last executing test programs: 10.471025848s ago: executing program 0 (id=1381): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000001280)={&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfbffff7f}, 0x20044850) 10.433148799s ago: executing program 1 (id=1382): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_clone(0x2008000, &(0x7f0000000580), 0x0, &(0x7f0000000680), &(0x7f00000007c0), &(0x7f0000001980)) r5 = perf_event_open(0x0, r4, 0xfffffffffbffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0xc0045878, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, 0x0, 0x4) 9.240748684s ago: executing program 3 (id=1384): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) socket$kcm(0x2a, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xc, &(0x7f0000000480)=ANY=[@ANYRES8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000880)={0x9, &(0x7f0000000800)=[{0x1, 0xd, 0x9, 0x606}, {0x6, 0x62, 0x5, 0x4}, {0xcc, 0xd8, 0xfa, 0x2}, {0x6, 0x0, 0x0, 0x1000}, {0xf12b, 0x6, 0x1, 0x7}, {0x7f, 0x0, 0x0, 0x7f}, {0x3, 0xc5, 0x6e, 0x7}, {0xb0, 0x9, 0x40, 0x4}, {0x7f, 0x5, 0xe1, 0xeb1}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000074e9a75927677f1cd31e9c73e9f16a90c05d2a3496c1c5b3f6ae0828c388c36847c8ca2b5b20cb4ee35ce8d2fa9469cf54cbd6427f1ee5f505d746ac063853891200e172095603820ed2dd4e384be687f02471495563a440a74f13f1b0e210b598fc4d68dbbb865b39ea9a49c8e8a50c4f1ada70256f3eba893cdb4cc0f7fdfc73157bb20e6939af3ccd19af6c62fdb0be304265685334db64386e5b83ac239288c7b140fecf41f394726841389d5c15a5fe8478d4a97b7e83470d6c7f4d64c279b13a74b826feeb808af043fa862a9819cf838a8e54d0899a46a7d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000190ac0d54d95732595"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x19, &(0x7f0000000000)=r12, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000b40)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d8150019001105142603600e12080005007a01040aa80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a0e3a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef415959122e5635bb86764dc1d090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a", 0xe5}], 0x19}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000440)={r12, r12}, 0xc) r13 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)={r13}) 9.231382034s ago: executing program 0 (id=1392): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x7}, 0x0, 0x0, 0x3f, 0x7, 0x80000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f917a3c92b", 0x14}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) sendmsg$tipc(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="174a8a1c08079feec019b8c7abf2e5046bd0", 0x12, 0x24000840}, 0x20040089) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3e3}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x9, 0x45, 0x0, 0xfd, 0x0, 0x9a, 0x10803, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x5, 0x0, 0x2, 0x200000a, 0x48, 0x0, 0x2, 0x0, 0xfffffffffffffffb}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xcf) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000280)={'batadv_slave_0', 0x32, 0x38}, 0x11) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) recvmsg$unix(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001dc0)=[{0x0}, {0x0}, {&(0x7f0000001bc0)=""/26, 0x1a}, {0x0}, {&(0x7f0000001d80)=""/4, 0x4}], 0x5}, 0x2100) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000001c0)=r2) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0xfffffffffffffd3c}, 0x10100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={r0, 0x0, 0x9, 0x41, &(0x7f0000000340)="6e8724acf8385a9ffb", &(0x7f0000001500)=""/65, 0x4f, 0x0, 0x23, 0xc2, &(0x7f0000001580)="df25a0032bd2789f2eeb16d4c7790327a6d2db2ad314f78d9d77583677b262a0a37b99", &(0x7f00000015c0)="490626c7d0f721291653f4fe00bd036f196c7b1a07052fa4d416955d3b8f5e1887453d6c56da933d688eca83c68317480699fee5064f2fefbbd968cb1ff47a2f95e5f4fdf4f3714b7cec93e056369c5dbe82ceb3995ff8e075e73daaedc6bf00199b1b9568ab0865bd57e5ee58e2cf8931971b4ef8daeab369dd3affa067ed00436f7938db5ee4fadb99868ea42ba7d28f2a19981de93e1128a3b0154648596bff4de2406012e688c55bee128bd0d4a1c1c27ce3921c98b8dbb1fa7f2a2a4f4a064a", 0x2, 0x0, 0x2}, 0x50) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x94031, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x1}, 0x3b3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) 8.665920031s ago: executing program 1 (id=1386): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1394", 0x2}], 0x1}, 0x4051) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) (async) sendmsg$inet(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="f9", 0x1}], 0x1}, 0x48844) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) (async) socketpair(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x200000000000001) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) (async) openat$cgroup_ro(r6, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) (async, rerun: 64) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) (async, rerun: 64) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x0) (async, rerun: 32) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) socket$kcm(0xa, 0x2, 0x3a) 7.1842408s ago: executing program 1 (id=1389): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xffff7ffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 7.16619213s ago: executing program 3 (id=1390): bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map, 0x4, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, &(0x7f0000000400), &(0x7f0000000440)=""/203}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x9, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x20000000004, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000fe00850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0xffffffffffffff77, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x50) 6.958561683s ago: executing program 0 (id=1391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0xc0189436, &(0x7f0000003100)=""/4080) 5.911747406s ago: executing program 1 (id=1394): socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000004c0)='.', 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="20feff00000000008400000002000000948404"], 0x20}, 0x0) 5.738393968s ago: executing program 0 (id=1395): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_clone(0x2008000, &(0x7f0000000580), 0x0, &(0x7f0000000680), &(0x7f00000007c0), &(0x7f0000001980)) r5 = perf_event_open(0x0, r4, 0xfffffffffbffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0xc0045878, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, 0x0, 0x4) 5.669415459s ago: executing program 3 (id=1396): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="14000000210081043881c8050000000000030000", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0x92, 0x0, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff310000003c0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcb", 0x0, 0x31, 0x6000000000000000}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) 3.96511142s ago: executing program 1 (id=1398): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x8}, 0x11f802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000c40)="d8000000100081044e81f782db44b904021d083909000000000000a1180015000600142603600e1209002100ff000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134c76ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9acbb1086dd673d809d5e1cace81ed0bffece0b42a9ecbee5de6ccbb0dd6e4edef3d93452a9295", 0xd8}], 0x1}, 0x4000084) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851) r2 = socket$kcm(0x10, 0x7, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)="5c0000006c006bcd9e3fe3dc6e48aa31086b8703240000007ea60264160af365040914001f0003000e0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x81, 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x200, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d8000000180081054e81f782db4cb904021d0800ff207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703929eac", 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000), 0x8) 3.96503651s ago: executing program 2 (id=1399): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="08000000040000180400000007"], 0x50) 3.96456119s ago: executing program 3 (id=1400): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x3, 0x452}, 0x100301, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000804) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000400000008230000ad00000000000000", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000010) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f93324fc60100c034002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.770693863s ago: executing program 0 (id=1401): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000400)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) close(0x3) 3.360051598s ago: executing program 2 (id=1402): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xff, '\x00', 0x0, 0x0}, 0x50) ioctl$TUNSETOFFLOAD(r0, 0x5421, 0x110e22fff5) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 2.38626728s ago: executing program 2 (id=1403): r0 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2) 1.728085029s ago: executing program 3 (id=1404): r0 = socket$kcm(0x10, 0x3, 0x10) close(0x3) socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.300695394s ago: executing program 0 (id=1405): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3b, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0xffffff77, 0x0, 0x0, 0x5, 0xffff80fe, 0x40}, 0x4c) 966.517698ms ago: executing program 2 (id=1406): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="8ab800003f0a0000000000000600000000000000fef1e345a13879f799e59a4101de004e32c1df8bab73630ca57b670a574d6fb7374b322028a1c2e61854bd3dd681365fb25d7cd922b415a408c67ebea9f66d11e2936f03e59af6839e8da000d00f68e69aa3de9090a961421100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x18, 0xffffffffffffffff, 0x0, 0x30, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x26) 719.930971ms ago: executing program 3 (id=1407): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)={'veth0_to_bond\x00', 0x3003}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 674.334302ms ago: executing program 1 (id=1408): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000003c40)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, 0x6, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="8b7f0000", 0x4}, {0x0}], 0x2}, 0x0) 418.430205ms ago: executing program 2 (id=1409): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7}, 0x94) 0s ago: executing program 2 (id=1410): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a3c0db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848022e8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0000000000000000000000000001545f0ec539c3b58facd2f62dc3307a6c91d6b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/'], 0x20) kernel console output (not intermixed with test programs): ? inet_send_prepare+0x260/0x260 [ 96.382280][ T6136] ____sys_sendmsg+0x5ba/0x960 [ 96.387067][ T6136] ? __lock_acquire+0x7d40/0x7d40 [ 96.392297][ T6136] ? __asan_memset+0x22/0x40 [ 96.396907][ T6136] ? __sys_sendmsg_sock+0x30/0x30 [ 96.402033][ T6136] ? __import_iovec+0x5f2/0x850 [ 96.406908][ T6136] ? import_iovec+0x73/0xa0 [ 96.411540][ T6136] ___sys_sendmsg+0x2a6/0x360 [ 96.416328][ T6136] ? __sys_sendmsg+0x2a0/0x2a0 [ 96.421364][ T6136] ? trace_call_bpf+0xc3/0x6c0 [ 96.426186][ T6136] __se_sys_sendmsg+0x1c2/0x2b0 [ 96.431151][ T6136] ? __x64_sys_sendmsg+0x80/0x80 [ 96.436125][ T6136] ? lockdep_hardirqs_on+0x98/0x150 [ 96.441349][ T6136] do_syscall_64+0x55/0xa0 [ 96.445789][ T6136] ? clear_bhb_loop+0x40/0x90 [ 96.450494][ T6136] ? clear_bhb_loop+0x40/0x90 [ 96.455218][ T6136] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.461129][ T6136] RIP: 0033:0x7f769939cdd9 [ 96.465655][ T6136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.485672][ T6136] RSP: 002b:00007f769a2ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.494122][ T6136] RAX: ffffffffffffffda RBX: 00007f7699615fa0 RCX: 00007f769939cdd9 [ 96.502113][ T6136] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 96.510275][ T6136] RBP: 00007f769a2ef090 R08: 0000000000000000 R09: 0000000000000000 [ 96.518300][ T6136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.526416][ T6136] R13: 00007f7699616038 R14: 00007f7699615fa0 R15: 00007ffec4105838 [ 96.534563][ T6136] [ 96.580137][ T6133] netlink: 'syz.3.98': attribute type 1 has an invalid length. [ 96.596195][ T6127] syz.0.96 (6127) used greatest stack depth: 19176 bytes left [ 97.227632][ T6155] netlink: 'syz.2.104': attribute type 29 has an invalid length. [ 97.246527][ T6155] netlink: 'syz.2.104': attribute type 29 has an invalid length. [ 97.795562][ T6167] Zero length message leads to an empty skb [ 98.037074][ T6179] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.017304][ T6206] netlink: 'syz.2.121': attribute type 29 has an invalid length. [ 99.033573][ T6206] netlink: 'syz.2.121': attribute type 29 has an invalid length. [ 100.301447][ T6217] netlink: 'syz.1.128': attribute type 21 has an invalid length. [ 102.109513][ T6254] netlink: 'syz.2.137': attribute type 29 has an invalid length. [ 102.124048][ T6254] netlink: 'syz.2.137': attribute type 29 has an invalid length. [ 102.614135][ T6263] FAULT_INJECTION: forcing a failure. [ 102.614135][ T6263] name failslab, interval 1, probability 0, space 0, times 0 [ 102.643786][ T6263] CPU: 1 PID: 6263 Comm: syz.1.143 Not tainted syzkaller #0 [ 102.651268][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 102.661535][ T6263] Call Trace: [ 102.664856][ T6263] [ 102.667819][ T6263] dump_stack_lvl+0x18c/0x250 [ 102.672545][ T6263] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.678844][ T6263] ? show_regs_print_info+0x20/0x20 [ 102.684091][ T6263] ? load_image+0x420/0x420 [ 102.688654][ T6263] should_fail_ex+0x39d/0x4d0 [ 102.693385][ T6263] should_failslab+0x9/0x20 [ 102.697943][ T6263] slab_pre_alloc_hook+0x59/0x310 [ 102.703015][ T6263] kmem_cache_alloc+0x5a/0x2d0 [ 102.707819][ T6263] ? skb_clone+0x1eb/0x370 [ 102.712366][ T6263] skb_clone+0x1eb/0x370 [ 102.716765][ T6263] __netlink_deliver_tap+0x41c/0x830 [ 102.722214][ T6263] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.727490][ T6263] netlink_deliver_tap+0x19c/0x1b0 [ 102.732647][ T6263] netlink_dump+0x94b/0xe50 [ 102.737215][ T6263] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.743410][ T6263] ? netlink_lookup+0x200/0x200 [ 102.748352][ T6263] ? slab_free_freelist_hook+0x130/0x1a0 [ 102.754029][ T6263] ? netlink_recvmsg+0x5e7/0xe60 [ 102.759121][ T6263] ? kmem_cache_free+0xf8/0x270 [ 102.764107][ T6263] netlink_recvmsg+0x693/0xe60 [ 102.768924][ T6263] ? netlink_sendmsg+0xbf0/0xbf0 [ 102.773896][ T6263] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.780079][ T6263] ? lockdep_hardirqs_on+0x98/0x150 [ 102.785307][ T6263] ? aa_af_perm+0x330/0x330 [ 102.789863][ T6263] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 102.795187][ T6263] ? security_socket_recvmsg+0x89/0xb0 [ 102.800695][ T6263] ? netlink_sendmsg+0xbf0/0xbf0 [ 102.805676][ T6263] ____sys_recvmsg+0x2ce/0x5e0 [ 102.810494][ T6263] ? __sys_recvmsg_sock+0x50/0x50 [ 102.815565][ T6263] ? import_iovec+0x73/0xa0 [ 102.820102][ T6263] ___sys_recvmsg+0x216/0x590 [ 102.824816][ T6263] ? __sys_recvmsg+0x2a0/0x2a0 [ 102.829704][ T6263] ? ktime_get+0x7f/0x280 [ 102.834088][ T6263] ? __fget_files+0x43d/0x4b0 [ 102.838825][ T6263] __x64_sys_recvmsg+0x20c/0x2e0 [ 102.843806][ T6263] ? ___sys_recvmsg+0x590/0x590 [ 102.848712][ T6263] ? lockdep_hardirqs_on+0x98/0x150 [ 102.854039][ T6263] do_syscall_64+0x55/0xa0 [ 102.858485][ T6263] ? clear_bhb_loop+0x40/0x90 [ 102.863206][ T6263] ? clear_bhb_loop+0x40/0x90 [ 102.868013][ T6263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.873943][ T6263] RIP: 0033:0x7f769939cdd9 [ 102.878389][ T6263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.898035][ T6263] RSP: 002b:00007f769a2ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 102.906575][ T6263] RAX: ffffffffffffffda RBX: 00007f7699615fa0 RCX: 00007f769939cdd9 [ 102.914751][ T6263] RDX: 0000000000000000 RSI: 0000200000002700 RDI: 0000000000000005 [ 102.922929][ T6263] RBP: 00007f769a2ef090 R08: 0000000000000000 R09: 0000000000000000 [ 102.930927][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.938929][ T6263] R13: 00007f7699616038 R14: 00007f7699615fa0 R15: 00007ffec4105838 [ 102.946957][ T6263] [ 103.569774][ T6278] syzkaller0: entered promiscuous mode [ 103.606855][ T6278] syzkaller0: entered allmulticast mode [ 104.166996][ T6294] netlink: 'syz.1.153': attribute type 29 has an invalid length. [ 104.175418][ T6294] netlink: 'syz.1.153': attribute type 29 has an invalid length. [ 104.282199][ T6298] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 104.362081][ T6300] netlink: 'syz.2.157': attribute type 8 has an invalid length. [ 105.873251][ T6339] netlink: 'syz.0.172': attribute type 29 has an invalid length. [ 105.927642][ T6339] netlink: 'syz.0.172': attribute type 29 has an invalid length. [ 106.989653][ T6359] netlink: 'syz.3.181': attribute type 10 has an invalid length. [ 107.023723][ T6359] netlink: 2 bytes leftover after parsing attributes in process `syz.3.181'. [ 107.034190][ T6359] hsr0: entered promiscuous mode [ 107.045660][ T6359] bridge0: port 3(hsr0) entered blocking state [ 107.062967][ T6359] bridge0: port 3(hsr0) entered disabled state [ 107.078070][ T6359] hsr0: entered allmulticast mode [ 107.088762][ T6359] hsr_slave_0: entered allmulticast mode [ 107.162752][ T6359] hsr_slave_1: entered allmulticast mode [ 107.286748][ T6359] bridge0: port 3(hsr0) entered blocking state [ 107.294205][ T6359] bridge0: port 3(hsr0) entered forwarding state [ 118.713887][ T6387] netlink: 'syz.0.187': attribute type 10 has an invalid length. [ 118.810998][ T6387] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 119.542013][ T6406] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.194'. [ 119.572768][ T6406] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.194'. [ 120.199048][ T6425] lo: entered allmulticast mode [ 120.619216][ T6438] netlink: 48 bytes leftover after parsing attributes in process `syz.1.208'. [ 120.652310][ T6438] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.624567][ T6461] FAULT_INJECTION: forcing a failure. [ 121.624567][ T6461] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 121.646980][ T6461] CPU: 1 PID: 6461 Comm: syz.0.218 Not tainted syzkaller #0 [ 121.654535][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.664918][ T6461] Call Trace: [ 121.668245][ T6461] [ 121.671320][ T6461] dump_stack_lvl+0x18c/0x250 [ 121.676074][ T6461] ? show_regs_print_info+0x20/0x20 [ 121.681337][ T6461] ? load_image+0x420/0x420 [ 121.685996][ T6461] ? __might_fault+0xaa/0x120 [ 121.690730][ T6461] ? __lock_acquire+0x7d40/0x7d40 [ 121.695801][ T6461] should_fail_ex+0x39d/0x4d0 [ 121.700613][ T6461] _copy_from_user+0x2f/0xe0 [ 121.705366][ T6461] ___sys_sendmsg+0x1c7/0x360 [ 121.710097][ T6461] ? get_pid_task+0x20/0x1e0 [ 121.714752][ T6461] ? __sys_sendmsg+0x2a0/0x2a0 [ 121.719587][ T6461] ? __lock_acquire+0x7d40/0x7d40 [ 121.724685][ T6461] __se_sys_sendmsg+0x1c2/0x2b0 [ 121.729674][ T6461] ? __x64_sys_sendmsg+0x80/0x80 [ 121.734675][ T6461] ? lockdep_hardirqs_on+0x98/0x150 [ 121.739937][ T6461] do_syscall_64+0x55/0xa0 [ 121.744413][ T6461] ? clear_bhb_loop+0x40/0x90 [ 121.749341][ T6461] ? clear_bhb_loop+0x40/0x90 [ 121.754100][ T6461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.760215][ T6461] RIP: 0033:0x7f1867b9cdd9 [ 121.764773][ T6461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.784630][ T6461] RSP: 002b:00007f1868987028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.793162][ T6461] RAX: ffffffffffffffda RBX: 00007f1867e15fa0 RCX: 00007f1867b9cdd9 [ 121.801248][ T6461] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 121.809349][ T6461] RBP: 00007f1868987090 R08: 0000000000000000 R09: 0000000000000000 [ 121.817456][ T6461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.825676][ T6461] R13: 00007f1867e16038 R14: 00007f1867e15fa0 R15: 00007ffc177ce5d8 [ 121.833718][ T6461] [ 122.312895][ T6473] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.219'. [ 122.588303][ T6473] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.219'. [ 122.816177][ T6466] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.219'. [ 123.289641][ T6487] netlink: 'syz.2.226': attribute type 10 has an invalid length. [ 123.491223][ T6496] netlink: 'syz.0.229': attribute type 29 has an invalid length. [ 123.536978][ T6487] team0: Device veth1_vlan failed to register rx_handler [ 123.633156][ T6487] syz.2.226 (6487) used greatest stack depth: 18992 bytes left [ 123.642664][ T6496] netlink: 'syz.0.229': attribute type 29 has an invalid length. [ 123.664582][ T6498] netlink: 'syz.0.229': attribute type 29 has an invalid length. [ 123.683954][ T6496] netlink: 'syz.0.229': attribute type 29 has an invalid length. [ 123.702096][ T6500] netlink: 'syz.0.229': attribute type 29 has an invalid length. [ 124.237463][ T6518] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.237'. [ 125.796896][ T6563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.805097][ T6563] IPv6: NLM_F_CREATE should be set when creating new route [ 125.812638][ T6563] IPv6: NLM_F_CREATE should be set when creating new route [ 125.820059][ T6563] IPv6: NLM_F_CREATE should be set when creating new route [ 126.293900][ T6576] netlink: 'syz.0.256': attribute type 21 has an invalid length. [ 126.324951][ T6576] netlink: 128 bytes leftover after parsing attributes in process `syz.0.256'. [ 126.330616][ T6571] netlink: 'syz.2.254': attribute type 2 has an invalid length. [ 126.377996][ T6576] netlink: 'syz.0.256': attribute type 5 has an invalid length. [ 126.386109][ T6576] netlink: 'syz.0.256': attribute type 6 has an invalid length. [ 126.394574][ T6571] netlink: 187468 bytes leftover after parsing attributes in process `syz.2.254'. [ 126.439815][ T6576] netlink: 3 bytes leftover after parsing attributes in process `syz.0.256'. [ 129.519621][ T5783] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 129.817336][ T6663] netlink: 'syz.0.285': attribute type 21 has an invalid length. [ 129.887619][ T6663] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.285'. [ 137.067402][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.074649][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.238485][ T6775] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.328'. [ 144.614730][ T6814] Driver unsupported XDP return value 0 on prog (id 367) dev N/A, expect packet loss! [ 145.978393][ T6852] netlink: 'syz.3.355': attribute type 10 has an invalid length. [ 146.054245][ T6852] team0: Port device wlan1 added [ 146.233171][ T6857] netlink: 'syz.3.357': attribute type 9 has an invalid length. [ 146.242601][ T6857] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.357'. [ 146.336257][ T6858] netlink: 10 bytes leftover after parsing attributes in process `syz.3.357'. [ 147.770238][ T6891] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.369'. [ 149.793922][ T6922] netlink: 140 bytes leftover after parsing attributes in process `syz.2.379'. [ 150.378447][ T6938] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.384'. [ 150.694091][ T6937] netlink: 'syz.0.385': attribute type 3 has an invalid length. [ 150.725305][ T6937] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.385'. [ 151.804886][ T6960] syzkaller0: entered promiscuous mode [ 151.815592][ T6960] syzkaller0: entered allmulticast mode [ 154.584542][ T6984] tap0: tun_chr_ioctl cmd 1074025680 [ 154.619224][ T6989] tap0: tun_chr_ioctl cmd 1074025673 [ 154.796086][ T6993] netlink: 'syz.1.401': attribute type 9 has an invalid length. [ 154.806797][ T6993] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.401'. [ 156.465211][ T7034] FAULT_INJECTION: forcing a failure. [ 156.465211][ T7034] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 156.496846][ T7034] CPU: 0 PID: 7034 Comm: syz.2.416 Not tainted syzkaller #0 [ 156.504211][ T7034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.514413][ T7034] Call Trace: [ 156.517830][ T7034] [ 156.520811][ T7034] dump_stack_lvl+0x18c/0x250 [ 156.525628][ T7034] ? show_regs_print_info+0x20/0x20 [ 156.530861][ T7034] ? load_image+0x420/0x420 [ 156.535429][ T7034] ? __lock_acquire+0x7d40/0x7d40 [ 156.540514][ T7034] should_fail_ex+0x39d/0x4d0 [ 156.545257][ T7034] prepare_alloc_pages+0x1e2/0x5f0 [ 156.550449][ T7034] __alloc_pages+0x134/0x460 [ 156.555270][ T7034] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 156.561538][ T7034] ? zone_statistics+0x170/0x170 [ 156.566543][ T7034] alloc_skb_with_frags+0x23c/0x7b0 [ 156.571892][ T7034] sock_alloc_send_pskb+0x883/0x9a0 [ 156.577266][ T7034] ? sock_kzfree_s+0x50/0x50 [ 156.582185][ T7034] ? dev_get_by_index+0x22/0x2d0 [ 156.587178][ T7034] ? dev_get_by_index+0x22/0x2d0 [ 156.592163][ T7034] packet_sendmsg+0x3017/0x4c30 [ 156.597187][ T7034] ? __might_sleep+0xe0/0xe0 [ 156.601826][ T7034] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 156.607603][ T7034] ? aa_sk_perm+0x83c/0x970 [ 156.612248][ T7034] ? packet_getsockopt+0xad0/0xad0 [ 156.617422][ T7034] ? tomoyo_gc_thread+0x8d0/0x1410 [ 156.622634][ T7034] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 156.628838][ T7034] ? aa_sock_msg_perm+0x94/0x150 [ 156.633825][ T7034] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 156.639256][ T7034] ? security_socket_sendmsg+0x80/0xa0 [ 156.644769][ T7034] ? packet_getsockopt+0xad0/0xad0 [ 156.649955][ T7034] ____sys_sendmsg+0x5ba/0x960 [ 156.654759][ T7034] ? __asan_memset+0x22/0x40 [ 156.659466][ T7034] ? __sys_sendmsg_sock+0x30/0x30 [ 156.664527][ T7034] ? __import_iovec+0x3fa/0x850 [ 156.669639][ T7034] ? import_iovec+0x73/0xa0 [ 156.674251][ T7034] ___sys_sendmsg+0x2a6/0x360 [ 156.678936][ T7034] ? __sys_sendmsg+0x2a0/0x2a0 [ 156.683810][ T7034] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 156.690098][ T7034] __se_sys_sendmsg+0x1c2/0x2b0 [ 156.695158][ T7034] ? __x64_sys_sendmsg+0x80/0x80 [ 156.700128][ T7034] ? lockdep_hardirqs_on+0x98/0x150 [ 156.705451][ T7034] do_syscall_64+0x55/0xa0 [ 156.709884][ T7034] ? clear_bhb_loop+0x40/0x90 [ 156.714678][ T7034] ? clear_bhb_loop+0x40/0x90 [ 156.719365][ T7034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.725398][ T7034] RIP: 0033:0x7f26f5f9cdd9 [ 156.729839][ T7034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.749723][ T7034] RSP: 002b:00007f26f6d8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.758196][ T7034] RAX: ffffffffffffffda RBX: 00007f26f6215fa0 RCX: 00007f26f5f9cdd9 [ 156.766578][ T7034] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 156.774748][ T7034] RBP: 00007f26f6d8b090 R08: 0000000000000000 R09: 0000000000000000 [ 156.782739][ T7034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.790802][ T7034] R13: 00007f26f6216038 R14: 00007f26f6215fa0 R15: 00007ffcaf2465d8 [ 156.798833][ T7034] [ 158.333207][ T7089] netlink: 'syz.3.435': attribute type 21 has an invalid length. [ 158.344207][ T7089] netlink: 168 bytes leftover after parsing attributes in process `syz.3.435'. [ 158.884949][ T7106] netlink: 140 bytes leftover after parsing attributes in process `syz.3.439'. [ 158.917216][ T7106] netlink: 10 bytes leftover after parsing attributes in process `syz.3.439'. [ 158.979736][ T7106] bond0: (slave bond_slave_0): Releasing backup interface [ 159.026310][ T7106] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 160.574000][ T7148] netlink: 'syz.2.455': attribute type 10 has an invalid length. [ 160.703489][ T7148] team0: Device vxcan1 is of different type [ 161.001569][ T7158] netlink: 132 bytes leftover after parsing attributes in process `syz.0.458'. [ 162.351837][ T7187] tun0: tun_chr_ioctl cmd 1074025675 [ 162.370038][ T7187] tun0: persist enabled [ 162.393436][ T7187] tun0: tun_chr_ioctl cmd 1074025677 [ 162.414832][ T7187] tun0: linktype set to 271 [ 162.440179][ T7187] tun0: tun_chr_ioctl cmd 1074025675 [ 162.456689][ T7187] tun0: persist disabled [ 162.516427][ T7189] netlink: 'syz.1.469': attribute type 21 has an invalid length. [ 162.574396][ T7189] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.469'. [ 162.589357][ T7191] netlink: 'syz.3.470': attribute type 10 has an invalid length. [ 162.732528][ T7191] team0: Device vxcan1 is of different type [ 162.842638][ T7189] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.469'. [ 162.873755][ T7191] syz.3.470 (7191) used greatest stack depth: 18864 bytes left [ 163.097479][ T7196] netlink: 'syz.2.472': attribute type 21 has an invalid length. [ 163.123382][ T7196] netlink: 152 bytes leftover after parsing attributes in process `syz.2.472'. [ 164.084039][ T7220] netlink: 'syz.0.478': attribute type 29 has an invalid length. [ 164.143673][ T7220] netlink: 'syz.0.478': attribute type 29 has an invalid length. [ 164.507158][ T7224] netlink: 'syz.1.480': attribute type 6 has an invalid length. [ 164.590403][ T7224] netlink: 156 bytes leftover after parsing attributes in process `syz.1.480'. [ 164.840296][ T7229] netlink: 'syz.0.482': attribute type 10 has an invalid length. [ 164.949393][ T7229] team0: Device vxcan1 is of different type [ 165.657305][ T7244] netlink: 'syz.0.488': attribute type 10 has an invalid length. [ 165.666960][ T7244] netlink: 2 bytes leftover after parsing attributes in process `syz.0.488'. [ 165.688178][ T7244] hsr0: entered promiscuous mode [ 165.695269][ T7244] bridge0: port 3(hsr0) entered blocking state [ 165.713708][ T7244] bridge0: port 3(hsr0) entered disabled state [ 165.721483][ T7244] hsr0: entered allmulticast mode [ 165.727251][ T7244] hsr_slave_0: entered allmulticast mode [ 165.733499][ T7244] hsr_slave_1: entered allmulticast mode [ 165.758393][ T7244] bridge0: port 3(hsr0) entered blocking state [ 165.765500][ T7244] bridge0: port 3(hsr0) entered forwarding state [ 166.300219][ T7260] netlink: 'syz.0.490': attribute type 29 has an invalid length. [ 166.775810][ T7260] netlink: 'syz.0.490': attribute type 29 has an invalid length. [ 166.861139][ T7265] netlink: 'syz.2.494': attribute type 10 has an invalid length. [ 166.974211][ T7265] team0: Device vxcan1 is of different type [ 167.242797][ T7275] FAULT_INJECTION: forcing a failure. [ 167.242797][ T7275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.296402][ T7275] CPU: 0 PID: 7275 Comm: syz.0.498 Not tainted syzkaller #0 [ 167.304030][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.314294][ T7275] Call Trace: [ 167.317590][ T7275] [ 167.320553][ T7275] dump_stack_lvl+0x18c/0x250 [ 167.325260][ T7275] ? show_regs_print_info+0x20/0x20 [ 167.330482][ T7275] ? load_image+0x420/0x420 [ 167.335148][ T7275] ? __lock_acquire+0x7d40/0x7d40 [ 167.340205][ T7275] ? snprintf+0xe9/0x140 [ 167.344459][ T7275] should_fail_ex+0x39d/0x4d0 [ 167.349162][ T7275] _copy_to_user+0x2f/0xa0 [ 167.353622][ T7275] simple_read_from_buffer+0xe7/0x150 [ 167.359027][ T7275] proc_fail_nth_read+0x1e8/0x260 [ 167.364081][ T7275] ? proc_fault_inject_write+0x360/0x360 [ 167.369930][ T7275] ? fsnotify_perm+0x271/0x5e0 [ 167.374708][ T7275] ? proc_fault_inject_write+0x360/0x360 [ 167.380371][ T7275] vfs_read+0x28b/0x970 [ 167.385181][ T7275] ? kernel_read+0x1e0/0x1e0 [ 167.389955][ T7275] ? __fget_files+0x28/0x4b0 [ 167.394575][ T7275] ? __fget_files+0x28/0x4b0 [ 167.399182][ T7275] ? __fget_files+0x43d/0x4b0 [ 167.403890][ T7275] ? __fdget_pos+0x2a3/0x330 [ 167.408505][ T7275] ? ksys_read+0x75/0x260 [ 167.412880][ T7275] ksys_read+0x150/0x260 [ 167.417233][ T7275] ? vfs_write+0x990/0x990 [ 167.421671][ T7275] ? syscall_enter_from_user_mode+0x2e/0x80 [ 167.429260][ T7275] do_syscall_64+0x55/0xa0 [ 167.433714][ T7275] ? clear_bhb_loop+0x40/0x90 [ 167.438415][ T7275] ? clear_bhb_loop+0x40/0x90 [ 167.443116][ T7275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.449029][ T7275] RIP: 0033:0x7f1867b5d60e [ 167.453460][ T7275] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 167.473626][ T7275] RSP: 002b:00007f1868986fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.482091][ T7275] RAX: ffffffffffffffda RBX: 00007f18689876c0 RCX: 00007f1867b5d60e [ 167.490170][ T7275] RDX: 000000000000000f RSI: 00007f18689870a0 RDI: 0000000000000005 [ 167.498168][ T7275] RBP: 00007f1868987090 R08: 0000000000000000 R09: 0000000000000000 [ 167.506155][ T7275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.514585][ T7275] R13: 00007f1867e16038 R14: 00007f1867e15fa0 R15: 00007ffc177ce5d8 [ 167.522588][ T7275] [ 168.387784][ T7286] netlink: 'syz.2.500': attribute type 10 has an invalid length. [ 168.406037][ T7286] netlink: 2 bytes leftover after parsing attributes in process `syz.2.500'. [ 168.437101][ T7286] hsr0: entered promiscuous mode [ 168.442628][ T7286] bridge0: port 3(hsr0) entered blocking state [ 168.496376][ T7286] bridge0: port 3(hsr0) entered disabled state [ 168.505558][ T7286] hsr0: entered allmulticast mode [ 168.511307][ T7286] hsr_slave_0: entered allmulticast mode [ 168.520061][ T7286] hsr_slave_1: entered allmulticast mode [ 168.543608][ T7286] bridge0: port 3(hsr0) entered blocking state [ 168.550212][ T7286] bridge0: port 3(hsr0) entered forwarding state [ 168.935720][ T7302] netlink: 'syz.2.506': attribute type 29 has an invalid length. [ 168.945847][ T7302] netlink: 'syz.2.506': attribute type 29 has an invalid length. [ 169.170754][ T7310] netlink: 'syz.0.511': attribute type 10 has an invalid length. [ 169.181826][ T7310] team0: Device vxcan1 is of different type [ 170.693280][ T7326] netlink: 192188 bytes leftover after parsing attributes in process `syz.1.517'. [ 170.703421][ T7326] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 170.739374][ T7329] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.518'. [ 171.200190][ T7342] netlink: 'syz.0.523': attribute type 29 has an invalid length. [ 171.244498][ T7342] netlink: 'syz.0.523': attribute type 29 has an invalid length. [ 171.426378][ T7349] netlink: 'syz.1.528': attribute type 10 has an invalid length. [ 171.441429][ T7349] team0: Device vxcan1 is of different type [ 171.585413][ T7353] netlink: 'syz.1.530': attribute type 29 has an invalid length. [ 171.602226][ T7353] netlink: 'syz.1.530': attribute type 29 has an invalid length. [ 171.615484][ T7353] netlink: 'syz.1.530': attribute type 29 has an invalid length. [ 171.629347][ T7353] netlink: 'syz.1.530': attribute type 29 has an invalid length. [ 171.640725][ T7353] netlink: 'syz.1.530': attribute type 29 has an invalid length. [ 171.734811][ T7355] netlink: 'syz.1.530': attribute type 29 has an invalid length. [ 172.421198][ T7371] netlink: 'syz.3.538': attribute type 10 has an invalid length. [ 172.432960][ T7371] team0: Device vxcan1 is of different type [ 172.764527][ T7374] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.537'. [ 174.020108][ T7404] team0: Device vxcan1 is of different type [ 174.513870][ T7416] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.555'. [ 175.648798][ T7438] team0: Device vxcan1 is of different type [ 175.934322][ T7444] FAULT_INJECTION: forcing a failure. [ 175.934322][ T7444] name failslab, interval 1, probability 0, space 0, times 0 [ 175.950151][ T7444] CPU: 1 PID: 7444 Comm: syz.0.563 Not tainted syzkaller #0 [ 175.957746][ T7444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 175.967874][ T7444] Call Trace: [ 175.971183][ T7444] [ 175.974158][ T7444] dump_stack_lvl+0x18c/0x250 [ 175.979324][ T7444] ? show_regs_print_info+0x20/0x20 [ 175.984655][ T7444] ? load_image+0x420/0x420 [ 175.989312][ T7444] ? __might_sleep+0xe0/0xe0 [ 175.994106][ T7444] ? __lock_acquire+0x7d40/0x7d40 [ 175.999430][ T7444] should_fail_ex+0x39d/0x4d0 [ 176.004174][ T7444] should_failslab+0x9/0x20 [ 176.008826][ T7444] slab_pre_alloc_hook+0x59/0x310 [ 176.014050][ T7444] kmem_cache_alloc+0x5a/0x2d0 [ 176.018978][ T7444] ? __pmd_alloc+0x111/0x8b0 [ 176.023645][ T7444] __pmd_alloc+0x111/0x8b0 [ 176.028089][ T7444] ? mt_find+0x169/0x650 [ 176.032392][ T7444] ? __lock_acquire+0x7d40/0x7d40 [ 176.037467][ T7444] ? __pud_alloc+0x1f0/0x1f0 [ 176.042099][ T7444] ? hugepage_vma_check+0x488/0x5a0 [ 176.047327][ T7444] handle_mm_fault+0xb5d/0x4c00 [ 176.052199][ T7444] ? handle_mm_fault+0xe7/0x4c00 [ 176.057387][ T7444] ? numa_migrate_prep+0x350/0x350 [ 176.062606][ T7444] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 176.068074][ T7444] do_user_addr_fault+0x730/0x12c0 [ 176.073313][ T7444] exc_page_fault+0x64/0x100 [ 176.078081][ T7444] asm_exc_page_fault+0x26/0x30 [ 176.083178][ T7444] RIP: 0010:__get_user_4+0x11/0x20 [ 176.088451][ T7444] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 0f b7 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 [ 176.108410][ T7444] RSP: 0018:ffffc9001a09fab8 EFLAGS: 00050202 [ 176.114793][ T7444] RAX: 000000110e22fff2 RBX: ffffffff8d266840 RCX: 177d06c817dd3a00 [ 176.123090][ T7444] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8fa0 [ 176.131211][ T7444] RBP: ffffc9001a09fed8 R08: ffffffff8e8b19af R09: 1ffffffff1d16335 [ 176.139333][ T7444] R10: dffffc0000000000 R11: fffffbfff1d16336 R12: 000000110e22fff2 [ 176.147538][ T7444] R13: 0000000040086602 R14: fffff52003413f5c R15: ffff888079f18000 [ 176.156071][ T7444] do_vfs_ioctl+0xb9c/0x1cc0 [ 176.160941][ T7444] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 176.166838][ T7444] ? tomoyo_path_number_perm+0x217/0x620 [ 176.172786][ T7444] ? __lock_acquire+0x7d40/0x7d40 [ 176.178064][ T7444] ? slab_free_freelist_hook+0x130/0x1a0 [ 176.183962][ T7444] ? tomoyo_path_number_perm+0x500/0x620 [ 176.189755][ T7444] ? __kmem_cache_free+0xba/0x1e0 [ 176.194990][ T7444] ? tomoyo_path_number_perm+0x5b4/0x620 [ 176.200740][ T7444] ? tomoyo_path_number_perm+0x217/0x620 [ 176.206624][ T7444] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 176.212222][ T7444] ? __fget_files+0x28/0x4b0 [ 176.216891][ T7444] ? __fget_files+0x28/0x4b0 [ 176.221574][ T7444] ? bpf_lsm_file_ioctl+0x9/0x10 [ 176.226548][ T7444] ? security_file_ioctl+0x80/0xa0 [ 176.231729][ T7444] __se_sys_ioctl+0x83/0x170 [ 176.236377][ T7444] do_syscall_64+0x55/0xa0 [ 176.241017][ T7444] ? clear_bhb_loop+0x40/0x90 [ 176.245954][ T7444] ? clear_bhb_loop+0x40/0x90 [ 176.250787][ T7444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.257163][ T7444] RIP: 0033:0x7f1867b9cdd9 [ 176.261647][ T7444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.281931][ T7444] RSP: 002b:00007f1868987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.290682][ T7444] RAX: ffffffffffffffda RBX: 00007f1867e15fa0 RCX: 00007f1867b9cdd9 [ 176.298870][ T7444] RDX: 000000110e22fff2 RSI: 0000000040086602 RDI: 0000000000000007 [ 176.306970][ T7444] RBP: 00007f1868987090 R08: 0000000000000000 R09: 0000000000000000 [ 176.315099][ T7444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.323468][ T7444] R13: 00007f1867e16038 R14: 00007f1867e15fa0 R15: 00007ffc177ce5d8 [ 176.331701][ T7444] [ 177.902377][ T7475] validate_nla: 7 callbacks suppressed [ 177.902443][ T7475] netlink: 'syz.2.574': attribute type 10 has an invalid length. [ 178.009589][ T7475] team0: Device vxcan1 is of different type [ 178.306200][ T7480] netlink: 'syz.3.572': attribute type 29 has an invalid length. [ 178.372018][ T7480] netlink: 'syz.3.572': attribute type 29 has an invalid length. [ 179.595916][ T7510] netlink: 'syz.0.585': attribute type 10 has an invalid length. [ 179.705366][ T7510] team0: Device vxcan1 is of different type [ 180.096158][ T7523] netlink: 'syz.3.588': attribute type 29 has an invalid length. [ 180.166425][ T7523] netlink: 'syz.3.588': attribute type 29 has an invalid length. [ 181.092390][ T7540] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.595'. [ 181.254791][ T7542] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 181.855752][ T7557] netlink: 'syz.2.600': attribute type 10 has an invalid length. [ 181.944477][ T7557] team0: Device vxcan1 is of different type [ 182.478367][ T7576] netlink: 'syz.3.604': attribute type 29 has an invalid length. [ 182.519549][ T7576] netlink: 'syz.3.604': attribute type 29 has an invalid length. [ 182.728518][ T7583] netlink: 'syz.0.607': attribute type 39 has an invalid length. [ 182.763258][ T7570] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.603'. [ 182.831598][ T7570] netlink: zone id is out of range [ 182.855488][ T7570] netlink: zone id is out of range [ 182.873900][ T7570] netlink: zone id is out of range [ 182.906237][ T7570] netlink: zone id is out of range [ 182.912733][ T7570] netlink: zone id is out of range [ 182.919590][ T7570] netlink: zone id is out of range [ 182.926818][ T7570] netlink: zone id is out of range [ 182.934047][ T7570] netlink: zone id is out of range [ 182.943315][ T7570] netlink: zone id is out of range [ 182.957802][ T7570] netlink: zone id is out of range [ 183.523202][ T7600] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.613'. [ 183.751836][ T7602] netlink: 'syz.1.614': attribute type 10 has an invalid length. [ 183.949537][ T7602] team0: Device vxcan1 is of different type [ 184.262695][ T7613] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.618'. [ 184.537203][ T7624] netlink: 'syz.1.621': attribute type 29 has an invalid length. [ 184.545329][ T7624] netlink: 'syz.1.621': attribute type 29 has an invalid length. [ 185.391804][ T7648] netlink: 'syz.1.630': attribute type 10 has an invalid length. [ 185.422844][ T7648] team0: Device vxcan1 is of different type [ 185.890318][ T7659] netlink: 668 bytes leftover after parsing attributes in process `syz.2.635'. [ 186.657767][ T7674] netlink: 'syz.2.638': attribute type 29 has an invalid length. [ 186.666126][ T7674] netlink: 'syz.2.638': attribute type 29 has an invalid length. [ 186.952071][ T7677] netlink: 'syz.1.641': attribute type 10 has an invalid length. [ 187.003178][ T7677] team0: Device vxcan1 is of different type [ 187.450875][ T7684] netlink: 'syz.0.644': attribute type 10 has an invalid length. [ 187.522096][ T7684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.558314][ T7684] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 189.261413][ T7712] netlink: 'syz.3.654': attribute type 10 has an invalid length. [ 189.372414][ T7714] netlink: 'syz.2.651': attribute type 29 has an invalid length. [ 189.416679][ T7712] team0: Device vxcan1 is of different type [ 189.667489][ T7714] netlink: 'syz.2.651': attribute type 29 has an invalid length. [ 191.549290][ T7756] netlink: 'syz.3.667': attribute type 29 has an invalid length. [ 191.590267][ T7756] netlink: 'syz.3.667': attribute type 29 has an invalid length. [ 191.743133][ T7758] netlink: 'syz.0.668': attribute type 10 has an invalid length. [ 191.871538][ T7758] team0: Device vxcan1 is of different type [ 192.546496][ T7772] netlink: 10 bytes leftover after parsing attributes in process `syz.3.673'. [ 193.448238][ T7772] net_ratelimit: 82 callbacks suppressed [ 193.448255][ T7772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.480288][ T7772] syz.3.673 (7772) used greatest stack depth: 18856 bytes left [ 193.484146][ T7775] netlink: 'syz.3.673': attribute type 10 has an invalid length. [ 193.556938][ T7775] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.569833][ T7775] bond0: (slave team0): Enslaving as an active interface with an up link [ 193.580940][ T7762] netlink: 'syz.2.669': attribute type 10 has an invalid length. [ 193.670657][ T7762] netlink: 2 bytes leftover after parsing attributes in process `syz.2.669'. [ 193.716216][ T7762] bond0: entered promiscuous mode [ 193.735009][ T7762] bond_slave_0: entered promiscuous mode [ 193.777733][ T7762] bond_slave_1: entered promiscuous mode [ 193.784109][ T7762] bridge0: port 4(bond0) entered blocking state [ 193.826807][ T7762] bridge0: port 4(bond0) entered disabled state [ 193.848129][ T7762] bond0: entered allmulticast mode [ 193.888127][ T7762] bond_slave_0: entered allmulticast mode [ 193.894123][ T7762] bond_slave_1: entered allmulticast mode [ 193.985703][ T7762] bridge0: port 4(bond0) entered blocking state [ 193.992180][ T7762] bridge0: port 4(bond0) entered forwarding state [ 194.220533][ T7791] netlink: 'syz.0.680': attribute type 10 has an invalid length. [ 194.271239][ T7791] team0: Device vxcan1 is of different type [ 194.609346][ T7791] syz.0.680 (7791) used greatest stack depth: 18664 bytes left [ 194.666161][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.673390][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.014110][ T7803] netlink: 'syz.3.682': attribute type 29 has an invalid length. [ 195.146006][ T7803] netlink: 'syz.3.682': attribute type 29 has an invalid length. [ 195.247504][ T7810] netlink: 'syz.1.687': attribute type 10 has an invalid length. [ 195.447510][ T7810] veth0_vlan: left promiscuous mode [ 195.482223][ T7810] veth0_vlan: entered promiscuous mode [ 195.537968][ T7810] team0: Device veth0_vlan failed to register rx_handler [ 195.931343][ T7820] netlink: 10 bytes leftover after parsing attributes in process `syz.1.689'. [ 196.060786][ T7823] FAULT_INJECTION: forcing a failure. [ 196.060786][ T7823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.110757][ T7823] CPU: 1 PID: 7823 Comm: syz.1.689 Not tainted syzkaller #0 [ 196.118239][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.128536][ T7823] Call Trace: [ 196.131871][ T7823] [ 196.134882][ T7823] dump_stack_lvl+0x18c/0x250 [ 196.139637][ T7823] ? show_regs_print_info+0x20/0x20 [ 196.144906][ T7823] ? load_image+0x420/0x420 [ 196.149482][ T7823] ? __might_fault+0xaa/0x120 [ 196.154221][ T7823] ? __lock_acquire+0x7d40/0x7d40 [ 196.159397][ T7823] should_fail_ex+0x39d/0x4d0 [ 196.164154][ T7823] _copy_from_iter+0x1d9/0x12e0 [ 196.169153][ T7823] ? slab_post_alloc_hook+0x8a/0x4b0 [ 196.174650][ T7823] ? __virt_addr_valid+0x18c/0x540 [ 196.179831][ T7823] ? __lock_acquire+0x7d40/0x7d40 [ 196.184913][ T7823] ? rcu_is_watching+0x15/0xb0 [ 196.189752][ T7823] ? copyout_mc+0x70/0x70 [ 196.194147][ T7823] ? __virt_addr_valid+0x18c/0x540 [ 196.199323][ T7823] ? __virt_addr_valid+0x18c/0x540 [ 196.204922][ T7823] ? __virt_addr_valid+0x469/0x540 [ 196.210098][ T7823] ? __check_object_size+0x506/0xa20 [ 196.215488][ T7823] netlink_sendmsg+0x76b/0xbf0 [ 196.220433][ T7823] ? netlink_getsockopt+0x590/0x590 [ 196.225808][ T7823] ? aa_sock_msg_perm+0x94/0x150 [ 196.230828][ T7823] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 196.236201][ T7823] ? security_socket_sendmsg+0x80/0xa0 [ 196.241820][ T7823] ? netlink_getsockopt+0x590/0x590 [ 196.247141][ T7823] ____sys_sendmsg+0x5ba/0x960 [ 196.252069][ T7823] ? __asan_memset+0x22/0x40 [ 196.257123][ T7823] ? __sys_sendmsg_sock+0x30/0x30 [ 196.262213][ T7823] ? __import_iovec+0x5f2/0x850 [ 196.267253][ T7823] ? import_iovec+0x73/0xa0 [ 196.271932][ T7823] ___sys_sendmsg+0x2a6/0x360 [ 196.276668][ T7823] ? get_pid_task+0x20/0x1e0 [ 196.281438][ T7823] ? __sys_sendmsg+0x2a0/0x2a0 [ 196.286504][ T7823] ? __lock_acquire+0x7d40/0x7d40 [ 196.291750][ T7823] __se_sys_sendmsg+0x1c2/0x2b0 [ 196.296663][ T7823] ? __x64_sys_sendmsg+0x80/0x80 [ 196.301771][ T7823] ? lockdep_hardirqs_on+0x98/0x150 [ 196.307044][ T7823] do_syscall_64+0x55/0xa0 [ 196.311614][ T7823] ? clear_bhb_loop+0x40/0x90 [ 196.316343][ T7823] ? clear_bhb_loop+0x40/0x90 [ 196.321129][ T7823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.324890][ T7820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.327073][ T7823] RIP: 0033:0x7f769939cdd9 [ 196.327100][ T7823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.327118][ T7823] RSP: 002b:00007f769a2ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.327146][ T7823] RAX: ffffffffffffffda RBX: 00007f7699616090 RCX: 00007f769939cdd9 [ 196.327163][ T7823] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000009 [ 196.327178][ T7823] RBP: 00007f769a2ce090 R08: 0000000000000000 R09: 0000000000000000 [ 196.327192][ T7823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.327206][ T7823] R13: 00007f7699616128 R14: 00007f7699616090 R15: 00007ffec4105838 [ 196.327263][ T7823] [ 196.739927][ T5081] Bluetooth: hci0: command 0x0406 tx timeout [ 196.739982][ T5081] Bluetooth: hci2: command 0x0406 tx timeout [ 196.740453][ T5081] Bluetooth: hci3: command 0x0406 tx timeout [ 196.740891][ T5081] Bluetooth: hci1: command 0x0406 tx timeout [ 197.120319][ T7837] netlink: 'syz.1.695': attribute type 10 has an invalid length. [ 197.179456][ T7837] team0: Device vxcan1 is of different type [ 197.358649][ T7839] netlink: 156 bytes leftover after parsing attributes in process `syz.3.696'. [ 197.368406][ T7844] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 197.374019][ T7844] dvmrp1: linktype set to 804 [ 197.776072][ T7855] netlink: 'syz.3.699': attribute type 29 has an invalid length. [ 197.794147][ T7855] netlink: 'syz.3.699': attribute type 29 has an invalid length. [ 197.819628][ T7857] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.701'. [ 197.912826][ T7859] netlink: 6 bytes leftover after parsing attributes in process `syz.2.702'. [ 197.931529][ T7859] openvswitch: netlink: Flow actions attr not present in new flow. [ 198.053781][ T7863] netlink: 'syz.2.704': attribute type 2 has an invalid length. [ 198.350740][ T7870] netlink: 'syz.2.706': attribute type 10 has an invalid length. [ 198.378535][ T7870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.386437][ T7870] batadv0: entered promiscuous mode [ 198.403751][ T7870] batadv0: entered allmulticast mode [ 198.413448][ T7870] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 198.425061][ T7872] netlink: 'syz.1.707': attribute type 10 has an invalid length. [ 198.489876][ T7872] team0: Device vxcan1 is of different type [ 198.702208][ T59] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 198.712144][ T59] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 198.938130][ T7876] netlink: 'syz.3.708': attribute type 21 has an invalid length. [ 199.003277][ T7876] netlink: 132 bytes leftover after parsing attributes in process `syz.3.708'. [ 199.192014][ T7882] netlink: 2 bytes leftover after parsing attributes in process `syz.0.710'. [ 199.225216][ T7882] batadv_slave_1: entered promiscuous mode [ 199.231537][ T7882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.250742][ T7882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.465874][ C0] hsr0: VLAN not yet supported [ 200.771472][ T7911] validate_nla: 5 callbacks suppressed [ 200.771541][ T7911] netlink: 'syz.3.720': attribute type 10 has an invalid length. [ 200.872874][ T7911] team0: Device vxcan1 is of different type [ 201.390546][ T7930] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.725'. [ 201.412776][ T7930] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 201.628018][ T7939] netlink: 'syz.0.728': attribute type 29 has an invalid length. [ 201.678273][ T7939] netlink: 'syz.0.728': attribute type 29 has an invalid length. [ 202.593629][ T7956] netlink: 'syz.0.735': attribute type 10 has an invalid length. [ 202.702603][ T7956] team0: Device vxcan1 is of different type [ 202.789209][ T7963] sit0: entered promiscuous mode [ 203.497007][ T7986] FAULT_INJECTION: forcing a failure. [ 203.497007][ T7986] name failslab, interval 1, probability 0, space 0, times 0 [ 203.510012][ T7986] CPU: 0 PID: 7986 Comm: syz.2.745 Not tainted syzkaller #0 [ 203.517620][ T7986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.521450][ T7987] netlink: 'syz.3.743': attribute type 29 has an invalid length. [ 203.527762][ T7986] Call Trace: [ 203.527806][ T7986] [ 203.527815][ T7986] dump_stack_lvl+0x18c/0x250 [ 203.527857][ T7986] ? sctp_sendmsg+0x1575/0x28c0 [ 203.527876][ T7986] ? ___sys_sendmsg+0x2a6/0x360 [ 203.527897][ T7986] ? show_regs_print_info+0x20/0x20 [ 203.536226][ T7987] netlink: 'syz.3.743': attribute type 29 has an invalid length. [ 203.539037][ T7986] ? load_image+0x420/0x420 [ 203.539084][ T7986] should_fail_ex+0x39d/0x4d0 [ 203.539118][ T7986] should_failslab+0x9/0x20 [ 203.539144][ T7986] slab_pre_alloc_hook+0x59/0x310 [ 203.539173][ T7986] ? sctp_add_bind_addr+0x8c/0x360 [ 203.539195][ T7986] __kmem_cache_alloc_node+0x53/0x250 [ 203.539226][ T7986] ? sctp_add_bind_addr+0x8c/0x360 [ 203.539246][ T7986] kmalloc_trace+0x2a/0xe0 [ 203.539275][ T7986] sctp_add_bind_addr+0x8c/0x360 [ 203.539300][ T7986] sctp_copy_local_addr_list+0x315/0x4f0 [ 203.539326][ T7986] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 203.625975][ T7986] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 203.632437][ T7986] ? sctp_v4_is_any+0x35/0x60 [ 203.637140][ T7986] ? sctp_copy_one_addr+0x8c/0x350 [ 203.642285][ T7986] sctp_bind_addr_copy+0xb3/0x3c0 [ 203.647524][ T7986] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 203.654382][ T7986] sctp_connect_new_asoc+0x2f9/0x6a0 [ 203.659973][ T7986] ? __sctp_connect+0xd80/0xd80 [ 203.664890][ T7986] ? __local_bh_enable_ip+0x13a/0x1c0 [ 203.670355][ T7986] ? _local_bh_enable+0xa0/0xa0 [ 203.675284][ T7986] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 203.681397][ T7986] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 203.687337][ T7986] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 203.692902][ T7986] ? security_sctp_bind_connect+0x89/0xb0 [ 203.698963][ T7986] sctp_sendmsg+0x1575/0x28c0 [ 203.703719][ T7986] ? sctp_getsockopt+0xb60/0xb60 [ 203.708711][ T7986] ? aa_sk_perm+0x83c/0x970 [ 203.713591][ T7986] ? aa_af_perm+0x330/0x330 [ 203.718232][ T7986] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 203.724751][ T7986] ? sock_rps_record_flow+0x19/0x3f0 [ 203.730280][ T7986] ? inet_sendmsg+0x7c/0x2f0 [ 203.734974][ T7986] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 203.740356][ T7986] ? security_socket_sendmsg+0x80/0xa0 [ 203.745922][ T7986] ? inet_send_prepare+0x260/0x260 [ 203.751072][ T7986] ____sys_sendmsg+0x5ba/0x960 [ 203.755883][ T7986] ? __lock_acquire+0x7d40/0x7d40 [ 203.760931][ T7986] ? __asan_memset+0x22/0x40 [ 203.765581][ T7986] ? __sys_sendmsg_sock+0x30/0x30 [ 203.770705][ T7986] ? __import_iovec+0x3fa/0x850 [ 203.775586][ T7986] ? import_iovec+0x73/0xa0 [ 203.780220][ T7986] ___sys_sendmsg+0x2a6/0x360 [ 203.784962][ T7986] ? get_pid_task+0x20/0x1e0 [ 203.789633][ T7986] ? __sys_sendmsg+0x2a0/0x2a0 [ 203.794480][ T7986] ? __lock_acquire+0x7d40/0x7d40 [ 203.799622][ T7986] __se_sys_sendmsg+0x1c2/0x2b0 [ 203.804534][ T7986] ? __x64_sys_sendmsg+0x80/0x80 [ 203.809677][ T7986] ? lockdep_hardirqs_on+0x98/0x150 [ 203.814899][ T7986] do_syscall_64+0x55/0xa0 [ 203.819328][ T7986] ? clear_bhb_loop+0x40/0x90 [ 203.824298][ T7986] ? clear_bhb_loop+0x40/0x90 [ 203.829149][ T7986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.835265][ T7986] RIP: 0033:0x7f26f5f9cdd9 [ 203.839743][ T7986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.859936][ T7986] RSP: 002b:00007f26f6d8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.868468][ T7986] RAX: ffffffffffffffda RBX: 00007f26f6215fa0 RCX: 00007f26f5f9cdd9 [ 203.876744][ T7986] RDX: 00000000040480d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 203.885104][ T7986] RBP: 00007f26f6d8b090 R08: 0000000000000000 R09: 0000000000000000 [ 203.893375][ T7986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.901533][ T7986] R13: 00007f26f6216038 R14: 00007f26f6215fa0 R15: 00007ffcaf2465d8 [ 203.909630][ T7986] [ 203.992315][ T7989] netlink: 'syz.2.746': attribute type 10 has an invalid length. [ 204.011347][ T7989] team0: Device vxcan1 is of different type [ 204.615157][ T8004] netlink: 60 bytes leftover after parsing attributes in process `syz.3.750'. [ 205.454038][ T8025] netlink: 'syz.1.757': attribute type 10 has an invalid length. [ 205.532849][ T8025] team0: Device vxcan1 is of different type [ 206.045221][ T8036] netlink: 'syz.2.760': attribute type 29 has an invalid length. [ 206.067730][ T8036] netlink: 'syz.2.760': attribute type 29 has an invalid length. [ 206.117249][ T8039] netlink: 'syz.1.762': attribute type 46 has an invalid length. [ 206.146269][ T8039] netlink: 2 bytes leftover after parsing attributes in process `syz.1.762'. [ 206.245790][ T8044] tap0: tun_chr_ioctl cmd 1074025680 [ 207.174263][ T8066] netlink: 'syz.1.773': attribute type 10 has an invalid length. [ 207.341259][ T8066] team0: Device vxcan1 is of different type [ 207.740321][ T8071] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.770'. [ 207.786798][ T8071] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.770'. [ 207.853709][ T8062] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.770'. [ 207.900938][ T8073] netlink: 'syz.3.775': attribute type 13 has an invalid length. [ 207.908363][ T8075] FAULT_INJECTION: forcing a failure. [ 207.908363][ T8075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.911897][ T8073] netlink: 160 bytes leftover after parsing attributes in process `syz.3.775'. [ 207.946842][ T8075] CPU: 1 PID: 8075 Comm: syz.0.776 Not tainted syzkaller #0 [ 207.954324][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 207.964424][ T8075] Call Trace: [ 207.967756][ T8075] [ 207.970898][ T8075] dump_stack_lvl+0x18c/0x250 [ 207.975661][ T8075] ? show_regs_print_info+0x20/0x20 [ 207.980911][ T8075] ? load_image+0x420/0x420 [ 207.985464][ T8075] ? __might_fault+0xaa/0x120 [ 207.990271][ T8075] ? __lock_acquire+0x7d40/0x7d40 [ 207.995350][ T8075] should_fail_ex+0x39d/0x4d0 [ 208.000183][ T8075] _copy_from_user+0x2f/0xe0 [ 208.004829][ T8075] ___sys_sendmsg+0x1c7/0x360 [ 208.009606][ T8075] ? __sys_sendmsg+0x2a0/0x2a0 [ 208.014586][ T8075] ? __lock_acquire+0x7d40/0x7d40 [ 208.019819][ T8075] __se_sys_sendmsg+0x1c2/0x2b0 [ 208.024935][ T8075] ? __x64_sys_sendmsg+0x80/0x80 [ 208.030077][ T8075] ? lockdep_hardirqs_on+0x98/0x150 [ 208.035364][ T8075] do_syscall_64+0x55/0xa0 [ 208.039839][ T8075] ? clear_bhb_loop+0x40/0x90 [ 208.044602][ T8075] ? clear_bhb_loop+0x40/0x90 [ 208.049423][ T8075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.055354][ T8075] RIP: 0033:0x7f1867b9cdd9 [ 208.060218][ T8075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.080064][ T8075] RSP: 002b:00007f1868987028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.088534][ T8075] RAX: ffffffffffffffda RBX: 00007f1867e15fa0 RCX: 00007f1867b9cdd9 [ 208.096676][ T8075] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000007 [ 208.104794][ T8075] RBP: 00007f1868987090 R08: 0000000000000000 R09: 0000000000000000 [ 208.113068][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.121248][ T8075] R13: 00007f1867e16038 R14: 00007f1867e15fa0 R15: 00007ffc177ce5d8 [ 208.129298][ T8075] [ 208.141197][ T8073] erspan0: refused to change device tx_queue_len [ 208.157255][ T8073] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 208.214250][ T8062] netlink: 'syz.2.770': attribute type 10 has an invalid length. [ 208.223799][ T8062] netlink: 40 bytes leftover after parsing attributes in process `syz.2.770'. [ 208.272740][ T8062] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 208.297475][ T8062] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.352806][ T8062] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 208.770438][ T8088] netlink: 'syz.0.778': attribute type 29 has an invalid length. [ 208.807837][ T8088] netlink: 'syz.0.778': attribute type 29 has an invalid length. [ 209.252587][ T8104] netlink: 'syz.2.786': attribute type 10 has an invalid length. [ 209.276021][ T8104] team0: Device vxcan1 is of different type [ 210.073080][ T8119] netlink: 'syz.1.793': attribute type 9 has an invalid length. [ 210.088714][ T8119] netlink: 164068 bytes leftover after parsing attributes in process `syz.1.793'. [ 210.237761][ T8120] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.793'. [ 210.307276][ T8123] FAULT_INJECTION: forcing a failure. [ 210.307276][ T8123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.346670][ T8123] CPU: 1 PID: 8123 Comm: syz.3.794 Not tainted syzkaller #0 [ 210.354050][ T8123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 210.364506][ T8123] Call Trace: [ 210.367898][ T8123] [ 210.370935][ T8123] dump_stack_lvl+0x18c/0x250 [ 210.375657][ T8123] ? show_regs_print_info+0x20/0x20 [ 210.380881][ T8123] ? load_image+0x420/0x420 [ 210.385431][ T8123] ? __might_fault+0xaa/0x120 [ 210.390139][ T8123] ? __lock_acquire+0x7d40/0x7d40 [ 210.395189][ T8123] should_fail_ex+0x39d/0x4d0 [ 210.399894][ T8123] _copy_from_iter+0x1d9/0x12e0 [ 210.404801][ T8123] ? __virt_addr_valid+0x18c/0x540 [ 210.409940][ T8123] ? __lock_acquire+0x7d40/0x7d40 [ 210.414978][ T8123] ? __asan_memcpy+0x40/0x70 [ 210.419592][ T8123] ? copyout_mc+0x70/0x70 [ 210.423941][ T8123] ? __virt_addr_valid+0x18c/0x540 [ 210.429068][ T8123] ? __virt_addr_valid+0x18c/0x540 [ 210.434194][ T8123] ? __virt_addr_valid+0x469/0x540 [ 210.439322][ T8123] ? __phys_addr_symbol+0x2f/0x70 [ 210.444460][ T8123] ? __check_object_size+0x506/0xa20 [ 210.449764][ T8123] sctp_user_addto_chunk+0x8f/0x220 [ 210.455084][ T8123] sctp_datamsg_from_user+0x741/0xee0 [ 210.460519][ T8123] sctp_sendmsg_to_asoc+0x107f/0x1830 [ 210.465997][ T8123] ? __asan_memcpy+0x40/0x70 [ 210.470618][ T8123] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 210.476109][ T8123] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 210.481966][ T8123] ? __sctp_connect+0xd80/0xd80 [ 210.486920][ T8123] ? __local_bh_enable_ip+0x13a/0x1c0 [ 210.492398][ T8123] ? _local_bh_enable+0xa0/0xa0 [ 210.497446][ T8123] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 210.503269][ T8123] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 210.509098][ T8123] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 210.514696][ T8123] ? security_sctp_bind_connect+0x89/0xb0 [ 210.520449][ T8123] sctp_sendmsg+0x1b83/0x28c0 [ 210.525156][ T8123] ? sctp_getsockopt+0xb60/0xb60 [ 210.530113][ T8123] ? aa_sk_perm+0x83c/0x970 [ 210.534642][ T8123] ? aa_af_perm+0x330/0x330 [ 210.539167][ T8123] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 210.545784][ T8123] ? sock_rps_record_flow+0x19/0x3f0 [ 210.551118][ T8123] ? inet_sendmsg+0x7c/0x2f0 [ 210.555723][ T8123] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 210.561026][ T8123] ? security_socket_sendmsg+0x80/0xa0 [ 210.566502][ T8123] ? inet_send_prepare+0x260/0x260 [ 210.571824][ T8123] ____sys_sendmsg+0x5ba/0x960 [ 210.576783][ T8123] ? __lock_acquire+0x7d40/0x7d40 [ 210.581831][ T8123] ? __asan_memset+0x22/0x40 [ 210.586529][ T8123] ? __sys_sendmsg_sock+0x30/0x30 [ 210.591586][ T8123] ? __import_iovec+0x5f2/0x850 [ 210.596463][ T8123] ? import_iovec+0x73/0xa0 [ 210.600980][ T8123] ___sys_sendmsg+0x2a6/0x360 [ 210.605672][ T8123] ? get_pid_task+0x20/0x1e0 [ 210.610416][ T8123] ? __sys_sendmsg+0x2a0/0x2a0 [ 210.615394][ T8123] ? __lock_acquire+0x7d40/0x7d40 [ 210.620467][ T8123] __se_sys_sendmsg+0x1c2/0x2b0 [ 210.625338][ T8123] ? __x64_sys_sendmsg+0x80/0x80 [ 210.630305][ T8123] ? lockdep_hardirqs_on+0x98/0x150 [ 210.635663][ T8123] do_syscall_64+0x55/0xa0 [ 210.640092][ T8123] ? clear_bhb_loop+0x40/0x90 [ 210.644802][ T8123] ? clear_bhb_loop+0x40/0x90 [ 210.649496][ T8123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.655403][ T8123] RIP: 0033:0x7fb892d9cdd9 [ 210.659840][ T8123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.679635][ T8123] RSP: 002b:00007fb893d26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.688152][ T8123] RAX: ffffffffffffffda RBX: 00007fb893015fa0 RCX: 00007fb892d9cdd9 [ 210.696227][ T8123] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 210.704210][ T8123] RBP: 00007fb893d26090 R08: 0000000000000000 R09: 0000000000000000 [ 210.712194][ T8123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.720210][ T8123] R13: 00007fb893016038 R14: 00007fb893015fa0 R15: 00007ffdc1920798 [ 210.728292][ T8123] [ 211.915748][ T8151] validate_nla: 3 callbacks suppressed [ 211.915768][ T8151] netlink: 'syz.2.803': attribute type 10 has an invalid length. [ 212.132226][ T8150] netlink: 'syz.2.803': attribute type 9 has an invalid length. [ 212.147304][ T8150] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.803'. [ 212.202229][ T8156] netlink: 'syz.3.805': attribute type 10 has an invalid length. [ 212.324763][ T8156] team0: Device vxcan1 is of different type [ 212.508850][ T8167] netlink: 'syz.0.809': attribute type 21 has an invalid length. [ 213.258977][ T8178] netlink: 'syz.2.811': attribute type 29 has an invalid length. [ 213.271015][ T8178] netlink: 'syz.2.811': attribute type 29 has an invalid length. [ 213.519602][ T8186] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.815'. [ 213.867168][ T8200] netlink: 'syz.1.821': attribute type 10 has an invalid length. [ 213.883904][ T8200] team0: Device vxcan1 is of different type [ 214.426303][ T8212] FAULT_INJECTION: forcing a failure. [ 214.426303][ T8212] name failslab, interval 1, probability 0, space 0, times 0 [ 214.442759][ T8212] CPU: 1 PID: 8212 Comm: syz.3.826 Not tainted syzkaller #0 [ 214.450104][ T8212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 214.460152][ T8210] netlink: 'syz.2.825': attribute type 2 has an invalid length. [ 214.460268][ T8212] Call Trace: [ 214.460280][ T8212] [ 214.460289][ T8212] dump_stack_lvl+0x18c/0x250 [ 214.460328][ T8212] ? show_regs_print_info+0x20/0x20 [ 214.460357][ T8212] ? load_image+0x420/0x420 [ 214.460385][ T8212] ? __might_sleep+0xe0/0xe0 [ 214.460409][ T8212] ? __lock_acquire+0x7d40/0x7d40 [ 214.460433][ T8212] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 214.460457][ T8212] should_fail_ex+0x39d/0x4d0 [ 214.460490][ T8212] should_failslab+0x9/0x20 [ 214.460516][ T8212] slab_pre_alloc_hook+0x59/0x310 [ 214.460550][ T8212] kmem_cache_alloc_node+0x60/0x320 [ 214.460576][ T8212] ? __alloc_skb+0x103/0x2c0 [ 214.460600][ T8212] __alloc_skb+0x103/0x2c0 [ 214.460622][ T8212] __ip_append_data+0x2b73/0x3d40 [ 214.460680][ T8212] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 214.460713][ T8212] ? ip_setup_cork+0x860/0x860 [ 214.460737][ T8212] ? ip_setup_cork+0x530/0x860 [ 214.460761][ T8212] ip_make_skb+0x22b/0x440 [ 214.460789][ T8212] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 214.460809][ T8212] ? ip_flush_pending_frames+0x250/0x250 [ 214.460849][ T8212] udp_sendmsg+0x1ade/0x23b0 [ 214.460890][ T8212] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 214.460913][ T8212] ? udp_cmsg_send+0x350/0x350 [ 214.460943][ T8212] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 214.460970][ T8212] ? lock_chain_count+0x20/0x20 [ 214.460991][ T8212] ? inet_sendmsg+0x14b/0x2f0 [ 214.461023][ T8212] ? __local_bh_enable_ip+0x13a/0x1c0 [ 214.461044][ T8212] ? _local_bh_enable+0xa0/0xa0 [ 214.461069][ T8212] ? inet_sendmsg+0x14b/0x2f0 [ 214.461095][ T8212] ? inet_sendmsg+0x14b/0x2f0 [ 214.461117][ T8212] ? inet_send_prepare+0x260/0x260 [ 214.461143][ T8212] ____sys_sendmsg+0x5ba/0x960 [ 214.461162][ T8212] ? __lock_acquire+0x7d40/0x7d40 [ 214.461190][ T8212] ? __sys_sendmsg_sock+0x30/0x30 [ 214.461207][ T8212] ? __import_iovec+0x5f2/0x850 [ 214.461236][ T8212] ? import_iovec+0x73/0xa0 [ 214.461259][ T8212] ___sys_sendmsg+0x2a6/0x360 [ 214.461284][ T8212] ? __sys_sendmsg+0x2a0/0x2a0 [ 214.461325][ T8212] ? trace_call_bpf+0xc3/0x6c0 [ 214.461378][ T8212] __se_sys_sendmsg+0x1c2/0x2b0 [ 214.461401][ T8212] ? __x64_sys_sendmsg+0x80/0x80 [ 214.461438][ T8212] ? lockdep_hardirqs_on+0x98/0x150 [ 214.461465][ T8212] do_syscall_64+0x55/0xa0 [ 214.461482][ T8212] ? clear_bhb_loop+0x40/0x90 [ 214.461504][ T8212] ? clear_bhb_loop+0x40/0x90 [ 214.461529][ T8212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.461551][ T8212] RIP: 0033:0x7fb892d9cdd9 [ 214.461571][ T8212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.461587][ T8212] RSP: 002b:00007fb893d26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.461610][ T8212] RAX: ffffffffffffffda RBX: 00007fb893015fa0 RCX: 00007fb892d9cdd9 [ 214.461624][ T8212] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000007 [ 214.461636][ T8212] RBP: 00007fb893d26090 R08: 0000000000000000 R09: 0000000000000000 [ 214.461649][ T8212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.461669][ T8212] R13: 00007fb893016038 R14: 00007fb893015fa0 R15: 00007ffdc1920798 [ 214.461699][ T8212] [ 215.650112][ T5784] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 215.903676][ T8230] netlink: 'syz.1.830': attribute type 29 has an invalid length. [ 216.149732][ T8230] netlink: 'syz.1.830': attribute type 29 has an invalid length. [ 216.642808][ T8249] team0: Device vxcan1 is of different type [ 217.614289][ T8270] validate_nla: 1 callbacks suppressed [ 217.614306][ T8270] netlink: 'syz.1.846': attribute type 10 has an invalid length. [ 217.724058][ T8270] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.762806][ T8270] bond0: (slave team0): Enslaving as an active interface with an up link [ 217.986953][ T8278] netlink: 'syz.0.847': attribute type 29 has an invalid length. [ 218.008729][ T8278] netlink: 'syz.0.847': attribute type 29 has an invalid length. [ 218.214255][ T8286] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 218.274122][ T8286] team0: Device vxcan1 is of different type [ 219.141567][ T8308] netlink: 'syz.2.857': attribute type 21 has an invalid length. [ 219.150003][ T8308] netlink: 168 bytes leftover after parsing attributes in process `syz.2.857'. [ 219.586828][ T8322] netlink: 'syz.0.863': attribute type 29 has an invalid length. [ 219.595264][ T8322] netlink: 'syz.0.863': attribute type 29 has an invalid length. [ 219.656398][ T8324] netlink: 'syz.2.864': attribute type 10 has an invalid length. [ 219.699162][ T5784] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 219.708660][ T5784] Bluetooth: hci3: Injecting HCI hardware error event [ 219.717246][ T5784] Bluetooth: hci3: hardware error 0x00 [ 219.751902][ T8324] team0: Device vxcan1 is of different type [ 220.138204][ T8334] syzkaller0: mtu less than device minimum [ 220.750935][ T8352] netlink: 'syz.0.876': attribute type 10 has an invalid length. [ 220.847344][ T8352] team0: Device vxcan1 is of different type [ 221.183249][ T8361] netlink: 'syz.1.878': attribute type 29 has an invalid length. [ 221.396500][ T8371] FAULT_INJECTION: forcing a failure. [ 221.396500][ T8371] name failslab, interval 1, probability 0, space 0, times 0 [ 221.416406][ T8371] CPU: 0 PID: 8371 Comm: syz.3.881 Not tainted syzkaller #0 [ 221.423844][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 221.433934][ T8371] Call Trace: [ 221.437264][ T8371] [ 221.440232][ T8371] dump_stack_lvl+0x18c/0x250 [ 221.444970][ T8371] ? show_regs_print_info+0x20/0x20 [ 221.450232][ T8371] ? load_image+0x420/0x420 [ 221.454880][ T8371] ? __might_sleep+0xe0/0xe0 [ 221.459522][ T8371] ? __lock_acquire+0x7d40/0x7d40 [ 221.464688][ T8371] should_fail_ex+0x39d/0x4d0 [ 221.469399][ T8371] should_failslab+0x9/0x20 [ 221.473959][ T8371] slab_pre_alloc_hook+0x59/0x310 [ 221.479046][ T8371] kmem_cache_alloc_node+0x60/0x320 [ 221.484278][ T8371] ? __alloc_skb+0x103/0x2c0 [ 221.488903][ T8371] __alloc_skb+0x103/0x2c0 [ 221.493343][ T8371] alloc_skb_with_frags+0xca/0x7b0 [ 221.498473][ T8371] ? mark_lock+0x94/0x320 [ 221.502920][ T8371] sock_alloc_send_pskb+0x883/0x9a0 [ 221.508351][ T8371] ? sock_kzfree_s+0x50/0x50 [ 221.512994][ T8371] tun_get_user+0x82c/0x3ca0 [ 221.517703][ T8371] ? aa_file_perm+0x11b/0xee0 [ 221.522578][ T8371] ? rcu_read_unlock+0xa0/0xa0 [ 221.527366][ T8371] ? tun_get+0x1c/0x2e0 [ 221.531540][ T8371] ? __lock_acquire+0x7d40/0x7d40 [ 221.536588][ T8371] ? tun_get+0x1c/0x2e0 [ 221.540771][ T8371] tun_chr_write_iter+0x119/0x200 [ 221.546000][ T8371] vfs_write+0x46c/0x990 [ 221.550361][ T8371] ? file_end_write+0x250/0x250 [ 221.555358][ T8371] ? __fget_files+0x43d/0x4b0 [ 221.560065][ T8371] ? __fdget_pos+0x1d8/0x330 [ 221.564676][ T8371] ? ksys_write+0x75/0x260 [ 221.569113][ T8371] ksys_write+0x150/0x260 [ 221.573902][ T8371] ? __ia32_sys_read+0x90/0x90 [ 221.578693][ T8371] ? lockdep_hardirqs_on+0x98/0x150 [ 221.583911][ T8371] do_syscall_64+0x55/0xa0 [ 221.588370][ T8371] ? clear_bhb_loop+0x40/0x90 [ 221.593063][ T8371] ? clear_bhb_loop+0x40/0x90 [ 221.597874][ T8371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.603878][ T8371] RIP: 0033:0x7fb892d9cdd9 [ 221.608317][ T8371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.627951][ T8371] RSP: 002b:00007fb893d26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 221.636425][ T8371] RAX: ffffffffffffffda RBX: 00007fb893015fa0 RCX: 00007fb892d9cdd9 [ 221.644517][ T8371] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 221.652506][ T8371] RBP: 00007fb893d26090 R08: 0000000000000000 R09: 0000000000000000 [ 221.660494][ T8371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.668574][ T8371] R13: 00007fb893016038 R14: 00007fb893015fa0 R15: 00007ffdc1920798 [ 221.676768][ T8371] [ 221.776795][ T5784] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 222.185093][ T8380] FAULT_INJECTION: forcing a failure. [ 222.185093][ T8380] name failslab, interval 1, probability 0, space 0, times 0 [ 222.216988][ T8380] CPU: 1 PID: 8380 Comm: syz.2.887 Not tainted syzkaller #0 [ 222.224357][ T8380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.234617][ T8380] Call Trace: [ 222.238049][ T8380] [ 222.241099][ T8380] dump_stack_lvl+0x18c/0x250 [ 222.245821][ T8380] ? show_regs_print_info+0x20/0x20 [ 222.251050][ T8380] ? load_image+0x420/0x420 [ 222.255672][ T8380] ? __might_sleep+0xe0/0xe0 [ 222.260543][ T8380] ? __lock_acquire+0x7d40/0x7d40 [ 222.265593][ T8380] should_fail_ex+0x39d/0x4d0 [ 222.270402][ T8380] should_failslab+0x9/0x20 [ 222.275108][ T8380] slab_pre_alloc_hook+0x59/0x310 [ 222.280157][ T8380] kmem_cache_alloc_node+0x60/0x320 [ 222.285479][ T8380] ? __alloc_skb+0x103/0x2c0 [ 222.290092][ T8380] __alloc_skb+0x103/0x2c0 [ 222.294702][ T8380] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 222.300103][ T8380] rtnetlink_event+0x1b7/0x260 [ 222.304976][ T8380] notifier_call_chain+0x197/0x380 [ 222.310202][ T8380] dev_set_mtu_ext+0x463/0x680 [ 222.315211][ T8380] ? dev_validate_mtu+0x170/0x170 [ 222.320296][ T8380] ? __mutex_trylock_common+0x159/0x260 [ 222.326092][ T8380] ? trace_raw_output_contention_end+0xd0/0xd0 [ 222.332266][ T8380] ? do_vfs_ioctl+0x1573/0x1cc0 [ 222.337316][ T8380] dev_set_mtu+0xec/0x1c0 [ 222.341705][ T8380] ? dev_set_mtu_ext+0x680/0x680 [ 222.346702][ T8380] ? __dev_get_by_name+0xe5/0x130 [ 222.351931][ T8380] ? dev_ifsioc+0x4f9/0xc40 [ 222.356456][ T8380] dev_ioctl+0x7b4/0x1140 [ 222.360812][ T8380] sock_do_ioctl+0x239/0x310 [ 222.365432][ T8380] ? sock_show_fdinfo+0xb0/0xb0 [ 222.370317][ T8380] sock_ioctl+0x5ba/0x7e0 [ 222.374808][ T8380] ? sock_poll+0x3e0/0x3e0 [ 222.379274][ T8380] ? bpf_lsm_file_ioctl+0x9/0x10 [ 222.384258][ T8380] ? security_file_ioctl+0x80/0xa0 [ 222.389492][ T8380] ? sock_poll+0x3e0/0x3e0 [ 222.393936][ T8380] __se_sys_ioctl+0xfd/0x170 [ 222.398736][ T8380] do_syscall_64+0x55/0xa0 [ 222.403258][ T8380] ? clear_bhb_loop+0x40/0x90 [ 222.407952][ T8380] ? clear_bhb_loop+0x40/0x90 [ 222.412650][ T8380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.418827][ T8380] RIP: 0033:0x7f26f5f9cdd9 [ 222.423258][ T8380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.443156][ T8380] RSP: 002b:00007f26f6d8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.451853][ T8380] RAX: ffffffffffffffda RBX: 00007f26f6215fa0 RCX: 00007f26f5f9cdd9 [ 222.459943][ T8380] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000007 [ 222.467951][ T8380] RBP: 00007f26f6d8b090 R08: 0000000000000000 R09: 0000000000000000 [ 222.475958][ T8380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.484051][ T8380] R13: 00007f26f6216038 R14: 00007f26f6215fa0 R15: 00007ffcaf2465d8 [ 222.492147][ T8380] [ 222.608044][ T8383] team0: Device vxcan1 is of different type [ 223.316079][ T8412] FAULT_INJECTION: forcing a failure. [ 223.316079][ T8412] name failslab, interval 1, probability 0, space 0, times 0 [ 223.340383][ T8412] CPU: 1 PID: 8412 Comm: syz.2.896 Not tainted syzkaller #0 [ 223.347853][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 223.358034][ T8412] Call Trace: [ 223.361335][ T8412] [ 223.364282][ T8412] dump_stack_lvl+0x18c/0x250 [ 223.369080][ T8412] ? show_regs_print_info+0x20/0x20 [ 223.374299][ T8412] ? load_image+0x420/0x420 [ 223.378828][ T8412] ? __might_sleep+0xe0/0xe0 [ 223.383435][ T8412] ? __lock_acquire+0x7d40/0x7d40 [ 223.388549][ T8412] ? rcu_is_watching+0x15/0xb0 [ 223.393336][ T8412] should_fail_ex+0x39d/0x4d0 [ 223.398045][ T8412] should_failslab+0x9/0x20 [ 223.402570][ T8412] slab_pre_alloc_hook+0x59/0x310 [ 223.407710][ T8412] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 223.413706][ T8412] __kmem_cache_alloc_node+0x53/0x250 [ 223.419214][ T8412] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 223.425144][ T8412] kmalloc_trace+0x2a/0xe0 [ 223.429789][ T8412] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 223.435643][ T8412] sctp_association_new+0x15d3/0x25c0 [ 223.441341][ T8412] sctp_connect_new_asoc+0x2de/0x6a0 [ 223.447100][ T8412] ? __sctp_connect+0xd80/0xd80 [ 223.451989][ T8412] ? __local_bh_enable_ip+0x13a/0x1c0 [ 223.457395][ T8412] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 223.462963][ T8412] ? security_sctp_bind_connect+0x89/0xb0 [ 223.468794][ T8412] sctp_sendmsg+0x1575/0x28c0 [ 223.473687][ T8412] ? sctp_getsockopt+0xb60/0xb60 [ 223.478728][ T8412] ? aa_sk_perm+0x83c/0x970 [ 223.483352][ T8412] ? aa_af_perm+0x330/0x330 [ 223.488047][ T8412] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 223.494621][ T8412] ? sock_rps_record_flow+0x19/0x3f0 [ 223.500029][ T8412] ? inet_sendmsg+0xe9/0x2f0 [ 223.504635][ T8412] ? inet_send_prepare+0x260/0x260 [ 223.509775][ T8412] ____sys_sendmsg+0x5ba/0x960 [ 223.514642][ T8412] ? __lock_acquire+0x7d40/0x7d40 [ 223.519805][ T8412] ? __asan_memset+0x22/0x40 [ 223.524458][ T8412] ? __sys_sendmsg_sock+0x30/0x30 [ 223.529545][ T8412] ? __import_iovec+0x5f2/0x850 [ 223.534480][ T8412] ? import_iovec+0x73/0xa0 [ 223.539013][ T8412] ___sys_sendmsg+0x2a6/0x360 [ 223.543718][ T8412] ? get_pid_task+0x20/0x1e0 [ 223.548556][ T8412] ? __sys_sendmsg+0x2a0/0x2a0 [ 223.553492][ T8412] ? __lock_acquire+0x7d40/0x7d40 [ 223.558717][ T8412] __se_sys_sendmsg+0x1c2/0x2b0 [ 223.563684][ T8412] ? __x64_sys_sendmsg+0x80/0x80 [ 223.568665][ T8412] ? lockdep_hardirqs_on+0x98/0x150 [ 223.574064][ T8412] do_syscall_64+0x55/0xa0 [ 223.578492][ T8412] ? clear_bhb_loop+0x40/0x90 [ 223.583183][ T8412] ? clear_bhb_loop+0x40/0x90 [ 223.587886][ T8412] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.593966][ T8412] RIP: 0033:0x7f26f5f9cdd9 [ 223.598489][ T8412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.618329][ T8412] RSP: 002b:00007f26f6d8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.626814][ T8412] RAX: ffffffffffffffda RBX: 00007f26f6215fa0 RCX: 00007f26f5f9cdd9 [ 223.635136][ T8412] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000003 [ 223.643244][ T8412] RBP: 00007f26f6d8b090 R08: 0000000000000000 R09: 0000000000000000 [ 223.651347][ T8412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.659615][ T8412] R13: 00007f26f6216038 R14: 00007f26f6215fa0 R15: 00007ffcaf2465d8 [ 223.667683][ T8412] [ 223.693503][ T8414] validate_nla: 4 callbacks suppressed [ 223.693519][ T8414] netlink: 'syz.3.894': attribute type 29 has an invalid length. [ 223.723415][ T8414] netlink: 'syz.3.894': attribute type 29 has an invalid length. [ 223.889808][ T8415] delete_channel: no stack [ 223.969766][ T8419] netlink: 'syz.2.898': attribute type 10 has an invalid length. [ 223.983177][ T8419] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.898'. [ 224.099534][ T8422] netlink: 'syz.0.900': attribute type 10 has an invalid length. [ 224.198711][ T8422] team0: Device vxcan1 is of different type [ 224.293287][ T8427] netlink: 'syz.3.903': attribute type 1 has an invalid length. [ 224.337706][ T8427] netlink: 5 bytes leftover after parsing attributes in process `syz.3.903'. [ 224.441878][ T8434] netlink: 'syz.2.902': attribute type 29 has an invalid length. [ 224.494298][ T8434] netlink: 'syz.2.902': attribute type 29 has an invalid length. [ 224.715964][ T8429] netlink: 'syz.2.902': attribute type 29 has an invalid length. [ 225.172767][ T8452] netlink: 'syz.1.910': attribute type 10 has an invalid length. [ 225.261733][ T8452] team0: Device vxcan1 is of different type [ 225.484555][ T8459] netlink: 'syz.2.911': attribute type 29 has an invalid length. [ 225.775153][ T8465] team0: Device vxcan1 is of different type [ 225.923575][ T8473] team0: Device hsr_slave_0 failed to register rx_handler [ 226.364488][ T8486] team0: Device vxcan1 is of different type [ 226.633737][ T8488] team0: Device veth1_vlan failed to register rx_handler [ 226.775808][ T8496] team0: Device vxcan1 is of different type [ 226.941301][ T8500] team0: Device vxcan1 is of different type [ 227.839141][ T8525] team0: Device vxcan1 is of different type [ 228.140526][ T8528] team0: Device veth1_vlan failed to register rx_handler [ 228.357131][ T8532] team0: Device vxcan1 is of different type [ 228.561268][ T8537] team0: Device vxcan1 is of different type [ 229.035866][ T8553] validate_nla: 13 callbacks suppressed [ 229.035883][ T8553] netlink: 'syz.0.946': attribute type 13 has an invalid length. [ 229.076315][ T8553] netlink: 160 bytes leftover after parsing attributes in process `syz.0.946'. [ 229.236489][ T8553] erspan0: refused to change device tx_queue_len [ 229.243142][ T8553] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 229.720767][ T8559] netlink: 'syz.1.957': attribute type 10 has an invalid length. [ 229.791480][ T8559] team0: Device vxcan1 is of different type [ 229.867347][ T8565] netlink: 'syz.3.950': attribute type 29 has an invalid length. [ 229.939512][ T8565] netlink: 'syz.3.950': attribute type 29 has an invalid length. [ 230.063570][ T8567] netlink: 'syz.0.951': attribute type 10 has an invalid length. [ 230.151181][ T8571] netlink: 'syz.0.951': attribute type 9 has an invalid length. [ 230.208717][ T8571] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.951'. [ 230.650273][ T8578] netlink: 'syz.2.955': attribute type 10 has an invalid length. [ 230.837521][ T8578] team0: Device vxcan1 is of different type [ 230.921935][ T8581] netlink: 'syz.3.956': attribute type 10 has an invalid length. [ 230.994272][ T8581] team0: Device vxcan1 is of different type [ 231.498762][ T8594] netlink: 'syz.0.961': attribute type 10 has an invalid length. [ 231.606226][ T8594] team0: Device vxcan1 is of different type [ 231.786709][ T8596] netlink: 'syz.2.962': attribute type 10 has an invalid length. [ 231.925634][ T8596] team0: Device vxcan1 is of different type [ 233.059359][ T8613] team0: Device vxcan1 is of different type [ 233.502991][ T8622] team0: Device vxcan1 is of different type [ 234.134022][ T8639] validate_nla: 4 callbacks suppressed [ 234.134040][ T8639] netlink: 'syz.3.976': attribute type 29 has an invalid length. [ 234.175932][ T8639] netlink: 'syz.3.976': attribute type 29 has an invalid length. [ 234.192059][ T8641] netlink: 'syz.1.978': attribute type 10 has an invalid length. [ 234.235475][ T8641] team0: Device vxcan1 is of different type [ 234.689996][ T8652] netlink: 'syz.1.982': attribute type 10 has an invalid length. [ 234.768342][ T8652] team0: Device vxcan1 is of different type [ 234.870126][ T8654] netlink: 'syz.0.990': attribute type 10 has an invalid length. [ 234.967880][ T8654] team0: Device vxcan1 is of different type [ 235.071939][ T8656] netlink: 'syz.2.983': attribute type 10 has an invalid length. [ 235.173287][ T8656] team0: Device vxcan1 is of different type [ 235.287773][ T8663] netlink: 'syz.1.985': attribute type 10 has an invalid length. [ 235.384717][ T8663] team0: Device vxcan1 is of different type [ 235.619307][ T8673] netlink: 'syz.2.988': attribute type 10 has an invalid length. [ 235.680008][ T8673] team0: Device vxcan1 is of different type [ 236.013427][ T8687] netlink: 'syz.3.993': attribute type 29 has an invalid length. [ 236.025303][ T8687] netlink: 'syz.3.993': attribute type 29 has an invalid length. [ 236.059101][ T8689] netlink: 10 bytes leftover after parsing attributes in process `syz.2.994'. [ 236.118226][ T8689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.233001][ T8689] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.263626][ T8689] team0: entered promiscuous mode [ 236.269911][ T8689] team_slave_0: entered promiscuous mode [ 236.278178][ T8689] team_slave_1: entered promiscuous mode [ 236.285851][ T8689] team0: entered allmulticast mode [ 236.291315][ T8689] team_slave_0: entered allmulticast mode [ 236.297711][ T8689] team_slave_1: entered allmulticast mode [ 236.307766][ T8689] bond0: (slave team0): Enslaving as an active interface with an up link [ 236.504054][ T8691] team0: Device vxcan1 is of different type [ 236.689482][ T8693] vxcan1: entered promiscuous mode [ 236.708784][ T8693] vxcan1: entered allmulticast mode [ 236.726352][ T8693] team0: Device vxcan1 is of different type [ 236.944824][ T8699] team0: Device vxcan1 is of different type [ 237.263945][ T8704] netlink: 668 bytes leftover after parsing attributes in process `syz.1.999'. [ 237.325757][ T8704] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 237.457692][ T8704] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 237.669948][ T8716] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1005'. [ 237.691187][ T8716] netlink: zone id is out of range [ 237.696651][ T8716] netlink: zone id is out of range [ 237.718975][ T8716] netlink: zone id is out of range [ 237.747178][ T8716] netlink: zone id is out of range [ 237.781334][ T8716] netlink: zone id is out of range [ 237.807601][ T8716] netlink: zone id is out of range [ 237.813351][ T8716] netlink: zone id is out of range [ 238.132442][ T8729] team0: Device vxcan1 is of different type [ 238.352974][ T8737] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1010'. [ 239.486889][ T8739] validate_nla: 5 callbacks suppressed [ 239.486910][ T8739] netlink: 'syz.0.1010': attribute type 10 has an invalid length. [ 239.583281][ T8739] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.617606][ T8739] bond0: (slave team0): Enslaving as an active interface with an up link [ 239.632780][ T8741] netlink: 'syz.3.1011': attribute type 10 has an invalid length. [ 239.643790][ T8741] team0: Device vxcan1 is of different type [ 239.695337][ T8744] netlink: 'syz.1.1019': attribute type 10 has an invalid length. [ 239.753048][ T8744] team0: Device vxcan1 is of different type [ 239.915750][ T8752] netlink: 'syz.2.1013': attribute type 10 has an invalid length. [ 239.995500][ T8752] team0: Device vxcan1 is of different type [ 240.348653][ T8755] netlink: 'syz.0.1016': attribute type 10 has an invalid length. [ 240.401980][ T8755] team0: Device vxcan1 is of different type [ 240.703488][ T8759] netlink: 'syz.1.1015': attribute type 10 has an invalid length. [ 240.761156][ T8759] team0: Device vxcan1 is of different type [ 240.961861][ T8767] netlink: 'syz.2.1027': attribute type 10 has an invalid length. [ 241.024439][ T8767] team0: Device vxcan1 is of different type [ 241.483807][ T8778] netlink: 'syz.2.1021': attribute type 21 has an invalid length. [ 241.505275][ T8779] netlink: 'syz.1.1030': attribute type 10 has an invalid length. [ 241.508153][ T8778] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1021'. [ 241.586173][ T8779] team0: Device vxcan1 is of different type [ 241.673050][ T8778] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.1021'. [ 242.059850][ T8791] netlink: 'syz.3.1024': attribute type 10 has an invalid length. [ 242.127987][ T8791] team0: Device vxcan1 is of different type [ 242.140054][ T8783] netlink: 668 bytes leftover after parsing attributes in process `syz.0.1032'. [ 242.219366][ T8783] net_ratelimit: 84 callbacks suppressed [ 242.219391][ T8783] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 242.280785][ T8783] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 242.594844][ T8800] team0: Device vxcan1 is of different type [ 243.110609][ T8803] team0: Device vxcan1 is of different type [ 243.268615][ T8808] team0: Device vxcan1 is of different type [ 243.586359][ T8809] team0: Device vxcan1 is of different type [ 244.119109][ T8814] team0: Device vxcan1 is of different type [ 244.716030][ T8825] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1037'. [ 244.743397][ T8825] netlink: zone id is out of range [ 244.771022][ T8825] netlink: zone id is out of range [ 244.781496][ T8825] netlink: zone id is out of range [ 244.787798][ T8825] netlink: zone id is out of range [ 244.793728][ T8825] netlink: zone id is out of range [ 244.806873][ T8825] netlink: zone id is out of range [ 244.812687][ T8825] netlink: zone id is out of range [ 244.826490][ T8825] netlink: zone id is out of range [ 245.003641][ T8834] validate_nla: 6 callbacks suppressed [ 245.003699][ T8834] netlink: 'syz.1.1041': attribute type 10 has an invalid length. [ 245.069786][ T8834] team0: Device vxcan1 is of different type [ 245.681797][ T8846] netlink: 'syz.2.1045': attribute type 29 has an invalid length. [ 245.722656][ T8846] netlink: 'syz.2.1045': attribute type 29 has an invalid length. [ 245.764477][ T8851] netlink: 'syz.2.1045': attribute type 29 has an invalid length. [ 245.792656][ T8844] netlink: 'syz.0.1052': attribute type 29 has an invalid length. [ 245.832542][ T8854] netlink: 'syz.2.1045': attribute type 29 has an invalid length. [ 245.862097][ T8846] netlink: 'syz.2.1045': attribute type 29 has an invalid length. [ 245.907404][ T8844] netlink: 'syz.0.1052': attribute type 29 has an invalid length. [ 246.161420][ T8859] netlink: 'syz.2.1045': attribute type 29 has an invalid length. [ 246.506294][ T8863] netlink: 'syz.1.1058': attribute type 10 has an invalid length. [ 246.562747][ T8863] team0: Device vxcan1 is of different type [ 246.855679][ T8865] team0: Device vxcan1 is of different type [ 247.333738][ T8871] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1051'. [ 247.965834][ T8871] erspan0: refused to change device tx_queue_len [ 248.072627][ T8871] net_ratelimit: 82 callbacks suppressed [ 248.072645][ T8871] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 248.872551][ T8898] team0: Device vxcan1 is of different type [ 249.060750][ T8899] team0: Device vxcan1 is of different type [ 249.200452][ T8904] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1060'. [ 250.036689][ T8909] team0: Device vxcan1 is of different type [ 250.491053][ T8915] validate_nla: 7 callbacks suppressed [ 250.491071][ T8915] netlink: 'syz.1.1068': attribute type 13 has an invalid length. [ 250.523984][ T8915] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1068'. [ 250.650198][ T8915] erspan0: refused to change device tx_queue_len [ 250.694197][ T8915] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 250.798944][ T8922] netlink: 'syz.0.1067': attribute type 10 has an invalid length. [ 250.896072][ T8922] team0: Device vxcan1 is of different type [ 251.262797][ T8928] netlink: 'syz.3.1079': attribute type 10 has an invalid length. [ 251.323282][ T8928] team0: Device vxcan1 is of different type [ 251.806089][ T8943] netlink: 'syz.1.1077': attribute type 10 has an invalid length. [ 251.852729][ T8943] team0: Device vxcan1 is of different type [ 252.042819][ T8948] netlink: 'syz.2.1078': attribute type 10 has an invalid length. [ 252.127123][ T8948] team0: Device vxcan1 is of different type [ 252.240674][ T8949] netlink: 'syz.3.1080': attribute type 10 has an invalid length. [ 252.394520][ T8949] team0: Device vxcan1 is of different type [ 252.910354][ T8958] netlink: 'syz.2.1083': attribute type 21 has an invalid length. [ 253.057728][ T8952] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.1081'. [ 253.201622][ T8968] netlink: 'syz.3.1087': attribute type 10 has an invalid length. [ 253.340011][ T8968] team0: Device vxcan1 is of different type [ 253.622494][ T8979] netlink: 'syz.1.1091': attribute type 10 has an invalid length. [ 253.653766][ T8979] team0: Device vxcan1 is of different type [ 253.829019][ T8984] netlink: 'syz.3.1102': attribute type 10 has an invalid length. [ 253.869793][ T8984] team0: Device vxcan1 is of different type [ 254.090399][ T8988] team0: Device vxcan1 is of different type [ 254.326648][ T8992] team0: Device vxcan1 is of different type [ 254.611898][ T8999] team0: Device vxcan1 is of different type [ 255.032954][ T9010] team0: Device vxcan1 is of different type [ 255.298513][ T9019] FAULT_INJECTION: forcing a failure. [ 255.298513][ T9019] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 255.341610][ T9019] CPU: 0 PID: 9019 Comm: syz.2.1106 Not tainted syzkaller #0 [ 255.349158][ T9019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.359271][ T9019] Call Trace: [ 255.362678][ T9019] [ 255.365662][ T9019] dump_stack_lvl+0x18c/0x250 [ 255.370423][ T9019] ? show_regs_print_info+0x20/0x20 [ 255.375675][ T9019] ? load_image+0x420/0x420 [ 255.380317][ T9019] ? __lock_acquire+0x7d40/0x7d40 [ 255.385402][ T9019] ? verify_lock_unused+0x140/0x140 [ 255.390653][ T9019] should_fail_ex+0x39d/0x4d0 [ 255.395396][ T9019] prepare_alloc_pages+0x1e2/0x5f0 [ 255.400655][ T9019] __alloc_pages+0x134/0x460 [ 255.405476][ T9019] ? zone_statistics+0x170/0x170 [ 255.410464][ T9019] ? mt_find+0x169/0x650 [ 255.414754][ T9019] ? handle_mm_fault+0xe7/0x4c00 [ 255.419740][ T9019] __folio_alloc+0x10/0x20 [ 255.424225][ T9019] vma_alloc_folio+0x47a/0x8f0 [ 255.429140][ T9019] handle_mm_fault+0x1b3b/0x4c00 [ 255.434228][ T9019] ? handle_mm_fault+0xe7/0x4c00 [ 255.439323][ T9019] ? numa_migrate_prep+0x350/0x350 [ 255.444702][ T9019] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 255.450123][ T9019] do_user_addr_fault+0x730/0x12c0 [ 255.455300][ T9019] exc_page_fault+0x64/0x100 [ 255.459950][ T9019] asm_exc_page_fault+0x26/0x30 [ 255.464845][ T9019] RIP: 0010:__put_user_8+0x11/0x20 [ 255.470099][ T9019] Code: ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 89 01 31 c9 0f 01 ca c3 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 255.489768][ T9019] RSP: 0018:ffffc9000fd17a38 EFLAGS: 00050206 [ 255.495932][ T9019] RAX: ffffffffa0002690 RBX: 0000000000000000 RCX: 0000200000001000 [ 255.504040][ T9019] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8fa0 [ 255.512066][ T9019] RBP: ffffc9000fd17d70 R08: ffffffff8e8b19af R09: 1ffffffff1d16335 [ 255.520262][ T9019] R10: dffffc0000000000 R11: fffffbfff1d16336 R12: 0000000000000000 [ 255.528283][ T9019] R13: 0000000000000000 R14: fffff52001fa2f5c R15: 00000000ffffffff [ 255.536316][ T9019] ? 0xffffffffa0002690 [ 255.540526][ T9019] bpf_obj_get_info_by_fd+0x2742/0x3080 [ 255.546238][ T9019] ? bpf_map_get_fd_by_id+0x310/0x310 [ 255.551675][ T9019] ? get_pid_task+0x20/0x1e0 [ 255.556372][ T9019] ? file_end_write+0x159/0x250 [ 255.561299][ T9019] ? __might_fault+0xaa/0x120 [ 255.566118][ T9019] ? __might_fault+0xc6/0x120 [ 255.570859][ T9019] ? __might_fault+0xaa/0x120 [ 255.575598][ T9019] ? bpf_lsm_bpf+0x9/0x10 [ 255.579988][ T9019] ? security_bpf+0x7e/0xa0 [ 255.584545][ T9019] __sys_bpf+0x7eb/0x890 [ 255.588838][ T9019] ? bpf_link_show_fdinfo+0x390/0x390 [ 255.594280][ T9019] ? lock_chain_count+0x20/0x20 [ 255.599204][ T9019] __x64_sys_bpf+0x7c/0x90 [ 255.603682][ T9019] do_syscall_64+0x55/0xa0 [ 255.608145][ T9019] ? clear_bhb_loop+0x40/0x90 [ 255.612968][ T9019] ? clear_bhb_loop+0x40/0x90 [ 255.617714][ T9019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.623659][ T9019] RIP: 0033:0x7f26f5f9cdd9 [ 255.628121][ T9019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.648039][ T9019] RSP: 002b:00007f26f6d8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 255.656519][ T9019] RAX: ffffffffffffffda RBX: 00007f26f6215fa0 RCX: 00007f26f5f9cdd9 [ 255.664546][ T9019] RDX: 0000000000000010 RSI: 0000200000000a00 RDI: 000000000000000f [ 255.672756][ T9019] RBP: 00007f26f6d8b090 R08: 0000000000000000 R09: 0000000000000000 [ 255.680776][ T9019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.688885][ T9019] R13: 00007f26f6216038 R14: 00007f26f6215fa0 R15: 00007ffcaf2465d8 [ 255.696928][ T9019] [ 255.888241][ T9025] FAULT_INJECTION: forcing a failure. [ 255.888241][ T9025] name failslab, interval 1, probability 0, space 0, times 0 [ 255.911458][ T9025] CPU: 0 PID: 9025 Comm: syz.0.1109 Not tainted syzkaller #0 [ 255.918995][ T9025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.929096][ T9025] Call Trace: [ 255.932418][ T9025] [ 255.935384][ T9025] dump_stack_lvl+0x18c/0x250 [ 255.940100][ T9025] ? sctp_sendmsg+0x1575/0x28c0 [ 255.944977][ T9025] ? ___sys_sendmsg+0x2a6/0x360 [ 255.949850][ T9025] ? show_regs_print_info+0x20/0x20 [ 255.955070][ T9025] ? load_image+0x420/0x420 [ 255.959604][ T9025] should_fail_ex+0x39d/0x4d0 [ 255.964314][ T9025] should_failslab+0x9/0x20 [ 255.968837][ T9025] slab_pre_alloc_hook+0x59/0x310 [ 255.973889][ T9025] ? sctp_add_bind_addr+0x8c/0x360 [ 255.979016][ T9025] __kmem_cache_alloc_node+0x53/0x250 [ 255.984436][ T9025] ? sctp_add_bind_addr+0x8c/0x360 [ 255.989571][ T9025] kmalloc_trace+0x2a/0xe0 [ 255.994010][ T9025] sctp_add_bind_addr+0x8c/0x360 [ 255.999074][ T9025] sctp_copy_local_addr_list+0x315/0x4f0 [ 256.004725][ T9025] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 256.010484][ T9025] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 256.016609][ T9025] ? sctp_v4_is_any+0x35/0x60 [ 256.021673][ T9025] ? sctp_copy_one_addr+0x8c/0x350 [ 256.026902][ T9025] sctp_bind_addr_copy+0xb3/0x3c0 [ 256.032040][ T9025] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 256.038393][ T9025] sctp_connect_new_asoc+0x2f9/0x6a0 [ 256.043694][ T9025] ? __sctp_connect+0xd80/0xd80 [ 256.048561][ T9025] ? __local_bh_enable_ip+0x13a/0x1c0 [ 256.054052][ T9025] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 256.059807][ T9025] ? security_sctp_bind_connect+0x89/0xb0 [ 256.065631][ T9025] sctp_sendmsg+0x1575/0x28c0 [ 256.070435][ T9025] ? sctp_getsockopt+0xb60/0xb60 [ 256.075412][ T9025] ? aa_sk_perm+0x83c/0x970 [ 256.079948][ T9025] ? aa_af_perm+0x330/0x330 [ 256.084556][ T9025] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 256.090998][ T9025] ? sock_rps_record_flow+0x19/0x3f0 [ 256.096303][ T9025] ? inet_sendmsg+0xe9/0x2f0 [ 256.100908][ T9025] ? inet_send_prepare+0x260/0x260 [ 256.106062][ T9025] ____sys_sendmsg+0x5ba/0x960 [ 256.110846][ T9025] ? __lock_acquire+0x7d40/0x7d40 [ 256.115919][ T9025] ? __asan_memset+0x22/0x40 [ 256.120657][ T9025] ? __sys_sendmsg_sock+0x30/0x30 [ 256.125723][ T9025] ? __import_iovec+0x5f2/0x850 [ 256.130621][ T9025] ? import_iovec+0x73/0xa0 [ 256.135239][ T9025] ___sys_sendmsg+0x2a6/0x360 [ 256.139938][ T9025] ? get_pid_task+0x20/0x1e0 [ 256.144549][ T9025] ? __sys_sendmsg+0x2a0/0x2a0 [ 256.149443][ T9025] ? __lock_acquire+0x7d40/0x7d40 [ 256.154542][ T9025] __se_sys_sendmsg+0x1c2/0x2b0 [ 256.159445][ T9025] ? __x64_sys_sendmsg+0x80/0x80 [ 256.164426][ T9025] ? lockdep_hardirqs_on+0x98/0x150 [ 256.169742][ T9025] do_syscall_64+0x55/0xa0 [ 256.174236][ T9025] ? clear_bhb_loop+0x40/0x90 [ 256.178954][ T9025] ? clear_bhb_loop+0x40/0x90 [ 256.183650][ T9025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.189651][ T9025] RIP: 0033:0x7f1867b9cdd9 [ 256.194079][ T9025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.213836][ T9025] RSP: 002b:00007f1868987028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.222373][ T9025] RAX: ffffffffffffffda RBX: 00007f1867e15fa0 RCX: 00007f1867b9cdd9 [ 256.230536][ T9025] RDX: 0000000004000044 RSI: 00002000000003c0 RDI: 0000000000000004 [ 256.238622][ T9025] RBP: 00007f1868987090 R08: 0000000000000000 R09: 0000000000000000 [ 256.246612][ T9025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.254712][ T9025] R13: 00007f1867e16038 R14: 00007f1867e15fa0 R15: 00007ffc177ce5d8 [ 256.262739][ T9025] [ 256.277199][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.284917][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.370790][ T9029] validate_nla: 7 callbacks suppressed [ 256.370810][ T9029] netlink: 'syz.2.1110': attribute type 21 has an invalid length. [ 256.406476][ T9026] netlink: 'syz.3.1108': attribute type 10 has an invalid length. [ 256.563077][ T9026] team0: Device vxcan1 is of different type [ 256.663059][ T9039] netlink: 'syz.2.1113': attribute type 10 has an invalid length. [ 256.840858][ T9039] team0: Device vxcan1 is of different type [ 256.931598][ T9042] netlink: 'syz.1.1122': attribute type 21 has an invalid length. [ 256.997856][ T9026] syz.3.1108 (9026) used greatest stack depth: 18608 bytes left [ 257.150219][ T9047] netlink: 'syz.0.1115': attribute type 10 has an invalid length. [ 257.251454][ T9054] netlink: 'syz.1.1117': attribute type 29 has an invalid length. [ 257.254742][ T9047] team0: Device vxcan1 is of different type [ 257.439422][ T9051] veth1_to_bond: entered allmulticast mode [ 257.563576][ T9054] netlink: 'syz.1.1117': attribute type 29 has an invalid length. [ 258.947399][ T9081] netlink: 'syz.0.1126': attribute type 21 has an invalid length. [ 258.999824][ T9083] netlink: 'syz.2.1127': attribute type 10 has an invalid length. [ 259.067242][ T9083] team0: Device vxcan1 is of different type [ 259.255858][ T9087] netlink: 'syz.3.1128': attribute type 10 has an invalid length. [ 259.419779][ T9087] team0: Device vxcan1 is of different type [ 259.742571][ T9089] team0: Device vxcan1 is of different type [ 260.222585][ T9099] team0: Device vxcan1 is of different type [ 260.534872][ T9100] team0: Device vxcan1 is of different type [ 260.786914][ T9106] team0: Device vxcan1 is of different type [ 261.291385][ T9115] team0: Device vxcan1 is of different type [ 261.580489][ T9118] validate_nla: 7 callbacks suppressed [ 261.580513][ T9118] netlink: 'syz.2.1137': attribute type 21 has an invalid length. [ 261.595222][ T5784] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 261.949564][ T9124] netlink: 'syz.3.1149': attribute type 10 has an invalid length. [ 262.069187][ T9124] team0: Device vxcan1 is of different type [ 262.224293][ T9125] netlink: 'syz.1.1148': attribute type 21 has an invalid length. [ 262.247277][ T9128] netlink: 'syz.0.1141': attribute type 10 has an invalid length. [ 262.394238][ T9128] team0: Device vxcan1 is of different type [ 262.574026][ T9129] netlink: 'syz.2.1140': attribute type 10 has an invalid length. [ 262.707086][ T9129] team0: Device vxcan1 is of different type [ 262.821648][ T9140] netlink: 'syz.3.1142': attribute type 29 has an invalid length. [ 262.870565][ T9140] netlink: 'syz.3.1142': attribute type 29 has an invalid length. [ 263.192554][ T9146] netlink: 'syz.2.1144': attribute type 10 has an invalid length. [ 263.283557][ T9146] team0: Device vxcan1 is of different type [ 263.631587][ T9148] netlink: 'syz.0.1145': attribute type 10 has an invalid length. [ 263.726277][ T9148] team0: Device vxcan1 is of different type [ 263.921358][ T9154] netlink: 'syz.1.1146': attribute type 10 has an invalid length. [ 264.015611][ T9154] team0: Device vxcan1 is of different type [ 264.170046][ T9158] FAULT_INJECTION: forcing a failure. [ 264.170046][ T9158] name failslab, interval 1, probability 0, space 0, times 0 [ 264.193037][ T9158] CPU: 0 PID: 9158 Comm: syz.2.1150 Not tainted syzkaller #0 [ 264.200623][ T9158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 264.210916][ T9158] Call Trace: [ 264.214353][ T9158] [ 264.217328][ T9158] dump_stack_lvl+0x18c/0x250 [ 264.222080][ T9158] ? show_regs_print_info+0x20/0x20 [ 264.227332][ T9158] ? load_image+0x420/0x420 [ 264.231966][ T9158] ? __might_sleep+0xe0/0xe0 [ 264.236737][ T9158] ? __lock_acquire+0x7d40/0x7d40 [ 264.241879][ T9158] should_fail_ex+0x39d/0x4d0 [ 264.246601][ T9158] should_failslab+0x9/0x20 [ 264.251141][ T9158] slab_pre_alloc_hook+0x59/0x310 [ 264.256254][ T9158] ? aa_path_link+0xf70/0xf70 [ 264.260953][ T9158] kmem_cache_alloc_node+0x60/0x320 [ 264.266176][ T9158] ? __alloc_skb+0x103/0x2c0 [ 264.270786][ T9158] __alloc_skb+0x103/0x2c0 [ 264.275221][ T9158] vhci_write+0xbd/0x470 [ 264.279493][ T9158] vfs_write+0x46c/0x990 [ 264.283801][ T9158] ? file_end_write+0x250/0x250 [ 264.288686][ T9158] ? __fget_files+0x43d/0x4b0 [ 264.293520][ T9158] ? __fdget_pos+0x1d8/0x330 [ 264.298263][ T9158] ? ksys_write+0x75/0x260 [ 264.302788][ T9158] ksys_write+0x150/0x260 [ 264.307230][ T9158] ? __ia32_sys_read+0x90/0x90 [ 264.312015][ T9158] ? lockdep_hardirqs_on+0x98/0x150 [ 264.317236][ T9158] do_syscall_64+0x55/0xa0 [ 264.321667][ T9158] ? clear_bhb_loop+0x40/0x90 [ 264.326360][ T9158] ? clear_bhb_loop+0x40/0x90 [ 264.331078][ T9158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.337078][ T9158] RIP: 0033:0x7f26f5f9cdd9 [ 264.341514][ T9158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.361421][ T9158] RSP: 002b:00007f26f6d8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 264.369871][ T9158] RAX: ffffffffffffffda RBX: 00007f26f6215fa0 RCX: 00007f26f5f9cdd9 [ 264.377872][ T9158] RDX: 000000000000009a RSI: 0000200000000000 RDI: 00000000000000ca [ 264.385858][ T9158] RBP: 00007f26f6d8b090 R08: 0000000000000000 R09: 0000000000000000 [ 264.393958][ T9158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.401943][ T9158] R13: 00007f26f6216038 R14: 00007f26f6215fa0 R15: 00007ffcaf2465d8 [ 264.410036][ T9158] [ 265.117712][ T9164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.164234][ T9164] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 265.682335][ T9176] team0: Device vxcan1 is of different type [ 266.535349][ T9188] team0: Device vxcan1 is of different type [ 267.406634][ T9207] validate_nla: 4 callbacks suppressed [ 267.406711][ T9207] netlink: 'syz.0.1173': attribute type 10 has an invalid length. [ 267.489400][ T9207] team0: Device vxcan1 is of different type [ 268.775808][ T9239] netlink: 'syz.3.1178': attribute type 10 has an invalid length. [ 268.860604][ T9239] team0: Device vxcan1 is of different type [ 268.951535][ T9240] netlink: 'syz.1.1181': attribute type 46 has an invalid length. [ 268.975584][ T9240] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1181'. [ 269.053765][ T9247] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1183'. [ 269.429705][ T9251] netlink: 'syz.0.1192': attribute type 46 has an invalid length. [ 269.468772][ T9251] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1192'. [ 269.600104][ T9257] netlink: 'syz.3.1184': attribute type 10 has an invalid length. [ 269.714248][ T9257] team0: Device vxcan1 is of different type [ 269.940800][ T9265] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1187'. [ 270.073576][ T9262] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1187'. [ 270.094595][ T9264] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1187'. [ 270.117580][ T9264] bridge_slave_1: default FDB implementation only supports local addresses [ 270.557839][ T9279] FAULT_INJECTION: forcing a failure. [ 270.557839][ T9279] name failslab, interval 1, probability 0, space 0, times 0 [ 270.570930][ T9279] CPU: 0 PID: 9279 Comm: syz.2.1193 Not tainted syzkaller #0 [ 270.578616][ T9279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 270.588718][ T9279] Call Trace: [ 270.592046][ T9279] [ 270.595030][ T9279] dump_stack_lvl+0x18c/0x250 [ 270.599820][ T9279] ? show_regs_print_info+0x20/0x20 [ 270.605087][ T9279] ? load_image+0x420/0x420 [ 270.609650][ T9279] ? __might_sleep+0xe0/0xe0 [ 270.614338][ T9279] ? __lock_acquire+0x7d40/0x7d40 [ 270.619438][ T9279] should_fail_ex+0x39d/0x4d0 [ 270.620957][ T9281] netlink: 'syz.3.1194': attribute type 4 has an invalid length. [ 270.624238][ T9279] should_failslab+0x9/0x20 [ 270.624270][ T9279] slab_pre_alloc_hook+0x59/0x310 [ 270.624299][ T9279] ? __lock_acquire+0x7d40/0x7d40 [ 270.624326][ T9279] kmem_cache_alloc_node+0x60/0x320 [ 270.624354][ T9279] ? __alloc_skb+0x103/0x2c0 [ 270.624389][ T9279] __alloc_skb+0x103/0x2c0 [ 270.624413][ T9279] netlink_sendmsg+0x66a/0xbf0 [ 270.624453][ T9279] ? netlink_getsockopt+0x590/0x590 [ 270.624485][ T9279] ? aa_sock_msg_perm+0x94/0x150 [ 270.624513][ T9279] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 270.624537][ T9279] ? security_socket_sendmsg+0x80/0xa0 [ 270.624558][ T9279] ? netlink_getsockopt+0x590/0x590 [ 270.624589][ T9279] ____sys_sendmsg+0x5ba/0x960 [ 270.624618][ T9279] ? __asan_memset+0x22/0x40 [ 270.624644][ T9279] ? __sys_sendmsg_sock+0x30/0x30 [ 270.624662][ T9279] ? __import_iovec+0x5f2/0x850 [ 270.624694][ T9279] ? import_iovec+0x73/0xa0 [ 270.624719][ T9279] ___sys_sendmsg+0x2a6/0x360 [ 270.624747][ T9279] ? __sys_sendmsg+0x2a0/0x2a0 [ 270.624794][ T9279] ? __lock_acquire+0x7d40/0x7d40 [ 270.624848][ T9279] __se_sys_sendmsg+0x1c2/0x2b0 [ 270.624872][ T9279] ? __x64_sys_sendmsg+0x80/0x80 [ 270.624914][ T9279] ? lockdep_hardirqs_on+0x98/0x150 [ 270.624942][ T9279] do_syscall_64+0x55/0xa0 [ 270.624960][ T9279] ? clear_bhb_loop+0x40/0x90 [ 270.624984][ T9279] ? clear_bhb_loop+0x40/0x90 [ 270.625009][ T9279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.625034][ T9279] RIP: 0033:0x7f26f5f9cdd9 [ 270.625054][ T9279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.625071][ T9279] RSP: 002b:00007f26f6d8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.625095][ T9279] RAX: ffffffffffffffda RBX: 00007f26f6215fa0 RCX: 00007f26f5f9cdd9 [ 270.625110][ T9279] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 270.625123][ T9279] RBP: 00007f26f6d8b090 R08: 0000000000000000 R09: 0000000000000000 [ 270.625137][ T9279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.625151][ T9279] R13: 00007f26f6216038 R14: 00007f26f6215fa0 R15: 00007ffcaf2465d8 [ 270.625184][ T9279] [ 271.104885][ T9281] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1194'. [ 271.477777][ T9281] wlan1: mtu less than device minimum [ 271.483250][ T9281] team0: Device wlan1 failed to change mtu [ 271.498377][ T9287] netlink: 'syz.0.1195': attribute type 41 has an invalid length. [ 271.568319][ T9293] netlink: 'syz.1.1197': attribute type 10 has an invalid length. [ 271.641970][ T9298] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.1199'. [ 271.648034][ T9293] team0: Device vxcan1 is of different type [ 271.660594][ T9298] openvswitch: netlink: Message has 20476 unknown bytes. [ 271.745647][ T9296] netlink: 'syz.2.1198': attribute type 10 has an invalid length. [ 271.871289][ T9296] team0: Device vxcan1 is of different type [ 272.196661][ T9307] netlink: 'syz.3.1203': attribute type 7 has an invalid length. [ 272.207443][ T9307] FAULT_INJECTION: forcing a failure. [ 272.207443][ T9307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.221186][ T9307] CPU: 0 PID: 9307 Comm: syz.3.1203 Not tainted syzkaller #0 [ 272.228718][ T9307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 272.238907][ T9307] Call Trace: [ 272.242391][ T9307] [ 272.245431][ T9307] dump_stack_lvl+0x18c/0x250 [ 272.250156][ T9307] ? show_regs_print_info+0x20/0x20 [ 272.255382][ T9307] ? load_image+0x420/0x420 [ 272.259910][ T9307] ? __lock_acquire+0x7d40/0x7d40 [ 272.264957][ T9307] ? snprintf+0xe9/0x140 [ 272.269247][ T9307] should_fail_ex+0x39d/0x4d0 [ 272.274143][ T9307] _copy_to_user+0x2f/0xa0 [ 272.278596][ T9307] simple_read_from_buffer+0xe7/0x150 [ 272.284118][ T9307] proc_fail_nth_read+0x1e8/0x260 [ 272.289178][ T9307] ? proc_fault_inject_write+0x360/0x360 [ 272.294951][ T9307] ? fsnotify_perm+0x271/0x5e0 [ 272.299740][ T9307] ? proc_fault_inject_write+0x360/0x360 [ 272.305444][ T9307] vfs_read+0x28b/0x970 [ 272.309642][ T9307] ? kernel_read+0x1e0/0x1e0 [ 272.314429][ T9307] ? __fget_files+0x28/0x4b0 [ 272.319126][ T9307] ? __fget_files+0x28/0x4b0 [ 272.323999][ T9307] ? __fget_files+0x43d/0x4b0 [ 272.328719][ T9307] ? __fdget_pos+0x2a3/0x330 [ 272.333433][ T9307] ? ksys_read+0x75/0x260 [ 272.337804][ T9307] ksys_read+0x150/0x260 [ 272.342080][ T9307] ? vfs_write+0x990/0x990 [ 272.346618][ T9307] ? lockdep_hardirqs_on+0x98/0x150 [ 272.351839][ T9307] do_syscall_64+0x55/0xa0 [ 272.356286][ T9307] ? clear_bhb_loop+0x40/0x90 [ 272.360986][ T9307] ? clear_bhb_loop+0x40/0x90 [ 272.365774][ T9307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.371872][ T9307] RIP: 0033:0x7fb892d5d60e [ 272.376577][ T9307] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 272.396372][ T9307] RSP: 002b:00007fb893d25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 272.404898][ T9307] RAX: ffffffffffffffda RBX: 00007fb893d266c0 RCX: 00007fb892d5d60e [ 272.412925][ T9307] RDX: 000000000000000f RSI: 00007fb893d260a0 RDI: 0000000000000009 [ 272.420915][ T9307] RBP: 00007fb893d26090 R08: 0000000000000000 R09: 0000000000000000 [ 272.429004][ T9307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.437350][ T9307] R13: 00007fb893016038 R14: 00007fb893015fa0 R15: 00007ffdc1920798 [ 272.445362][ T9307] [ 272.715065][ T9319] validate_nla: 1 callbacks suppressed [ 272.715083][ T9319] netlink: 'syz.0.1207': attribute type 1 has an invalid length. [ 272.737756][ T9320] sctp: [Deprecated]: syz.1.1206 (pid 9320) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.737756][ T9320] Use struct sctp_sack_info instead [ 272.920609][ T9327] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1206'. [ 273.021999][ T9330] netlink: 'syz.0.1211': attribute type 10 has an invalid length. [ 273.095599][ T9330] team0: Device vxcan1 is of different type [ 274.364086][ T9360] syzkaller0: entered promiscuous mode [ 274.374265][ T9360] syzkaller0: entered allmulticast mode [ 275.540396][ T9386] netlink: 'syz.1.1227': attribute type 11 has an invalid length. [ 275.564753][ T9386] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.1227'. [ 277.225236][ T9376] netlink: 'syz.2.1222': attribute type 10 has an invalid length. [ 277.234606][ T9376] team0: Device vxcan1 is of different type [ 277.499928][ T9405] netlink: 'syz.3.1232': attribute type 10 has an invalid length. [ 277.606485][ T9405] team0: Device wg1 is of different type [ 277.896098][ T9415] netlink: 'syz.1.1235': attribute type 10 has an invalid length. [ 277.950536][ T9415] team0: Device vxcan1 is of different type [ 278.162332][ T9426] netlink: 'syz.3.1239': attribute type 10 has an invalid length. [ 278.195097][ T9426] team0: Device vxcan1 is of different type [ 278.373206][ T9434] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1241'. [ 278.847235][ T9445] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1246'. [ 278.856190][ T9445] openvswitch: netlink: Flow actions attr not present in new flow. [ 279.087600][ T9458] netlink: 'syz.1.1247': attribute type 29 has an invalid length. [ 279.112693][ T9457] netlink: 'syz.2.1249': attribute type 10 has an invalid length. [ 279.234885][ T9457] team0: Device vxcan1 is of different type [ 279.423740][ T9458] netlink: 'syz.1.1247': attribute type 29 has an invalid length. [ 280.084081][ T9479] netlink: 'syz.0.1258': attribute type 10 has an invalid length. [ 280.236286][ T9479] team0: Device vxcan1 is of different type [ 280.776052][ T9492] netlink: 'syz.3.1261': attribute type 10 has an invalid length. [ 280.841477][ T9492] team0: Device vxcan1 is of different type [ 281.206960][ T9502] netlink: 'syz.0.1264': attribute type 29 has an invalid length. [ 281.215457][ T9502] netlink: 'syz.0.1264': attribute type 29 has an invalid length. [ 281.683691][ T9509] netlink: 'syz.3.1267': attribute type 10 has an invalid length. [ 281.699356][ T9509] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1267'. [ 281.709706][ T9509] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 281.719612][ T9509] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.776029][ T9509] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 281.828393][ T9518] syzkaller0: left promiscuous mode [ 281.870320][ T9518] syzkaller0: left allmulticast mode [ 282.112742][ T9520] FAULT_INJECTION: forcing a failure. [ 282.112742][ T9520] name failslab, interval 1, probability 0, space 0, times 0 [ 282.192044][ T9520] CPU: 1 PID: 9520 Comm: syz.3.1271 Not tainted syzkaller #0 [ 282.199550][ T9520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 282.209645][ T9520] Call Trace: [ 282.213033][ T9520] [ 282.215990][ T9520] dump_stack_lvl+0x18c/0x250 [ 282.220907][ T9520] ? sctp_sendmsg+0x1575/0x28c0 [ 282.225833][ T9520] ? ___sys_sendmsg+0x2a6/0x360 [ 282.230965][ T9520] ? show_regs_print_info+0x20/0x20 [ 282.236263][ T9520] ? load_image+0x420/0x420 [ 282.240983][ T9520] should_fail_ex+0x39d/0x4d0 [ 282.245696][ T9520] should_failslab+0x9/0x20 [ 282.250244][ T9520] slab_pre_alloc_hook+0x59/0x310 [ 282.255317][ T9520] ? sctp_add_bind_addr+0x8c/0x360 [ 282.260575][ T9520] __kmem_cache_alloc_node+0x53/0x250 [ 282.265974][ T9520] ? sctp_add_bind_addr+0x8c/0x360 [ 282.271283][ T9520] kmalloc_trace+0x2a/0xe0 [ 282.275729][ T9520] sctp_add_bind_addr+0x8c/0x360 [ 282.280783][ T9520] sctp_copy_local_addr_list+0x315/0x4f0 [ 282.286436][ T9520] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 282.292204][ T9520] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 282.298292][ T9520] ? sctp_v6_is_any+0x64/0x70 [ 282.303183][ T9520] ? sctp_copy_one_addr+0x8c/0x350 [ 282.308337][ T9520] sctp_bind_addr_copy+0xb3/0x3c0 [ 282.313485][ T9520] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 282.319935][ T9520] sctp_connect_new_asoc+0x2f9/0x6a0 [ 282.325363][ T9520] ? __sctp_connect+0xd80/0xd80 [ 282.330258][ T9520] ? __local_bh_enable_ip+0x13a/0x1c0 [ 282.335656][ T9520] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 282.341222][ T9520] ? security_sctp_bind_connect+0x89/0xb0 [ 282.346975][ T9520] sctp_sendmsg+0x1575/0x28c0 [ 282.351690][ T9520] ? sctp_getsockopt+0xb60/0xb60 [ 282.356646][ T9520] ? aa_sk_perm+0x83c/0x970 [ 282.361183][ T9520] ? aa_af_perm+0x330/0x330 [ 282.365704][ T9520] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 282.372320][ T9520] ? sock_rps_record_flow+0x19/0x3f0 [ 282.377806][ T9520] ? inet_sendmsg+0xe9/0x2f0 [ 282.382413][ T9520] ? inet_send_prepare+0x260/0x260 [ 282.387548][ T9520] ____sys_sendmsg+0x5ba/0x960 [ 282.392329][ T9520] ? __lock_acquire+0x7d40/0x7d40 [ 282.397377][ T9520] ? __asan_memset+0x22/0x40 [ 282.401987][ T9520] ? __sys_sendmsg_sock+0x30/0x30 [ 282.407050][ T9520] ? __import_iovec+0x5f2/0x850 [ 282.411928][ T9520] ? import_iovec+0x73/0xa0 [ 282.416454][ T9520] ___sys_sendmsg+0x2a6/0x360 [ 282.421234][ T9520] ? get_pid_task+0x20/0x1e0 [ 282.425870][ T9520] ? __sys_sendmsg+0x2a0/0x2a0 [ 282.430676][ T9520] ? __lock_acquire+0x7d40/0x7d40 [ 282.435747][ T9520] __se_sys_sendmsg+0x1c2/0x2b0 [ 282.440618][ T9520] ? __x64_sys_sendmsg+0x80/0x80 [ 282.445591][ T9520] ? lockdep_hardirqs_on+0x98/0x150 [ 282.450812][ T9520] do_syscall_64+0x55/0xa0 [ 282.455238][ T9520] ? clear_bhb_loop+0x40/0x90 [ 282.459933][ T9520] ? clear_bhb_loop+0x40/0x90 [ 282.464642][ T9520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.470725][ T9520] RIP: 0033:0x7fb892d9cdd9 [ 282.475246][ T9520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.495048][ T9520] RSP: 002b:00007fb893d26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.503481][ T9520] RAX: ffffffffffffffda RBX: 00007fb893015fa0 RCX: 00007fb892d9cdd9 [ 282.511569][ T9520] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 282.519662][ T9520] RBP: 00007fb893d26090 R08: 0000000000000000 R09: 0000000000000000 [ 282.527735][ T9520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 282.535720][ T9520] R13: 00007fb893016038 R14: 00007fb893015fa0 R15: 00007ffdc1920798 [ 282.543811][ T9520] [ 283.914656][ T9535] netlink: 'syz.2.1275': attribute type 10 has an invalid length. [ 284.222275][ T9535] wg1: entered promiscuous mode [ 284.231215][ T9535] wg1: entered allmulticast mode [ 284.247023][ T9535] team0: Device wg1 is of different type [ 284.911474][ T9550] netlink: 'syz.1.1280': attribute type 29 has an invalid length. [ 284.995937][ T9550] netlink: 'syz.1.1280': attribute type 29 has an invalid length. [ 285.958595][ T9567] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1287'. [ 285.976205][ T9566] delete_channel: no stack [ 286.049832][ T9571] FAULT_INJECTION: forcing a failure. [ 286.049832][ T9571] name failslab, interval 1, probability 0, space 0, times 0 [ 286.156628][ T9571] CPU: 1 PID: 9571 Comm: syz.1.1288 Not tainted syzkaller #0 [ 286.164256][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 286.174382][ T9571] Call Trace: [ 286.177713][ T9571] [ 286.180682][ T9571] dump_stack_lvl+0x18c/0x250 [ 286.185498][ T9571] ? show_regs_print_info+0x20/0x20 [ 286.190736][ T9571] ? load_image+0x420/0x420 [ 286.195362][ T9571] ? __lock_acquire+0x7d40/0x7d40 [ 286.200447][ T9571] should_fail_ex+0x39d/0x4d0 [ 286.205272][ T9571] should_failslab+0x9/0x20 [ 286.209815][ T9571] slab_pre_alloc_hook+0x59/0x310 [ 286.214870][ T9571] ? __build_skb_around+0x255/0x3d0 [ 286.220176][ T9571] kmem_cache_alloc+0x5a/0x2d0 [ 286.224988][ T9571] ? _sctp_make_chunk+0x14e/0x420 [ 286.230514][ T9571] _sctp_make_chunk+0x14e/0x420 [ 286.235410][ T9571] sctp_make_datafrag_empty+0x12b/0x240 [ 286.240994][ T9571] ? sctp_make_ecne+0x340/0x340 [ 286.245968][ T9571] ? sctp_user_addto_chunk+0xb0/0x220 [ 286.251377][ T9571] sctp_datamsg_from_user+0x722/0xee0 [ 286.256902][ T9571] sctp_sendmsg_to_asoc+0x107f/0x1830 [ 286.262411][ T9571] ? __asan_memcpy+0x40/0x70 [ 286.267047][ T9571] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 286.272517][ T9571] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 286.278534][ T9571] ? __sctp_connect+0xd80/0xd80 [ 286.283583][ T9571] ? __local_bh_enable_ip+0x13a/0x1c0 [ 286.289182][ T9571] ? _local_bh_enable+0xa0/0xa0 [ 286.294151][ T9571] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 286.300019][ T9571] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 286.306322][ T9571] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 286.312256][ T9571] ? security_sctp_bind_connect+0x89/0xb0 [ 286.318116][ T9571] sctp_sendmsg+0x1b83/0x28c0 [ 286.322845][ T9571] ? sctp_getsockopt+0xb60/0xb60 [ 286.327828][ T9571] ? aa_sk_perm+0x83c/0x970 [ 286.332469][ T9571] ? aa_af_perm+0x330/0x330 [ 286.337094][ T9571] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 286.343539][ T9571] ? sock_rps_record_flow+0x19/0x3f0 [ 286.348861][ T9571] ? inet_sendmsg+0x7c/0x2f0 [ 286.353492][ T9571] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 286.358815][ T9571] ? security_socket_sendmsg+0x80/0xa0 [ 286.364308][ T9571] ? inet_send_prepare+0x260/0x260 [ 286.369448][ T9571] ____sys_sendmsg+0x5ba/0x960 [ 286.374327][ T9571] ? __lock_acquire+0x7d40/0x7d40 [ 286.379384][ T9571] ? __asan_memset+0x22/0x40 [ 286.384000][ T9571] ? __sys_sendmsg_sock+0x30/0x30 [ 286.389040][ T9571] ? __import_iovec+0x5f2/0x850 [ 286.393932][ T9571] ? import_iovec+0x73/0xa0 [ 286.398471][ T9571] ___sys_sendmsg+0x2a6/0x360 [ 286.403185][ T9571] ? __sys_sendmsg+0x2a0/0x2a0 [ 286.408012][ T9571] ? __lock_acquire+0x7d40/0x7d40 [ 286.413119][ T9571] __se_sys_sendmsg+0x1c2/0x2b0 [ 286.418031][ T9571] ? __x64_sys_sendmsg+0x80/0x80 [ 286.423048][ T9571] ? lockdep_hardirqs_on+0x98/0x150 [ 286.428281][ T9571] do_syscall_64+0x55/0xa0 [ 286.432733][ T9571] ? clear_bhb_loop+0x40/0x90 [ 286.437532][ T9571] ? clear_bhb_loop+0x40/0x90 [ 286.442242][ T9571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.448258][ T9571] RIP: 0033:0x7f769939cdd9 [ 286.452706][ T9571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.472616][ T9571] RSP: 002b:00007f769a2ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.481062][ T9571] RAX: ffffffffffffffda RBX: 00007f7699616090 RCX: 00007f769939cdd9 [ 286.489060][ T9571] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 286.497325][ T9571] RBP: 00007f769a2ce090 R08: 0000000000000000 R09: 0000000000000000 [ 286.505494][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 286.513575][ T9571] R13: 00007f7699616128 R14: 00007f7699616090 R15: 00007ffec4105838 [ 286.521689][ T9571] [ 286.577580][ T9562] C: renamed from team_slave_0 [ 286.691813][ T9562] netlink: 'syz.3.1286': attribute type 3 has an invalid length. [ 286.792093][ T9562] netlink: 'syz.3.1286': attribute type 1 has an invalid length. [ 286.831205][ T9562] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1286'. [ 287.342026][ T9582] netlink: 'syz.0.1291': attribute type 10 has an invalid length. [ 287.750689][ T9582] team0: Device wg1 is of different type [ 288.289746][ T9597] netlink: 'syz.1.1296': attribute type 25 has an invalid length. [ 288.346773][ T9597] netlink: 'syz.1.1296': attribute type 1 has an invalid length. [ 288.433086][ T9599] netlink: 'syz.2.1297': attribute type 29 has an invalid length. [ 288.497036][ T9599] netlink: 'syz.2.1297': attribute type 29 has an invalid length. [ 289.202944][ T9611] bridge0: port 4(veth1_to_hsr) entered blocking state [ 289.365286][ T9611] bridge0: port 4(veth1_to_hsr) entered disabled state [ 289.503649][ T9611] veth1_to_hsr: entered allmulticast mode [ 289.585095][ T9611] veth1_to_hsr: entered promiscuous mode [ 289.687861][ T9611] bridge0: port 4(veth1_to_hsr) entered blocking state [ 289.694985][ T9611] bridge0: port 4(veth1_to_hsr) entered forwarding state [ 289.796990][ T9616] netlink: 'syz.2.1303': attribute type 10 has an invalid length. [ 290.155983][ T9616] team0: Device vxcan1 is of different type [ 292.097702][ T9648] netlink: 'syz.0.1311': attribute type 29 has an invalid length. [ 292.185207][ T9648] netlink: 'syz.0.1311': attribute type 29 has an invalid length. [ 295.280109][ T9666] sctp: [Deprecated]: syz.0.1317 (pid 9666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.280109][ T9666] Use struct sctp_sack_info instead [ 297.215799][ T9682] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1322'. [ 298.954415][ T9691] netlink: 'syz.0.1325': attribute type 10 has an invalid length. [ 298.997771][ T9686] netlink: 'syz.3.1323': attribute type 29 has an invalid length. [ 299.002303][ T9691] team0: Device vxcan1 is of different type [ 299.379303][ T9686] netlink: 'syz.3.1323': attribute type 29 has an invalid length. [ 300.009611][ T9698] netlink: 'syz.1.1327': attribute type 14 has an invalid length. [ 300.179396][ T9698] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1327'. [ 300.234105][ T9701] netlink: 'syz.1.1327': attribute type 10 has an invalid length. [ 300.370616][ T9701] veth0_vlan: left promiscuous mode [ 300.437281][ T9701] veth0_vlan: entered promiscuous mode [ 300.476252][ T9701] team0: Device veth0_vlan failed to register rx_handler [ 301.601205][ T9704] netlink: 'syz.2.1330': attribute type 2 has an invalid length. [ 301.623366][ T9704] netlink: 187468 bytes leftover after parsing attributes in process `syz.2.1330'. [ 303.505845][ T9722] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1333'. [ 305.232109][ T9725] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1336'. [ 305.626714][ T9725] netlink: 4612 bytes leftover after parsing attributes in process `syz.3.1336'. [ 305.766806][ T9725] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1336'. [ 305.966139][ T9736] netlink: 'syz.0.1337': attribute type 29 has an invalid length. [ 306.109859][ T9736] netlink: 'syz.0.1337': attribute type 29 has an invalid length. [ 307.314263][ T9751] netlink: 'syz.0.1342': attribute type 10 has an invalid length. [ 307.436381][ T9751] team0: Device vxcan1 is of different type [ 309.617966][ T9768] macsec0: entered promiscuous mode [ 309.652760][ T9768] macsec0: entered allmulticast mode [ 309.747573][ T9768] veth1_macvtap: entered allmulticast mode [ 309.874699][ T9770] netlink: 'syz.0.1347': attribute type 7 has an invalid length. [ 309.881457][ T9778] netlink: 'syz.2.1350': attribute type 29 has an invalid length. [ 309.910115][ T9770] netlink: 'syz.0.1347': attribute type 6 has an invalid length. [ 309.943023][ T9778] netlink: 'syz.2.1350': attribute type 29 has an invalid length. [ 310.910797][ T9795] netlink: 'syz.3.1353': attribute type 10 has an invalid length. [ 311.093676][ T9795] team0: Device vxcan1 is of different type [ 311.458353][ T9797] netlink: 'syz.1.1354': attribute type 10 has an invalid length. [ 311.601970][ T9797] team0: Device vxcan1 is of different type [ 311.943940][ T9806] netlink: 'syz.2.1357': attribute type 10 has an invalid length. [ 312.137342][ T9806] team0: Device vxcan1 is of different type [ 312.376412][ T9812] netlink: 'syz.3.1358': attribute type 33 has an invalid length. [ 312.386715][ T9812] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1358'. [ 312.436776][ T9812] `: renamed from ip6tnl0 (while UP) [ 312.702344][ T9820] netlink: 'syz.0.1360': attribute type 29 has an invalid length. [ 312.922018][ T9812] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 312.969414][ T9820] netlink: 'syz.0.1360': attribute type 29 has an invalid length. [ 312.978089][ T9817] netlink: 'syz.3.1358': attribute type 21 has an invalid length. [ 312.986127][ T9817] netlink: 'syz.3.1358': attribute type 6 has an invalid length. [ 312.994589][ T9817] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1358'. [ 313.027034][ T9814] netlink: 'syz.1.1359': attribute type 10 has an invalid length. [ 313.046669][ T9814] veth0_vlan: left promiscuous mode [ 313.079708][ T9814] veth0_vlan: entered promiscuous mode [ 313.125687][ T9814] team0: Device veth0_vlan failed to register rx_handler [ 313.365141][ T9826] netlink: 703 bytes leftover after parsing attributes in process `syz.2.1361'. [ 315.199920][ T9842] netlink: 'syz.1.1367': attribute type 7 has an invalid length. [ 315.237101][ T9842] netlink: 'syz.1.1367': attribute type 6 has an invalid length. [ 316.482565][ T9846] netlink: 'syz.0.1369': attribute type 10 has an invalid length. [ 316.634470][ T9846] team0: Device vxcan1 is of different type [ 317.066834][ T9852] netlink: 'syz.2.1370': attribute type 33 has an invalid length. [ 317.107079][ T9852] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1370'. [ 317.116349][ T9852] `: renamed from ip6tnl0 (while UP) [ 317.240813][ T9852] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 317.320354][ T9846] syz.0.1369 (9846) used greatest stack depth: 18248 bytes left [ 317.403662][ T9857] netlink: 'syz.1.1372': attribute type 41 has an invalid length. [ 317.470175][ T9850] netlink: 'syz.2.1370': attribute type 21 has an invalid length. [ 317.587510][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.593968][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.604990][ T9850] netlink: 'syz.2.1370': attribute type 6 has an invalid length. [ 317.613272][ T9850] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1370'. [ 322.523468][ T9896] netlink: 40559 bytes leftover after parsing attributes in process `syz.2.1385'. [ 322.648091][ T9897] netlink: 'syz.3.1384': attribute type 10 has an invalid length. [ 322.830315][ T9897] team0: Device vxcan1 is of different type [ 325.391870][ T9921] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1393'. [ 328.657862][ T9944] netlink: 'syz.1.1398': attribute type 33 has an invalid length. [ 328.665795][ T9944] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1398'. [ 328.796890][ T9944] `: renamed from ip6tnl0 (while UP) [ 329.187050][ T9944] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 329.392263][ T9950] netlink: 'syz.1.1398': attribute type 21 has an invalid length. [ 329.490741][ T9950] netlink: 'syz.1.1398': attribute type 6 has an invalid length. [ 329.602473][ T9950] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1398'. [ 331.197163][ T9963] [ 331.199813][ T9963] ============================= [ 331.204692][ T9963] WARNING: suspicious RCU usage [ 331.209914][ T9963] syzkaller #0 Not tainted [ 331.214458][ T9963] ----------------------------- [ 331.219742][ T9963] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 331.228553][ T9963] [ 331.228553][ T9963] other info that might help us debug this: [ 331.228553][ T9963] [ 331.239012][ T9963] [ 331.239012][ T9963] rcu_scheduler_active = 2, debug_locks = 1 [ 331.247366][ T9963] 1 lock held by syz.3.1407/9963: [ 331.252721][ T9963] #0: ffffffff8d1322c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 331.263136][ T9963] [ 331.263136][ T9963] stack backtrace: [ 331.269185][ T9963] CPU: 1 PID: 9963 Comm: syz.3.1407 Not tainted syzkaller #0 [ 331.276707][ T9963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 331.286953][ T9963] Call Trace: [ 331.290281][ T9963] [ 331.293425][ T9963] dump_stack_lvl+0x18c/0x250 [ 331.298215][ T9963] ? show_regs_print_info+0x20/0x20 [ 331.303474][ T9963] ? load_image+0x420/0x420 [ 331.308055][ T9963] lockdep_rcu_suspicious+0x1e1/0x300 [ 331.313572][ T9963] get_callchain_entry+0x2a9/0x3c0 [ 331.318751][ T9963] get_perf_callchain+0xc6/0x510 [ 331.323754][ T9963] ? put_callchain_entry+0xb0/0xb0 [ 331.328986][ T9963] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 331.335636][ T9963] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 331.342475][ T9963] __bpf_get_stack+0x2e4/0x540 [ 331.347407][ T9963] ? stack_map_get_build_id_offset+0x720/0x720 [ 331.353807][ T9963] ? __cant_sleep+0x220/0x220 [ 331.358529][ T9963] ? bpf_prog_14d9fb3786f83342+0x45/0x49 [ 331.364187][ T9963] bpf_get_stack_raw_tp+0x1a9/0x210 [ 331.369445][ T9963] bpf_prog_14d9fb3786f83342+0x45/0x49 [ 331.375095][ T9963] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 331.380578][ T9963] bpf_prog_test_run_syscall+0x317/0x4a0 [ 331.386329][ T9963] ? sock_gen_cookie+0x60/0x60 [ 331.391205][ T9963] ? sock_gen_cookie+0x60/0x60 [ 331.395986][ T9963] bpf_prog_test_run+0x321/0x390 [ 331.400940][ T9963] __sys_bpf+0x49d/0x890 [ 331.405206][ T9963] ? bpf_link_show_fdinfo+0x390/0x390 [ 331.410709][ T9963] ? lock_chain_count+0x20/0x20 [ 331.415585][ T9963] __x64_sys_bpf+0x7c/0x90 [ 331.420034][ T9963] do_syscall_64+0x55/0xa0 [ 331.424463][ T9963] ? clear_bhb_loop+0x40/0x90 [ 331.429164][ T9963] ? clear_bhb_loop+0x40/0x90 [ 331.433959][ T9963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.439870][ T9963] RIP: 0033:0x7fb892d9cdd9 [ 331.444301][ T9963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.464359][ T9963] RSP: 002b:00007fb893d26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 331.472969][ T9963] RAX: ffffffffffffffda RBX: 00007fb893015fa0 RCX: 00007fb892d9cdd9 [ 331.480961][ T9963] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 331.488949][ T9963] RBP: 00007fb892e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 331.496937][ T9963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.504924][ T9963] R13: 00007fb893016038 R14: 00007fb893015fa0 R15: 00007ffdc1920798 [ 331.513019][ T9963]