inet_sendmsg+0xce/0x2a0 [ 1059.694672][T22854] ? inet_send_prepare+0x250/0x250 [ 1059.699900][T22854] ____sys_sendmsg+0x61b/0x980 [ 1059.704731][T22854] ? __sys_sendmsg_sock+0x30/0x30 [ 1059.709789][T22854] ? __import_iovec+0x5f2/0x850 [ 1059.714682][T22854] ? import_iovec+0x73/0xa0 [ 1059.719227][T22854] ___sys_sendmsg+0x2a6/0x360 [ 1059.723935][T22854] ? get_pid_task+0x20/0x1e0 [ 1059.728561][T22854] ? __sys_sendmsg+0x2b0/0x2b0 [ 1059.733377][T22854] ? __lock_acquire+0x7d80/0x7d80 [ 1059.738449][T22854] __se_sys_sendmsg+0x1d0/0x2c0 [ 1059.743341][T22854] ? __x64_sys_sendmsg+0x80/0x80 [ 1059.748336][T22854] ? lockdep_hardirqs_on+0x98/0x150 [ 1059.753564][T22854] do_syscall_64+0x55/0xb0 [ 1059.758024][T22854] ? clear_bhb_loop+0x40/0x90 [ 1059.762732][T22854] ? clear_bhb_loop+0x40/0x90 [ 1059.767443][T22854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1059.773370][T22854] RIP: 0033:0x7efe3539e159 [ 1059.777811][T22854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.797465][T22854] RSP: 002b:00007efe361e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1059.805914][T22854] RAX: ffffffffffffffda RBX: 00007efe35625fa0 RCX: 00007efe3539e159 [ 1059.813910][T22854] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 1059.821902][T22854] RBP: 00007efe361e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.829892][T22854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1059.837890][T22854] R13: 00007efe35626038 R14: 00007efe35625fa0 R15: 00007fff696d9a48 [ 1059.845896][T22854] [ 1060.347795][T22868] netlink: 'syz.2.5802': attribute type 10 has an invalid length. [ 1060.423983][T22868] team0: Device hsr_slave_0 failed to register rx_handler [ 1061.101434][T22894] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.5812'. [ 1062.271931][T22913] netlink: 'syz.3.5815': attribute type 10 has an invalid length. [ 1062.842498][T22929] FAULT_INJECTION: forcing a failure. [ 1062.842498][T22929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1062.855867][T22929] CPU: 1 PID: 22929 Comm: syz.2.5820 Not tainted syzkaller #0 [ 1062.863377][T22929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1062.873487][T22929] Call Trace: [ 1062.876806][T22929] [ 1062.879781][T22929] dump_stack_lvl+0x18c/0x250 [ 1062.884524][T22929] ? show_regs_print_info+0x20/0x20 [ 1062.889799][T22929] ? load_image+0x420/0x420 [ 1062.894352][T22929] ? __lock_acquire+0x7d80/0x7d80 [ 1062.899428][T22929] ? snprintf+0xe9/0x140 [ 1062.903730][T22929] should_fail_ex+0x394/0x4c0 [ 1062.908471][T22929] _copy_to_user+0x2f/0xa0 [ 1062.912935][T22929] simple_read_from_buffer+0xe7/0x150 [ 1062.918362][T22929] proc_fail_nth_read+0x1e8/0x260 [ 1062.923538][T22929] ? proc_fault_inject_write+0x360/0x360 [ 1062.929264][T22929] ? fsnotify_perm+0x271/0x5e0 [ 1062.934089][T22929] ? proc_fault_inject_write+0x360/0x360 [ 1062.939785][T22929] vfs_read+0x298/0x990 [ 1062.944004][T22929] ? kernel_read+0x1e0/0x1e0 [ 1062.948668][T22929] ? __fget_files+0x28/0x460 [ 1062.953324][T22929] ? __fget_files+0x3fc/0x460 [ 1062.958073][T22929] ? __fdget_pos+0x2a3/0x330 [ 1062.962721][T22929] ? ksys_read+0x74/0x260 [ 1062.967115][T22929] ksys_read+0x151/0x260 [ 1062.971416][T22929] ? vfs_write+0x9a0/0x9a0 [ 1062.975889][T22929] ? lockdep_hardirqs_on+0x98/0x150 [ 1062.981139][T22929] do_syscall_64+0x55/0xb0 [ 1062.985607][T22929] ? clear_bhb_loop+0x40/0x90 [ 1062.990345][T22929] ? clear_bhb_loop+0x40/0x90 [ 1062.995077][T22929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1063.001024][T22929] RIP: 0033:0x7fe44ef5e98e [ 1063.005485][T22929] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1063.025147][T22929] RSP: 002b:00007fe44feb6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1063.033629][T22929] RAX: ffffffffffffffda RBX: 00007fe44feb76c0 RCX: 00007fe44ef5e98e [ 1063.041659][T22929] RDX: 000000000000000f RSI: 00007fe44feb70a0 RDI: 0000000000000003 [ 1063.049681][T22929] RBP: 00007fe44feb7090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.057701][T22929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1063.065713][T22929] R13: 00007fe44f226038 R14: 00007fe44f225fa0 R15: 00007ffc360fe678 [ 1063.073741][T22929] [ 1063.158583][T22918] syzkaller0: entered promiscuous mode [ 1065.210135][T22940] netlink: 'syz.2.5824': attribute type 10 has an invalid length. [ 1065.229583][T22940] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5824'. [ 1065.519050][T22951] netlink: 'syz.1.5827': attribute type 10 has an invalid length. [ 1065.534067][T22951] team0: Device hsr_slave_0 failed to register rx_handler [ 1065.734999][T22960] netlink: 'syz.3.5828': attribute type 153 has an invalid length. [ 1065.780933][T22960] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.5828'. [ 1066.602337][T22974] netlink: 'syz.1.5835': attribute type 33 has an invalid length. [ 1067.194478][T22984] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5838'. [ 1067.506524][T22991] netlink: 'syz.3.5839': attribute type 10 has an invalid length. [ 1067.569717][T22993] FAULT_INJECTION: forcing a failure. [ 1067.569717][T22993] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.582487][T22993] CPU: 0 PID: 22993 Comm: syz.1.5841 Not tainted syzkaller #0 [ 1067.590019][T22993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1067.600117][T22993] Call Trace: [ 1067.603446][T22993] [ 1067.606432][T22993] dump_stack_lvl+0x18c/0x250 [ 1067.611168][T22993] ? show_regs_print_info+0x20/0x20 [ 1067.616436][T22993] ? load_image+0x420/0x420 [ 1067.621005][T22993] should_fail_ex+0x394/0x4c0 [ 1067.625745][T22993] should_failslab+0x9/0x20 [ 1067.630305][T22993] slab_pre_alloc_hook+0x59/0x300 [ 1067.635401][T22993] kmem_cache_alloc+0x5a/0x2c0 [ 1067.640216][T22993] ? skb_clone+0x1eb/0x370 [ 1067.644724][T22993] skb_clone+0x1eb/0x370 [ 1067.649021][T22993] bpf_clone_redirect+0x16d/0x4a0 [ 1067.654121][T22993] bpf_prog_208b094576c80b22+0x5e/0x63 [ 1067.659628][T22993] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1067.665502][T22993] ? perf_trace_preemptirq_template+0xac/0x330 [ 1067.671720][T22993] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1067.677753][T22993] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 1067.683110][T22993] ? lock_chain_count+0x20/0x20 [ 1067.688012][T22993] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1067.694314][T22993] ? __local_bh_disable_ip+0x108/0x1a0 [ 1067.699830][T22993] ? __cant_sleep+0x220/0x220 [ 1067.704548][T22993] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1067.709969][T22993] ? _local_bh_enable+0xa0/0xa0 [ 1067.714891][T22993] ? bpf_test_timer_continue+0x135/0x380 [ 1067.720583][T22993] ? bpf_test_run+0x174/0x870 [ 1067.725323][T22993] bpf_test_run+0x2df/0x870 [ 1067.729912][T22993] ? bpf_test_run+0x174/0x870 [ 1067.734659][T22993] ? dst_hold+0x70/0x70 [ 1067.738893][T22993] ? eth_get_headlen+0x210/0x210 [ 1067.743895][T22993] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 1067.749360][T22993] ? cpu_online+0x60/0x60 [ 1067.753755][T22993] bpf_prog_test_run+0x31f/0x390 [ 1067.758745][T22993] __sys_bpf+0x49d/0x890 [ 1067.763055][T22993] ? bpf_link_show_fdinfo+0x560/0x560 [ 1067.768515][T22993] ? lock_chain_count+0x20/0x20 [ 1067.773428][T22993] __x64_sys_bpf+0x7c/0x90 [ 1067.777889][T22993] do_syscall_64+0x55/0xb0 [ 1067.782354][T22993] ? clear_bhb_loop+0x40/0x90 [ 1067.787087][T22993] ? clear_bhb_loop+0x40/0x90 [ 1067.791825][T22993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1067.797772][T22993] RIP: 0033:0x7feb0459e159 [ 1067.802230][T22993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.821902][T22993] RSP: 002b:00007feb054be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1067.830375][T22993] RAX: ffffffffffffffda RBX: 00007feb04825fa0 RCX: 00007feb0459e159 [ 1067.838401][T22993] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1067.846450][T22993] RBP: 00007feb054be090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.854465][T22993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1067.862479][T22993] R13: 00007feb04826038 R14: 00007feb04825fa0 R15: 00007ffcca08bc08 [ 1067.870518][T22993] [ 1068.123060][T23001] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5844'. [ 1068.599176][T23015] netlink: 'syz.0.5847': attribute type 25 has an invalid length. [ 1068.632164][T23015] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5847'. [ 1068.733850][T23021] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5849'. [ 1068.739013][T23022] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5849'. [ 1068.755890][T23021] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5849'. [ 1068.808750][T23018] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5849'. [ 1068.840944][T23017] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5849'. [ 1068.873209][T23028] netlink: 'syz.2.5852': attribute type 41 has an invalid length. [ 1068.887763][T23028] netlink: 'syz.2.5852': attribute type 41 has an invalid length. [ 1068.935148][T23028] netlink: 'syz.2.5852': attribute type 12 has an invalid length. [ 1068.943420][T23028] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.5852'. [ 1069.187200][T23034] netlink: 'syz.1.5854': attribute type 10 has an invalid length. [ 1069.204608][T23034] team0: Device hsr_slave_0 failed to register rx_handler [ 1069.359686][T23041] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1069.366348][T23041] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1070.727795][T23072] netlink: 'syz.2.5866': attribute type 10 has an invalid length. [ 1070.737278][T23072] team0: Device hsr_slave_0 failed to register rx_handler [ 1072.153989][T23083] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5871'. [ 1072.649274][T23089] netlink: 'syz.2.5873': attribute type 10 has an invalid length. [ 1072.659662][T23089] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5873'. [ 1072.694156][T23089] team0: entered promiscuous mode [ 1072.711640][T23089] team_slave_0: entered promiscuous mode [ 1072.746165][T23089] team_slave_1: entered promiscuous mode [ 1072.776291][T23089] bond0: entered promiscuous mode [ 1072.781442][T23089] bond_slave_0: entered promiscuous mode [ 1072.906253][T23089] bond_slave_1: entered promiscuous mode [ 1072.987352][T23089] bridge0: entered promiscuous mode [ 1073.088663][T23089] team0: entered allmulticast mode [ 1073.093995][T23089] team_slave_0: entered allmulticast mode [ 1073.165987][T23089] team_slave_1: entered allmulticast mode [ 1073.171887][T23089] bond0: entered allmulticast mode [ 1073.205894][T23089] bond_slave_0: entered allmulticast mode [ 1073.232431][T23089] bond_slave_1: entered allmulticast mode [ 1073.255783][T23089] bridge0: entered allmulticast mode [ 1073.344114][T23089] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.373005][T23089] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1074.803300][T23101] netlink: 'syz.2.5878': attribute type 10 has an invalid length. [ 1074.846657][T23101] team0: Device hsr_slave_0 failed to register rx_handler [ 1075.443743][T23105] netlink: 'syz.0.5879': attribute type 21 has an invalid length. [ 1075.756207][T23111] netlink: 'syz.2.5881': attribute type 39 has an invalid length. [ 1076.581916][T23125] netlink: 'syz.2.5885': attribute type 13 has an invalid length. [ 1076.643266][T23125] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5885'. [ 1076.820639][T23125] erspan0: refused to change device tx_queue_len [ 1076.925859][T23125] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1077.057573][T23123] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.5885'. [ 1077.716120][T23134] FAULT_INJECTION: forcing a failure. [ 1077.716120][T23134] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.747429][T23134] CPU: 1 PID: 23134 Comm: syz.0.5888 Not tainted syzkaller #0 [ 1077.755108][T23134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1077.765256][T23134] Call Trace: [ 1077.768599][T23134] [ 1077.771603][T23134] dump_stack_lvl+0x18c/0x250 [ 1077.776384][T23134] ? show_regs_print_info+0x20/0x20 [ 1077.781675][T23134] ? load_image+0x420/0x420 [ 1077.786280][T23134] ? __might_sleep+0xe0/0xe0 [ 1077.790962][T23134] ? __lock_acquire+0x7d80/0x7d80 [ 1077.796090][T23134] should_fail_ex+0x394/0x4c0 [ 1077.800879][T23134] should_failslab+0x9/0x20 [ 1077.805467][T23134] slab_pre_alloc_hook+0x59/0x300 [ 1077.810596][T23134] ? __lock_acquire+0x7d80/0x7d80 [ 1077.815698][T23134] ? kvmalloc_node+0x70/0x180 [ 1077.820462][T23134] ? kvmalloc_node+0x70/0x180 [ 1077.822658][T23136] netlink: 'syz.3.5889': attribute type 10 has an invalid length. [ 1077.825198][T23134] __kmem_cache_alloc_node+0x53/0x250 [ 1077.825242][T23134] ? __schedule_delayed_monitor_work+0x200/0x200 [ 1077.825299][T23134] ? kvmalloc_node+0x70/0x180 [ 1077.825336][T23134] __kmalloc_node+0xa6/0x240 [ 1077.825401][T23134] kvmalloc_node+0x70/0x180 [ 1077.825450][T23134] bpf_test_run_xdp_live+0x1c2/0x1b30 [ 1077.825522][T23134] ? 0xffffffffa0004740 [ 1077.825557][T23134] ? 0xffffffffa0004740 [ 1077.825602][T23134] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 1077.825667][T23134] ? xdp_convert_md_to_buff+0x330/0x330 [ 1077.825825][T23134] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1077.825877][T23134] ? _copy_from_user+0xa5/0xe0 [ 1077.825931][T23134] ? bpf_test_init+0x119/0x140 [ 1077.825967][T23134] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1077.826016][T23134] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 1077.826057][T23134] ? __lock_acquire+0x7d80/0x7d80 [ 1077.826137][T23134] ? dev_put+0x80/0x80 [ 1077.826222][T23134] ? dev_put+0x80/0x80 [ 1077.826264][T23134] bpf_prog_test_run+0x31f/0x390 [ 1077.826309][T23134] __sys_bpf+0x49d/0x890 [ 1077.826353][T23134] ? bpf_link_show_fdinfo+0x560/0x560 [ 1077.826450][T23134] ? lock_chain_count+0x20/0x20 [ 1077.826517][T23134] __x64_sys_bpf+0x7c/0x90 [ 1077.826555][T23134] do_syscall_64+0x55/0xb0 [ 1077.826587][T23134] ? clear_bhb_loop+0x40/0x90 [ 1077.826622][T23134] ? clear_bhb_loop+0x40/0x90 [ 1077.826665][T23134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1077.826699][T23134] RIP: 0033:0x7f158a19e159 [ 1077.826728][T23134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.826752][T23134] RSP: 002b:00007f158b023028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1077.826786][T23134] RAX: ffffffffffffffda RBX: 00007f158a425fa0 RCX: 00007f158a19e159 [ 1077.826807][T23134] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1077.826827][T23134] RBP: 00007f158b023090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.826846][T23134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1077.826864][T23134] R13: 00007f158a426038 R14: 00007f158a425fa0 R15: 00007ffc67c7fc58 [ 1077.826941][T23134] [ 1079.112662][T23152] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5895'. [ 1079.369364][T23150] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5892'. [ 1081.499254][T23167] syzkaller0: entered promiscuous mode [ 1081.504846][T23167] syzkaller0: entered allmulticast mode [ 1082.059068][T23182] netlink: 'syz.3.5904': attribute type 3 has an invalid length. [ 1082.078181][T23182] netlink: 157696 bytes leftover after parsing attributes in process `syz.3.5904'. [ 1085.439483][T23171] netlink: 'syz.0.5901': attribute type 10 has an invalid length. [ 1085.448192][T23171] team0: Device hsr_slave_0 failed to register rx_handler [ 1085.465081][T23178] netlink: 'syz.2.5903': attribute type 25 has an invalid length. [ 1085.473285][T23178] netlink: 'syz.2.5903': attribute type 28 has an invalid length. [ 1085.696257][T23188] delete_channel: no stack [ 1085.868516][T23195] netlink: 'syz.3.5907': attribute type 10 has an invalid length. [ 1085.906778][T23195] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5907'. [ 1086.168012][T23195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1086.231088][T23215] netlink: 'syz.1.5913': attribute type 10 has an invalid length. [ 1086.243828][T23215] team0: Device hsr_slave_0 failed to register rx_handler [ 1086.984258][T23245] netlink: 'syz.0.5925': attribute type 3 has an invalid length. [ 1086.993250][T23245] netlink: 'syz.0.5925': attribute type 16 has an invalid length. [ 1087.001703][T23245] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5925'. [ 1087.014790][T23245] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1087.020960][T23245] syzkaller1: Linktype set failed because interface is up [ 1087.593151][T23252] netlink: 'syz.0.5926': attribute type 10 has an invalid length. [ 1087.619296][T23252] team0: Device hsr_slave_0 failed to register rx_handler [ 1091.196784][T23282] delete_channel: no stack [ 1091.975956][T23304] delete_channel: no stack [ 1093.295985][T23320] netlink: 'syz.2.5948': attribute type 10 has an invalid length. [ 1094.121339][T23339] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5954'. [ 1094.152699][T23339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1094.361726][T23346] netlink: 'syz.0.5956': attribute type 2 has an invalid length. [ 1094.402949][T23349] FAULT_INJECTION: forcing a failure. [ 1094.402949][T23349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1094.462076][T23349] CPU: 1 PID: 23349 Comm: syz.3.5958 Not tainted syzkaller #0 [ 1094.469700][T23349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1094.479844][T23349] Call Trace: [ 1094.483226][T23349] [ 1094.486237][T23349] dump_stack_lvl+0x18c/0x250 [ 1094.491076][T23349] ? show_regs_print_info+0x20/0x20 [ 1094.496379][T23349] ? load_image+0x420/0x420 [ 1094.500996][T23349] ? __might_fault+0xaa/0x120 [ 1094.505770][T23349] ? __lock_acquire+0x7d80/0x7d80 [ 1094.510917][T23349] should_fail_ex+0x394/0x4c0 [ 1094.515724][T23349] _copy_from_user+0x2f/0xe0 [ 1094.520416][T23349] __sys_bpf+0x23e/0x890 [ 1094.524773][T23349] ? bpf_link_show_fdinfo+0x560/0x560 [ 1094.530393][T23349] ? lock_chain_count+0x20/0x20 [ 1094.535383][T23349] __x64_sys_bpf+0x7c/0x90 [ 1094.539915][T23349] do_syscall_64+0x55/0xb0 [ 1094.544697][T23349] ? clear_bhb_loop+0x40/0x90 [ 1094.549505][T23349] ? clear_bhb_loop+0x40/0x90 [ 1094.554298][T23349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1094.560307][T23349] RIP: 0033:0x7efe3539e159 [ 1094.564813][T23349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.584509][T23349] RSP: 002b:00007efe361e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1094.593004][T23349] RAX: ffffffffffffffda RBX: 00007efe35625fa0 RCX: 00007efe3539e159 [ 1094.601135][T23349] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 1094.609167][T23349] RBP: 00007efe361e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.617373][T23349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.625397][T23349] R13: 00007efe35626038 R14: 00007efe35625fa0 R15: 00007fff696d9a48 [ 1094.633452][T23349] [ 1095.640943][T23379] netlink: 'syz.0.5966': attribute type 10 has an invalid length. [ 1095.667924][T23379] team0: Device hsr_slave_0 failed to register rx_handler [ 1095.884292][T23376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1096.251579][T23392] netlink: 'syz.2.5970': attribute type 13 has an invalid length. [ 1096.270694][T23392] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5970'. [ 1096.295883][T23392] erspan0: refused to change device tx_queue_len [ 1096.586250][T23410] bridge0: port 4(ip6gretap0) entered blocking state [ 1096.601264][T23410] bridge0: port 4(ip6gretap0) entered disabled state [ 1096.609560][T23410] ip6gretap0: entered allmulticast mode [ 1096.623082][T23410] ip6gretap0: entered promiscuous mode [ 1096.632217][T23410] bridge0: port 4(ip6gretap0) entered blocking state [ 1096.639168][T23410] bridge0: port 4(ip6gretap0) entered forwarding state [ 1096.885500][T23420] : renamed from bond0 (while UP) [ 1096.895076][T23420] FAULT_INJECTION: forcing a failure. [ 1096.895076][T23420] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.908682][T23420] CPU: 1 PID: 23420 Comm: syz.0.5981 Not tainted syzkaller #0 [ 1096.916248][T23420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1096.926372][T23420] Call Trace: [ 1096.929706][T23420] [ 1096.932693][T23420] dump_stack_lvl+0x18c/0x250 [ 1096.937448][T23420] ? show_regs_print_info+0x20/0x20 [ 1096.942730][T23420] ? load_image+0x420/0x420 [ 1096.947292][T23420] ? __might_sleep+0xe0/0xe0 [ 1096.951930][T23420] ? __lock_acquire+0x7d80/0x7d80 [ 1096.957023][T23420] should_fail_ex+0x394/0x4c0 [ 1096.961759][T23420] should_failslab+0x9/0x20 [ 1096.966304][T23420] slab_pre_alloc_hook+0x59/0x300 [ 1096.971376][T23420] ? kobject_rename+0x1bb/0x4f0 [ 1096.976271][T23420] ? kobject_rename+0x1bb/0x4f0 [ 1096.981175][T23420] __kmem_cache_alloc_node+0x53/0x250 [ 1096.986608][T23420] ? kobject_rename+0x1bb/0x4f0 [ 1096.991498][T23420] __kmalloc+0xa7/0x240 [ 1096.995713][T23420] kobject_rename+0x1bb/0x4f0 [ 1097.000456][T23420] ? kobject_init_and_add+0x1a0/0x1a0 [ 1097.005900][T23420] ? sysfs_rename_link_ns+0x17f/0x1b0 [ 1097.011343][T23420] device_rename+0x15d/0x1e0 [ 1097.015998][T23420] dev_change_name+0x308/0x8e0 [ 1097.020806][T23420] ? __lock_acquire+0x7d80/0x7d80 [ 1097.025908][T23420] ? dev_alloc_name+0x1d0/0x1d0 [ 1097.030841][T23420] ? nla_strscpy+0x109/0x160 [ 1097.035505][T23420] do_setlink+0x925/0x3f40 [ 1097.039998][T23420] ? arch_stack_walk+0x160/0x190 [ 1097.044993][T23420] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 1097.051199][T23420] ? stack_trace_save+0xaa/0x100 [ 1097.056183][T23420] ? stack_trace_snprint+0xf0/0xf0 [ 1097.061395][T23420] ? __nla_validate+0x50/0x50 [ 1097.066266][T23420] ? validate_linkmsg+0x719/0x910 [ 1097.071341][T23420] rtnl_newlink+0x1848/0x2170 [ 1097.076124][T23420] ? rtnl_newlink+0x4a1/0x2170 [ 1097.080958][T23420] ? rtnl_setlink+0x4e0/0x4e0 [ 1097.085684][T23420] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1097.091889][T23420] ? rcu_is_watching+0x15/0xb0 [ 1097.096723][T23420] ? trace_contention_end+0x39/0xe0 [ 1097.101959][T23420] ? __mutex_lock+0x30d/0xc80 [ 1097.106726][T23420] ? rtnl_setlink+0x4e0/0x4e0 [ 1097.111444][T23420] rtnetlink_rcv_msg+0x843/0xf90 [ 1097.116433][T23420] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1097.121684][T23420] ? rtnetlink_bind+0x80/0x80 [ 1097.126425][T23420] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1097.132295][T23420] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1097.138393][T23420] ? __dev_queue_xmit+0x272/0x37e0 [ 1097.143615][T23420] ? __dev_queue_xmit+0x272/0x37e0 [ 1097.148838][T23420] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1097.154897][T23420] ? perf_trace_lock+0x303/0x3b0 [ 1097.159921][T23420] netlink_rcv_skb+0x235/0x4c0 [ 1097.164746][T23420] ? rtnetlink_bind+0x80/0x80 [ 1097.169494][T23420] ? netlink_ack+0x1160/0x1160 [ 1097.174354][T23420] ? __lock_acquire+0x7d80/0x7d80 [ 1097.179491][T23420] ? netlink_deliver_tap+0x2e/0x1b0 [ 1097.184750][T23420] netlink_unicast+0x7b1/0x930 [ 1097.189586][T23420] netlink_sendmsg+0x8d0/0xbf0 [ 1097.194408][T23420] ? netlink_getsockopt+0x590/0x590 [ 1097.199744][T23420] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1097.205337][T23420] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1097.211624][T23420] ? security_socket_sendmsg+0x80/0xa0 [ 1097.217127][T23420] ? netlink_getsockopt+0x590/0x590 [ 1097.222371][T23420] ____sys_sendmsg+0x61b/0x980 [ 1097.227213][T23420] ? __asan_memset+0x22/0x40 [ 1097.231859][T23420] ? __sys_sendmsg_sock+0x30/0x30 [ 1097.236930][T23420] ? __import_iovec+0x3fa/0x850 [ 1097.241850][T23420] ? import_iovec+0x73/0xa0 [ 1097.246497][T23420] ___sys_sendmsg+0x2a6/0x360 [ 1097.251240][T23420] ? __sys_sendmsg+0x2b0/0x2b0 [ 1097.256097][T23420] ? __lock_acquire+0x7d80/0x7d80 [ 1097.261217][T23420] __se_sys_sendmsg+0x1d0/0x2c0 [ 1097.266139][T23420] ? __x64_sys_sendmsg+0x80/0x80 [ 1097.271162][T23420] ? lockdep_hardirqs_on+0x98/0x150 [ 1097.276424][T23420] do_syscall_64+0x55/0xb0 [ 1097.280917][T23420] ? clear_bhb_loop+0x40/0x90 [ 1097.285641][T23420] ? clear_bhb_loop+0x40/0x90 [ 1097.290383][T23420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1097.296319][T23420] RIP: 0033:0x7f158a19e159 [ 1097.300777][T23420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1097.320427][T23420] RSP: 002b:00007f158b023028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1097.329083][T23420] RAX: ffffffffffffffda RBX: 00007f158a425fa0 RCX: 00007f158a19e159 [ 1097.337109][T23420] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1097.345129][T23420] RBP: 00007f158b023090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.353141][T23420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1097.361149][T23420] R13: 00007f158a426038 R14: 00007f158a425fa0 R15: 00007ffc67c7fc58 [ 1097.369194][T23420] [ 1097.587646][T23427] netlink: 'syz.0.5983': attribute type 10 has an invalid length. [ 1097.619950][T23427] team0: Device hsr_slave_0 failed to register rx_handler [ 1097.915911][T23436] netlink: 'syz.0.5988': attribute type 10 has an invalid length. [ 1098.945191][T23453] mac80211_hwsim hwsim55 wlan1: left allmulticast mode [ 1099.332214][T23473] netlink: 'syz.1.6003': attribute type 9 has an invalid length. [ 1099.351165][T23473] netlink: 399 bytes leftover after parsing attributes in process `syz.1.6003'. [ 1099.537777][T23479] : renamed from bond0 (while UP) [ 1099.628011][T23475] can: request_module (can-proto-0) failed. [ 1102.746145][T23495] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6008'. [ 1102.856712][T23495] netlink: 'syz.2.6008': attribute type 39 has an invalid length. [ 1103.230307][T23508] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6012'. [ 1103.326076][T23507] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6012'. [ 1104.419584][T23526] FAULT_INJECTION: forcing a failure. [ 1104.419584][T23526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1104.451573][T23526] CPU: 1 PID: 23526 Comm: syz.1.6018 Not tainted syzkaller #0 [ 1104.459139][T23526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1104.469337][T23526] Call Trace: [ 1104.472659][T23526] [ 1104.475630][T23526] dump_stack_lvl+0x18c/0x250 [ 1104.480381][T23526] ? show_regs_print_info+0x20/0x20 [ 1104.485642][T23526] ? load_image+0x420/0x420 [ 1104.490199][T23526] ? __might_fault+0xaa/0x120 [ 1104.494922][T23526] ? __lock_acquire+0x7d80/0x7d80 [ 1104.500001][T23526] should_fail_ex+0x394/0x4c0 [ 1104.504731][T23526] _copy_from_user+0x2f/0xe0 [ 1104.509411][T23526] __sys_bpf+0x23e/0x890 [ 1104.513690][T23526] ? bpf_link_show_fdinfo+0x560/0x560 [ 1104.519110][T23526] ? lock_chain_count+0x20/0x20 [ 1104.524006][T23526] __x64_sys_bpf+0x7c/0x90 [ 1104.528451][T23526] do_syscall_64+0x55/0xb0 [ 1104.532905][T23526] ? clear_bhb_loop+0x40/0x90 [ 1104.537613][T23526] ? clear_bhb_loop+0x40/0x90 [ 1104.542350][T23526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1104.548304][T23526] RIP: 0033:0x7feb0459e159 [ 1104.552758][T23526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1104.572421][T23526] RSP: 002b:00007feb054be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1104.580892][T23526] RAX: ffffffffffffffda RBX: 00007feb04825fa0 RCX: 00007feb0459e159 [ 1104.589011][T23526] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1104.597063][T23526] RBP: 00007feb054be090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.605250][T23526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.613267][T23526] R13: 00007feb04826038 R14: 00007feb04825fa0 R15: 00007ffcca08bc08 [ 1104.621322][T23526] [ 1104.661404][T23529] sock: sock_set_timeout: `syz.0.6019' (pid 23529) tries to set negative timeout [ 1105.756908][T23550] netlink: 'syz.2.6026': attribute type 39 has an invalid length. [ 1106.482007][T23560] syzkaller0: entered promiscuous mode [ 1106.523347][T23560] syzkaller0: entered allmulticast mode [ 1107.364441][T23581] netlink: 'syz.3.6038': attribute type 21 has an invalid length. [ 1107.497980][T23586] netlink: 'syz.1.6040': attribute type 10 has an invalid length. [ 1107.527498][T23586] team0: Device batadv0 is up. Set it down before adding it as a team port [ 1107.568699][T23588] FAULT_INJECTION: forcing a failure. [ 1107.568699][T23588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1107.603046][T23588] CPU: 0 PID: 23588 Comm: syz.3.6041 Not tainted syzkaller #0 [ 1107.610626][T23588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1107.620741][T23588] Call Trace: [ 1107.624065][T23588] [ 1107.627038][T23588] dump_stack_lvl+0x18c/0x250 [ 1107.631780][T23588] ? show_regs_print_info+0x20/0x20 [ 1107.637040][T23588] ? load_image+0x420/0x420 [ 1107.641632][T23588] ? __might_fault+0xaa/0x120 [ 1107.646381][T23588] ? __lock_acquire+0x7d80/0x7d80 [ 1107.651465][T23588] should_fail_ex+0x394/0x4c0 [ 1107.656209][T23588] _copy_from_user+0x2f/0xe0 [ 1107.660859][T23588] kstrtouint_from_user+0xde/0x170 [ 1107.666034][T23588] ? kstrtol_from_user+0x190/0x190 [ 1107.671223][T23588] proc_fail_nth_write+0x8f/0x250 [ 1107.676310][T23588] ? proc_fail_nth_read+0x260/0x260 [ 1107.681578][T23588] ? proc_fail_nth_read+0x260/0x260 [ 1107.687106][T23588] vfs_write+0x299/0x9a0 [ 1107.691414][T23588] ? file_end_write+0x250/0x250 [ 1107.696339][T23588] ? __fget_files+0x28/0x460 [ 1107.700991][T23588] ? __fget_files+0x3fc/0x460 [ 1107.705742][T23588] ? __fdget_pos+0x2a3/0x330 [ 1107.710416][T23588] ? ksys_write+0x74/0x260 [ 1107.714895][T23588] ksys_write+0x151/0x260 [ 1107.719278][T23588] ? __ia32_sys_read+0x90/0x90 [ 1107.724090][T23588] ? lockdep_hardirqs_on+0x98/0x150 [ 1107.729326][T23588] do_syscall_64+0x55/0xb0 [ 1107.733775][T23588] ? clear_bhb_loop+0x40/0x90 [ 1107.738492][T23588] ? clear_bhb_loop+0x40/0x90 [ 1107.743210][T23588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1107.749144][T23588] RIP: 0033:0x7efe3535e98e [ 1107.753598][T23588] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1107.773271][T23588] RSP: 002b:00007efe361e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1107.781721][T23588] RAX: ffffffffffffffda RBX: 00007efe361e66c0 RCX: 00007efe3535e98e [ 1107.789728][T23588] RDX: 0000000000000001 RSI: 00007efe361e60a0 RDI: 0000000000000008 [ 1107.797750][T23588] RBP: 00007efe361e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.805778][T23588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1107.813789][T23588] R13: 00007efe35626038 R14: 00007efe35625fa0 R15: 00007fff696d9a48 [ 1107.821831][T23588] [ 1108.159358][T23606] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6046'. [ 1108.179267][T23606] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6046'. [ 1108.209316][T23606] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6046'. [ 1108.323405][T23606] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6046'. [ 1109.156537][T23629] FAULT_INJECTION: forcing a failure. [ 1109.156537][T23629] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.197511][T23629] CPU: 1 PID: 23629 Comm: syz.3.6054 Not tainted syzkaller #0 [ 1109.205064][T23629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1109.215162][T23629] Call Trace: [ 1109.218483][T23629] [ 1109.221458][T23629] dump_stack_lvl+0x18c/0x250 [ 1109.226192][T23629] ? fib_rules_unregister+0x330/0x330 [ 1109.231617][T23629] ? show_regs_print_info+0x20/0x20 [ 1109.236880][T23629] ? load_image+0x420/0x420 [ 1109.241455][T23629] ? l3mdev_update_flow+0x4b1/0x5f0 [ 1109.246809][T23629] should_fail_ex+0x394/0x4c0 [ 1109.251554][T23629] should_failslab+0x9/0x20 [ 1109.256121][T23629] slab_pre_alloc_hook+0x59/0x300 [ 1109.261211][T23629] kmem_cache_alloc+0x5a/0x2c0 [ 1109.266043][T23629] ? skb_clone+0x1eb/0x370 [ 1109.270524][T23629] skb_clone+0x1eb/0x370 [ 1109.274814][T23629] ? ip6_finish_output2+0x3ea/0x1690 [ 1109.280152][T23629] ip6_finish_output2+0x407/0x1690 [ 1109.285325][T23629] ? nf_hook+0x390/0x390 [ 1109.289609][T23629] ? ip6_mtu+0x321/0x3f0 [ 1109.293907][T23629] ? ip6_finish_output+0x567/0x7f0 [ 1109.299097][T23629] ? ip6_send_skb+0x10a/0x380 [ 1109.303823][T23629] ip6_send_skb+0x1cd/0x380 [ 1109.308370][T23629] rawv6_push_pending_frames+0x74d/0x930 [ 1109.314054][T23629] ? raw6_getfrag+0x390/0x390 [ 1109.318788][T23629] ? rawv6_send_hdrinc+0x1660/0x1660 [ 1109.324130][T23629] rawv6_sendmsg+0x12db/0x1740 [ 1109.328978][T23629] ? compat_rawv6_ioctl+0x70/0x70 [ 1109.334085][T23629] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 1109.340638][T23629] ? aa_sock_msg_perm+0x94/0x150 [ 1109.345635][T23629] ? inet_sendmsg+0x7e/0x2a0 [ 1109.350271][T23629] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1109.355607][T23629] ? inet_send_prepare+0x250/0x250 [ 1109.360763][T23629] ____sys_sendmsg+0x61b/0x980 [ 1109.365594][T23629] ? __asan_memset+0x22/0x40 [ 1109.370239][T23629] ? __sys_sendmsg_sock+0x30/0x30 [ 1109.375313][T23629] ? __import_iovec+0x5f2/0x850 [ 1109.380251][T23629] ? import_iovec+0x73/0xa0 [ 1109.384817][T23629] ___sys_sendmsg+0x2a6/0x360 [ 1109.389548][T23629] ? get_pid_task+0x20/0x1e0 [ 1109.394200][T23629] ? __sys_sendmsg+0x2b0/0x2b0 [ 1109.399060][T23629] ? __lock_acquire+0x7d80/0x7d80 [ 1109.404161][T23629] __se_sys_sendmsg+0x1d0/0x2c0 [ 1109.409069][T23629] ? __x64_sys_sendmsg+0x80/0x80 [ 1109.414075][T23629] ? lockdep_hardirqs_on+0x98/0x150 [ 1109.419329][T23629] do_syscall_64+0x55/0xb0 [ 1109.423791][T23629] ? clear_bhb_loop+0x40/0x90 [ 1109.428526][T23629] ? clear_bhb_loop+0x40/0x90 [ 1109.433257][T23629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1109.439208][T23629] RIP: 0033:0x7efe3539e159 [ 1109.443692][T23629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.463345][T23629] RSP: 002b:00007efe361e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1109.471831][T23629] RAX: ffffffffffffffda RBX: 00007efe35625fa0 RCX: 00007efe3539e159 [ 1109.479848][T23629] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 1109.487886][T23629] RBP: 00007efe361e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.495905][T23629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.503924][T23629] R13: 00007efe35626038 R14: 00007efe35625fa0 R15: 00007fff696d9a48 [ 1109.511963][T23629] [ 1111.109908][T23648] delete_channel: no stack [ 1112.542799][T23659] delete_channel: no stack [ 1114.157766][T23685] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6072'. [ 1114.207609][T23684] FAULT_INJECTION: forcing a failure. [ 1114.207609][T23684] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.228958][T23684] CPU: 1 PID: 23684 Comm: syz.0.6071 Not tainted syzkaller #0 [ 1114.236589][T23684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1114.246787][T23684] Call Trace: [ 1114.250195][T23684] [ 1114.253260][T23684] dump_stack_lvl+0x18c/0x250 [ 1114.258115][T23684] ? show_regs_print_info+0x20/0x20 [ 1114.263480][T23684] ? load_image+0x420/0x420 [ 1114.268152][T23684] ? __might_sleep+0xe0/0xe0 [ 1114.272924][T23684] ? __lock_acquire+0x7d80/0x7d80 [ 1114.278148][T23684] should_fail_ex+0x394/0x4c0 [ 1114.283022][T23684] should_failslab+0x9/0x20 [ 1114.287649][T23684] slab_pre_alloc_hook+0x59/0x300 [ 1114.292797][T23684] ? trace_call_bpf+0x5e9/0x6c0 [ 1114.297789][T23684] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1114.303646][T23684] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1114.309501][T23684] __kmem_cache_alloc_node+0x53/0x250 [ 1114.315054][T23684] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1114.320899][T23684] __kmalloc+0xa7/0x240 [ 1114.325245][T23684] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1114.330973][T23684] ? tomoyo_domain+0xd6/0x120 [ 1114.335892][T23684] tomoyo_path_number_perm+0x248/0x5e0 [ 1114.341499][T23684] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1114.347277][T23684] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1114.352906][T23684] ? ksys_write+0x1d2/0x260 [ 1114.357870][T23684] ? __fget_files+0x28/0x460 [ 1114.362734][T23684] security_file_ioctl+0x70/0xa0 [ 1114.367864][T23684] __se_sys_ioctl+0x48/0x170 [ 1114.372628][T23684] do_syscall_64+0x55/0xb0 [ 1114.377180][T23684] ? clear_bhb_loop+0x40/0x90 [ 1114.381986][T23684] ? clear_bhb_loop+0x40/0x90 [ 1114.386819][T23684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1114.392832][T23684] RIP: 0033:0x7f158a19e159 [ 1114.397382][T23684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.417115][T23684] RSP: 002b:00007f158b023028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1114.425703][T23684] RAX: ffffffffffffffda RBX: 00007f158a425fa0 RCX: 00007f158a19e159 [ 1114.433802][T23684] RDX: 0000200000000000 RSI: 0000000000008b26 RDI: 000000000000000d [ 1114.441893][T23684] RBP: 00007f158b023090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.449986][T23684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.458091][T23684] R13: 00007f158a426038 R14: 00007f158a425fa0 R15: 00007ffc67c7fc58 [ 1114.466338][T23684] [ 1114.510208][T23684] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1114.888368][T23694] netlink: 'syz.0.6075': attribute type 2 has an invalid length. [ 1114.938205][T23694] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.6075'. [ 1115.697590][T23704] netlink: 'syz.0.6078': attribute type 8 has an invalid length. [ 1115.723638][T23704] netlink: 'syz.0.6078': attribute type 1 has an invalid length. [ 1115.800455][T23704] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6078'. [ 1116.010576][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.017072][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.054709][T23710] FAULT_INJECTION: forcing a failure. [ 1116.054709][T23710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1116.068599][T23710] CPU: 0 PID: 23710 Comm: syz.2.6079 Not tainted syzkaller #0 [ 1116.076117][T23710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1116.086255][T23710] Call Trace: [ 1116.089567][T23710] [ 1116.092526][T23710] dump_stack_lvl+0x18c/0x250 [ 1116.097249][T23710] ? show_regs_print_info+0x20/0x20 [ 1116.102483][T23710] ? load_image+0x420/0x420 [ 1116.107022][T23710] ? __might_fault+0xaa/0x120 [ 1116.111735][T23710] ? __lock_acquire+0x7d80/0x7d80 [ 1116.116822][T23710] should_fail_ex+0x394/0x4c0 [ 1116.121539][T23710] _copy_to_user+0x2f/0xa0 [ 1116.125991][T23710] bpf_test_finish+0x25a/0x650 [ 1116.130817][T23710] ? bpf_test_run+0x174/0x870 [ 1116.135535][T23710] ? convert_skb_to___skb+0x420/0x420 [ 1116.140953][T23710] ? kasan_check_range+0x89/0x290 [ 1116.146017][T23710] bpf_prog_test_run_skb+0x1135/0x18f0 [ 1116.151525][T23710] ? cpu_online+0x60/0x60 [ 1116.155891][T23710] bpf_prog_test_run+0x31f/0x390 [ 1116.160858][T23710] __sys_bpf+0x49d/0x890 [ 1116.165126][T23710] ? read_tsc+0x9/0x20 [ 1116.169221][T23710] ? bpf_link_show_fdinfo+0x560/0x560 [ 1116.174630][T23710] ? lock_chain_count+0x20/0x20 [ 1116.179517][T23710] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1116.185546][T23710] __x64_sys_bpf+0x7c/0x90 [ 1116.190004][T23710] do_syscall_64+0x55/0xb0 [ 1116.194458][T23710] ? clear_bhb_loop+0x40/0x90 [ 1116.199166][T23710] ? clear_bhb_loop+0x40/0x90 [ 1116.203897][T23710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1116.209824][T23710] RIP: 0033:0x7fe44ef9e159 [ 1116.214275][T23710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.233916][T23710] RSP: 002b:00007fe44fe96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1116.242361][T23710] RAX: ffffffffffffffda RBX: 00007fe44f226090 RCX: 00007fe44ef9e159 [ 1116.250363][T23710] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a [ 1116.258364][T23710] RBP: 00007fe44fe96090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.266358][T23710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.274363][T23710] R13: 00007fe44f226128 R14: 00007fe44f226090 R15: 00007ffc360fe678 [ 1116.282383][T23710] [ 1116.338144][T23689] delete_channel: no stack [ 1117.091868][T23744] netlink: 'syz.1.6089': attribute type 10 has an invalid length. [ 1117.190524][T23744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1117.244907][T23744] batadv0: entered promiscuous mode [ 1117.283248][T23744] batadv0: entered allmulticast mode [ 1117.302920][T23744] team0: Port device batadv0 added [ 1117.359047][T18408] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1117.369017][T18408] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1119.328483][T23766] netlink: 'syz.1.6092': attribute type 3 has an invalid length. [ 1119.763803][T23780] sock: sock_timestamping_bind_phc: sock not bind to device [ 1119.867917][T23788] FAULT_INJECTION: forcing a failure. [ 1119.867917][T23788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1119.881876][T23788] CPU: 1 PID: 23788 Comm: syz.3.6099 Not tainted syzkaller #0 [ 1119.889402][T23788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1119.899548][T23788] Call Trace: [ 1119.902885][T23788] [ 1119.905855][T23788] dump_stack_lvl+0x18c/0x250 [ 1119.910577][T23788] ? show_regs_print_info+0x20/0x20 [ 1119.915820][T23788] ? load_image+0x420/0x420 [ 1119.920376][T23788] ? __might_fault+0xaa/0x120 [ 1119.925095][T23788] ? __lock_acquire+0x7d80/0x7d80 [ 1119.930149][T23788] ? bpf_percpu_hash_update+0x2b/0x200 [ 1119.935638][T23788] ? __virt_addr_valid+0x10c/0x380 [ 1119.940801][T23788] should_fail_ex+0x394/0x4c0 [ 1119.945539][T23788] _copy_from_user+0x2f/0xe0 [ 1119.950192][T23788] generic_map_update_batch+0x53e/0x800 [ 1119.955796][T23788] ? rcu_read_unlock+0xa0/0xa0 [ 1119.960596][T23788] ? __fdget+0x180/0x210 [ 1119.964886][T23788] ? rcu_read_unlock+0xa0/0xa0 [ 1119.969677][T23788] bpf_map_do_batch+0x3f2/0x600 [ 1119.974650][T23788] ? bpf_lsm_key_free+0x10/0x10 [ 1119.979537][T23788] __sys_bpf+0x381/0x890 [ 1119.983811][T23788] ? bpf_link_show_fdinfo+0x560/0x560 [ 1119.989221][T23788] ? lock_chain_count+0x20/0x20 [ 1119.994108][T23788] __x64_sys_bpf+0x7c/0x90 [ 1119.998557][T23788] do_syscall_64+0x55/0xb0 [ 1120.003028][T23788] ? clear_bhb_loop+0x40/0x90 [ 1120.007736][T23788] ? clear_bhb_loop+0x40/0x90 [ 1120.012445][T23788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1120.018368][T23788] RIP: 0033:0x7efe3539e159 [ 1120.022835][T23788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1120.042465][T23788] RSP: 002b:00007efe361e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1120.050920][T23788] RAX: ffffffffffffffda RBX: 00007efe35625fa0 RCX: 00007efe3539e159 [ 1120.058942][T23788] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 1120.066958][T23788] RBP: 00007efe361e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1120.074974][T23788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1120.082983][T23788] R13: 00007efe35626038 R14: 00007efe35625fa0 R15: 00007fff696d9a48 [ 1120.091001][T23788] [ 1120.105734][T23792] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6100'. [ 1120.125813][T23792] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6100'. [ 1120.149722][T23790] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6100'. [ 1120.244328][T23781] netlink: 'syz.1.6098': attribute type 10 has an invalid length. [ 1120.321364][T23791] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6100'. [ 1120.482021][T23803] netlink: 'syz.2.6103': attribute type 33 has an invalid length. [ 1120.490488][T23803] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6103'. [ 1120.690330][T23808] netlink: 'syz.3.6105': attribute type 10 has an invalid length. [ 1120.702186][T23808] bridge_slave_1: left allmulticast mode [ 1120.709176][T23808] bridge_slave_1: left promiscuous mode [ 1120.718706][T23808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.803892][T23813] tun0: tun_chr_ioctl cmd 1074025694 [ 1121.154134][T23826] FAULT_INJECTION: forcing a failure. [ 1121.154134][T23826] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.176536][T23826] CPU: 0 PID: 23826 Comm: syz.3.6109 Not tainted syzkaller #0 [ 1121.184098][T23826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1121.194214][T23826] Call Trace: [ 1121.197545][T23826] [ 1121.200529][T23826] dump_stack_lvl+0x18c/0x250 [ 1121.205267][T23826] ? sctp_sendmsg+0x1519/0x27b0 [ 1121.210188][T23826] ? ___sys_sendmsg+0x2a6/0x360 [ 1121.215066][T23826] ? show_regs_print_info+0x20/0x20 [ 1121.220307][T23826] ? load_image+0x420/0x420 [ 1121.224852][T23826] should_fail_ex+0x394/0x4c0 [ 1121.229570][T23826] should_failslab+0x9/0x20 [ 1121.234114][T23826] slab_pre_alloc_hook+0x59/0x300 [ 1121.239183][T23826] ? sctp_add_bind_addr+0x8c/0x360 [ 1121.244480][T23826] __kmem_cache_alloc_node+0x53/0x250 [ 1121.249893][T23826] ? sctp_add_bind_addr+0x8c/0x360 [ 1121.255042][T23826] kmalloc_trace+0x2a/0xe0 [ 1121.259500][T23826] sctp_add_bind_addr+0x8c/0x360 [ 1121.264474][T23826] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1121.270154][T23826] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1121.275905][T23826] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1121.282010][T23826] ? sctp_v4_is_any+0x35/0x60 [ 1121.286728][T23826] ? sctp_copy_one_addr+0x8c/0x350 [ 1121.291893][T23826] sctp_bind_addr_copy+0xb3/0x3c0 [ 1121.296965][T23826] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1121.303410][T23826] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1121.308730][T23826] ? __sctp_connect+0xd80/0xd80 [ 1121.313606][T23826] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1121.319011][T23826] ? _local_bh_enable+0xa0/0xa0 [ 1121.323891][T23826] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1121.329732][T23826] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1121.335581][T23826] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1121.341171][T23826] ? security_sctp_bind_connect+0x89/0xb0 [ 1121.346927][T23826] sctp_sendmsg+0x1519/0x27b0 [ 1121.351645][T23826] ? sctp_getsockopt+0xb60/0xb60 [ 1121.356622][T23826] ? aa_af_perm+0x330/0x330 [ 1121.361162][T23826] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1121.367612][T23826] ? sock_rps_record_flow+0x19/0x3f0 [ 1121.372925][T23826] ? inet_sendmsg+0x7e/0x2a0 [ 1121.377539][T23826] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1121.382852][T23826] ? inet_send_prepare+0x250/0x250 [ 1121.388020][T23826] ____sys_sendmsg+0x61b/0x980 [ 1121.392822][T23826] ? __asan_memset+0x22/0x40 [ 1121.397448][T23826] ? __sys_sendmsg_sock+0x30/0x30 [ 1121.402502][T23826] ? __import_iovec+0x5f2/0x850 [ 1121.407397][T23826] ? import_iovec+0x73/0xa0 [ 1121.411942][T23826] ___sys_sendmsg+0x2a6/0x360 [ 1121.416661][T23826] ? get_pid_task+0x20/0x1e0 [ 1121.421288][T23826] ? __sys_sendmsg+0x2b0/0x2b0 [ 1121.426108][T23826] ? __lock_acquire+0x7d80/0x7d80 [ 1121.431182][T23826] __se_sys_sendmsg+0x1d0/0x2c0 [ 1121.436076][T23826] ? __x64_sys_sendmsg+0x80/0x80 [ 1121.441065][T23826] ? lockdep_hardirqs_on+0x98/0x150 [ 1121.446314][T23826] do_syscall_64+0x55/0xb0 [ 1121.450758][T23826] ? clear_bhb_loop+0x40/0x90 [ 1121.455470][T23826] ? clear_bhb_loop+0x40/0x90 [ 1121.460185][T23826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1121.466111][T23826] RIP: 0033:0x7efe3539e159 [ 1121.470554][T23826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.490188][T23826] RSP: 002b:00007efe361e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1121.498633][T23826] RAX: ffffffffffffffda RBX: 00007efe35625fa0 RCX: 00007efe3539e159 [ 1121.506630][T23826] RDX: 0000000004008010 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 1121.514629][T23826] RBP: 00007efe361e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.522620][T23826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1121.530612][T23826] R13: 00007efe35626038 R14: 00007efe35625fa0 R15: 00007fff696d9a48 [ 1121.538627][T23826] [ 1121.559698][T23831] netlink: 'syz.2.6111': attribute type 12 has an invalid length. [ 1121.605650][T23831] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.6111'. [ 1122.107359][T23848] netlink: 180556 bytes leftover after parsing attributes in process `syz.1.6116'. [ 1122.122960][T23848] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1122.138174][T23848] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1122.254450][T23853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1122.825466][T23874] netlink: 'syz.1.6123': attribute type 2 has an invalid length. [ 1122.872654][T23874] netlink: 'syz.1.6123': attribute type 8 has an invalid length. [ 1122.977757][T23874] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6123'. [ 1124.443797][T23904] FAULT_INJECTION: forcing a failure. [ 1124.443797][T23904] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.486028][T23906] netlink: 'syz.2.6133': attribute type 21 has an invalid length. [ 1124.494269][T23904] CPU: 0 PID: 23904 Comm: syz.1.6132 Not tainted syzkaller #0 [ 1124.501798][T23904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1124.511906][T23904] Call Trace: [ 1124.515262][T23904] [ 1124.515897][T23906] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6133'. [ 1124.518220][T23904] dump_stack_lvl+0x18c/0x250 [ 1124.532008][T23904] ? show_regs_print_info+0x20/0x20 [ 1124.537263][T23904] ? load_image+0x420/0x420 [ 1124.541829][T23904] ? __might_sleep+0xe0/0xe0 [ 1124.546547][T23904] ? __lock_acquire+0x7d80/0x7d80 [ 1124.551637][T23904] should_fail_ex+0x394/0x4c0 [ 1124.556384][T23904] should_failslab+0x9/0x20 [ 1124.560946][T23904] slab_pre_alloc_hook+0x59/0x300 [ 1124.566041][T23904] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1124.572263][T23904] ? __request_module+0x2ed/0x600 [ 1124.577343][T23904] ? call_usermodehelper_setup+0x8e/0x260 [ 1124.577727][T23906] netlink: 'syz.2.6133': attribute type 10 has an invalid length. [ 1124.583097][T23904] __kmem_cache_alloc_node+0x53/0x250 [ 1124.596376][T23904] ? call_usermodehelper_setup+0x8e/0x260 [ 1124.602150][T23904] kmalloc_trace+0x2a/0xe0 [ 1124.606635][T23904] call_usermodehelper_setup+0x8e/0x260 [ 1124.612237][T23904] ? __request_module+0x600/0x600 [ 1124.617322][T23904] __request_module+0x3bb/0x600 [ 1124.622232][T23904] ? module_enforce_rwx_sections+0x150/0x150 [ 1124.628282][T23904] ? dev_load+0x21/0x1f0 [ 1124.632591][T23904] ? bpf_lsm_capable+0x9/0x10 [ 1124.637338][T23904] ? dev_load+0x21/0x1f0 [ 1124.638709][T23906] netlink: 52507 bytes leftover after parsing attributes in process `syz.2.6133'. [ 1124.641612][T23904] dev_load+0x18b/0x1f0 [ 1124.641642][T23904] dev_ioctl+0x79f/0x1140 [ 1124.641672][T23904] sock_do_ioctl+0x239/0x310 [ 1124.664042][T23904] ? sock_show_fdinfo+0xb0/0xb0 [ 1124.669051][T23904] sock_ioctl+0x5be/0x7e0 [ 1124.673505][T23904] ? sock_poll+0x3e0/0x3e0 [ 1124.678058][T23904] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1124.683120][T23904] ? security_file_ioctl+0x80/0xa0 [ 1124.688335][T23904] ? sock_poll+0x3e0/0x3e0 [ 1124.692845][T23904] __se_sys_ioctl+0xfd/0x170 [ 1124.697545][T23904] do_syscall_64+0x55/0xb0 [ 1124.702042][T23904] ? clear_bhb_loop+0x40/0x90 [ 1124.706810][T23904] ? clear_bhb_loop+0x40/0x90 [ 1124.711582][T23904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1124.717573][T23904] RIP: 0033:0x7feb0459e159 [ 1124.722072][T23904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1124.741796][T23904] RSP: 002b:00007feb054be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1124.750321][T23904] RAX: ffffffffffffffda RBX: 00007feb04825fa0 RCX: 00007feb0459e159 [ 1124.758410][T23904] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000005 [ 1124.766494][T23904] RBP: 00007feb054be090 R08: 0000000000000000 R09: 0000000000000000 [ 1124.774547][T23904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.782595][T23904] R13: 00007feb04826038 R14: 00007feb04825fa0 R15: 00007ffcca08bc08 [ 1124.790746][T23904] [ 1126.759425][T23956] FAULT_INJECTION: forcing a failure. [ 1126.759425][T23956] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.791263][T23956] CPU: 0 PID: 23956 Comm: syz.2.6150 Not tainted syzkaller #0 [ 1126.798830][T23956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1126.808941][T23956] Call Trace: [ 1126.812280][T23956] [ 1126.815255][T23956] dump_stack_lvl+0x18c/0x250 [ 1126.819996][T23956] ? show_regs_print_info+0x20/0x20 [ 1126.825262][T23956] ? load_image+0x420/0x420 [ 1126.829841][T23956] ? __might_sleep+0xe0/0xe0 [ 1126.834496][T23956] ? __lock_acquire+0x7d80/0x7d80 [ 1126.839585][T23956] should_fail_ex+0x394/0x4c0 [ 1126.844334][T23956] should_failslab+0x9/0x20 [ 1126.848922][T23956] slab_pre_alloc_hook+0x59/0x300 [ 1126.854026][T23956] ? ethnl_default_notify+0x1d6/0x750 [ 1126.859453][T23956] ? ethnl_default_notify+0x1d6/0x750 [ 1126.864881][T23956] __kmem_cache_alloc_node+0x53/0x250 [ 1126.870327][T23956] ? ethnl_default_notify+0x1d6/0x750 [ 1126.875750][T23956] __kmalloc+0xa7/0x240 [ 1126.879980][T23956] ethnl_default_notify+0x1d6/0x750 [ 1126.885240][T23956] ? ethtool_notify+0x1b0/0x1b0 [ 1126.890143][T23956] ? lockdep_hardirqs_on+0x98/0x150 [ 1126.895405][T23956] ? mutex_is_locked+0x12/0x40 [ 1126.900222][T23956] ? rtnl_is_locked+0x15/0x20 [ 1126.904958][T23956] ethnl_netdev_event+0x58/0x70 [ 1126.909859][T23956] notifier_call_chain+0x18f/0x380 [ 1126.915032][T23956] netdev_features_change+0x8e/0xd0 [ 1126.920300][T23956] ? dev_get_alias+0x250/0x250 [ 1126.925121][T23956] ? __might_fault+0xaa/0x120 [ 1126.929850][T23956] ? __ethtool_set_flags+0x147/0x160 [ 1126.935187][T23956] dev_ethtool+0x153e/0x18d0 [ 1126.939850][T23956] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1126.946159][T23956] ? __lock_acquire+0x7d80/0x7d80 [ 1126.951244][T23956] ? dev_get_by_name_rcu+0x17/0x130 [ 1126.956509][T23956] ? full_name_hash+0x92/0xe0 [ 1126.961241][T23956] ? dev_load+0x21/0x1f0 [ 1126.965544][T23956] dev_ioctl+0x392/0x1140 [ 1126.969930][T23956] sock_do_ioctl+0x239/0x310 [ 1126.974583][T23956] ? perf_trace_preemptirq_template+0x269/0x330 [ 1126.980884][T23956] ? sock_show_fdinfo+0xb0/0xb0 [ 1126.985803][T23956] ? lock_chain_get_class+0x81/0xb0 [ 1126.991065][T23956] sock_ioctl+0x5be/0x7e0 [ 1126.995457][T23956] ? sock_poll+0x3e0/0x3e0 [ 1126.999934][T23956] ? security_file_ioctl+0x74/0xa0 [ 1127.005099][T23956] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1127.010088][T23956] ? security_file_ioctl+0x80/0xa0 [ 1127.015271][T23956] ? sock_poll+0x3e0/0x3e0 [ 1127.019761][T23956] __se_sys_ioctl+0xfd/0x170 [ 1127.024417][T23956] do_syscall_64+0x55/0xb0 [ 1127.028894][T23956] ? clear_bhb_loop+0x40/0x90 [ 1127.033647][T23956] ? clear_bhb_loop+0x40/0x90 [ 1127.038387][T23956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1127.044330][T23956] RIP: 0033:0x7fe44ef9e159 [ 1127.048797][T23956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1127.068478][T23956] RSP: 002b:00007fe44fe96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1127.076953][T23956] RAX: ffffffffffffffda RBX: 00007fe44f226090 RCX: 00007fe44ef9e159 [ 1127.084968][T23956] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 000000000000000c [ 1127.092987][T23956] RBP: 00007fe44fe96090 R08: 0000000000000000 R09: 0000000000000000 [ 1127.101007][T23956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1127.109030][T23956] R13: 00007fe44f226128 R14: 00007fe44f226090 R15: 00007ffc360fe678 [ 1127.117073][T23956] [ 1127.824696][T23977] nla_validate_range_unsigned: 25 callbacks suppressed [ 1127.824720][T23977] netlink: 'syz.2.6157': attribute type 11 has an invalid length. [ 1127.942751][T23977] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.6157'. [ 1128.021485][T23977] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1128.972962][T23996] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6165'. [ 1129.508122][T24017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6174'. [ 1129.618784][T24019] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.6176'. [ 1129.651057][T24019] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6176'. [ 1129.682594][T24019] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1129.710986][T24025] netlink: 'syz.3.6176': attribute type 21 has an invalid length. [ 1129.725143][T24025] netlink: 'syz.3.6176': attribute type 30 has an invalid length. [ 1129.857223][T24029] FAULT_INJECTION: forcing a failure. [ 1129.857223][T24029] name failslab, interval 1, probability 0, space 0, times 0 [ 1129.875751][T24029] CPU: 1 PID: 24029 Comm: syz.0.6179 Not tainted syzkaller #0 [ 1129.883305][T24029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1129.893411][T24029] Call Trace: [ 1129.896743][T24029] [ 1129.899767][T24029] dump_stack_lvl+0x18c/0x250 [ 1129.904507][T24029] ? show_regs_print_info+0x20/0x20 [ 1129.909788][T24029] ? load_image+0x420/0x420 [ 1129.914342][T24029] ? __might_sleep+0xe0/0xe0 [ 1129.918980][T24029] ? __lock_acquire+0x7d80/0x7d80 [ 1129.924084][T24029] should_fail_ex+0x394/0x4c0 [ 1129.928825][T24029] should_failslab+0x9/0x20 [ 1129.933383][T24029] slab_pre_alloc_hook+0x59/0x300 [ 1129.938464][T24029] ? kvmalloc_node+0x70/0x180 [ 1129.943195][T24029] ? kvmalloc_node+0x70/0x180 [ 1129.947926][T24029] __kmem_cache_alloc_node+0x53/0x250 [ 1129.953355][T24029] ? kvmalloc_node+0x70/0x180 [ 1129.958177][T24029] __kmalloc_node+0xa6/0x240 [ 1129.962829][T24029] kvmalloc_node+0x70/0x180 [ 1129.967372][T24029] bpf_test_run_xdp_live+0x1e9/0x1b30 [ 1129.972789][T24029] ? 0xffffffffa0004740 [ 1129.976972][T24029] ? 0xffffffffa0004740 [ 1129.981161][T24029] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 1129.987086][T24029] ? xdp_convert_md_to_buff+0x330/0x330 [ 1129.992698][T24029] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1129.998985][T24029] ? _copy_from_user+0xa5/0xe0 [ 1130.003781][T24029] ? bpf_test_init+0x119/0x140 [ 1130.008576][T24029] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1130.014072][T24029] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 1130.019481][T24029] ? __lock_acquire+0x7d80/0x7d80 [ 1130.024542][T24029] ? __fget_files+0x1c/0x460 [ 1130.029166][T24029] ? dev_put+0x80/0x80 [ 1130.033272][T24029] ? dev_put+0x80/0x80 [ 1130.037369][T24029] bpf_prog_test_run+0x31f/0x390 [ 1130.042338][T24029] __sys_bpf+0x49d/0x890 [ 1130.046612][T24029] ? bpf_link_show_fdinfo+0x560/0x560 [ 1130.052026][T24029] ? lock_chain_count+0x20/0x20 [ 1130.056908][T24029] __x64_sys_bpf+0x7c/0x90 [ 1130.061361][T24029] do_syscall_64+0x55/0xb0 [ 1130.065811][T24029] ? clear_bhb_loop+0x40/0x90 [ 1130.070529][T24029] ? clear_bhb_loop+0x40/0x90 [ 1130.075241][T24029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1130.081166][T24029] RIP: 0033:0x7f158a19e159 [ 1130.085607][T24029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1130.105327][T24029] RSP: 002b:00007f158b023028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1130.113809][T24029] RAX: ffffffffffffffda RBX: 00007f158a425fa0 RCX: 00007f158a19e159 [ 1130.121808][T24029] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1130.129806][T24029] RBP: 00007f158b023090 R08: 0000000000000000 R09: 0000000000000000 [ 1130.137804][T24029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1130.145806][T24029] R13: 00007f158a426038 R14: 00007f158a425fa0 R15: 00007ffc67c7fc58 [ 1130.153817][T24029] [ 1130.250332][T24033] delete_channel: no stack [ 1130.314949][T24028] delete_channel: no stack [ 1130.446358][T24044] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6186'. [ 1130.661461][T24051] netlink: 'syz.1.6188': attribute type 19 has an invalid length. [ 1130.685675][T24051] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6188'. [ 1130.915969][T24055] ref_ctr_offset mismatch. inode: 0x6ba offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x1004000 [ 1130.982050][T24059] FAULT_INJECTION: forcing a failure. [ 1130.982050][T24059] name failslab, interval 1, probability 0, space 0, times 0 [ 1130.983224][T24058] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6191'. [ 1131.016075][T24059] CPU: 1 PID: 24059 Comm: syz.0.6192 Not tainted syzkaller #0 [ 1131.023669][T24059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1131.033784][T24059] Call Trace: [ 1131.037116][T24059] [ 1131.040209][T24059] dump_stack_lvl+0x18c/0x250 [ 1131.044969][T24059] ? show_regs_print_info+0x20/0x20 [ 1131.050246][T24059] ? load_image+0x420/0x420 [ 1131.054831][T24059] ? __might_sleep+0xe0/0xe0 [ 1131.059501][T24059] ? __lock_acquire+0x7d80/0x7d80 [ 1131.064734][T24059] should_fail_ex+0x394/0x4c0 [ 1131.069511][T24059] should_failslab+0x9/0x20 [ 1131.074090][T24059] slab_pre_alloc_hook+0x59/0x300 [ 1131.079216][T24059] ? ethnl_default_start+0x166/0x560 [ 1131.084574][T24059] ? ethnl_default_start+0x166/0x560 [ 1131.089925][T24059] __kmem_cache_alloc_node+0x53/0x250 [ 1131.095390][T24059] ? ethnl_default_start+0x166/0x560 [ 1131.100743][T24059] __kmalloc+0xa7/0x240 [ 1131.104978][T24059] ethnl_default_start+0x166/0x560 [ 1131.110197][T24059] genl_start+0x4b4/0x6c0 [ 1131.114609][T24059] __netlink_dump_start+0x43c/0x7a0 [ 1131.119894][T24059] genl_family_rcv_msg_dumpit+0x214/0x310 [ 1131.125700][T24059] ? genl_rcv_msg+0x7a0/0x7a0 [ 1131.130445][T24059] ? genl_get_cmd+0x693/0x930 [ 1131.135197][T24059] ? genl_family_rcv_msg_doit+0x310/0x310 [ 1131.141083][T24059] ? genl_start+0x6c0/0x6c0 [ 1131.145657][T24059] ? genl_dumpit+0x1a0/0x1a0 [ 1131.150355][T24059] genl_rcv_msg+0x5de/0x7a0 [ 1131.154955][T24059] ? genl_bind+0x360/0x360 [ 1131.159437][T24059] ? ethnl_default_doit+0xba0/0xba0 [ 1131.164706][T24059] ? ethnl_default_start+0x560/0x560 [ 1131.170056][T24059] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 1131.175505][T24059] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1131.182154][T24059] ? ref_tracker_free+0x686/0x830 [ 1131.187281][T24059] netlink_rcv_skb+0x235/0x4c0 [ 1131.192131][T24059] ? genl_bind+0x360/0x360 [ 1131.196623][T24059] ? netlink_ack+0x1160/0x1160 [ 1131.201490][T24059] ? __lock_acquire+0x7d80/0x7d80 [ 1131.206608][T24059] ? down_read+0x1ac/0x2e0 [ 1131.211130][T24059] genl_rcv+0x28/0x40 [ 1131.215178][T24059] netlink_unicast+0x7b1/0x930 [ 1131.220033][T24059] netlink_sendmsg+0x8d0/0xbf0 [ 1131.224912][T24059] ? netlink_getsockopt+0x590/0x590 [ 1131.230184][T24059] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1131.235803][T24059] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1131.241163][T24059] ? security_socket_sendmsg+0x80/0xa0 [ 1131.246688][T24059] ? netlink_getsockopt+0x590/0x590 [ 1131.251961][T24059] ____sys_sendmsg+0x61b/0x980 [ 1131.256905][T24059] ? __asan_memset+0x22/0x40 [ 1131.261589][T24059] ? __sys_sendmsg_sock+0x30/0x30 [ 1131.266691][T24059] ? __import_iovec+0x5f2/0x850 [ 1131.271635][T24059] ? import_iovec+0x73/0xa0 [ 1131.276224][T24059] ___sys_sendmsg+0x2a6/0x360 [ 1131.280986][T24059] ? __sys_sendmsg+0x2b0/0x2b0 [ 1131.285875][T24059] ? trace_call_bpf+0xc3/0x6c0 [ 1131.290759][T24059] __se_sys_sendmsg+0x1d0/0x2c0 [ 1131.295693][T24059] ? __x64_sys_sendmsg+0x80/0x80 [ 1131.300823][T24059] ? lockdep_hardirqs_on+0x98/0x150 [ 1131.306108][T24059] do_syscall_64+0x55/0xb0 [ 1131.310587][T24059] ? clear_bhb_loop+0x40/0x90 [ 1131.315332][T24059] ? clear_bhb_loop+0x40/0x90 [ 1131.320078][T24059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1131.326038][T24059] RIP: 0033:0x7f158a19e159 [ 1131.330518][T24059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.350224][T24059] RSP: 002b:00007f158b023028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1131.358710][T24059] RAX: ffffffffffffffda RBX: 00007f158a425fa0 RCX: 00007f158a19e159 [ 1131.366743][T24059] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1131.374776][T24059] RBP: 00007f158b023090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.382811][T24059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.390851][T24059] R13: 00007f158a426038 R14: 00007f158a425fa0 R15: 00007ffc67c7fc58 [ 1131.398924][T24059] [ 1135.067541][T24078] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1135.073637][T24078] syzkaller1: linktype set to 769 [ 1135.132375][T24082] FAULT_INJECTION: forcing a failure. [ 1135.132375][T24082] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.175049][T24082] CPU: 1 PID: 24082 Comm: syz.2.6197 Not tainted syzkaller #0 [ 1135.182704][T24082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1135.192810][T24082] Call Trace: [ 1135.196131][T24082] [ 1135.199102][T24082] dump_stack_lvl+0x18c/0x250 [ 1135.203853][T24082] ? show_regs_print_info+0x20/0x20 [ 1135.209113][T24082] ? load_image+0x420/0x420 [ 1135.213676][T24082] ? __might_sleep+0xe0/0xe0 [ 1135.218410][T24082] ? __lock_acquire+0x7d80/0x7d80 [ 1135.223482][T24082] ? __mutex_trylock_common+0x160/0x270 [ 1135.229089][T24082] should_fail_ex+0x394/0x4c0 [ 1135.233836][T24082] should_failslab+0x9/0x20 [ 1135.238396][T24082] slab_pre_alloc_hook+0x59/0x300 [ 1135.243506][T24082] ? trace_contention_end+0x39/0xe0 [ 1135.248764][T24082] ? strset_prepare_data+0x43f/0xa60 [ 1135.254108][T24082] ? strset_prepare_data+0x43f/0xa60 [ 1135.259437][T24082] __kmem_cache_alloc_node+0x53/0x250 [ 1135.264883][T24082] ? strset_prepare_data+0x43f/0xa60 [ 1135.270650][T24082] __kmalloc+0xa7/0x240 [ 1135.274898][T24082] strset_prepare_data+0x43f/0xa60 [ 1135.280088][T24082] ? strset_parse_request+0x720/0x720 [ 1135.285510][T24082] ethnl_default_dumpit+0x33c/0x8a0 [ 1135.290775][T24082] genl_dumpit+0xff/0x1a0 [ 1135.295161][T24082] netlink_dump+0x738/0xec0 [ 1135.299729][T24082] ? netlink_lookup+0x200/0x200 [ 1135.304619][T24082] ? slab_free_freelist_hook+0x130/0x1a0 [ 1135.310285][T24082] ? netlink_recvmsg+0x5e7/0xe60 [ 1135.315254][T24082] ? kmem_cache_free+0xf8/0x290 [ 1135.320161][T24082] netlink_recvmsg+0x693/0xe60 [ 1135.324960][T24082] ? netlink_sendmsg+0xbf0/0xbf0 [ 1135.329955][T24082] ? aa_af_perm+0x330/0x330 [ 1135.334498][T24082] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1135.339816][T24082] ? security_socket_recvmsg+0x89/0xb0 [ 1135.345304][T24082] ? netlink_sendmsg+0xbf0/0xbf0 [ 1135.350275][T24082] ____sys_recvmsg+0x2bd/0x5d0 [ 1135.355084][T24082] ? __sys_recvmsg_sock+0x50/0x50 [ 1135.360256][T24082] ? import_iovec+0x73/0xa0 [ 1135.364815][T24082] ___sys_recvmsg+0x214/0x590 [ 1135.369533][T24082] ? __sys_recvmsg+0x2a0/0x2a0 [ 1135.374343][T24082] ? __fget_files+0x3fc/0x460 [ 1135.379064][T24082] __x64_sys_recvmsg+0x21e/0x2f0 [ 1135.384032][T24082] ? ___sys_recvmsg+0x590/0x590 [ 1135.388959][T24082] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1135.394967][T24082] do_syscall_64+0x55/0xb0 [ 1135.399418][T24082] ? clear_bhb_loop+0x40/0x90 [ 1135.404125][T24082] ? clear_bhb_loop+0x40/0x90 [ 1135.408838][T24082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1135.414764][T24082] RIP: 0033:0x7fe44ef9e159 [ 1135.419234][T24082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.438878][T24082] RSP: 002b:00007fe44feb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1135.447332][T24082] RAX: ffffffffffffffda RBX: 00007fe44f225fa0 RCX: 00007fe44ef9e159 [ 1135.455326][T24082] RDX: 0000000000000120 RSI: 0000200000000240 RDI: 0000000000000008 [ 1135.463328][T24082] RBP: 00007fe44feb7090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.471331][T24082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.479326][T24082] R13: 00007fe44f226038 R14: 00007fe44f225fa0 R15: 00007ffc360fe678 [ 1135.487335][T24082] [ 1135.737280][T24094] FAULT_INJECTION: forcing a failure. [ 1135.737280][T24094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1135.762894][T24094] CPU: 0 PID: 24094 Comm: syz.1.6206 Not tainted syzkaller #0 [ 1135.770474][T24094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1135.780621][T24094] Call Trace: [ 1135.783949][T24094] [ 1135.786930][T24094] dump_stack_lvl+0x18c/0x250 [ 1135.791688][T24094] ? show_regs_print_info+0x20/0x20 [ 1135.796946][T24094] ? load_image+0x420/0x420 [ 1135.801509][T24094] ? __might_fault+0xaa/0x120 [ 1135.806248][T24094] ? __lock_acquire+0x7d80/0x7d80 [ 1135.811358][T24094] should_fail_ex+0x394/0x4c0 [ 1135.816077][T24094] _copy_from_user+0x2f/0xe0 [ 1135.820697][T24094] kstrtouint_from_user+0xde/0x170 [ 1135.825863][T24094] ? kstrtol_from_user+0x190/0x190 [ 1135.831030][T24094] proc_fail_nth_write+0x8f/0x250 [ 1135.836096][T24094] ? proc_fail_nth_read+0x260/0x260 [ 1135.841373][T24094] ? proc_fail_nth_read+0x260/0x260 [ 1135.846614][T24094] vfs_write+0x299/0x9a0 [ 1135.850897][T24094] ? file_end_write+0x250/0x250 [ 1135.855788][T24094] ? __fget_files+0x28/0x460 [ 1135.860425][T24094] ? __fget_files+0x3fc/0x460 [ 1135.865156][T24094] ? __fdget_pos+0x2a3/0x330 [ 1135.869868][T24094] ? ksys_write+0x74/0x260 [ 1135.874324][T24094] ksys_write+0x151/0x260 [ 1135.878685][T24094] ? __ia32_sys_read+0x90/0x90 [ 1135.883482][T24094] ? lockdep_hardirqs_on+0x98/0x150 [ 1135.888718][T24094] do_syscall_64+0x55/0xb0 [ 1135.893265][T24094] ? clear_bhb_loop+0x40/0x90 [ 1135.897970][T24094] ? clear_bhb_loop+0x40/0x90 [ 1135.902684][T24094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1135.908611][T24094] RIP: 0033:0x7feb0455e98e [ 1135.913059][T24094] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1135.932697][T24094] RSP: 002b:00007feb054bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1135.941152][T24094] RAX: ffffffffffffffda RBX: 00007feb054be6c0 RCX: 00007feb0455e98e [ 1135.949169][T24094] RDX: 0000000000000001 RSI: 00007feb054be0a0 RDI: 0000000000000006 [ 1135.957171][T24094] RBP: 00007feb054be090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.965169][T24094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.973164][T24094] R13: 00007feb04826038 R14: 00007feb04825fa0 R15: 00007ffcca08bc08 [ 1135.981201][T24094] [ 1136.298214][T24105] FAULT_INJECTION: forcing a failure. [ 1136.298214][T24105] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.314645][T24105] CPU: 0 PID: 24105 Comm: syz.3.6211 Not tainted syzkaller #0 [ 1136.322172][T24105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1136.332308][T24105] Call Trace: [ 1136.335637][T24105] [ 1136.338615][T24105] dump_stack_lvl+0x18c/0x250 [ 1136.343354][T24105] ? show_regs_print_info+0x20/0x20 [ 1136.348605][T24105] ? lockdep_hardirqs_on+0x98/0x150 [ 1136.353894][T24105] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1136.360110][T24105] should_fail_ex+0x394/0x4c0 [ 1136.364832][T24105] should_failslab+0x9/0x20 [ 1136.369378][T24105] slab_pre_alloc_hook+0x59/0x300 [ 1136.374435][T24105] ? __ns_get_path+0x2e/0x5f0 [ 1136.379147][T24105] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1136.384316][T24105] ? new_inode_pseudo+0x82/0x1d0 [ 1136.389286][T24105] new_inode_pseudo+0x82/0x1d0 [ 1136.394077][T24105] __ns_get_path+0x249/0x5f0 [ 1136.398700][T24105] ns_get_path+0x54/0x90 [ 1136.402976][T24105] proc_ns_get_link+0x16c/0x2d0 [ 1136.407879][T24105] ? proc_ns_instantiate+0xf0/0xf0 [ 1136.413023][T24105] ? bpf_lsm_inode_follow_link+0x9/0x10 [ 1136.418613][T24105] ? security_inode_follow_link+0xb7/0x100 [ 1136.424452][T24105] ? proc_ns_instantiate+0xf0/0xf0 [ 1136.429591][T24105] pick_link+0x666/0xdd0 [ 1136.433880][T24105] step_into+0xc18/0xee0 [ 1136.438154][T24105] ? rcu_read_lock_any_held+0xb4/0x140 [ 1136.443640][T24105] ? rcu_read_lock_bh_held+0x100/0x100 [ 1136.449135][T24105] ? set_root+0x3a0/0x3a0 [ 1136.453494][T24105] ? path_openat+0x1578/0x3270 [ 1136.458379][T24105] path_openat+0x1656/0x3270 [ 1136.463019][T24105] ? do_filp_open+0x430/0x430 [ 1136.467755][T24105] do_filp_open+0x1f2/0x430 [ 1136.472304][T24105] ? vfs_tmpfile+0x620/0x620 [ 1136.476944][T24105] ? _raw_spin_unlock+0x28/0x40 [ 1136.481821][T24105] ? alloc_fd+0x590/0x640 [ 1136.486201][T24105] do_sys_openat2+0x134/0x1d0 [ 1136.490916][T24105] ? do_sys_open+0xe0/0xe0 [ 1136.495363][T24105] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1136.501557][T24105] __x64_sys_openat+0x139/0x160 [ 1136.506448][T24105] do_syscall_64+0x55/0xb0 [ 1136.510916][T24105] ? clear_bhb_loop+0x40/0x90 [ 1136.515629][T24105] ? clear_bhb_loop+0x40/0x90 [ 1136.520340][T24105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1136.526266][T24105] RIP: 0033:0x7efe3535e98e [ 1136.530728][T24105] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1136.550362][T24105] RSP: 002b:00007efe361e5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1136.558831][T24105] RAX: ffffffffffffffda RBX: 00007efe361e66c0 RCX: 00007efe3535e98e [ 1136.566845][T24105] RDX: 0000000000000002 RSI: 00007efe361e5f90 RDI: ffffffffffffff9c [ 1136.574844][T24105] RBP: 00007efe361e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1136.582861][T24105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1136.590862][T24105] R13: 00007efe35626038 R14: 00007efe35625fa0 R15: 00007fff696d9a48 [ 1136.598872][T24105] [ 1136.626504][T23751] tipc: Subscription rejected, illegal request [ 1136.686112][T24107] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6211'. [ 1137.027413][T24115] netlink: 'syz.2.6214': attribute type 10 has an invalid length. [ 1137.122791][T24127] netlink: 'syz.3.6217': attribute type 3 has an invalid length. [ 1137.159149][T24127] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6217'. [ 1137.437055][T24119] syzkaller0: entered promiscuous mode [ 1137.442606][T24119] syzkaller0: entered allmulticast mode [ 1138.356115][T24157] FAULT_INJECTION: forcing a failure. [ 1138.356115][T24157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1138.369698][T24157] CPU: 1 PID: 24157 Comm: syz.1.6226 Not tainted syzkaller #0 [ 1138.377322][T24157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1138.387419][T24157] Call Trace: [ 1138.390726][T24157] [ 1138.393681][T24157] dump_stack_lvl+0x18c/0x250 [ 1138.398402][T24157] ? show_regs_print_info+0x20/0x20 [ 1138.403637][T24157] ? load_image+0x420/0x420 [ 1138.408260][T24157] ? __might_fault+0xaa/0x120 [ 1138.412969][T24157] ? __lock_acquire+0x7d80/0x7d80 [ 1138.418100][T24157] should_fail_ex+0x394/0x4c0 [ 1138.422811][T24157] _copy_to_user+0x2f/0xa0 [ 1138.427286][T24157] bpf_test_finish+0x25a/0x650 [ 1138.432092][T24157] ? bpf_test_run+0x174/0x870 [ 1138.436799][T24157] ? convert_skb_to___skb+0x420/0x420 [ 1138.442212][T24157] bpf_prog_test_run_skb+0x1135/0x18f0 [ 1138.447723][T24157] ? cpu_online+0x60/0x60 [ 1138.452087][T24157] bpf_prog_test_run+0x31f/0x390 [ 1138.457055][T24157] __sys_bpf+0x49d/0x890 [ 1138.461344][T24157] ? bpf_link_show_fdinfo+0x560/0x560 [ 1138.466761][T24157] ? lock_chain_count+0x20/0x20 [ 1138.471646][T24157] __x64_sys_bpf+0x7c/0x90 [ 1138.476089][T24157] do_syscall_64+0x55/0xb0 [ 1138.480535][T24157] ? clear_bhb_loop+0x40/0x90 [ 1138.485245][T24157] ? clear_bhb_loop+0x40/0x90 [ 1138.489958][T24157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1138.495886][T24157] RIP: 0033:0x7feb0459e159 [ 1138.500336][T24157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.519973][T24157] RSP: 002b:00007feb054be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1138.528419][T24157] RAX: ffffffffffffffda RBX: 00007feb04825fa0 RCX: 00007feb0459e159 [ 1138.536412][T24157] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a [ 1138.544408][T24157] RBP: 00007feb054be090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.552404][T24157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.560508][T24157] R13: 00007feb04826038 R14: 00007feb04825fa0 R15: 00007ffcca08bc08 [ 1138.568521][T24157] [ 1140.175263][T24150] netlink: 'syz.2.6224': attribute type 10 has an invalid length. [ 1140.195698][T24150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6224'. [ 1140.242189][T24150] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1140.262838][T24150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1140.297916][T24155] netlink: 'syz.2.6224': attribute type 10 has an invalid length. [ 1140.310782][T24155] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6224'. [ 1140.339208][T24155] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1140.359877][T24155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1140.619249][T24176] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6233'. [ 1140.678461][T24176] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6233'. [ 1140.951736][T24190] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6237'. [ 1141.641970][T24196] netlink: 'syz.2.6239': attribute type 10 has an invalid length. [ 1141.661521][T24196] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6239'. [ 1141.695982][T24196] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1141.717883][T24197] netlink: 'syz.2.6239': attribute type 10 has an invalid length. [ 1141.747092][T24197] hsr0: entered promiscuous mode [ 1141.794033][T24197] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1141.807613][T24197] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1141.866879][T24197] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1141.902341][T24197] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1141.920474][T24207] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6241'. [ 1141.941857][T24207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1141.957742][T24212] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6243'. [ 1141.971266][T24207] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6241'. [ 1141.987514][T24207] openvswitch: netlink: Flow key attribute not present in set flow. [ 1142.176256][T24217] FAULT_INJECTION: forcing a failure. [ 1142.176256][T24217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1142.212783][T24217] CPU: 0 PID: 24217 Comm: syz.1.6245 Not tainted syzkaller #0 [ 1142.220341][T24217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1142.230427][T24217] Call Trace: [ 1142.233735][T24217] [ 1142.236695][T24217] dump_stack_lvl+0x18c/0x250 [ 1142.241416][T24217] ? show_regs_print_info+0x20/0x20 [ 1142.246654][T24217] ? load_image+0x420/0x420 [ 1142.251197][T24217] ? __lock_acquire+0x7d80/0x7d80 [ 1142.256262][T24217] ? snprintf+0xe9/0x140 [ 1142.260544][T24217] should_fail_ex+0x394/0x4c0 [ 1142.265257][T24217] _copy_to_user+0x2f/0xa0 [ 1142.269789][T24217] simple_read_from_buffer+0xe7/0x150 [ 1142.275197][T24217] proc_fail_nth_read+0x1e8/0x260 [ 1142.280260][T24217] ? proc_fault_inject_write+0x360/0x360 [ 1142.285932][T24217] ? fsnotify_perm+0x271/0x5e0 [ 1142.290736][T24217] ? proc_fault_inject_write+0x360/0x360 [ 1142.296414][T24217] vfs_read+0x298/0x990 [ 1142.300630][T24217] ? kernel_read+0x1e0/0x1e0 [ 1142.305254][T24217] ? __fget_files+0x28/0x460 [ 1142.309879][T24217] ? __fget_files+0x3fc/0x460 [ 1142.314620][T24217] ? __fdget_pos+0x2a3/0x330 [ 1142.319243][T24217] ? ksys_read+0x74/0x260 [ 1142.323612][T24217] ksys_read+0x151/0x260 [ 1142.327898][T24217] ? vfs_write+0x9a0/0x9a0 [ 1142.332356][T24217] ? lockdep_hardirqs_on+0x98/0x150 [ 1142.337584][T24217] do_syscall_64+0x55/0xb0 [ 1142.342031][T24217] ? clear_bhb_loop+0x40/0x90 [ 1142.346746][T24217] ? clear_bhb_loop+0x40/0x90 [ 1142.351458][T24217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1142.357386][T24217] RIP: 0033:0x7feb0455e98e [ 1142.361826][T24217] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1142.381465][T24217] RSP: 002b:00007feb054bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1142.389909][T24217] RAX: ffffffffffffffda RBX: 00007feb054be6c0 RCX: 00007feb0455e98e [ 1142.397905][T24217] RDX: 000000000000000f RSI: 00007feb054be0a0 RDI: 0000000000000004 [ 1142.405904][T24217] RBP: 00007feb054be090 R08: 0000000000000000 R09: 0000000000000000 [ 1142.413929][T24217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1142.421929][T24217] R13: 00007feb04826038 R14: 00007feb04825fa0 R15: 00007ffcca08bc08 [ 1142.429960][T24217] [ 1142.601976][T24226] netlink: 105940 bytes leftover after parsing attributes in process `syz.1.6249'. [ 1142.743859][T24226] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6249'. [ 1142.813515][T24232] netlink: 'syz.1.6249': attribute type 28 has an invalid length. [ 1142.835578][T24232] netlink: 'syz.1.6249': attribute type 29 has an invalid length. [ 1142.843655][T24232] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6249'. [ 1145.898632][T24249] netlink: 'syz.2.6255': attribute type 2 has an invalid length. [ 1145.935660][T24249] netlink: 'syz.2.6255': attribute type 8 has an invalid length. [ 1145.943505][T24249] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6255'. [ 1146.040038][T24249] FAULT_INJECTION: forcing a failure. [ 1146.040038][T24249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1146.064832][T24249] CPU: 1 PID: 24249 Comm: syz.2.6255 Not tainted syzkaller #0 [ 1146.072385][T24249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1146.082500][T24249] Call Trace: [ 1146.085835][T24249] [ 1146.088800][T24249] dump_stack_lvl+0x18c/0x250 [ 1146.093520][T24249] ? show_regs_print_info+0x20/0x20 [ 1146.098774][T24249] ? load_image+0x420/0x420 [ 1146.103320][T24249] ? __might_fault+0xaa/0x120 [ 1146.108046][T24249] ? __lock_acquire+0x7d80/0x7d80 [ 1146.113101][T24249] ? unix_ioctl+0x259/0x6b0 [ 1146.117637][T24249] should_fail_ex+0x394/0x4c0 [ 1146.122351][T24249] _copy_from_user+0x2f/0xe0 [ 1146.126972][T24249] sock_do_ioctl+0x190/0x310 [ 1146.131604][T24249] ? sock_show_fdinfo+0xb0/0xb0 [ 1146.136501][T24249] sock_ioctl+0x5be/0x7e0 [ 1146.140858][T24249] ? sock_poll+0x3e0/0x3e0 [ 1146.145314][T24249] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1146.150277][T24249] ? security_file_ioctl+0x80/0xa0 [ 1146.155423][T24249] ? sock_poll+0x3e0/0x3e0 [ 1146.159868][T24249] __se_sys_ioctl+0xfd/0x170 [ 1146.164489][T24249] do_syscall_64+0x55/0xb0 [ 1146.168936][T24249] ? clear_bhb_loop+0x40/0x90 [ 1146.173667][T24249] ? clear_bhb_loop+0x40/0x90 [ 1146.178383][T24249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1146.184313][T24249] RIP: 0033:0x7fe44ef9e159 [ 1146.188760][T24249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.208424][T24249] RSP: 002b:00007fe44feb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1146.216872][T24249] RAX: ffffffffffffffda RBX: 00007fe44f225fa0 RCX: 00007fe44ef9e159 [ 1146.224871][T24249] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000e [ 1146.232868][T24249] RBP: 00007fe44feb7090 R08: 0000000000000000 R09: 0000000000000000 [ 1146.240886][T24249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1146.248883][T24249] R13: 00007fe44f226038 R14: 00007fe44f225fa0 R15: 00007ffc360fe678 [ 1146.256983][T24249] [ 1146.269356][T24255] netlink: 'syz.1.6258': attribute type 2 has an invalid length. [ 1146.277649][T24255] netlink: 'syz.1.6258': attribute type 8 has an invalid length. [ 1146.285445][T24255] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6258'. [ 1146.363040][T24257] netlink: 'syz.0.6259': attribute type 2 has an invalid length. [ 1146.400263][T24257] netlink: 'syz.0.6259': attribute type 8 has an invalid length. [ 1146.429760][T24257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6259'. [ 1146.681755][ T5787] Bluetooth: hci1: unexpected event 0x08 length: 151 > 4 [ 1146.681931][ T5787] Bluetooth: hci1: unexpected event 0x08 length: 151 > 4 [ 1146.913179][T24270] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6264'. [ 1146.979563][T24270] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1146.996432][T24270] CPU: 1 PID: 24270 Comm: syz.3.6264 Not tainted syzkaller #0 [ 1147.004012][T24270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1147.014120][T24270] Call Trace: [ 1147.017454][T24270] [ 1147.020429][T24270] dump_stack_lvl+0x18c/0x250 [ 1147.025220][T24270] ? show_regs_print_info+0x20/0x20 [ 1147.030486][T24270] ? load_image+0x420/0x420 [ 1147.035073][T24270] sysfs_warn_dup+0x8e/0xa0 [ 1147.039636][T24270] sysfs_do_create_link_sd+0xc0/0x110 [ 1147.045107][T24270] device_add_class_symlinks+0x1cf/0x240 [ 1147.050805][T24270] device_add+0x4f9/0xc40 [ 1147.055203][T24270] wiphy_register+0x1d99/0x2ac0 [ 1147.060148][T24270] ? lock_chain_count+0x20/0x20 [ 1147.065095][T24270] ? cfg80211_event_work+0x40/0x40 [ 1147.070290][T24270] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1147.076416][T24270] ieee80211_register_hw+0x2dd8/0x3b30 [ 1147.081957][T24270] ? ieee80211_register_hw+0xfb1/0x3b30 [ 1147.087583][T24270] ? ieee80211_tasklet_handler+0x20/0x20 [ 1147.093272][T24270] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1147.099255][T24270] ? __debug_object_init+0xec/0x450 [ 1147.104498][T24270] ? __asan_memset+0x22/0x40 [ 1147.109131][T24270] ? __hrtimer_init+0x189/0x270 [ 1147.114021][T24270] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1147.119817][T24270] ? mac80211_hwsim_free+0x220/0x220 [ 1147.125149][T24270] ? rcu_is_watching+0x15/0xb0 [ 1147.129948][T24270] ? kstrndup+0xbd/0x140 [ 1147.134345][T24270] hwsim_new_radio_nl+0xdad/0x1a70 [ 1147.139501][T24270] ? mark_lock+0x94/0x320 [ 1147.143876][T24270] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1147.150254][T24270] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1147.156481][T24270] ? lockdep_hardirqs_on+0x98/0x150 [ 1147.161715][T24270] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1147.167945][T24270] genl_family_rcv_msg_doit+0x21a/0x310 [ 1147.173542][T24270] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1147.179504][T24270] genl_rcv_msg+0x611/0x7a0 [ 1147.184054][T24270] ? genl_bind+0x360/0x360 [ 1147.188508][T24270] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1147.194916][T24270] netlink_rcv_skb+0x235/0x4c0 [ 1147.199731][T24270] ? genl_bind+0x360/0x360 [ 1147.204628][T24270] ? netlink_ack+0x1160/0x1160 [ 1147.209443][T24270] ? __lock_acquire+0x7d80/0x7d80 [ 1147.214515][T24270] ? down_read+0x1ac/0x2e0 [ 1147.218964][T24270] genl_rcv+0x28/0x40 [ 1147.222985][T24270] netlink_unicast+0x7b1/0x930 [ 1147.227793][T24270] netlink_sendmsg+0x8d0/0xbf0 [ 1147.232598][T24270] ? lockdep_hardirqs_on+0x98/0x150 [ 1147.237830][T24270] ? netlink_getsockopt+0x590/0x590 [ 1147.243088][T24270] ? netlink_getsockopt+0x590/0x590 [ 1147.248327][T24270] ? netlink_getsockopt+0x590/0x590 [ 1147.253564][T24270] ____sys_sendmsg+0x61b/0x980 [ 1147.258377][T24270] ? __asan_memset+0x22/0x40 [ 1147.263001][T24270] ? __sys_sendmsg_sock+0x30/0x30 [ 1147.268080][T24270] ? __import_iovec+0x5f2/0x850 [ 1147.272975][T24270] ? import_iovec+0x73/0xa0 [ 1147.277516][T24270] ___sys_sendmsg+0x2a6/0x360 [ 1147.282236][T24270] ? __sys_sendmsg+0x2b0/0x2b0 [ 1147.287103][T24270] __se_sys_sendmsg+0x1d0/0x2c0 [ 1147.291997][T24270] ? __x64_sys_sendmsg+0x80/0x80 [ 1147.296988][T24270] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1147.302916][T24270] do_syscall_64+0x55/0xb0 [ 1147.307368][T24270] ? clear_bhb_loop+0x40/0x90 [ 1147.312083][T24270] ? clear_bhb_loop+0x40/0x90 [ 1147.316795][T24270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1147.322723][T24270] RIP: 0033:0x7efe3539e159 [ 1147.327164][T24270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1147.346808][T24270] RSP: 002b:00007efe361e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1147.355257][T24270] RAX: ffffffffffffffda RBX: 00007efe35625fa0 RCX: 00007efe3539e159 [ 1147.363262][T24270] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1147.371264][T24270] RBP: 00007efe3543506b R08: 0000000000000000 R09: 0000000000000000 [ 1147.379272][T24270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1147.387273][T24270] R13: 00007efe35626038 R14: 00007efe35625fa0 R15: 00007fff696d9a48 [ 1147.395304][T24270] [ 1147.434239][T24278] FAULT_INJECTION: forcing a failure. [ 1147.434239][T24278] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.449360][T24278] CPU: 0 PID: 24278 Comm: syz.1.6266 Not tainted syzkaller #0 [ 1147.456894][T24278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1147.467047][T24278] Call Trace: [ 1147.470373][T24278] [ 1147.473348][T24278] dump_stack_lvl+0x18c/0x250 [ 1147.478614][T24278] ? show_regs_print_info+0x20/0x20 [ 1147.483964][T24278] ? load_image+0x420/0x420 [ 1147.488537][T24278] ? __might_sleep+0xe0/0xe0 [ 1147.493195][T24278] ? __lock_acquire+0x7d80/0x7d80 [ 1147.498274][T24278] should_fail_ex+0x394/0x4c0 [ 1147.503017][T24278] should_failslab+0x9/0x20 [ 1147.507581][T24278] slab_pre_alloc_hook+0x59/0x300 [ 1147.512671][T24278] ? sk_prot_alloc+0xe7/0x210 [ 1147.517394][T24278] ? sk_prot_alloc+0xe7/0x210 [ 1147.522120][T24278] __kmem_cache_alloc_node+0x53/0x250 [ 1147.527551][T24278] ? sk_prot_alloc+0xe7/0x210 [ 1147.532289][T24278] __kmalloc+0xa7/0x240 [ 1147.536507][T24278] sk_prot_alloc+0xe7/0x210 [ 1147.541090][T24278] ? sk_alloc+0x24/0x350 [ 1147.545383][T24278] sk_alloc+0x3a/0x350 [ 1147.549506][T24278] ? bpf_ctx_init+0x154/0x190 [ 1147.554241][T24278] bpf_prog_test_run_skb+0x371/0x18f0 [ 1147.559668][T24278] ? __fget_files+0x28/0x460 [ 1147.564311][T24278] ? __fget_files+0x3fc/0x460 [ 1147.569085][T24278] ? cpu_online+0x60/0x60 [ 1147.573475][T24278] bpf_prog_test_run+0x31f/0x390 [ 1147.578479][T24278] __sys_bpf+0x49d/0x890 [ 1147.582787][T24278] ? bpf_link_show_fdinfo+0x560/0x560 [ 1147.588223][T24278] ? lock_chain_count+0x20/0x20 [ 1147.593143][T24278] __x64_sys_bpf+0x7c/0x90 [ 1147.597607][T24278] do_syscall_64+0x55/0xb0 [ 1147.602062][T24278] ? clear_bhb_loop+0x40/0x90 [ 1147.606780][T24278] ? clear_bhb_loop+0x40/0x90 [ 1147.611492][T24278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1147.617453][T24278] RIP: 0033:0x7feb0459e159 [ 1147.621897][T24278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1147.641537][T24278] RSP: 002b:00007feb054be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1147.649981][T24278] RAX: ffffffffffffffda RBX: 00007feb04825fa0 RCX: 00007feb0459e159 [ 1147.657983][T24278] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 1147.665986][T24278] RBP: 00007feb054be090 R08: 0000000000000000 R09: 0000000000000000 [ 1147.674001][T24278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1147.682000][T24278] R13: 00007feb04826038 R14: 00007feb04825fa0 R15: 00007ffcca08bc08 [ 1147.690036][T24278] [ 1147.914426][T24283] netlink: 'syz.0.6268': attribute type 13 has an invalid length. [ 1147.944587][T24283] netlink: 160 bytes leftover after parsing attributes in process `syz.0.6268'. [ 1147.992260][T24283] erspan0: refused to change device tx_queue_len [ 1148.017308][T24283] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1148.157176][T24294] FAULT_INJECTION: forcing a failure. [ 1148.157176][T24294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1148.179339][T24294] CPU: 1 PID: 24294 Comm: syz.1.6267 Not tainted syzkaller #0 [ 1148.186896][T24294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1148.197026][T24294] Call Trace: [ 1148.200355][T24294] [ 1148.203333][T24294] dump_stack_lvl+0x18c/0x250 [ 1148.208080][T24294] ? show_regs_print_info+0x20/0x20 [ 1148.213351][T24294] ? load_image+0x420/0x420 [ 1148.218064][T24294] ? __might_fault+0xaa/0x120 [ 1148.222782][T24294] ? __lock_acquire+0x7d80/0x7d80 [ 1148.227841][T24294] ? __virt_addr_valid+0x10c/0x380 [ 1148.232999][T24294] should_fail_ex+0x394/0x4c0 [ 1148.237748][T24294] _copy_from_user+0x2f/0xe0 [ 1148.242460][T24294] generic_map_update_batch+0x53e/0x800 [ 1148.248044][T24294] ? rcu_read_unlock+0xa0/0xa0 [ 1148.252847][T24294] ? __fdget+0x180/0x210 [ 1148.257135][T24294] ? rcu_read_unlock+0xa0/0xa0 [ 1148.261925][T24294] bpf_map_do_batch+0x3f2/0x600 [ 1148.266808][T24294] ? bpf_lsm_key_free+0x10/0x10 [ 1148.271700][T24294] __sys_bpf+0x381/0x890 [ 1148.275976][T24294] ? bpf_link_show_fdinfo+0x560/0x560 [ 1148.281411][T24294] ? lock_chain_count+0x20/0x20 [ 1148.286302][T24294] __x64_sys_bpf+0x7c/0x90 [ 1148.290749][T24294] do_syscall_64+0x55/0xb0 [ 1148.295200][T24294] ? clear_bhb_loop+0x40/0x90 [ 1148.299911][T24294] ? clear_bhb_loop+0x40/0x90 [ 1148.304649][T24294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1148.310581][T24294] RIP: 0033:0x7feb0459e159 [ 1148.315025][T24294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1148.334665][T24294] RSP: 002b:00007feb0547c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1148.343118][T24294] RAX: ffffffffffffffda RBX: 00007feb04826180 RCX: 00007feb0459e159 [ 1148.351122][T24294] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 1148.359116][T24294] RBP: 00007feb0547c090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.367122][T24294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.375141][T24294] R13: 00007feb04826218 R14: 00007feb04826180 R15: 00007ffcca08bc08 [ 1148.383155][T24294] [ 1148.940918][T24297] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6271'. [ 1149.456564][T24315] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6275'. [ 1149.497676][T24315] hsr_slave_0: left promiscuous mode [ 1149.576761][T24315] hsr_slave_1: left promiscuous mode [ 1149.701978][T24315] bridge0: port 3(hsr0) entered disabled state [ 1149.876958][T24315] hsr0 (unregistering): left allmulticast mode [ 1149.883739][T24315] bridge0: port 3(hsr0) entered disabled state [ 1149.932814][T24318] netlink: 'syz.2.6276': attribute type 25 has an invalid length. [ 1149.945860][T24318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6276'. [ 1150.019863][T24320] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6278'. [ 1150.046901][T24323] netlink: 'syz.1.6279': attribute type 1 has an invalid length. [ 1150.055138][T24323] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6279'. [ 1150.128242][T24320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.329299][T24320] bridge_slave_0 (unregistering): left allmulticast mode [ 1150.356088][T24320] bridge_slave_0 (unregistering): left promiscuous mode [ 1150.363979][T24320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.145467][T24349] netlink: 'syz.3.6287': attribute type 10 has an invalid length. [ 1151.193357][T24349] team0: Port device bridge0 added [ 1151.223822][T24353] FAULT_INJECTION: forcing a failure. [ 1151.223822][T24353] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.243451][T24353] CPU: 1 PID: 24353 Comm: syz.1.6289 Not tainted syzkaller #0 [ 1151.250996][T24353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1151.261101][T24353] Call Trace: [ 1151.264420][T24353] [ 1151.267399][T24353] dump_stack_lvl+0x18c/0x250 [ 1151.272138][T24353] ? show_regs_print_info+0x20/0x20 [ 1151.277390][T24353] ? load_image+0x420/0x420 [ 1151.281950][T24353] ? __might_sleep+0xe0/0xe0 [ 1151.286596][T24353] ? __lock_acquire+0x7d80/0x7d80 [ 1151.291716][T24353] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 1151.297412][T24353] should_fail_ex+0x394/0x4c0 [ 1151.302162][T24353] should_failslab+0x9/0x20 [ 1151.306731][T24353] slab_pre_alloc_hook+0x59/0x300 [ 1151.311826][T24353] kmem_cache_alloc_node+0x5e/0x310 [ 1151.317099][T24353] ? __alloc_skb+0x103/0x2c0 [ 1151.321750][T24353] __alloc_skb+0x103/0x2c0 [ 1151.326227][T24353] __ip_append_data+0x2acf/0x3bf0 [ 1151.331313][T24353] ? perf_trace_preemptirq_template+0x269/0x330 [ 1151.337642][T24353] ? ip_skb_dst_mtu+0x870/0x870 [ 1151.342563][T24353] ? ip_setup_cork+0x840/0x840 [ 1151.347379][T24353] ? ip_setup_cork+0x527/0x840 [ 1151.352202][T24353] ip_make_skb+0x22b/0x440 [ 1151.356713][T24353] ? ip_skb_dst_mtu+0x870/0x870 [ 1151.361622][T24353] ? ip_flush_pending_frames+0x250/0x250 [ 1151.367332][T24353] udp_sendmsg+0x1ae1/0x23d0 [ 1151.371987][T24353] ? ip_skb_dst_mtu+0x870/0x870 [ 1151.376985][T24353] ? udp_cmsg_send+0x350/0x350 [ 1151.381811][T24353] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1151.387875][T24353] ? lock_chain_count+0x20/0x20 [ 1151.392785][T24353] ? inet_sendmsg+0x10d/0x2a0 [ 1151.397518][T24353] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1151.402932][T24353] ? _local_bh_enable+0xa0/0xa0 [ 1151.407817][T24353] ? inet_sendmsg+0x10d/0x2a0 [ 1151.412521][T24353] ? inet_sendmsg+0x10d/0x2a0 [ 1151.417224][T24353] ? inet_send_prepare+0x250/0x250 [ 1151.422360][T24353] ____sys_sendmsg+0x61b/0x980 [ 1151.427177][T24353] ? __sys_sendmsg_sock+0x30/0x30 [ 1151.432231][T24353] ? __import_iovec+0x5f2/0x850 [ 1151.437125][T24353] ? import_iovec+0x73/0xa0 [ 1151.441662][T24353] ___sys_sendmsg+0x2a6/0x360 [ 1151.446371][T24353] ? get_pid_task+0x20/0x1e0 [ 1151.451000][T24353] ? __sys_sendmsg+0x2b0/0x2b0 [ 1151.455833][T24353] ? __lock_acquire+0x7d80/0x7d80 [ 1151.460916][T24353] __se_sys_sendmsg+0x1d0/0x2c0 [ 1151.465795][T24353] ? perf_trace_preemptirq_template+0x269/0x330 [ 1151.472069][T24353] ? __x64_sys_sendmsg+0x80/0x80 [ 1151.477050][T24353] ? lockdep_hardirqs_on+0x98/0x150 [ 1151.482274][T24353] do_syscall_64+0x55/0xb0 [ 1151.486728][T24353] ? clear_bhb_loop+0x40/0x90 [ 1151.491440][T24353] ? clear_bhb_loop+0x40/0x90 [ 1151.496152][T24353] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1151.502078][T24353] RIP: 0033:0x7feb0459e159 [ 1151.506526][T24353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.526156][T24353] RSP: 002b:00007feb054be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1151.534592][T24353] RAX: ffffffffffffffda RBX: 00007feb04825fa0 RCX: 00007feb0459e159 [ 1151.542603][T24353] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1151.550600][T24353] RBP: 00007feb054be090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.558595][T24353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1151.566582][T24353] R13: 00007feb04826038 R14: 00007feb04825fa0 R15: 00007ffcca08bc08 [ 1151.574596][T24353] [ 1152.282597][T24372] team_slave_0: left promiscuous mode [ 1152.307174][T24372] team_slave_0: left allmulticast mode [ 1152.419122][T24372] team0: Port device team_slave_0 removed [ 1152.741366][T24392] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6303'. [ 1152.917918][T24400] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6306'. [ 1153.106223][T24406] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6309'. [ 1153.378936][T24417] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6312'. [ 1153.538219][T24428] FAULT_INJECTION: forcing a failure. [ 1153.538219][T24428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1153.554753][T24428] CPU: 0 PID: 24428 Comm: syz.3.6316 Not tainted syzkaller #0 [ 1153.562295][T24428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1153.572412][T24428] Call Trace: [ 1153.575739][T24428] [ 1153.578721][T24428] dump_stack_lvl+0x18c/0x250 [ 1153.583466][T24428] ? show_regs_print_info+0x20/0x20 [ 1153.588726][T24428] ? load_image+0x420/0x420 [ 1153.593281][T24428] ? __might_fault+0xaa/0x120 [ 1153.598009][T24428] ? __lock_acquire+0x7d80/0x7d80 [ 1153.603251][T24428] ? __virt_addr_valid+0x10c/0x380 [ 1153.608419][T24428] should_fail_ex+0x394/0x4c0 [ 1153.613139][T24428] _copy_from_user+0x2f/0xe0 [ 1153.617855][T24428] generic_map_update_batch+0x58c/0x800 [ 1153.623444][T24428] ? rcu_read_unlock+0xa0/0xa0 [ 1153.628244][T24428] ? __fdget+0x180/0x210 [ 1153.632540][T24428] ? rcu_read_unlock+0xa0/0xa0 [ 1153.637330][T24428] bpf_map_do_batch+0x3f2/0x600 [ 1153.642221][T24428] ? bpf_lsm_key_free+0x10/0x10 [ 1153.647111][T24428] __sys_bpf+0x381/0x890 [ 1153.651392][T24428] ? bpf_link_show_fdinfo+0x560/0x560 [ 1153.656812][T24428] ? lock_chain_count+0x20/0x20 [ 1153.661701][T24428] __x64_sys_bpf+0x7c/0x90 [ 1153.666152][T24428] do_syscall_64+0x55/0xb0 [ 1153.670602][T24428] ? clear_bhb_loop+0x40/0x90 [ 1153.675314][T24428] ? clear_bhb_loop+0x40/0x90 [ 1153.680142][T24428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1153.686075][T24428] RIP: 0033:0x7efe3539e159 [ 1153.690519][T24428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.710171][T24428] RSP: 002b:00007efe361e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1153.718616][T24428] RAX: ffffffffffffffda RBX: 00007efe35625fa0 RCX: 00007efe3539e159 [ 1153.726612][T24428] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 1153.734612][T24428] RBP: 00007efe361e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.742608][T24428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1153.750604][T24428] R13: 00007efe35626038 R14: 00007efe35625fa0 R15: 00007fff696d9a48 [ 1153.758614][T24428] [ 1154.123448][T24442] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6320'. [ 1154.517808][T24454] FAULT_INJECTION: forcing a failure. [ 1154.517808][T24454] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.531211][T24454] CPU: 1 PID: 24454 Comm: syz.2.6324 Not tainted syzkaller #0 [ 1154.538745][T24454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1154.548849][T24454] Call Trace: [ 1154.552177][T24454] [ 1154.555153][T24454] dump_stack_lvl+0x18c/0x250 [ 1154.559930][T24454] ? show_regs_print_info+0x20/0x20 [ 1154.565199][T24454] ? load_image+0x420/0x420 [ 1154.569760][T24454] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1154.576018][T24454] should_fail_ex+0x394/0x4c0 [ 1154.580767][T24454] should_failslab+0x9/0x20 [ 1154.585352][T24454] slab_pre_alloc_hook+0x59/0x300 [ 1154.590532][T24454] kmem_cache_alloc_bulk+0x52/0x5a0 [ 1154.595796][T24454] ? page_pool_alloc_pages+0xba/0x160 [ 1154.601226][T24454] bpf_test_run_xdp_live+0x16a9/0x1b30 [ 1154.606773][T24454] ? bpf_test_run_xdp_live+0x4df/0x1b30 [ 1154.612384][T24454] ? xdp_convert_md_to_buff+0x330/0x330 [ 1154.618026][T24454] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1154.624341][T24454] ? _copy_from_user+0xa5/0xe0 [ 1154.629191][T24454] ? bpf_test_init+0x119/0x140 [ 1154.634010][T24454] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1154.639527][T24454] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 1154.644970][T24454] ? __lock_acquire+0x7d80/0x7d80 [ 1154.650096][T24454] ? dev_put+0x80/0x80 [ 1154.654240][T24454] ? dev_put+0x80/0x80 [ 1154.658368][T24454] bpf_prog_test_run+0x31f/0x390 [ 1154.663364][T24454] __sys_bpf+0x49d/0x890 [ 1154.667665][T24454] ? bpf_link_show_fdinfo+0x560/0x560 [ 1154.673124][T24454] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1154.679629][T24454] __x64_sys_bpf+0x7c/0x90 [ 1154.684114][T24454] do_syscall_64+0x55/0xb0 [ 1154.688589][T24454] ? clear_bhb_loop+0x40/0x90 [ 1154.693361][T24454] ? clear_bhb_loop+0x40/0x90 [ 1154.698111][T24454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1154.704056][T24454] RIP: 0033:0x7fe44ef9e159 [ 1154.708514][T24454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1154.728171][T24454] RSP: 002b:00007fe44feb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1154.736645][T24454] RAX: ffffffffffffffda RBX: 00007fe44f225fa0 RCX: 00007fe44ef9e159 [ 1154.744769][T24454] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1154.752802][T24454] RBP: 00007fe44feb7090 R08: 0000000000000000 R09: 0000000000000000 [ 1154.760823][T24454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1154.768854][T24454] R13: 00007fe44f226038 R14: 00007fe44f225fa0 R15: 00007ffc360fe678 [ 1154.776900][T24454] [ 1155.233017][T24458] syzkaller0: entered promiscuous mode [ 1155.264776][T24458] syzkaller0: entered allmulticast mode [ 1155.343623][T24465] netlink: 'syz.2.6326': attribute type 1 has an invalid length. [ 1155.376930][T24465] netlink: 'syz.2.6326': attribute type 4 has an invalid length. [ 1155.407511][T24465] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6326'. [ 1155.753157][T24467] netlink: 'syz.2.6326': attribute type 1 has an invalid length. [ 1155.773497][T24467] netlink: 'syz.2.6326': attribute type 4 has an invalid length. [ 1155.785750][T24467] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6326'. [ 1156.289339][T24475] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.6330'. [ 1156.326706][T24475] netlink: 'syz.1.6330': attribute type 1 has an invalid length. [ 1156.334927][T24475] netlink: 16520 bytes leftover after parsing attributes in process `syz.1.6330'. [ 1156.492234][T24479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1158.048517][T24510] netlink: 'syz.2.6342': attribute type 29 has an invalid length. [ 1158.070485][T24511] netlink: 'syz.1.6341': attribute type 4 has an invalid length. [ 1158.090317][T24511] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6341'. [ 1158.286861][T24511] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1158.340865][T24510] netlink: 'syz.2.6342': attribute type 29 has an invalid length. [ 1158.379948][T24512] netlink: 'syz.2.6342': attribute type 29 has an invalid length. [ 1158.407491][T24514] netlink: 'syz.2.6342': attribute type 29 has an invalid length. [ 1158.708215][T24525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6345'. [ 1158.767510][T24525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6345'. [ 1158.990101][T24520] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6345'. [ 1159.056425][T24521] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6345'. [ 1159.719866][T24540] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6352'. [ 1160.411664][T24546] sit0: entered promiscuous mode [ 1161.027938][T24563] FAULT_INJECTION: forcing a failure. [ 1161.027938][T24563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1161.109540][T24563] CPU: 0 PID: 24563 Comm: syz.2.6361 Not tainted syzkaller #0 [ 1161.117111][T24563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1161.127220][T24563] Call Trace: [ 1161.130526][T24563] [ 1161.133487][T24563] dump_stack_lvl+0x18c/0x250 [ 1161.138220][T24563] ? show_regs_print_info+0x20/0x20 [ 1161.143482][T24563] ? load_image+0x420/0x420 [ 1161.148031][T24563] ? __might_fault+0xaa/0x120 [ 1161.152761][T24563] ? __lock_acquire+0x7d80/0x7d80 [ 1161.157835][T24563] should_fail_ex+0x394/0x4c0 [ 1161.162570][T24563] _copy_to_iter+0x1ce/0x1110 [ 1161.167312][T24563] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1161.173336][T24563] ? lock_chain_count+0x20/0x20 [ 1161.178222][T24563] ? iov_iter_init+0x1e0/0x1e0 [ 1161.183040][T24563] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1161.188450][T24563] ? lockdep_hardirqs_on+0x98/0x150 [ 1161.193729][T24563] ? page_copy_sane+0x16a/0x270 [ 1161.198619][T24563] copy_page_to_iter+0xa7/0x150 [ 1161.203517][T24563] __sk_msg_recvmsg+0x32b/0xde0 [ 1161.208450][T24563] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1161.214477][T24563] unix_bpf_recvmsg+0x5b0/0xdd0 [ 1161.219390][T24563] ? unix_stream_bpf_update_proto+0x310/0x310 [ 1161.225526][T24563] ? wait_woken+0x180/0x180 [ 1161.230091][T24563] ? aa_sock_msg_perm+0x94/0x150 [ 1161.235502][T24563] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1161.240830][T24563] ? security_socket_recvmsg+0x89/0xb0 [ 1161.246320][T24563] ? unix_dgram_recvmsg+0x71/0xd0 [ 1161.251374][T24563] ? unix_dgram_sendmsg+0x16e0/0x16e0 [ 1161.256778][T24563] ____sys_recvmsg+0x2bd/0x5d0 [ 1161.261587][T24563] ? __sys_recvmsg_sock+0x50/0x50 [ 1161.266654][T24563] ? import_iovec+0x73/0xa0 [ 1161.271194][T24563] ___sys_recvmsg+0x214/0x590 [ 1161.275912][T24563] ? __sys_recvmsg+0x2a0/0x2a0 [ 1161.280713][T24563] ? ksys_write+0x1d2/0x260 [ 1161.285270][T24563] ? __fget_files+0x3fc/0x460 [ 1161.289998][T24563] __x64_sys_recvmsg+0x21e/0x2f0 [ 1161.294977][T24563] ? ___sys_recvmsg+0x590/0x590 [ 1161.299884][T24563] ? lockdep_hardirqs_on+0x98/0x150 [ 1161.305131][T24563] do_syscall_64+0x55/0xb0 [ 1161.309586][T24563] ? clear_bhb_loop+0x40/0x90 [ 1161.314302][T24563] ? clear_bhb_loop+0x40/0x90 [ 1161.319024][T24563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1161.324957][T24563] RIP: 0033:0x7fe44ef9e159 [ 1161.329402][T24563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.349047][T24563] RSP: 002b:00007fe44feb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1161.357507][T24563] RAX: ffffffffffffffda RBX: 00007fe44f225fa0 RCX: 00007fe44ef9e159 [ 1161.365522][T24563] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1161.373531][T24563] RBP: 00007fe44feb7090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.381528][T24563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1161.389526][T24563] R13: 00007fe44f226038 R14: 00007fe44f225fa0 R15: 00007ffc360fe678 [ 1161.397544][T24563] [ 1161.738252][T24579] validate_nla: 1 callbacks suppressed [ 1161.738272][T24579] netlink: 'syz.0.6366': attribute type 10 has an invalid length. [ 1162.202626][T24591] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6370'. [ 1162.380654][T24599] FAULT_INJECTION: forcing a failure. [ 1162.380654][T24599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1162.398233][T24599] CPU: 1 PID: 24599 Comm: syz.1.6372 Not tainted syzkaller #0 [ 1162.405789][T24599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1162.416025][T24599] Call Trace: [ 1162.419347][T24599] [ 1162.422321][T24599] dump_stack_lvl+0x18c/0x250 [ 1162.427067][T24599] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1162.433273][T24599] ? show_regs_print_info+0x20/0x20 [ 1162.438515][T24599] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1162.444725][T24599] ? dump_stack+0x9/0x20 [ 1162.449045][T24599] should_fail_ex+0x394/0x4c0 [ 1162.453782][T24599] _copy_from_user+0x2f/0xe0 [ 1162.458437][T24599] __sys_bpf+0x23e/0x890 [ 1162.462728][T24599] ? read_tsc+0x9/0x20 [ 1162.466838][T24599] ? bpf_link_show_fdinfo+0x560/0x560 [ 1162.472290][T24599] ? lock_chain_count+0x20/0x20 [ 1162.477277][T24599] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1162.483307][T24599] __x64_sys_bpf+0x7c/0x90 [ 1162.487766][T24599] do_syscall_64+0x55/0xb0 [ 1162.492239][T24599] ? clear_bhb_loop+0x40/0x90 [ 1162.496967][T24599] ? clear_bhb_loop+0x40/0x90 [ 1162.501689][T24599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1162.507622][T24599] RIP: 0033:0x7feb0459e159 [ 1162.512084][T24599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1162.531737][T24599] RSP: 002b:00007feb054be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1162.540205][T24599] RAX: ffffffffffffffda RBX: 00007feb04825fa0 RCX: 00007feb0459e159 [ 1162.548222][T24599] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000001 [ 1162.556254][T24599] RBP: 00007feb054be090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.564291][T24599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.572307][T24599] R13: 00007feb04826038 R14: 00007feb04825fa0 R15: 00007ffcca08bc08 [ 1162.580342][T24599] [ 1164.575742][T24636] netlink: 'syz.0.6385': attribute type 25 has an invalid length. [ 1164.591366][T24636] netlink: 'syz.0.6385': attribute type 6 has an invalid length. [ 1164.611745][T24636] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6385'. [ 1164.704506][T24638] netlink: 'syz.3.6386': attribute type 10 has an invalid length. [ 1164.744617][T24638] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.761432][T24638] : (slave team0): Enslaving as an active interface with an up link [ 1165.496294][T24646] netlink: 'syz.1.6389': attribute type 2 has an invalid length. [ 1165.508515][T24646] netlink: 'syz.1.6389': attribute type 8 has an invalid length. [ 1165.536932][T24646] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6389'. [ 1166.125074][T24652] netlink: 'syz.0.6391': attribute type 2 has an invalid length. [ 1166.146483][T24652] netlink: 'syz.0.6391': attribute type 8 has an invalid length. [ 1166.165639][T24652] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6391'. [ 1166.393653][T24660] netlink: 'syz.3.6394': attribute type 21 has an invalid length. [ 1166.401977][T24660] netlink: 'syz.3.6394': attribute type 1 has an invalid length. [ 1169.800555][T24677] netlink: 'syz.0.6400': attribute type 27 has an invalid length. [ 1169.812676][T24677] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6400'. [ 1169.826953][T24677] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1170.070114][T24691] netlink: 56343 bytes leftover after parsing attributes in process `syz.1.6404'. [ 1170.107840][T24693] FAULT_INJECTION: forcing a failure. [ 1170.107840][T24693] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.124398][T24693] CPU: 1 PID: 24693 Comm: syz.2.6405 Not tainted syzkaller #0 [ 1170.131956][T24693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1170.142086][T24693] Call Trace: [ 1170.145421][T24693] [ 1170.148495][T24693] dump_stack_lvl+0x18c/0x250 [ 1170.153246][T24693] ? show_regs_print_info+0x20/0x20 [ 1170.158519][T24693] ? load_image+0x420/0x420 [ 1170.163082][T24693] ? __lock_acquire+0x7d80/0x7d80 [ 1170.168170][T24693] should_fail_ex+0x394/0x4c0 [ 1170.172923][T24693] should_failslab+0x9/0x20 [ 1170.177497][T24693] slab_pre_alloc_hook+0x59/0x300 [ 1170.182584][T24693] ? bpf_prog_alloc+0x3d/0x1a0 [ 1170.187409][T24693] ? bpf_prog_load+0x6b2/0x1610 [ 1170.192315][T24693] ? __sys_bpf+0x5ba/0x890 [ 1170.196792][T24693] kmem_cache_alloc_node+0x5e/0x310 [ 1170.202064][T24693] ? alloc_vmap_area+0x1b4/0x1e50 [ 1170.207159][T24693] alloc_vmap_area+0x1b4/0x1e50 [ 1170.212095][T24693] ? vm_map_ram+0xcf0/0xcf0 [ 1170.216672][T24693] ? rcu_is_watching+0x15/0xb0 [ 1170.221513][T24693] __get_vm_area_node+0x162/0x370 [ 1170.226625][T24693] __vmalloc_node_range+0x36f/0x1320 [ 1170.231988][T24693] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1170.237611][T24693] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1170.243673][T24693] ? lock_chain_count+0x20/0x20 [ 1170.248608][T24693] ? free_vm_area+0x50/0x50 [ 1170.253185][T24693] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1170.259422][T24693] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1170.265035][T24693] __vmalloc+0x7a/0x90 [ 1170.269176][T24693] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1170.274791][T24693] bpf_prog_alloc_no_stats+0x46/0x430 [ 1170.280237][T24693] bpf_prog_alloc+0x3d/0x1a0 [ 1170.284915][T24693] bpf_prog_load+0x6b2/0x1610 [ 1170.289668][T24693] ? map_freeze+0x420/0x420 [ 1170.294234][T24693] ? __might_fault+0xaa/0x120 [ 1170.298963][T24693] ? __lock_acquire+0x7d80/0x7d80 [ 1170.304045][T24693] ? __might_fault+0xaa/0x120 [ 1170.308791][T24693] ? __might_fault+0xc6/0x120 [ 1170.313532][T24693] ? __might_fault+0xaa/0x120 [ 1170.318268][T24693] ? bpf_lsm_bpf+0x9/0x10 [ 1170.322652][T24693] ? security_bpf+0x7e/0xa0 [ 1170.327320][T24693] __sys_bpf+0x5ba/0x890 [ 1170.331631][T24693] ? bpf_link_show_fdinfo+0x560/0x560 [ 1170.337055][T24693] ? 0xffffffffff600000 [ 1170.341273][T24693] ? lock_chain_count+0x20/0x20 [ 1170.346172][T24693] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1170.352224][T24693] __x64_sys_bpf+0x7c/0x90 [ 1170.356696][T24693] do_syscall_64+0x55/0xb0 [ 1170.361176][T24693] ? clear_bhb_loop+0x40/0x90 [ 1170.365909][T24693] ? clear_bhb_loop+0x40/0x90 [ 1170.370637][T24693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1170.376592][T24693] RIP: 0033:0x7fe44ef9e159 [ 1170.381054][T24693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.400716][T24693] RSP: 002b:00007fe44feb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1170.409243][T24693] RAX: ffffffffffffffda RBX: 00007fe44f225fa0 RCX: 00007fe44ef9e159 [ 1170.418051][T24693] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 1170.426069][T24693] RBP: 00007fe44feb7090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.434089][T24693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.442107][T24693] R13: 00007fe44f226038 R14: 00007fe44f225fa0 R15: 00007ffc360fe678 [ 1170.450145][T24693] [ 1170.467406][T24693] warn_alloc: 1 callbacks suppressed [ 1170.467444][T24693] syz.2.6405: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1170.508504][T24693] CPU: 0 PID: 24693 Comm: syz.2.6405 Not tainted syzkaller #0 [ 1170.516042][T24693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1170.526145][T24693] Call Trace: [ 1170.529467][T24693] [ 1170.532433][T24693] dump_stack_lvl+0x18c/0x250 [ 1170.537148][T24693] ? show_regs_print_info+0x20/0x20 [ 1170.542384][T24693] ? load_image+0x420/0x420 [ 1170.546933][T24693] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1170.553426][T24693] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1170.559995][T24693] warn_alloc+0x246/0x340 [ 1170.564382][T24693] ? slab_free_freelist_hook+0x130/0x1a0 [ 1170.570079][T24693] ? zone_watermark_ok_safe+0x230/0x230 [ 1170.575683][T24693] ? __get_vm_area_node+0x17b/0x370 [ 1170.580950][T24693] ? __get_vm_area_node+0x17b/0x370 [ 1170.586222][T24693] __vmalloc_node_range+0x394/0x1320 [ 1170.591592][T24693] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1170.597637][T24693] ? lock_chain_count+0x20/0x20 [ 1170.602564][T24693] ? free_vm_area+0x50/0x50 [ 1170.607182][T24693] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1170.613424][T24693] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1170.619039][T24693] __vmalloc+0x7a/0x90 [ 1170.623171][T24693] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1170.628758][T24693] bpf_prog_alloc_no_stats+0x46/0x430 [ 1170.634167][T24693] bpf_prog_alloc+0x3d/0x1a0 [ 1170.638850][T24693] bpf_prog_load+0x6b2/0x1610 [ 1170.643574][T24693] ? map_freeze+0x420/0x420 [ 1170.648116][T24693] ? __might_fault+0xaa/0x120 [ 1170.652833][T24693] ? __lock_acquire+0x7d80/0x7d80 [ 1170.657906][T24693] ? __might_fault+0xaa/0x120 [ 1170.662623][T24693] ? __might_fault+0xc6/0x120 [ 1170.667339][T24693] ? __might_fault+0xaa/0x120 [ 1170.672049][T24693] ? bpf_lsm_bpf+0x9/0x10 [ 1170.676420][T24693] ? security_bpf+0x7e/0xa0 [ 1170.680959][T24693] __sys_bpf+0x5ba/0x890 [ 1170.685244][T24693] ? bpf_link_show_fdinfo+0x560/0x560 [ 1170.690658][T24693] ? 0xffffffffff600000 [ 1170.694850][T24693] ? lock_chain_count+0x20/0x20 [ 1170.699736][T24693] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1170.705757][T24693] __x64_sys_bpf+0x7c/0x90 [ 1170.710221][T24693] do_syscall_64+0x55/0xb0 [ 1170.714677][T24693] ? clear_bhb_loop+0x40/0x90 [ 1170.719392][T24693] ? clear_bhb_loop+0x40/0x90 [ 1170.724115][T24693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1170.730052][T24693] RIP: 0033:0x7fe44ef9e159 [ 1170.734501][T24693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.754147][T24693] RSP: 002b:00007fe44feb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1170.762607][T24693] RAX: ffffffffffffffda RBX: 00007fe44f225fa0 RCX: 00007fe44ef9e159 [ 1170.770609][T24693] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 1170.778615][T24693] RBP: 00007fe44feb7090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.786618][T24693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.794744][T24693] R13: 00007fe44f226038 R14: 00007fe44f225fa0 R15: 00007ffc360fe678 [ 1170.802854][T24693] [ 1170.830381][T24693] Mem-Info: [ 1170.834013][T24693] active_anon:7269 inactive_anon:0 isolated_anon:0 [ 1170.834013][T24693] active_file:19688 inactive_file:40372 isolated_file:0 [ 1170.834013][T24693] unevictable:768 dirty:409 writeback:0 [ 1170.834013][T24693] slab_reclaimable:10672 slab_unreclaimable:98983 [ 1170.834013][T24693] mapped:25316 shmem:1361 pagetables:563 [ 1170.834013][T24693] sec_pagetables:0 bounce:0 [ 1170.834013][T24693] kernel_misc_reclaimable:0 [ 1170.834013][T24693] free:1339046 free_pcp:5719 free_cma:0 [ 1170.893374][T24693] Node 0 active_anon:28976kB inactive_anon:0kB active_file:78752kB inactive_file:161284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101264kB dirty:1636kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10820kB pagetables:2152kB sec_pagetables:0kB all_unreclaimable? no [ 1170.967673][T24693] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1170.999698][T24693] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1171.034704][T24693] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1171.044129][T24693] Node 0 DMA32 free:1438672kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:28960kB inactive_anon:0kB active_file:78752kB inactive_file:160456kB unevictable:1536kB writepending:1640kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:12272kB local_pcp:8604kB free_cma:0kB [ 1171.084576][T24693] lowmem_reserve[]: 0 0 0 0 0 [ 1171.090644][T24693] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1171.157124][T24693] lowmem_reserve[]: 0 0 0 0 0 [ 1171.162268][T24693] Node 1 Normal free:3902148kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:10976kB local_pcp:1408kB free_cma:0kB [ 1171.210978][T24693] lowmem_reserve[]: 0 0 0 0 0 [ 1171.216501][T24693] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1171.233153][T24693] Node 0 DMA32: 1582*4kB (UM) 1491*8kB (UME) 1104*16kB (UME) 1714*32kB (UME) 1337*64kB (UME) 560*128kB (UME) 235*256kB (UM) 108*512kB (UM) 62*1024kB (UM) 14*2048kB (UM) 240*4096kB (UM) = 1438672kB [ 1171.286918][T24693] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1171.301453][T24693] Node 1 Normal: 209*4kB (UME) 58*8kB (UME) 25*16kB (UME) 249*32kB (UME) 72*64kB (UME) 10*128kB (UE) 2*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3902148kB [ 1171.339082][T24693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1171.359791][T24693] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1171.373139][T24693] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1171.384404][T24693] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1171.404813][T24693] 61421 total pagecache pages [ 1171.432365][T24693] 0 pages in swap cache [ 1171.438549][T24693] Free swap = 124308kB [ 1171.442767][T24693] Total swap = 124996kB [ 1171.458246][T24693] 2097051 pages RAM [ 1171.462140][T24693] 0 pages HighMem/MovableOnly [ 1171.476193][T24693] 416965 pages reserved [ 1171.480441][T24693] 0 pages cma reserved [ 1171.829301][T24718] netlink: 'syz.2.6415': attribute type 3 has an invalid length. [ 1171.837483][T24718] netlink: 'syz.2.6415': attribute type 4 has an invalid length. [ 1171.845448][T24718] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.6415'. [ 1172.481899][T24736] netlink: 'syz.2.6421': attribute type 2 has an invalid length. [ 1172.491402][T24736] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6421'. [ 1172.713237][T24744] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6424'. [ 1172.732744][T24744] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1173.117593][T24752] delete_channel: no stack [ 1173.275073][T24757] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1173.282914][T24757] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1173.290877][T24757] veth0_to_bridge: entered allmulticast mode [ 1173.300082][T24757] veth0_to_bridge: entered promiscuous mode [ 1173.307860][T24757] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1173.368346][T24757] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1173.375795][T24757] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1174.093001][T24779] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6434'. [ 1174.930667][T24797] FAULT_INJECTION: forcing a failure. [ 1174.930667][T24797] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1174.976080][T24797] CPU: 1 PID: 24797 Comm: syz.2.6442 Not tainted syzkaller #0 [ 1174.983648][T24797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1174.993743][T24797] Call Trace: [ 1174.997049][T24797] [ 1175.000027][T24797] dump_stack_lvl+0x18c/0x250 [ 1175.004800][T24797] ? show_regs_print_info+0x20/0x20 [ 1175.010049][T24797] ? load_image+0x420/0x420 [ 1175.014632][T24797] ? __lock_acquire+0x7d80/0x7d80 [ 1175.019746][T24797] should_fail_ex+0x394/0x4c0 [ 1175.024503][T24797] prepare_alloc_pages+0x1e1/0x5b0 [ 1175.029689][T24797] __alloc_pages+0x134/0x460 [ 1175.034352][T24797] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1175.040579][T24797] ? zone_statistics+0x170/0x170 [ 1175.045591][T24797] ? copy_page_from_iter+0xe8/0x100 [ 1175.050858][T24797] pipe_write+0x52a/0x1b20 [ 1175.055373][T24797] ? pipe_read+0x1330/0x1330 [ 1175.060030][T24797] ? end_current_label_crit_section+0x149/0x170 [ 1175.066319][T24797] ? common_file_perm+0x198/0x1f0 [ 1175.071437][T24797] vfs_write+0x474/0x9a0 [ 1175.075732][T24797] ? file_end_write+0x250/0x250 [ 1175.080629][T24797] ? __fget_files+0x3fc/0x460 [ 1175.085352][T24797] ? __fdget_pos+0x1d8/0x330 [ 1175.090070][T24797] ? ksys_write+0x74/0x260 [ 1175.094526][T24797] ksys_write+0x151/0x260 [ 1175.098903][T24797] ? __ia32_sys_read+0x90/0x90 [ 1175.103711][T24797] ? lockdep_hardirqs_on+0x98/0x150 [ 1175.108966][T24797] do_syscall_64+0x55/0xb0 [ 1175.113464][T24797] ? clear_bhb_loop+0x40/0x90 [ 1175.118179][T24797] ? clear_bhb_loop+0x40/0x90 [ 1175.122900][T24797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1175.128831][T24797] RIP: 0033:0x7fe44ef9e159 [ 1175.133284][T24797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1175.153074][T24797] RSP: 002b:00007fe44feb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1175.161530][T24797] RAX: ffffffffffffffda RBX: 00007fe44f225fa0 RCX: 00007fe44ef9e159 [ 1175.169548][T24797] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 0000000000000000 [ 1175.177563][T24797] RBP: 00007fe44feb7090 R08: 0000000000000000 R09: 0000000000000000 [ 1175.185577][T24797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1175.193584][T24797] R13: 00007fe44f226038 R14: 00007fe44f225fa0 R15: 00007ffc360fe678 [ 1175.201641][T24797] [ 1175.674740][T24808] netlink: 'syz.1.6445': attribute type 9 has an invalid length. [ 1175.735019][T24808] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6445'. [ 1177.439774][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.455743][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.778585][T24822] netlink: 'syz.3.6449': attribute type 10 has an invalid length. [ 1179.025998][T24831] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.6453'. [ 1179.076861][T24833] netlink: 'syz.2.6454': attribute type 21 has an invalid length. [ 1179.105879][T24833] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6454'. [ 1179.135986][T24833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6454'. [ 1180.198637][T24856] virt_wifi0: entered promiscuous mode [ 1180.270319][T24856] virt_wifi0: entered allmulticast mode [ 1183.001534][T24878] netlink: 'syz.0.6465': attribute type 10 has an invalid length. [ 1183.044407][T24878] team0: Port device hsr_slave_0 added [ 1183.100057][T24876] netlink: 'syz.3.6468': attribute type 46 has an invalid length. [ 1184.816563][T24898] netlink: 'syz.1.6473': attribute type 21 has an invalid length. [ 1184.825669][T24898] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6473'. [ 1184.866237][T24898] virt_wifi0: entered promiscuous mode [ 1184.871820][T24898] virt_wifi0: entered allmulticast mode [ 1190.391697][T24922] netlink: 'syz.1.6479': attribute type 10 has an invalid length. [ 1190.436719][T24922] team0: Device hsr_slave_0 failed to register rx_handler [ 1190.590920][T24924] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.6480'. [ 1190.604246][T24924] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1195.947435][T24958] netlink: 'syz.3.6490': attribute type 21 has an invalid length. [ 1195.955341][T24958] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6490'. [ 1195.965403][T24962] virt_wifi0: entered promiscuous mode [ 1195.972841][T24962] virt_wifi0: entered allmulticast mode [ 1196.124641][T24965] delete_channel: no stack [ 1196.330827][T24970] netlink: 'syz.3.6493': attribute type 10 has an invalid length. [ 1197.331135][T24984] netlink: 'syz.3.6507': attribute type 11 has an invalid length. [ 1197.363300][T24984] netlink: 'syz.3.6507': attribute type 1 has an invalid length. [ 1197.395879][T24984] netlink: 'syz.3.6507': attribute type 1 has an invalid length. [ 1197.415231][T24984] netlink: 'syz.3.6507': attribute type 2 has an invalid length. [ 1197.435151][T24984] netlink: 198100 bytes leftover after parsing attributes in process `syz.3.6507'. [ 1198.088425][T25003] netlink: 'syz.0.6504': attribute type 21 has an invalid length. [ 1198.125724][T25003] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6504'. [ 1198.347906][T25003] virt_wifi0: entered promiscuous mode [ 1198.371534][T25003] virt_wifi0: entered allmulticast mode [ 1201.390364][T25024] netlink: 'syz.2.6513': attribute type 10 has an invalid length. [ 1201.410521][T25024] team0: Device hsr_slave_0 failed to register rx_handler [ 1202.140524][T25038] netlink: 'syz.2.6515': attribute type 11 has an invalid length. [ 1202.223965][T25038] netlink: 'syz.2.6515': attribute type 1 has an invalid length. [ 1202.276127][T25038] netlink: 'syz.2.6515': attribute type 1 has an invalid length. [ 1202.284051][T25038] netlink: 'syz.2.6515': attribute type 2 has an invalid length. [ 1202.327159][T25038] netlink: 198100 bytes leftover after parsing attributes in process `syz.2.6515'. [ 1202.817323][T25049] netlink: 'syz.3.6519': attribute type 21 has an invalid length. [ 1202.825660][T25049] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6519'. [ 1207.190282][T25072] netlink: 'syz.3.6526': attribute type 10 has an invalid length. [ 1207.762586][T25090] netlink: 'syz.3.6533': attribute type 10 has an invalid length. [ 1208.381135][T25087] netlink: 'syz.0.6531': attribute type 11 has an invalid length. [ 1208.395127][T25087] netlink: 'syz.0.6531': attribute type 1 has an invalid length. [ 1208.409822][T25087] netlink: 'syz.0.6531': attribute type 1 has an invalid length. [ 1208.417885][T25087] netlink: 'syz.0.6531': attribute type 2 has an invalid length. [ 1208.432614][T25087] netlink: 198100 bytes leftover after parsing attributes in process `syz.0.6531'. [ 1208.809227][T25104] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6536'. [ 1208.841597][T25104] netlink: 'syz.0.6536': attribute type 63 has an invalid length. [ 1208.862478][T25104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6536'. [ 1208.905805][T25104] netlink: 'syz.0.6536': attribute type 63 has an invalid length. [ 1208.913848][T25104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6536'. [ 1209.721807][T25111] netlink: 'syz.0.6539': attribute type 10 has an invalid length. [ 1210.500164][T25125] netlink: 'syz.2.6544': attribute type 10 has an invalid length. [ 1211.070098][T25125] team0: Device hsr_slave_0 failed to register rx_handler [ 1211.149884][T25130] netlink: 198100 bytes leftover after parsing attributes in process `syz.0.6546'. [ 1214.735641][T25148] validate_nla: 4 callbacks suppressed [ 1214.735661][T25148] netlink: 'syz.1.6550': attribute type 10 has an invalid length. [ 1214.774890][T25148] team0: Device hsr_slave_0 failed to register rx_handler [ 1215.919081][T25166] netlink: 'syz.2.6557': attribute type 10 has an invalid length. [ 1215.945971][T25166] team0: Device hsr_slave_0 failed to register rx_handler [ 1216.220430][T25169] netlink: 'syz.0.6559': attribute type 10 has an invalid length. [ 1216.516393][T25181] netlink: 'syz.2.6563': attribute type 10 has an invalid length. [ 1216.537416][T25181] team0: Device hsr_slave_0 failed to register rx_handler [ 1219.632995][T25207] netlink: 'syz.3.6571': attribute type 10 has an invalid length. [ 1219.728115][T25210] netlink: 'syz.1.6572': attribute type 1 has an invalid length. [ 1219.756871][T25210] netlink: 'syz.1.6572': attribute type 3 has an invalid length. [ 1219.765386][T25210] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6572'. [ 1220.662863][T25220] netlink: 'syz.3.6574': attribute type 10 has an invalid length. [ 1220.692419][T25214] netlink: 'syz.1.6573': attribute type 10 has an invalid length. [ 1220.776978][T25214] team0: Device hsr_slave_0 failed to register rx_handler [ 1221.501475][T25224] netlink: 'syz.0.6581': attribute type 10 has an invalid length. [ 1221.706953][T25230] netlink: 'syz.1.6577': attribute type 10 has an invalid length. [ 1221.766846][T25230] team0: Device hsr_slave_0 failed to register rx_handler [ 1222.387800][T25237] netlink: 'syz.0.6587': attribute type 10 has an invalid length. [ 1225.167372][T25254] netlink: 'syz.2.6583': attribute type 1 has an invalid length. [ 1225.181641][T25254] netlink: 'syz.2.6583': attribute type 3 has an invalid length. [ 1225.201806][T25254] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6583'. [ 1228.355967][T25265] netlink: 'syz.2.6588': attribute type 10 has an invalid length. [ 1228.364547][T25265] team0: Device hsr_slave_0 failed to register rx_handler [ 1228.665965][T25277] netlink: 'syz.1.6589': attribute type 10 has an invalid length. [ 1228.674568][T25277] team0: Device hsr_slave_0 failed to register rx_handler [ 1231.948490][T25290] sit0: entered allmulticast mode [ 1232.338559][T25301] netlink: 'syz.0.6597': attribute type 1 has an invalid length. [ 1232.355832][T25301] netlink: 'syz.0.6597': attribute type 3 has an invalid length. [ 1232.364388][T25301] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6597'. [ 1233.074345][T25311] mac80211_hwsim hwsim51 wlan0: entered promiscuous mode [ 1233.091157][T25311] mac80211_hwsim hwsim51 wlan0: entered allmulticast mode [ 1233.240798][T25314] netlink: 'syz.2.6603': attribute type 10 has an invalid length. [ 1233.251926][T25314] team0: Device hsr_slave_0 failed to register rx_handler [ 1233.387942][T25318] netlink: 'syz.3.6605': attribute type 10 has an invalid length. [ 1234.400688][T25325] sit0: entered allmulticast mode [ 1234.878637][T25339] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 1234.895694][T25339] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 1234.907678][T25341] netlink: 'syz.1.6614': attribute type 10 has an invalid length. [ 1234.915775][T25341] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6614'. [ 1234.924705][T25341] hsr0: entered promiscuous mode [ 1234.934047][T25341] bridge0: port 4(hsr0) entered blocking state [ 1234.945972][T25341] bridge0: port 4(hsr0) entered disabled state [ 1234.952437][T25341] hsr0: entered allmulticast mode [ 1234.961802][T25341] hsr_slave_0: entered allmulticast mode [ 1234.969750][T25341] hsr_slave_1: entered allmulticast mode [ 1234.995000][T25337] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6614'. [ 1235.074527][T25337] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1238.801749][T25363] netlink: 'syz.2.6621': attribute type 10 has an invalid length. [ 1238.843008][T25363] team0: Device hsr_slave_0 failed to register rx_handler [ 1238.868653][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.875217][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.967770][T25365] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6631'. [ 1239.561409][T25362] netlink: 'syz.3.6631': attribute type 10 has an invalid length. [ 1239.590057][T25362] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6631'. [ 1239.629354][T25365] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1239.663764][T25365] CPU: 0 PID: 25365 Comm: syz.3.6631 Not tainted syzkaller #0 [ 1239.671332][T25365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1239.681604][T25365] Call Trace: [ 1239.684916][T25365] [ 1239.687882][T25365] dump_stack_lvl+0x18c/0x250 [ 1239.692611][T25365] ? show_regs_print_info+0x20/0x20 [ 1239.697882][T25365] ? load_image+0x420/0x420 [ 1239.702459][T25365] sysfs_warn_dup+0x8e/0xa0 [ 1239.707000][T25365] sysfs_do_create_link_sd+0xc0/0x110 [ 1239.712412][T25365] device_add_class_symlinks+0x1cf/0x240 [ 1239.718089][T25365] device_add+0x4f9/0xc40 [ 1239.722459][T25365] wiphy_register+0x1d99/0x2ac0 [ 1239.727370][T25365] ? cfg80211_event_work+0x40/0x40 [ 1239.732520][T25365] ? minstrel_ht_alloc+0x88a/0x990 [ 1239.737668][T25365] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1239.743768][T25365] ieee80211_register_hw+0x2dd8/0x3b30 [ 1239.749279][T25365] ? ieee80211_register_hw+0xfb1/0x3b30 [ 1239.754895][T25365] ? ieee80211_tasklet_handler+0x20/0x20 [ 1239.760571][T25365] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1239.766499][T25365] ? __debug_object_init+0xec/0x450 [ 1239.771740][T25365] ? __asan_memset+0x22/0x40 [ 1239.776374][T25365] ? __hrtimer_init+0x189/0x270 [ 1239.781274][T25365] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1239.787054][T25365] ? mac80211_hwsim_free+0x220/0x220 [ 1239.792372][T25365] ? rcu_is_watching+0x15/0xb0 [ 1239.797174][T25365] ? kstrndup+0xbd/0x140 [ 1239.801467][T25365] hwsim_new_radio_nl+0xdad/0x1a70 [ 1239.806621][T25365] ? __nla_validate+0x50/0x50 [ 1239.811349][T25365] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1239.817720][T25365] ? __nla_parse+0x40/0x50 [ 1239.822178][T25365] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1239.828551][T25365] genl_family_rcv_msg_doit+0x21a/0x310 [ 1239.834138][T25365] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1239.840075][T25365] ? bpf_lsm_capable+0x9/0x10 [ 1239.844776][T25365] ? security_capable+0x89/0xb0 [ 1239.849671][T25365] genl_rcv_msg+0x611/0x7a0 [ 1239.854229][T25365] ? genl_bind+0x360/0x360 [ 1239.858689][T25365] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1239.865055][T25365] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1239.871673][T25365] ? ref_tracker_free+0x686/0x830 [ 1239.876747][T25365] netlink_rcv_skb+0x235/0x4c0 [ 1239.881545][T25365] ? genl_bind+0x360/0x360 [ 1239.885994][T25365] ? netlink_ack+0x1160/0x1160 [ 1239.890801][T25365] ? __lock_acquire+0x7d80/0x7d80 [ 1239.895864][T25365] ? down_read+0x1ac/0x2e0 [ 1239.900317][T25365] genl_rcv+0x28/0x40 [ 1239.904336][T25365] netlink_unicast+0x7b1/0x930 [ 1239.909138][T25365] netlink_sendmsg+0x8d0/0xbf0 [ 1239.913940][T25365] ? netlink_getsockopt+0x590/0x590 [ 1239.919170][T25365] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1239.924778][T25365] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1239.930094][T25365] ? security_socket_sendmsg+0x80/0xa0 [ 1239.935579][T25365] ? netlink_getsockopt+0x590/0x590 [ 1239.940811][T25365] ____sys_sendmsg+0x61b/0x980 [ 1239.945617][T25365] ? __asan_memset+0x22/0x40 [ 1239.950242][T25365] ? __sys_sendmsg_sock+0x30/0x30 [ 1239.955291][T25365] ? __import_iovec+0x5f2/0x850 [ 1239.960184][T25365] ? import_iovec+0x73/0xa0 [ 1239.964752][T25365] ___sys_sendmsg+0x2a6/0x360 [ 1239.969464][T25365] ? __lock_acquire+0x7d80/0x7d80 [ 1239.974553][T25365] ? __sys_sendmsg+0x2b0/0x2b0 [ 1239.979425][T25365] __se_sys_sendmsg+0x1d0/0x2c0 [ 1239.984363][T25365] ? __x64_sys_sendmsg+0x80/0x80 [ 1239.989353][T25365] ? lockdep_hardirqs_on+0x98/0x150 [ 1239.994590][T25365] do_syscall_64+0x55/0xb0 [ 1239.999067][T25365] ? clear_bhb_loop+0x40/0x90 [ 1240.003780][T25365] ? clear_bhb_loop+0x40/0x90 [ 1240.008497][T25365] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1240.014428][T25365] RIP: 0033:0x7efe3539e159 [ 1240.018873][T25365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1240.038537][T25365] RSP: 002b:00007efe361c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1240.047008][T25365] RAX: ffffffffffffffda RBX: 00007efe35626090 RCX: 00007efe3539e159 [ 1240.055008][T25365] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1240.063013][T25365] RBP: 00007efe3543506b R08: 0000000000000000 R09: 0000000000000000 [ 1240.071046][T25365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1240.079050][T25365] R13: 00007efe35626128 R14: 00007efe35626090 R15: 00007fff696d9a48 [ 1240.087064][T25365] [ 1240.430444][T25374] sit0: left promiscuous mode [ 1241.117444][T25386] mac80211_hwsim hwsim54 wlan0: entered promiscuous mode [ 1241.135996][T25386] mac80211_hwsim hwsim54 wlan0: entered allmulticast mode [ 1241.221359][T25396] FAULT_INJECTION: forcing a failure. [ 1241.221359][T25396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1241.234955][T25396] CPU: 1 PID: 25396 Comm: syz.1.6634 Not tainted syzkaller #0 [ 1241.242503][T25396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1241.252639][T25396] Call Trace: [ 1241.255986][T25396] [ 1241.258987][T25396] dump_stack_lvl+0x18c/0x250 [ 1241.263773][T25396] ? show_regs_print_info+0x20/0x20 [ 1241.269066][T25396] ? load_image+0x420/0x420 [ 1241.273665][T25396] ? __might_fault+0xaa/0x120 [ 1241.278438][T25396] ? __lock_acquire+0x7d80/0x7d80 [ 1241.283573][T25396] should_fail_ex+0x394/0x4c0 [ 1241.288358][T25396] _copy_from_iter+0x1cd/0x1290 [ 1241.293315][T25396] ? rcu_is_watching+0x15/0xb0 [ 1241.298269][T25396] ? copyout_mc+0x70/0x70 [ 1241.302689][T25396] ? __virt_addr_valid+0x10c/0x380 [ 1241.307887][T25396] ? __virt_addr_valid+0x10c/0x380 [ 1241.313092][T25396] ? __virt_addr_valid+0x10c/0x380 [ 1241.318304][T25396] ? __check_object_size+0x4fc/0xa40 [ 1241.323681][T25396] netlink_sendmsg+0x76b/0xbf0 [ 1241.328561][T25396] ? netlink_getsockopt+0x590/0x590 [ 1241.333881][T25396] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1241.339531][T25396] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1241.344894][T25396] ? security_socket_sendmsg+0x80/0xa0 [ 1241.350432][T25396] ? netlink_getsockopt+0x590/0x590 [ 1241.355715][T25396] ____sys_sendmsg+0x61b/0x980 [ 1241.360592][T25396] ? __asan_memset+0x22/0x40 [ 1241.365278][T25396] ? __sys_sendmsg_sock+0x30/0x30 [ 1241.370391][T25396] ? __import_iovec+0x5f2/0x850 [ 1241.375373][T25396] ? import_iovec+0x73/0xa0 [ 1241.380001][T25396] ___sys_sendmsg+0x2a6/0x360 [ 1241.384786][T25396] ? __sys_sendmsg+0x2b0/0x2b0 [ 1241.389716][T25396] ? __lock_acquire+0x7d80/0x7d80 [ 1241.394921][T25396] __se_sys_sendmsg+0x1d0/0x2c0 [ 1241.399876][T25396] ? __x64_sys_sendmsg+0x80/0x80 [ 1241.404962][T25396] ? lockdep_hardirqs_on+0x98/0x150 [ 1241.410293][T25396] do_syscall_64+0x55/0xb0 [ 1241.414798][T25396] ? clear_bhb_loop+0x40/0x90 [ 1241.419554][T25396] ? clear_bhb_loop+0x40/0x90 [ 1241.424353][T25396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1241.430372][T25396] RIP: 0033:0x7feb0459e159 [ 1241.434896][T25396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1241.454581][T25396] RSP: 002b:00007feb054be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1241.463085][T25396] RAX: ffffffffffffffda RBX: 00007feb04825fa0 RCX: 00007feb0459e159 [ 1241.471134][T25396] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1241.479179][T25396] RBP: 00007feb054be090 R08: 0000000000000000 R09: 0000000000000000 [ 1241.487224][T25396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1241.495269][T25396] R13: 00007feb04826038 R14: 00007feb04825fa0 R15: 00007ffcca08bc08 [ 1241.503373][T25396] [ 1241.666255][T25399] netlink: 'syz.0.6635': attribute type 10 has an invalid length. [ 1241.953153][T25400] netlink: 'syz.2.6637': attribute type 10 has an invalid length. [ 1241.964068][T25400] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6637'. [ 1241.979406][T25404] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6637'. [ 1241.990361][T25400] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1242.083621][T25400] bridge0: port 4(hsr0) entered blocking state [ 1242.095270][T25400] bridge0: port 4(hsr0) entered disabled state [ 1242.112541][T25400] hsr0: entered allmulticast mode [ 1242.119429][T25400] hsr_slave_0: entered allmulticast mode [ 1242.126547][T25400] hsr_slave_1: entered allmulticast mode [ 1242.161176][T25400] bridge0: port 4(hsr0) entered blocking state [ 1242.167813][T25400] bridge0: port 4(hsr0) entered forwarding state [ 1242.205195][T25404] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1242.222048][T25404] CPU: 0 PID: 25404 Comm: syz.2.6637 Not tainted syzkaller #0 [ 1242.229642][T25404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1242.239789][T25404] Call Trace: [ 1242.243121][T25404] [ 1242.246140][T25404] dump_stack_lvl+0x18c/0x250 [ 1242.250893][T25404] ? show_regs_print_info+0x20/0x20 [ 1242.256165][T25404] ? load_image+0x420/0x420 [ 1242.260745][T25404] sysfs_warn_dup+0x8e/0xa0 [ 1242.265311][T25404] sysfs_do_create_link_sd+0xc0/0x110 [ 1242.270751][T25404] device_add_class_symlinks+0x1cf/0x240 [ 1242.276452][T25404] device_add+0x4f9/0xc40 [ 1242.280846][T25404] wiphy_register+0x1d99/0x2ac0 [ 1242.285817][T25404] ? cfg80211_event_work+0x40/0x40 [ 1242.290992][T25404] ? minstrel_ht_alloc+0x88a/0x990 [ 1242.296182][T25404] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1242.302315][T25404] ieee80211_register_hw+0x2dd8/0x3b30 [ 1242.307860][T25404] ? ieee80211_register_hw+0xfb1/0x3b30 [ 1242.313491][T25404] ? ieee80211_tasklet_handler+0x20/0x20 [ 1242.319192][T25404] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1242.325151][T25404] ? __debug_object_init+0xec/0x450 [ 1242.330421][T25404] ? __asan_memset+0x22/0x40 [ 1242.335091][T25404] ? __hrtimer_init+0x189/0x270 [ 1242.340007][T25404] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1242.345812][T25404] ? mac80211_hwsim_free+0x220/0x220 [ 1242.351173][T25404] ? rcu_is_watching+0x15/0xb0 [ 1242.356000][T25404] ? kstrndup+0xbd/0x140 [ 1242.360322][T25404] hwsim_new_radio_nl+0xdad/0x1a70 [ 1242.365502][T25404] ? __nla_validate+0x50/0x50 [ 1242.370266][T25404] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1242.376668][T25404] ? __nla_parse+0x40/0x50 [ 1242.381155][T25404] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1242.387562][T25404] genl_family_rcv_msg_doit+0x21a/0x310 [ 1242.393184][T25404] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1242.399157][T25404] ? bpf_lsm_capable+0x9/0x10 [ 1242.403881][T25404] ? security_capable+0x89/0xb0 [ 1242.408801][T25404] genl_rcv_msg+0x611/0x7a0 [ 1242.413391][T25404] ? genl_bind+0x360/0x360 [ 1242.415075][T25411] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.6640'. [ 1242.417855][T25404] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1242.417890][T25404] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1242.417914][T25404] ? ref_tracker_free+0x686/0x830 [ 1242.417954][T25404] netlink_rcv_skb+0x235/0x4c0 [ 1242.417984][T25404] ? genl_bind+0x360/0x360 [ 1242.418036][T25404] ? netlink_ack+0x1160/0x1160 [ 1242.418082][T25404] ? __lock_acquire+0x7d80/0x7d80 [ 1242.418121][T25404] ? down_read+0x1ac/0x2e0 [ 1242.418151][T25404] genl_rcv+0x28/0x40 [ 1242.418179][T25404] netlink_unicast+0x7b1/0x930 [ 1242.418221][T25404] netlink_sendmsg+0x8d0/0xbf0 [ 1242.418262][T25404] ? netlink_getsockopt+0x590/0x590 [ 1242.418294][T25404] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1242.418326][T25404] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1242.418358][T25404] ? security_socket_sendmsg+0x80/0xa0 [ 1242.418393][T25404] ? netlink_getsockopt+0x590/0x590 [ 1242.418425][T25404] ____sys_sendmsg+0x61b/0x980 [ 1242.418483][T25404] ? __asan_memset+0x22/0x40 [ 1242.429478][T25411] openvswitch: netlink: IP tunnel dst address not specified [ 1242.434116][T25404] ? __sys_sendmsg_sock+0x30/0x30 [ 1242.434151][T25404] ? __import_iovec+0x5f2/0x850 [ 1242.434200][T25404] ? import_iovec+0x73/0xa0 [ 1242.434240][T25404] ___sys_sendmsg+0x2a6/0x360 [ 1242.434281][T25404] ? __sys_sendmsg+0x2b0/0x2b0 [ 1242.434516][T25404] __se_sys_sendmsg+0x1d0/0x2c0 [ 1242.555290][T25404] ? __x64_sys_sendmsg+0x80/0x80 [ 1242.560270][T25404] ? lockdep_hardirqs_on+0x98/0x150 [ 1242.565511][T25404] do_syscall_64+0x55/0xb0 [ 1242.569988][T25404] ? clear_bhb_loop+0x40/0x90 [ 1242.574726][T25404] ? clear_bhb_loop+0x40/0x90 [ 1242.579468][T25404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1242.585414][T25404] RIP: 0033:0x7fe44ef9e159 [ 1242.589866][T25404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1242.609504][T25404] RSP: 002b:00007fe44fe96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1242.618058][T25404] RAX: ffffffffffffffda RBX: 00007fe44f226090 RCX: 00007fe44ef9e159 [ 1242.626099][T25404] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1242.634088][T25404] RBP: 00007fe44f03506b R08: 0000000000000000 R09: 0000000000000000 [ 1242.642088][T25404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1242.650077][T25404] R13: 00007fe44f226128 R14: 00007fe44f226090 R15: 00007ffc360fe678 [ 1242.658076][T25404] [ 1242.832180][T25421] netlink: 'syz.0.6643': attribute type 29 has an invalid length. [ 1242.840962][T25421] netlink: 'syz.0.6643': attribute type 29 has an invalid length. [ 1242.869527][T25421] netlink: 'syz.0.6643': attribute type 29 has an invalid length. [ 1242.883490][T25421] netlink: 'syz.0.6643': attribute type 29 has an invalid length. [ 1243.111150][T25427] mac80211_hwsim hwsim51 wlan0: left promiscuous mode [ 1243.129252][T25427] mac80211_hwsim hwsim51 wlan0: left allmulticast mode [ 1243.165935][T25434] mac80211_hwsim hwsim51 wlan0: entered promiscuous mode [ 1243.175679][T25434] mac80211_hwsim hwsim51 wlan0: entered allmulticast mode [ 1243.370545][T25438] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.6651'. [ 1243.381092][T25438] openvswitch: netlink: IP tunnel dst address not specified [ 1243.573850][T25446] netlink: 'syz.1.6654': attribute type 10 has an invalid length. [ 1243.614080][T25446] team0: Device hsr_slave_0 failed to register rx_handler [ 1244.032364][T25451] netlink: 'syz.0.6656': attribute type 10 has an invalid length. [ 1244.049341][T25451] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6656'. [ 1244.074466][T25452] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6656'. [ 1244.105298][T25452] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1244.132180][T25457] netlink: 'syz.1.6657': attribute type 1 has an invalid length. [ 1244.138235][T25452] CPU: 0 PID: 25452 Comm: syz.0.6656 Not tainted syzkaller #0 [ 1244.147689][T25452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1244.158058][T25452] Call Trace: [ 1244.161419][T25452] [ 1244.164514][T25452] dump_stack_lvl+0x18c/0x250 [ 1244.169271][T25452] ? show_regs_print_info+0x20/0x20 [ 1244.174580][T25452] ? load_image+0x420/0x420 [ 1244.179169][T25452] sysfs_warn_dup+0x8e/0xa0 [ 1244.183734][T25452] sysfs_do_create_link_sd+0xc0/0x110 [ 1244.187886][T25457] netlink: 'syz.1.6657': attribute type 3 has an invalid length. [ 1244.189151][T25452] device_add_class_symlinks+0x1cf/0x240 [ 1244.189197][T25452] device_add+0x4f9/0xc40 [ 1244.189233][T25452] wiphy_register+0x1d99/0x2ac0 [ 1244.189296][T25452] ? cfg80211_event_work+0x40/0x40 [ 1244.189328][T25452] ? minstrel_ht_alloc+0x88a/0x990 [ 1244.189395][T25452] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1244.228708][T25452] ieee80211_register_hw+0x2dd8/0x3b30 [ 1244.233925][T25457] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6657'. [ 1244.234271][T25452] ? ieee80211_register_hw+0xfb1/0x3b30 [ 1244.234324][T25452] ? ieee80211_tasklet_handler+0x20/0x20 [ 1244.234356][T25452] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1244.260571][T25452] ? __debug_object_init+0xec/0x450 [ 1244.265870][T25452] ? __asan_memset+0x22/0x40 [ 1244.270520][T25452] ? __hrtimer_init+0x189/0x270 [ 1244.275432][T25452] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1244.281298][T25452] ? mac80211_hwsim_free+0x220/0x220 [ 1244.286676][T25452] ? rcu_is_watching+0x15/0xb0 [ 1244.291497][T25452] ? kstrndup+0xbd/0x140 [ 1244.295814][T25452] hwsim_new_radio_nl+0xdad/0x1a70 [ 1244.301007][T25452] ? __nla_validate+0x50/0x50 [ 1244.305771][T25452] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1244.312183][T25452] ? __nla_parse+0x40/0x50 [ 1244.316674][T25452] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1244.323073][T25452] genl_family_rcv_msg_doit+0x21a/0x310 [ 1244.328694][T25452] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1244.334655][T25452] ? bpf_lsm_capable+0x9/0x10 [ 1244.339494][T25452] ? security_capable+0x89/0xb0 [ 1244.344416][T25452] genl_rcv_msg+0x611/0x7a0 [ 1244.348987][T25452] ? genl_bind+0x360/0x360 [ 1244.353454][T25452] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1244.359842][T25452] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1244.366480][T25452] ? ref_tracker_free+0x686/0x830 [ 1244.371570][T25452] netlink_rcv_skb+0x235/0x4c0 [ 1244.376415][T25452] ? genl_bind+0x360/0x360 [ 1244.380927][T25452] ? netlink_ack+0x1160/0x1160 [ 1244.385756][T25452] ? __lock_acquire+0x7d80/0x7d80 [ 1244.390846][T25452] ? down_read+0x1ac/0x2e0 [ 1244.395325][T25452] genl_rcv+0x28/0x40 [ 1244.399381][T25452] netlink_unicast+0x7b1/0x930 [ 1244.404225][T25452] netlink_sendmsg+0x8d0/0xbf0 [ 1244.409053][T25452] ? netlink_getsockopt+0x590/0x590 [ 1244.414319][T25452] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1244.419935][T25452] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1244.425279][T25452] ? security_socket_sendmsg+0x80/0xa0 [ 1244.430781][T25452] ? netlink_getsockopt+0x590/0x590 [ 1244.436061][T25452] ____sys_sendmsg+0x61b/0x980 [ 1244.440897][T25452] ? __asan_memset+0x22/0x40 [ 1244.445553][T25452] ? __sys_sendmsg_sock+0x30/0x30 [ 1244.450638][T25452] ? __import_iovec+0x5f2/0x850 [ 1244.455563][T25452] ? import_iovec+0x73/0xa0 [ 1244.460176][T25452] ___sys_sendmsg+0x2a6/0x360 [ 1244.464925][T25452] ? __sys_sendmsg+0x2b0/0x2b0 [ 1244.469821][T25452] __se_sys_sendmsg+0x1d0/0x2c0 [ 1244.474738][T25452] ? __x64_sys_sendmsg+0x80/0x80 [ 1244.479763][T25452] ? lockdep_hardirqs_on+0x98/0x150 [ 1244.485018][T25452] do_syscall_64+0x55/0xb0 [ 1244.489499][T25452] ? clear_bhb_loop+0x40/0x90 [ 1244.494233][T25452] ? clear_bhb_loop+0x40/0x90 [ 1244.498974][T25452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1244.504978][T25452] RIP: 0033:0x7f158a19e159 [ 1244.509451][T25452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1244.529152][T25452] RSP: 002b:00007f158b002028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1244.537627][T25452] RAX: ffffffffffffffda RBX: 00007f158a426090 RCX: 00007f158a19e159 [ 1244.545651][T25452] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1244.553755][T25452] RBP: 00007f158a23506b R08: 0000000000000000 R09: 0000000000000000 [ 1244.561800][T25452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1244.569822][T25452] R13: 00007f158a426128 R14: 00007f158a426090 R15: 00007ffc67c7fc58 [ 1244.577887][T25452] [ 1245.061240][T25465] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.6663'. [ 1245.071246][T25465] openvswitch: netlink: IP tunnel dst address not specified [ 1245.261624][T25476] netlink: 'syz.0.6667': attribute type 10 has an invalid length. [ 1245.544722][T25482] netlink: 'syz.3.6668': attribute type 10 has an invalid length. [ 1246.791489][T25509] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.6678'. [ 1246.816147][T25509] openvswitch: netlink: IP tunnel dst address not specified [ 1246.826910][T25516] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6679'. [ 1246.856621][T25516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1247.000476][T25522] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6681'. [ 1247.019549][T25522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1247.085350][T25515] tap1: tun_chr_ioctl cmd 1074025676 [ 1247.099203][T25515] tap1: owner set to 776 [ 1247.271236][T25524] netlink: 'syz.2.6684': attribute type 10 has an invalid length. [ 1247.280939][T25524] team0: Device hsr_slave_0 is already a lower device of the team interface [ 1247.317018][T25527] netlink: 'syz.1.6683': attribute type 10 has an invalid length. [ 1247.352776][T25527] team0: Device hsr_slave_0 failed to register rx_handler [ 1248.121442][T25546] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.6693'. [ 1248.212732][T25546] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.6693'. [ 1248.247301][T25546] netlink: 'syz.3.6693': attribute type 1 has an invalid length. [ 1248.270163][T25546] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.6693'. [ 1248.564590][T25552] openvswitch: netlink: Tunnel attr 8545 out of range max 16 [ 1248.901856][T25566] netlink: 'syz.3.6699': attribute type 10 has an invalid length. [ 1249.090586][T25569] netlink: 'syz.0.6703': attribute type 29 has an invalid length. [ 1249.125885][T25569] netlink: 'syz.0.6703': attribute type 29 has an invalid length. [ 1249.167193][T25571] netlink: 'syz.0.6703': attribute type 29 has an invalid length. [ 1249.218488][T25569] netlink: 'syz.0.6703': attribute type 29 has an invalid length. [ 1249.282918][T25575] netlink: 'syz.3.6704': attribute type 10 has an invalid length. [ 1249.688467][T25580] netlink: 'syz.0.6706': attribute type 9 has an invalid length. [ 1249.697755][T25580] __nla_validate_parse: 2 callbacks suppressed [ 1249.697890][T25580] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6706'. [ 1256.306621][T25604] netlink: 'syz.1.6714': attribute type 2 has an invalid length. [ 1256.733648][T25611] netlink: 'syz.0.6718': attribute type 10 has an invalid length. [ 1256.794483][T25613] netlink: 'syz.1.6719': attribute type 9 has an invalid length. [ 1256.828816][T25613] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6719'. [ 1257.759485][T25632] FAULT_INJECTION: forcing a failure. [ 1257.759485][T25632] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.773319][T25632] CPU: 0 PID: 25632 Comm: syz.0.6722 Not tainted syzkaller #0 [ 1257.780847][T25632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1257.790958][T25632] Call Trace: [ 1257.794288][T25632] [ 1257.797258][T25632] dump_stack_lvl+0x18c/0x250 [ 1257.802000][T25632] ? show_regs_print_info+0x20/0x20 [ 1257.807264][T25632] ? load_image+0x420/0x420 [ 1257.811859][T25632] ? __might_sleep+0xe0/0xe0 [ 1257.816509][T25632] ? __lock_acquire+0x7d80/0x7d80 [ 1257.821712][T25632] should_fail_ex+0x394/0x4c0 [ 1257.826462][T25632] should_failslab+0x9/0x20 [ 1257.831035][T25632] slab_pre_alloc_hook+0x59/0x300 [ 1257.836117][T25632] ? __lock_acquire+0x1336/0x7d80 [ 1257.841182][T25632] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1257.846940][T25632] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1257.852691][T25632] __kmem_cache_alloc_node+0x53/0x250 [ 1257.858112][T25632] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1257.863890][T25632] __kmalloc+0xa7/0x240 [ 1257.868147][T25632] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1257.873771][T25632] tomoyo_check_open_permission+0x224/0x460 [ 1257.879711][T25632] ? tomoyo_check_open_permission+0x1cf/0x460 [ 1257.885817][T25632] ? tomoyo_check_path_number_acl+0x280/0x280 [ 1257.891930][T25632] ? __asan_memset+0x22/0x40 [ 1257.896589][T25632] ? __rwlock_init+0x150/0x150 [ 1257.901397][T25632] ? tomoyo_file_open+0xed/0x180 [ 1257.906368][T25632] security_file_open+0x62/0xa0 [ 1257.911261][T25632] do_dentry_open+0x32b/0x14b0 [ 1257.916058][T25632] ? __asan_memcpy+0x40/0x70 [ 1257.920683][T25632] path_openat+0x284f/0x3270 [ 1257.925323][T25632] ? do_sys_openat2+0xda/0x1d0 [ 1257.930126][T25632] ? __x64_sys_openat+0x139/0x160 [ 1257.935187][T25632] ? verify_lock_unused+0x140/0x140 [ 1257.940416][T25632] ? do_filp_open+0x430/0x430 [ 1257.945138][T25632] do_filp_open+0x1f2/0x430 [ 1257.949675][T25632] ? vfs_tmpfile+0x620/0x620 [ 1257.954319][T25632] ? _raw_spin_unlock+0x28/0x40 [ 1257.959208][T25632] ? alloc_fd+0x590/0x640 [ 1257.963591][T25632] do_sys_openat2+0x134/0x1d0 [ 1257.968303][T25632] ? do_sys_open+0xe0/0xe0 [ 1257.972759][T25632] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1257.978770][T25632] ? lock_chain_count+0x20/0x20 [ 1257.983653][T25632] __x64_sys_openat+0x139/0x160 [ 1257.988544][T25632] do_syscall_64+0x55/0xb0 [ 1257.992990][T25632] ? clear_bhb_loop+0x40/0x90 [ 1257.997699][T25632] ? clear_bhb_loop+0x40/0x90 [ 1258.002430][T25632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1258.008357][T25632] RIP: 0033:0x7f158a15e98e [ 1258.012796][T25632] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1258.032449][T25632] RSP: 002b:00007f158b001ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1258.040913][T25632] RAX: ffffffffffffffda RBX: 00007f158b0026c0 RCX: 00007f158a15e98e [ 1258.048944][T25632] RDX: 0000000000000000 RSI: 00007f158b001f90 RDI: ffffffffffffff9c [ 1258.056952][T25632] RBP: 00007f158b002090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.064961][T25632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1258.072971][T25632] R13: 00007f158a426128 R14: 00007f158a426090 R15: 00007ffc67c7fc58 [ 1258.081004][T25632] [ 1258.088460][T25632] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1258.451703][T25643] netlink: 'syz.2.6729': attribute type 1 has an invalid length. [ 1258.523880][T25643] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.6729'. [ 1258.535259][T25646] netlink: 'syz.2.6729': attribute type 27 has an invalid length. [ 1258.618380][T25646] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6729'. [ 1261.184994][T25655] netlink: 'syz.2.6731': attribute type 10 has an invalid length. [ 1261.197635][T25655] team0: Device hsr_slave_0 is already a lower device of the team interface [ 1261.742042][T25666] netlink: 'syz.2.6732': attribute type 9 has an invalid length. [ 1261.751486][T25666] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6732'. [ 1262.390737][T25689] pim6reg1: entered promiscuous mode [ 1262.400843][T25689] pim6reg1: entered allmulticast mode [ 1262.771397][T25699] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.6748'. [ 1263.002056][T25703] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.6750'. [ 1263.034789][T25703] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.6750'. [ 1266.138491][T25721] netlink: 'syz.1.6756': attribute type 10 has an invalid length. [ 1266.158971][T25721] team0: Device hsr_slave_0 failed to register rx_handler [ 1266.303893][T25728] netlink: 'syz.0.6758': attribute type 29 has an invalid length. [ 1266.323607][T25725] netlink: 'syz.3.6757': attribute type 9 has an invalid length. [ 1266.336544][T25728] netlink: 'syz.0.6758': attribute type 29 has an invalid length. [ 1266.349758][T25729] netlink: 'syz.0.6758': attribute type 29 has an invalid length. [ 1266.358586][T25725] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6757'. [ 1266.380146][T25728] netlink: 'syz.0.6758': attribute type 29 has an invalid length. [ 1267.976576][T25754] FAULT_INJECTION: forcing a failure. [ 1267.976576][T25754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1267.995561][T25754] CPU: 1 PID: 25754 Comm: syz.0.6768 Not tainted syzkaller #0 [ 1268.003130][T25754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1268.013237][T25754] Call Trace: [ 1268.016560][T25754] [ 1268.019626][T25754] dump_stack_lvl+0x18c/0x250 [ 1268.024384][T25754] ? show_regs_print_info+0x20/0x20 [ 1268.029650][T25754] ? load_image+0x420/0x420 [ 1268.034214][T25754] ? __might_fault+0xaa/0x120 [ 1268.038943][T25754] ? __lock_acquire+0x7d80/0x7d80 [ 1268.044034][T25754] should_fail_ex+0x394/0x4c0 [ 1268.048780][T25754] _copy_from_user+0x2f/0xe0 [ 1268.053430][T25754] __sys_bpf+0x23e/0x890 [ 1268.057729][T25754] ? bpf_link_show_fdinfo+0x560/0x560 [ 1268.063176][T25754] ? lock_chain_count+0x20/0x20 [ 1268.068187][T25754] __x64_sys_bpf+0x7c/0x90 [ 1268.072655][T25754] do_syscall_64+0x55/0xb0 [ 1268.077122][T25754] ? clear_bhb_loop+0x40/0x90 [ 1268.081852][T25754] ? clear_bhb_loop+0x40/0x90 [ 1268.086570][T25754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1268.092495][T25754] RIP: 0033:0x7f158a19e159 [ 1268.096945][T25754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1268.116580][T25754] RSP: 002b:00007f158b023028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1268.125027][T25754] RAX: ffffffffffffffda RBX: 00007f158a425fa0 RCX: 00007f158a19e159 [ 1268.133035][T25754] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 1268.141032][T25754] RBP: 00007f158b023090 R08: 0000000000000000 R09: 0000000000000000 [ 1268.149033][T25754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1268.157031][T25754] R13: 00007f158a426038 R14: 00007f158a425fa0 R15: 00007ffc67c7fc58 [ 1268.165045][T25754] [ 1270.299966][T25761] netlink: 'syz.2.6771': attribute type 10 has an invalid length. [ 1270.318325][T25761] team0: Device hsr_slave_0 is already a lower device of the team interface [ 1270.740887][T25782] netlink: 'syz.1.6778': attribute type 10 has an invalid length. [ 1270.752630][T25782] team0: Device hsr_slave_0 failed to register rx_handler [ 1271.391696][T25788] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.6780'. [ 1271.402164][T25790] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.6780'. [ 1274.892282][T25809] netlink: 'syz.3.6785': attribute type 10 has an invalid length. [ 1275.043683][T25817] FAULT_INJECTION: forcing a failure. [ 1275.043683][T25817] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.074729][T25817] CPU: 0 PID: 25817 Comm: syz.0.6788 Not tainted syzkaller #0 [ 1275.082290][T25817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1275.092397][T25817] Call Trace: [ 1275.095720][T25817] [ 1275.098688][T25817] dump_stack_lvl+0x18c/0x250 [ 1275.103427][T25817] ? show_regs_print_info+0x20/0x20 [ 1275.108692][T25817] ? lockdep_hardirqs_on+0x98/0x150 [ 1275.113954][T25817] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1275.120191][T25817] should_fail_ex+0x394/0x4c0 [ 1275.124941][T25817] should_failslab+0x9/0x20 [ 1275.129511][T25817] slab_pre_alloc_hook+0x59/0x300 [ 1275.134603][T25817] ? __lock_acquire+0x7d80/0x7d80 [ 1275.139695][T25817] kmem_cache_alloc_node+0x5e/0x310 [ 1275.144963][T25817] ? __alloc_skb+0x103/0x2c0 [ 1275.149620][T25817] __alloc_skb+0x103/0x2c0 [ 1275.154095][T25817] netlink_sendmsg+0x66a/0xbf0 [ 1275.158928][T25817] ? lockdep_hardirqs_on+0x98/0x150 [ 1275.164187][T25817] ? netlink_getsockopt+0x590/0x590 [ 1275.169459][T25817] ? security_socket_sendmsg+0x45/0xa0 [ 1275.174977][T25817] ? security_socket_sendmsg+0x80/0xa0 [ 1275.180467][T25817] ? netlink_getsockopt+0x590/0x590 [ 1275.185702][T25817] ____sys_sendmsg+0x61b/0x980 [ 1275.190496][T25817] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1275.196696][T25817] ? __asan_memset+0x22/0x40 [ 1275.201334][T25817] ? __sys_sendmsg_sock+0x30/0x30 [ 1275.206655][T25817] ? __import_iovec+0x5f2/0x850 [ 1275.211552][T25817] ? import_iovec+0x73/0xa0 [ 1275.216188][T25817] ___sys_sendmsg+0x2a6/0x360 [ 1275.220968][T25817] ? __sys_sendmsg+0x2b0/0x2b0 [ 1275.225845][T25817] __se_sys_sendmsg+0x1d0/0x2c0 [ 1275.230753][T25817] ? __x64_sys_sendmsg+0x80/0x80 [ 1275.235766][T25817] do_syscall_64+0x55/0xb0 [ 1275.240255][T25817] ? clear_bhb_loop+0x40/0x90 [ 1275.244979][T25817] ? clear_bhb_loop+0x40/0x90 [ 1275.249697][T25817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1275.255626][T25817] RIP: 0033:0x7f158a19e159 [ 1275.260078][T25817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.279905][T25817] RSP: 002b:00007f158b023028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1275.288357][T25817] RAX: ffffffffffffffda RBX: 00007f158a425fa0 RCX: 00007f158a19e159 [ 1275.296364][T25817] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 1275.304363][T25817] RBP: 00007f158b023090 R08: 0000000000000000 R09: 0000000000000000 [ 1275.312361][T25817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1275.320358][T25817] R13: 00007f158a426038 R14: 00007f158a425fa0 R15: 00007ffc67c7fc58 [ 1275.328370][T25817] [ 1275.601932][T25820] netlink: 'syz.0.6789': attribute type 10 has an invalid length. [ 1275.622782][T25822] netlink: 'syz.1.6790': attribute type 13 has an invalid length. [ 1275.655957][T25822] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6790'. [ 1276.376517][T25839] netlink: 'syz.2.6794': attribute type 5 has an invalid length. [ 1276.730005][T25839] netlink: 'syz.2.6794': attribute type 46 has an invalid length. [ 1279.530360][T25853] netlink: 'syz.2.6801': attribute type 13 has an invalid length. [ 1279.549354][T25853] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6801'. [ 1280.052327][T25872] netlink: 'syz.3.6805': attribute type 10 has an invalid length. [ 1280.214334][T25880] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.6808'. [ 1280.332403][T25882] netlink: 'syz.1.6809': attribute type 5 has an invalid length. [ 1280.366512][T25882] netlink: 'syz.1.6809': attribute type 46 has an invalid length. [ 1283.447848][T25891] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.6814'. [ 1283.665317][T25896] netlink: 'syz.0.6816': attribute type 10 has an invalid length. [ 1283.977300][T25907] netlink: 'syz.3.6818': attribute type 13 has an invalid length. [ 1283.986074][T25907] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6818'. [ 1284.354457][T25918] netlink: 'syz.0.6822': attribute type 5 has an invalid length. [ 1284.451494][T25921] netlink: 'syz.0.6822': attribute type 46 has an invalid length. [ 1284.670549][T25925] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6824'. [ 1284.695094][T25925] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1284.738391][T25925] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1285.516060][T25938] netlink: 'syz.3.6828': attribute type 10 has an invalid length. [ 1285.922863][T25951] netlink: 'syz.0.6832': attribute type 13 has an invalid length. [ 1285.941833][T25951] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6832'. [ 1286.601439][T25964] syzkaller0: entered promiscuous mode [ 1286.692197][T25976] netlink: 'syz.1.6840': attribute type 5 has an invalid length. [ 1291.223496][T25982] netlink: 'syz.1.6840': attribute type 46 has an invalid length. [ 1291.410962][T25986] netlink: 'syz.1.6843': attribute type 10 has an invalid length. [ 1291.436968][T25988] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6846'. [ 1291.449788][T25986] team0: Device hsr_slave_0 failed to register rx_handler [ 1291.465806][T25988] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1291.495682][T25988] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1291.570477][T25999] FAULT_INJECTION: forcing a failure. [ 1291.570477][T25999] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.615632][T25999] CPU: 0 PID: 25999 Comm: syz.0.6848 Not tainted syzkaller #0 [ 1291.623186][T25999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1291.633294][T25999] Call Trace: [ 1291.636636][T25999] [ 1291.639615][T25999] dump_stack_lvl+0x18c/0x250 [ 1291.644354][T25999] ? show_regs_print_info+0x20/0x20 [ 1291.649617][T25999] ? load_image+0x420/0x420 [ 1291.654189][T25999] ? verify_lock_unused+0x140/0x140 [ 1291.659459][T25999] should_fail_ex+0x394/0x4c0 [ 1291.664302][T25999] should_failslab+0x9/0x20 [ 1291.668872][T25999] slab_pre_alloc_hook+0x59/0x300 [ 1291.673957][T25999] kmem_cache_alloc+0x5a/0x2c0 [ 1291.678761][T25999] ? skb_clone+0x1eb/0x370 [ 1291.683218][T25999] skb_clone+0x1eb/0x370 [ 1291.687493][T25999] __netlink_deliver_tap+0x411/0x7f0 [ 1291.692820][T25999] ? netlink_deliver_tap+0x2e/0x1b0 [ 1291.698048][T25999] netlink_deliver_tap+0x19c/0x1b0 [ 1291.703191][T25999] netlink_unicast+0x77b/0x930 [ 1291.708017][T25999] netlink_sendmsg+0x8d0/0xbf0 [ 1291.712820][T25999] ? netlink_getsockopt+0x590/0x590 [ 1291.718048][T25999] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1291.723629][T25999] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1291.728949][T25999] ? security_socket_sendmsg+0x80/0xa0 [ 1291.734447][T25999] ? netlink_getsockopt+0x590/0x590 [ 1291.739681][T25999] ____sys_sendmsg+0x61b/0x980 [ 1291.744485][T25999] ? __asan_memset+0x22/0x40 [ 1291.749118][T25999] ? __sys_sendmsg_sock+0x30/0x30 [ 1291.754167][T25999] ? __import_iovec+0x5f2/0x850 [ 1291.759060][T25999] ? import_iovec+0x73/0xa0 [ 1291.763624][T25999] ___sys_sendmsg+0x2a6/0x360 [ 1291.768341][T25999] ? get_pid_task+0x20/0x1e0 [ 1291.772967][T25999] ? __sys_sendmsg+0x2b0/0x2b0 [ 1291.777779][T25999] ? __lock_acquire+0x7d80/0x7d80 [ 1291.782871][T25999] __se_sys_sendmsg+0x1d0/0x2c0 [ 1291.787760][T25999] ? __x64_sys_sendmsg+0x80/0x80 [ 1291.792737][T25999] ? lockdep_hardirqs_on+0x98/0x150 [ 1291.797966][T25999] do_syscall_64+0x55/0xb0 [ 1291.802415][T25999] ? clear_bhb_loop+0x40/0x90 [ 1291.807131][T25999] ? clear_bhb_loop+0x40/0x90 [ 1291.811849][T25999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1291.817780][T25999] RIP: 0033:0x7f158a19e159 [ 1291.822243][T25999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1291.841906][T25999] RSP: 002b:00007f158b023028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1291.850373][T25999] RAX: ffffffffffffffda RBX: 00007f158a425fa0 RCX: 00007f158a19e159 [ 1291.858385][T25999] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1291.866394][T25999] RBP: 00007f158b023090 R08: 0000000000000000 R09: 0000000000000000 [ 1291.874409][T25999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1291.882424][T25999] R13: 00007f158a426038 R14: 00007f158a425fa0 R15: 00007ffc67c7fc58 [ 1291.890463][T25999] [ 1292.076179][T26008] netlink: 'syz.0.6852': attribute type 9 has an invalid length. [ 1292.083995][T26008] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.6852'. [ 1294.309949][T26026] netlink: 'syz.2.6859': attribute type 25 has an invalid length. [ 1294.335639][T26026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6859'. [ 1295.322241][T26052] syzkaller0: entered promiscuous mode Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.