last executing test programs: 14.338532501s ago: executing program 0 (id=2355): write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'a', ' *:* ', 'rwm\x00'}, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@arena={0x21, 0x0, 0x0, 0xc, 0x400, 0xffffffffffffffff, 0x886, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x19, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x24, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcf2b95b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0x7, 0x6, 0x4, 0xfffffffffffffef4, 0x4}, @generic={0x8, 0x0, 0x3, 0xf, 0x1}, @alu={0x7, 0x0, 0x6, 0x3, 0x0, 0xffffffffffffffe0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x99dadedf3955b0eb}}}, &(0x7f0000000280)='GPL\x00', 0x93, 0xa, &(0x7f00000002c0)=""/10, 0x41000, 0x17, '\x00', r2, 0x0, r4, 0x8, &(0x7f0000000640)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000680)=[{0x4, 0x5, 0x6, 0xc}, {0x4, 0x5, 0xc, 0x5}, {0x3, 0x2, 0x10, 0xa}], 0x10, 0xaec2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x19, &(0x7f0000000780)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @map_idx={0x18, 0xb, 0x5, 0x0, 0xb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xe}], &(0x7f0000000880)='GPL\x00', 0x1000, 0x0, 0x0, 0x41000, 0x2, '\x00', r2, @fallback=0x37, r4, 0x8, &(0x7f00000008c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x5, 0x9, 0x6}, 0x10, r3, r5, 0x8, 0x0, &(0x7f0000000940)=[{0x0, 0x5, 0x1, 0x87d7525a8ecfb8b4}, {0x0, 0x5, 0x9, 0x1}, {0x2, 0x1, 0xb, 0x6}, {0x2, 0x5, 0x6, 0x9}, {0x1, 0x2, 0xd, 0xc}, {0x0, 0x1, 0xb, 0x5}, {0x5, 0x5, 0xd, 0x5}, {0x3, 0x4, 0x8, 0x8}], 0x10, 0x23}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@jmp={0x5, 0x0, 0x2, 0x0, 0x7, 0x40, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b00)='syzkaller\x00', 0x5, 0x9d, &(0x7f0000000b40)=""/157, 0x40f00, 0x1, '\x00', r2, 0x19, r4, 0x8, &(0x7f0000000c00)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xa672, r5, 0x0, 0x0, &(0x7f0000000c40)}, 0x94) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000d40)=r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000d80)='\x00') (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={r6, 0xe0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x74, &(0x7f0000000e80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000ec0), &(0x7f0000000f00), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000f40)}}, 0x10) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={0x0, r4, 0x0, 0x7, &(0x7f00000010c0)='!\'({l]\x00'}, 0x30) (async) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001a00)=@o_path={&(0x7f00000019c0)='./file0\x00', 0x0, 0x4018, r7}, 0x18) (async) r10 = openat$cgroup_procs(r4, &(0x7f0000001a40)='cgroup.threads\x00', 0x2, 0x0) (async) r11 = syz_clone(0x1000000, &(0x7f0000001a80)="a072f4fb8bcb11499eb2262fbcc047354597b8e1f47c923729219b5983fa2445a6be896cc79f280806706fee6b1128998fc512226d95994b9f3ac793eaaf857cd7c41d2c080a82b00b50a9b43bfc27b85df2355849c3749c56a1cc546405954792f49862ce0a41742c56eaaceb6216f75c9fb2c2557df9139f17", 0x7a, &(0x7f0000001b00), &(0x7f0000001b40), &(0x7f0000001b80)="d8719fe4c71aa558f074fbcbb2300b7114e5") (async) r12 = gettid() sendmsg$unix(r4, &(0x7f0000001d00)={&(0x7f0000001140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001900)=[{&(0x7f00000011c0)="5da8357e8c1dfcbb150256351056fe1c5014a4a5bfd0533322604d31765a8e9f9b93eee77ad9b86e5c85aa2ccb959d9dd1d87c226e112316a689e847a48c28828972c56908053c019ae9f7379da568121563e22a2c90a5fdf38e89173c0e91c2945fc14c0246861c76e57d4711d93100c4ba60a5a4e1848354a0dbd93d1b114311542eb7acfca2348424a98eeba85cdf9ae116942b791bb4d613ed41eba7dfc36a021791b4f0c0420eaf531b329cc4b81235365b8d755eb6583d3deee926a53bba7758a351df4cef538f7b9dbc55c135b1e594c638ab3247b9cfe262e1f64d2e77e931d4c98a113f71aef23347c1d345", 0xf0}, {&(0x7f00000012c0)="074cbf80e9288b0344836f84a4cbcae11ba4776a2826460cdf7aa21d6133586acc2ae0afa0d9df94684a9b995ad379dba369d4e40f49d5355c7f2a35056e4ff0334fb0cc3cf733b1bd23ed37b0d45d6a695a2d9f2d60a8450f7b0429a97c5d4db040f75a134a1eaf1c1a31730809f788fbca35dedc8085f3c07bda2cf1534b3771cca3919270262486a73773b8f5fa8b6e1e71254deca540cce76a3da8adff04b1768b0d6355b2ecd2ea1377e3f7607e9d3854f6a98ef6374eae5a93b7d894eef07857289784cb46f2fcd6d376e3add8b3606e9f40bc51c0ec", 0xd9}, {&(0x7f00000013c0)="22a66ae5bb3807f36ab67bbd038bf4937b81b8014506a2276d4094de6ca881bb80b2b199f8c31aa15bda834572e081fe52d4db61cbd3672f6e9ee8c3f8b7ab1aeabe08683ed644f3736f7ff7ad143ff826d6520da48f8edbc362a119bb8a2e9c4aef4e2724972bb62d8185329a0eecd8c056613af65276d8ac61fd516511bb24e719d8118bff3479143f20f692ca52f58751b2dcd9ce3cb36f15a153c073184ec41dae9d48cb1e69013dceb7691b0a7ac7854232b14a8412ee171a52ef1c45d44590711cf9804188cbd7d5ede4580fedc61a72680db7b38da74d4de98a7752258c46da8aab2ddd52e937180d735c401d27", 0xf1}, {&(0x7f00000014c0)="f137fe739e7c021358cc2dd7983143527d95e4f1f3e1972afd071a480376d42192b8da3b778f600aa8ace8d42d5d984c2cbf2257fe812ed6c91387442682c9424de9845caf0a2e9f770ea53a10880b36ef41321d87acdcd7ad1f5de6d46217abb91e22334703eb1cb303d675aa0c6a194650c2d595924404fab1d85c14332023f0aea86b27dc73b9795ce13293602f6886b6d26000376442d4d49560f0b2fbf4b502695c9f5a4c007135e7b328e0bc7e06ba7ddd8d4eaa0a9e5b0c73213df852071cb02db3d6722b3794500fe8177576816216c10922c9d875dd53f6a9a2fbdb77", 0xe1}, {&(0x7f00000015c0)="e8741ce468e982b969236723a90511c6d8c6fc6a03bbeb5b2f84cfd555e00bbad36f2bd8884e893170734e0bad95c891e4c4a188ba8f40e5cc92bcb271efbb32de992164116845c2f5027b86981ec53e912a7c32f4bb24cccb8edb358581b5cbe5f4b87c8524a73e1cba71babba511", 0x6f}, {&(0x7f0000001640)="51219b4de21c1dbe61bf975de072dad86cc8e0b2117f8c3f48d3e3c1118deac3c0eea8a89651f6630db020e87830152a70b0ac7b6d580fc5cc19e60b4f0445ab21e59afb5b34076ec2fb3ceee541ffe9fb5cfa80ef801ef91a3acaf9f6ddcc1e52f914b12d0e8a7bed600e949641402f686595cdf7566270641d", 0x7a}, {&(0x7f00000016c0)="ddae38080d39246d116549516cc8f83ac32207732eea30023b0f82b387daaba033af096aafafbade090b1bff41f2e6b881dc791abcdd1c0aaf78de2117a174490cf7a12795f393c850b7b2a5005631a7b7a8fe1691a5006485763eafb633b3778709b48606bc21560bdd686b883d4bac6d8cde1306aa47e1b112a619866363d39f03fd022bd8c541ce55b69b63f1b918b098e38eaaedc9247a4d6111de557b4fd45472036ad0fbfb14f66161da8bbefc891c4bcd689b917cc3ae8faf3a70423f76b143003ac433c093dad8071a026a67ff0e", 0xd2}, {&(0x7f00000017c0)="f33f356cbc12a5b13c6e0b6deddbc0a87c5766c4e236a5d458ed2d3ee1b73b06fcea26d81af59434b0d0692bd3843363166d2a0b8a839355cb929efab922f182691b57007295b2d8229b593bfb864948037f90f2ed0b76698a44083f8efb09dce5976e07e9c79a05fc70c446d08683b818e9902bed7130283351a2fde36acd5e2944a2b0682d2827626df3b1d972d78c6ef8f60d27711927dd", 0x99}, {&(0x7f0000001880)="fb2698eeef3edbbf2f458b158d4f128433894817c296a21135e17b6f676f1ea60e2ed68b7a61f7b142a3c248f8ba4bfc75396c48392daff10d0a1482cd10ae2d6d76d615d215bdf11771e7f9f951fd8db3997dc124bf5d48528ac435bb250e", 0x5f}], 0x9, &(0x7f0000001bc0)=[@rights={{0x2c, 0x1, 0x1, [r1, r1, r5, r6, r1, r9, r6]}}, @rights={{0x38, 0x1, 0x1, [r7, r5, r4, r10, 0xffffffffffffffff, r6, r1, r4, r5, r1]}}, @rights={{0x20, 0x1, 0x1, [r0, r4, r4, r6]}}, @rights={{0x1c, 0x1, 0x1, [r4, r4, r0]}}, @rights={{0x30, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, r7, 0xffffffffffffffff, r6, r1, r5]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x138, 0x800}, 0x4000010) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d80)=@generic={&(0x7f0000001d40)='./file0\x00', 0x0, 0x10}, 0x18) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003040)={&(0x7f0000001f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x7, [@typedef={0xa, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x5}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x22}}, @volatile={0xa, 0x0, 0x0, 0x9, 0x4}, @restrict={0x5, 0x0, 0x0, 0xb, 0x8}, @struct={0xa, 0x4, 0x0, 0x4, 0x1, 0x0, [{0x3, 0x1, 0x3}, {0x0, 0x5, 0x5f2c}, {0x10, 0x1, 0x7}, {0x6, 0x0, 0x6}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x6f, 0x30]}}, &(0x7f0000002040)=""/4096, 0xb7, 0x1000, 0x0, 0x6}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003140)={0x6, 0x23, &(0x7f0000001dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @call={0x85, 0x0, 0x0, 0x45}, @jmp={0x5, 0x1, 0xa, 0x2, 0x6, 0x20, 0x10}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001f00)='syzkaller\x00', 0x4, 0x1e, &(0x7f0000001f40)=""/30, 0x41000, 0x10, '\x00', r8, 0x25, r14, 0x8, &(0x7f0000003080)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000030c0)={0x0, 0xf, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000003100)=[{0x0, 0x5, 0x0, 0x5}, {0x1, 0x5, 0x4, 0xa}, {0x2, 0x5, 0x6, 0xa}, {0x1, 0x3, 0xb}], 0x10, 0x5e}, 0x94) (async, rerun: 32) write$cgroup_int(r4, &(0x7f0000003200)=0x100000001, 0x12) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000003380)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000003440)={0xd, 0x1, &(0x7f0000003240)=@raw=[@ldst={0x2, 0x1, 0x4353ec9d0aae1915, 0xf, 0x2, 0xffffffffffffff70, 0x10}], &(0x7f0000003280)='GPL\x00', 0x6, 0x42, &(0x7f00000032c0)=""/66, 0x41000, 0x0, '\x00', r2, @fallback=0x1f, r14, 0x8, &(0x7f0000003340)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, r15, r9, 0x1, &(0x7f00000033c0)=[r13, r0, r13], &(0x7f0000003400)=[{0x1, 0x2, 0xfffffff8, 0xa}], 0x10, 0x6}, 0x94) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000037c0)={r1, 0x58, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000003840)={0x88, 0x0}, 0x8) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000003900)={0xb, 0x28, &(0x7f0000003500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x0, 0xb, 0x7, 0x7, 0x100, 0xfffffffffffffffc}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9a}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x38}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003640)='syzkaller\x00', 0x9, 0x91, &(0x7f0000003680)=""/145, 0x40f00, 0x1, '\x00', r16, @fallback=0x2f, r4, 0x8, &(0x7f0000003800)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, r17, r5, 0x3, &(0x7f0000003880)=[r4, r0], &(0x7f00000038c0)=[{0x1, 0x4, 0x9, 0x3}, {0x2, 0x1, 0xb, 0x9}, {0x5, 0x5, 0x10, 0x9}], 0x10, 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003e40)={r4, 0xe0, &(0x7f0000003d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000003b80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000003bc0)=[0x0, 0x0], &(0x7f0000003c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x56, &(0x7f0000003c40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000003c80), &(0x7f0000003cc0), 0x8, 0x1e, 0x8, 0x8, &(0x7f0000003d00)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003fc0)={0x6, 0x2c, &(0x7f00000039c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xd078}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @alu={0x7, 0x2, 0x9, 0x5, 0x2, 0xfffffffffffffff8, 0xffffffffffffffed}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x7, 0x1, 0x0, r18}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003b40)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', r19, 0x25, r14, 0x8, &(0x7f0000003e80)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000003ec0)={0x0, 0x9, 0x80000000, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000003f00)=[0xffffffffffffffff, r13], &(0x7f0000003f40)=[{0x4, 0x1, 0xa, 0x7}, {0x1, 0x3, 0xe, 0xa}, {0x4, 0x4, 0x10, 0x1}, {0x4, 0x5, 0x7, 0x27208c39ba2cd933}, {0x3, 0x3, 0xa, 0x7}, {0x0, 0x1, 0x10, 0x6}, {0x2, 0x1, 0x2, 0x3}, {0x4, 0x1, 0x6, 0x4}], 0x10, 0x8}, 0x94) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000004080)=r15, 0x4) 14.146629731s ago: executing program 0 (id=2364): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xd6, 0x0, 0x2, 0x640a9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x49, 0x6, 0x2, 0x0, 0xffffdfff, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="000000000000f4ff000000000016000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'ip6_vti0\x00', 0x210}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000007c0)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x25, 0x64, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 9.27297502s ago: executing program 0 (id=2372): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x5, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x200, 0x3, 0x5, 0x3, 0x4b9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f00000003c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000780)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000001c0)={'veth0_virt_wifi\x00', @local}) openat$cgroup(r5, 0x0, 0x200002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000200)) sendmsg$kcm(r1, 0x0, 0x0) 8.160627864s ago: executing program 0 (id=2376): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000000) 7.991939801s ago: executing program 0 (id=2368): perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000400)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x6, 0x1, 0xd, 0xa, 0xa}]}, &(0x7f00000004c0)='GPL\x00', 0x4}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4402, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x9, 0x8, 0xb8, 0xffffffff}, {0x2, 0x9, 0x1, 0x2}, {0xb0c9, 0x86, 0xb, 0x3}]}) r1 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000002580)={&(0x7f00000000c0)=@can, 0x80, &(0x7f0000001540)=[{&(0x7f0000000240)=""/199, 0xc7}, {&(0x7f0000000440)=""/91, 0x5b}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/24, 0x18}], 0x4, &(0x7f0000001580)=""/4096, 0x1000}, 0x0) 7.598352581s ago: executing program 0 (id=2378): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x2, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8001, 0x3}, 0x0, 0x32, 0x43a1bd76, 0x5, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x40) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x11, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001580)='GPL\x00'}, 0x90) r0 = perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800003, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x5, 0x5, &(0x7f0000001700)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000001740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x3, 0x8, &(0x7f0000001900)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000001940)='GPL\x00', 0x0, 0x0, 0x0, 0xc1100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001980)={r3, 0x0, 0xe80, 0x0, &(0x7f0000001a00)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x50) 5.321589505s ago: executing program 3 (id=2391): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000902d00"/28], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x8000}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000005f0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0], 0x0, 0x90, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x1e, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = perf_event_open$cgroup(&(0x7f0000000e40)={0x7, 0x80, 0x4, 0x47, 0x7, 0x7, 0x0, 0xcdc, 0x20100, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000e00)}, 0x828, 0x8, 0x5, 0x3, 0x2, 0x9, 0x9, 0x0, 0x1, 0x0, 0xc6ca}, r5, 0xe, r0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x9) openat$cgroup_procs(r5, &(0x7f0000000a00)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000ec0)={r7}, 0x8) write$cgroup_int(r8, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000f00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_lsm={0xd, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="45c5f97f650000006111cc00000000009500000000875200421ecd635c2a45b4938ae1403405693a471ee56fa9199d42e6b597ef06d028d58291761f3797fa2f6e61d1b26a7dfac3d776b88627e25982e8a9c5bdcd84d2b0d924dd081a560f6a8e1ccb7a2328d08b7b165fe650b5384a1fb18d5afc44b3b57b24ca5f0bc0795ea525ef5fa2ba5f25f42e06f55af3e5c7774c2fe7"], &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) r9 = openat$cgroup_ro(r5, &(0x7f0000000a40)='cgroup.kill\x00', 0x275a, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@bloom_filter={0x1e, 0x0, 0x39, 0x3, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000d40)={r10, 0x0, &(0x7f0000000d80)=""/68}, 0x20) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000c80)={0x1, 0x4, [@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @remote]}) write$cgroup_int(r9, &(0x7f0000000a80)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x81}}, &(0x7f0000000580)='syzkaller\x00', 0x4, 0x2f, &(0x7f00000005c0)=""/47, 0x40f00, 0x10, '\x00', r4, 0x0, r9, 0x8, &(0x7f0000000ac0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x9, 0x3, 0xe4}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000b40)=[{0x0, 0x5, 0x0, 0xa}, {0x2, 0x4, 0x7, 0x4}, {0x5, 0x5, 0x4}, {0x0, 0x5, 0x3, 0xa}, {0x2, 0x1, 0x1, 0x6}, {0x0, 0x3, 0x3, 0xb}, {0x5, 0x4, 0x7, 0x5}, {0x5, 0x3, 0x0, 0x1}], 0x10, 0x3201}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000012, 0xe, 0x0, &(0x7f00000003c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xd, 0x8, 0x4, 0x9, 0x8, r11}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x80000001, r12, 0x4}, 0x38) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="2e00000011008188040f46ecdb4cb9cca7480e1212000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 4.987168939s ago: executing program 2 (id=2394): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000bc0), 0x4) sendmsg$inet(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x2, &(0x7f0000000a00)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}], &(0x7f0000000a40)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$inet(r0, &(0x7f0000000b80)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="7c1762d24ece3c4d83bb4fd6f348e173da33fc886d733ce1ccfb2093", 0x1c}, {&(0x7f0000000080)="99b2e6d136cf1472795171572573ed19431af04325f4f3a9442b11", 0x1b}, {&(0x7f00000000c0)="377bbd029b476c399bf46932292efe8aee03821c0f2d8460ecb663620d812ccca1b95b3da257df36b7e28b24039977b819557c83f7a91a6d9e269ee9bdebad9b72a361cccdd5a11a", 0x48}, {&(0x7f00000002c0)="922791c27341c415648bc22757b081002b47037f45604b2800203c5b615e652b42dea072e4db1c27", 0x28}], 0x4, &(0x7f0000000a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @private=0xa010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xbf}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5e}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xc8}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd51, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 4.912380097s ago: executing program 3 (id=2395): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) 4.598965799s ago: executing program 2 (id=2397): bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffc8) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x2663}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000600)={&(0x7f0000000640)=@in6={0xa, 0x4e21, 0xfffffffc, @remote, 0x9}, 0x80, 0x0, 0x8d, &(0x7f00000006c0)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x4000001) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0xfe33) recvmsg$kcm(r3, 0x0, 0x3062) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x9, 0xc3, &(0x7f0000000980)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0), 0x10}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0xc8}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 4.438700976s ago: executing program 3 (id=2399): socketpair(0x22, 0x5, 0x4, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c002, 0xac5a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000001850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0xffffffffffffffff) socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000020000000c000000001c", @ANYRES32, @ANYBLOB="060000000000000000000000000000000000000045d62512", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x8000) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x400c804) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000940)='EO', 0x2}], 0x1, &(0x7f0000000a40)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r3, @ANYRESOCT, @ANYRESOCT=0x0, @ANYBLOB="88a6071b2e152034d1362afd6b13d187066e0e41134ffb0a4709690fc936c8f693c93d503b82d0035dfdb300869d441767e9eaf1847bfdb76b43bfd58136e84d77b8", @ANYRES16], 0x368}, 0x20044000) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r4, 0x4004743b, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12009, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x89ec, 0xfffffffffffffffb}, 0x10fc1d, 0x3, 0x4, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 4.080768852s ago: executing program 2 (id=2401): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001b80)={0xffffffffffffffff, 0x8, 0x8}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001bc0)={&(0x7f00000000c0)="c2c53f6ff708302df997669e10bc54e780a04f06280e3f3efe5e44ba364642a8b0a6bfce0f98a3431a49d74c4633672dd36fe7a0a9a4c3b9f554a50d28", &(0x7f0000000100)=""/154, &(0x7f0000000b40)="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", &(0x7f0000001b40)="4c66dde1867e68cbd5013dad6d47cd8fe3ca5510c946946ce3f01ebd738c52910a26b5eb60d87e8e89a0f422d9ede89be5c5e1cba94b", 0x3ff, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x400000000000000, 0x4, 0x0, 0xfffffffffff7bbfe, 0xfffffff7, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000700)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000640)={0x5, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={r2, 0xc4c2, 0x10}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000780)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a3081, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @link_local}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) r7 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000003d000000000000000000158500000029"], 0x0}, 0x94) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) close(r6) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f32"], 0x280) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r3}, 0x8) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x800009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0xa, 0x5, 0x0) close(r8) socket$kcm(0x28, 0x5, 0x28) sendmsg$sock(r8, &(0x7f0000000840)={&(0x7f0000000880)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010100}}, 0x80, 0x0}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000003c0)=ANY=[], &(0x7f0000000000)=""/167, 0x26, 0xa7, 0x4, 0xc}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x0, r5}, 0x18) 3.774867054s ago: executing program 1 (id=2402): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x4060, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)='i', 0x1}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102}}}], 0x20}, 0x0) 3.586986243s ago: executing program 1 (id=2403): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000c40)={&(0x7f0000000d00)=@phonet={0x23, 0x0, 0x0, 0x11}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18, 0x81000000}, 0x0) 3.42479702s ago: executing program 1 (id=2404): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000001c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="ebfe41dd8be7038e98cc16b1ad6d5dfa16a7ca667fca0aa63b82b5a271de7bf86c7e8a8f60513e4402193bd427437c36756fa6a585db2cacf42ffe011547", @ANYRES64=0x0], 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x3, 0x8, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000002e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002e80)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="2f00000045d007fa99cebeed", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) close(0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100028, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0xb8c8, 0x80084, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1000000000000076, 0x9}, 0x11efa, 0x4, 0x98, 0x4, 0x2, 0xffff7274, 0x7, 0x0, 0x0, 0x0, 0x20}, r5, 0x3, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x3, &(0x7f0000000340)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xffa9}}, &(0x7f0000000380)='GPL\x00'}, 0x94) close(r8) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r4, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x76, 0x0, 0x0) r10 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0x5, &(0x7f0000000a40), 0x55) 3.006340183s ago: executing program 3 (id=2405): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x4060, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)='i-', 0x2}], 0x1}, 0x0) 3.004905943s ago: executing program 1 (id=2412): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400200000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002200)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x800000}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) 2.851611648s ago: executing program 3 (id=2406): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) 500.878719ms ago: executing program 2 (id=2407): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x4060, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)='i-', 0x2}], 0x1}, 0x0) 500.755759ms ago: executing program 1 (id=2408): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000010008188040f80ec59acbc0413a1812039000000010b0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40000) 472.877792ms ago: executing program 3 (id=2409): bpf$TOKEN_CREATE(0x24, &(0x7f0000000980), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000800)='GPL\x00', 0x2, 0xc7, &(0x7f0000000840)=""/199, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x33655254}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="bf07000000000000631162000000150007000000000000cb95002b0000000000"], &(0x7f0000000500)='GPL\x00', 0x8, 0xb579, &(0x7f0000000540)=""/195}, 0x23) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x75, 0x4}, 0xc070, 0x3, 0x0, 0x6, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x20000810) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000940), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000c00)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x401}, 0x8000, 0x5, 0x3, 0x9, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x2, @perf_config_ext={0x7, 0xe4}, 0x0, 0x7fffe, 0x0, 0x0, 0x7, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x88}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d00)='devices.list\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) recvmsg$unix(r2, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x2020) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0xe, 0x4, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f40)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r4}, &(0x7f0000000fc0), &(0x7f0000001000)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000001040)={0x0, 0x6000, &(0x7f0000001080)=[{&(0x7f00000010c0)='U', 0xa00120}], 0x1}, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000001100)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xaf\xcc\xeeR\xf2/\x00\x00E>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xcc\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x1, 0x8, &(0x7f0000001140)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000001380)='GPL\x00'}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x1, 0x8, &(0x7f0000001140)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000001380)='GPL\x00'}, 0x48) close(0x3) (async) close(0x3) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x3, 0x8, &(0x7f00000014c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x300a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xa}, 0x0, 0x2, 0xfffffffb, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000001540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x300a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xa}, 0x0, 0x2, 0xfffffffb, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r3, 0x0, 0x36, 0x0, &(0x7f0000001640)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r3, 0x0, 0x36, 0x0, &(0x7f0000001640)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000000000010008500000023000000850000002300000095"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000000000010008500000023000000850000002300000095"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={r4, 0x0, 0xe40, 0x51a, &(0x7f0000001840)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000001880)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001680)=r2, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b2557eb3c5ca683a4b6fc89398f2b9000f224891060017cfaa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f7098696afb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a032de54a2ad9cdac2e981ab59016f81860324b8003029e938858ffa30ce8a55129fa207d2513b711d83d366a7e0df0667a2c8dd2b0665de28cd407db6f8ef6082cb509b628203fab234cef6a77d6016a6cbf19f9687717d399233ef170b5bfdb55cab50aab08c8ddebd55654ea4d0caf2a2409db567260721a9b731cb58810978b60f930b7c92475c3483b06855d3b6ebde0092e67c0020000000000000067badf02c28f8cd94d347888a769591ce0dbb84a7aa02bff13398335aefbd1e874a6568d3f3d96dd30211bd963a45bca24a231d4f0b468a1667762972cdfde32ae7a69c23c50911a3c8a24622889f8aebce8e0bc88f35f5e40e21e4f2bf4b90655667acc84d84d67d6b240ddceafc5cd4fe94b79a00058566f49787d426ce3aae17094ab0078770155481c86c8e9e6ddb9a680af2d65ed710e3e9e370b711f31f865f2c1c5684e834ce38ff08bcc7429a596a7b1b3f45ffd6e2431f101189b00540986c22232521c8a87aecc3131595bac7c28076b55f071459adedd5953e4bde7c5e679739b07baa099338777899d54f13de88e5bdcd671c1742b0fabd0f40d1302e554090649eb2ec27f7b5afd721dab34"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x551043, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000ec0)={0x0, r5}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0xd, 0x5, &(0x7f00000016c0)=ANY=[@ANYBLOB="650a00000000000061115800000000001d0000000000000000000000000000009500000000000000663f6233bb06ef0d0b863c21a866b54855ea2d55d3e1c3d55cb070345ca0c1cdfe1b5865fde9818df789710d7d3650dcd7b4ed4dd4a965cfc662eaf8f07d84a610fd407fe84b287e2be80019a94c4884342c0737c44c5c739e46b05548c441bd56850a728e9d46a422b700000000000000f86475f2ed2ccafd320abed42247e4c9e663130784b4877f9cfd9b554929c9aed75987e873444fc6c0d7518e5198"], &(0x7f0000001000)='GPL\x00'}, 0x80) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0xfffd, 0x2, 0x3, {0xa, 0x4e20, 0x5e94, @mcast2, 0xe8}}}, 0x80, &(0x7f0000000e00)}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r6, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x2, &(0x7f0000000d80)=ANY=[@ANYBLOB="18690000097b5c292147fe0b27000000"], &(0x7f0000000dc0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000030000", @ANYRES32=0x1, @ANYBLOB="0000000000498f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) kernel console output (not intermixed with test programs): 221356][T10445] should_failslab+0x9/0x20 [ 301.227733][T10445] slab_pre_alloc_hook+0x59/0x300 [ 301.238067][T10445] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 301.246533][T10445] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 301.253978][T10445] __kmem_cache_alloc_node+0x53/0x260 [ 301.263054][T10445] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 301.270143][T10445] __kmalloc+0xa7/0x240 [ 301.276307][T10445] tomoyo_realpath_from_path+0xe6/0x5c0 [ 301.283317][T10445] ? tomoyo_domain+0xd6/0x120 [ 301.290562][T10445] tomoyo_path_number_perm+0x248/0x5e0 [ 301.297211][T10445] ? tomoyo_path_number_perm+0x217/0x5e0 [ 301.303886][T10445] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 301.310619][T10445] ? ksys_write+0x1d2/0x260 [ 301.316538][T10445] ? __fget_files+0x28/0x460 [ 301.322947][T10445] security_file_ioctl+0x70/0xa0 [ 301.328632][T10445] __se_sys_ioctl+0x48/0x170 [ 301.334155][T10445] do_syscall_64+0x55/0xb0 [ 301.341235][T10445] ? clear_bhb_loop+0x40/0x90 [ 301.348858][T10445] ? clear_bhb_loop+0x40/0x90 [ 301.354447][T10445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.364023][T10445] RIP: 0033:0x7f182eb9fb19 [ 301.369646][T10445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.397511][T10445] RSP: 002b:00007f182fac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.409528][T10445] RAX: ffffffffffffffda RBX: 00007f182ee25fa0 RCX: 00007f182eb9fb19 [ 301.422056][T10445] RDX: 0000200000000a40 RSI: 0000000000005452 RDI: 0000000000000003 [ 301.431132][T10445] RBP: 00007f182fac3090 R08: 0000000000000000 R09: 0000000000000000 [ 301.441421][T10445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.452769][T10445] R13: 00007f182ee26038 R14: 00007f182ee25fa0 R15: 00007fff139123a8 [ 301.463360][T10445] [ 301.487905][T10445] ERROR: Out of memory at tomoyo_realpath_from_path. [ 301.627053][T10427] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 301.640181][T10427] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 301.661296][T10427] team0: Port device netdevsim0 added [ 301.679152][T10431] validate_nla: 3 callbacks suppressed [ 301.679181][T10431] netlink: 'syz.2.1455': attribute type 10 has an invalid length. [ 301.702467][T10431] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 301.710666][T10431] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 301.741197][T10431] team0: Port device netdevsim0 removed [ 301.758375][T10431] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 302.183785][T10463] bridge0: port 5(dummy0) entered blocking state [ 302.191943][T10463] bridge0: port 5(dummy0) entered forwarding state [ 302.202430][T10463] bridge0: port 4(hsr0) entered blocking state [ 302.209761][T10463] bridge0: port 4(hsr0) entered forwarding state [ 302.218538][T10463] bridge0: port 3(team0) entered blocking state [ 302.226015][T10463] bridge0: port 3(team0) entered forwarding state [ 302.233376][T10463] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.241095][T10463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.508001][T10463] bridge0: entered promiscuous mode [ 302.583475][T10463] bridge0: entered allmulticast mode [ 303.176975][T10483] netlink: 'syz.3.1472': attribute type 10 has an invalid length. [ 303.332754][T10483] bond0: (slave netdevsim0): Releasing backup interface [ 303.425494][T10483] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 303.484121][T10483] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 303.525240][T10483] team0: Port device netdevsim0 added [ 303.552053][T10485] netlink: 'syz.3.1472': attribute type 10 has an invalid length. [ 303.619346][T10485] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 303.666044][T10485] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 303.706771][T10485] team0: Port device netdevsim0 removed [ 303.756587][T10485] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 305.027723][T10509] netlink: 'syz.3.1483': attribute type 10 has an invalid length. [ 305.105378][T10509] bond0: (slave netdevsim0): Releasing backup interface [ 305.276825][T10509] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 305.328582][T10509] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 305.361387][T10509] team0: Port device netdevsim0 added [ 305.395932][T10518] netlink: 'syz.3.1483': attribute type 10 has an invalid length. [ 305.433108][T10518] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 305.455283][T10518] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 305.535617][T10518] team0: Port device netdevsim0 removed [ 305.598737][T10518] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 305.692994][T10527] netlink: 'syz.2.1485': attribute type 10 has an invalid length. [ 305.714735][T10527] bond0: (slave netdevsim0): Releasing backup interface [ 305.730484][T10527] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 305.751754][T10527] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 305.775427][T10527] team0: Port device netdevsim0 added [ 305.782597][T10523] netlink: 'syz.0.1486': attribute type 10 has an invalid length. [ 305.812431][T10528] netlink: 'syz.2.1485': attribute type 10 has an invalid length. [ 305.845147][T10528] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 305.872118][T10528] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 305.904101][T10528] team0: Port device netdevsim0 removed [ 305.927195][T10528] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 305.950647][T10536] FAULT_INJECTION: forcing a failure. [ 305.950647][T10536] name failslab, interval 1, probability 0, space 0, times 0 [ 305.973020][T10536] CPU: 1 PID: 10536 Comm: syz.0.1489 Not tainted syzkaller #0 [ 305.984915][T10536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 305.997494][T10536] Call Trace: [ 306.001501][T10536] [ 306.005786][T10536] dump_stack_lvl+0x18c/0x250 [ 306.011446][T10536] ? show_regs_print_info+0x20/0x20 [ 306.017742][T10536] ? load_image+0x420/0x420 [ 306.022917][T10536] ? __might_sleep+0xe0/0xe0 [ 306.028243][T10536] ? __lock_acquire+0x7eb0/0x7eb0 [ 306.035341][T10536] should_fail_ex+0x394/0x4c0 [ 306.041471][T10536] should_failslab+0x9/0x20 [ 306.047839][T10536] slab_pre_alloc_hook+0x59/0x300 [ 306.055466][T10536] ? process_preds+0x98f/0x4cb0 [ 306.062174][T10536] ? process_preds+0x98f/0x4cb0 [ 306.068122][T10536] __kmem_cache_alloc_node+0x53/0x260 [ 306.075190][T10536] ? process_preds+0x98f/0x4cb0 [ 306.081032][T10536] __kmalloc_node_track_caller+0xa4/0x230 [ 306.088001][T10536] ? process_preds+0x479/0x4cb0 [ 306.094805][T10536] kmemdup_nul+0x36/0xf0 [ 306.100953][T10536] process_preds+0x98f/0x4cb0 [ 306.106737][T10536] ? create_filter_start+0x1d0/0x1d0 [ 306.113570][T10536] ftrace_profile_set_filter+0x123/0x1e0 [ 306.120152][T10536] perf_ioctl+0xee2/0x24b0 [ 306.127583][T10536] ? perf_poll+0x1b0/0x1b0 [ 306.134308][T10536] ? __fget_files+0x28/0x460 [ 306.140424][T10536] ? bpf_lsm_file_ioctl+0x9/0x10 [ 306.146011][T10536] ? security_file_ioctl+0x80/0xa0 [ 306.151831][T10536] ? perf_poll+0x1b0/0x1b0 [ 306.158088][T10536] __se_sys_ioctl+0xfd/0x170 [ 306.163964][T10536] do_syscall_64+0x55/0xb0 [ 306.172648][T10536] ? clear_bhb_loop+0x40/0x90 [ 306.178127][T10536] ? clear_bhb_loop+0x40/0x90 [ 306.183038][T10536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.189773][T10536] RIP: 0033:0x7f182eb9fb19 [ 306.195826][T10536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.222466][T10536] RSP: 002b:00007f182fac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.232799][T10536] RAX: ffffffffffffffda RBX: 00007f182ee25fa0 RCX: 00007f182eb9fb19 [ 306.242720][T10536] RDX: 0000200000000840 RSI: 0000000040082406 RDI: 0000000000000003 [ 306.253417][T10536] RBP: 00007f182fac3090 R08: 0000000000000000 R09: 0000000000000000 [ 306.264023][T10536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 306.274500][T10536] R13: 00007f182ee26038 R14: 00007f182ee25fa0 R15: 00007fff139123a8 [ 306.285389][T10536] [ 306.837156][T10549] netlink: 'syz.0.1500': attribute type 10 has an invalid length. [ 306.952812][T10549] bond0: (slave netdevsim0): Releasing backup interface [ 307.014462][T10549] team0: Port device netdevsim0 added [ 307.036648][T10547] bridge0: entered promiscuous mode [ 307.125062][T10547] bridge0: entered allmulticast mode [ 307.154415][T10543] netlink: 'syz.0.1500': attribute type 10 has an invalid length. [ 307.318392][T10543] team0: Port device netdevsim0 removed [ 307.437536][T10543] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 307.902304][T10564] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.1499'. [ 308.338682][T10577] FAULT_INJECTION: forcing a failure. [ 308.338682][T10577] name failslab, interval 1, probability 0, space 0, times 0 [ 308.353550][T10577] CPU: 1 PID: 10577 Comm: syz.2.1505 Not tainted syzkaller #0 [ 308.363039][T10577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 308.377365][T10577] Call Trace: [ 308.380983][T10577] [ 308.384835][T10577] dump_stack_lvl+0x18c/0x250 [ 308.392303][T10577] ? show_regs_print_info+0x20/0x20 [ 308.399457][T10577] ? load_image+0x420/0x420 [ 308.407191][T10577] ? __kmem_cache_alloc_node+0x197/0x260 [ 308.415673][T10577] should_fail_ex+0x394/0x4c0 [ 308.420581][T10577] should_failslab+0x9/0x20 [ 308.426846][T10577] slab_pre_alloc_hook+0x59/0x300 [ 308.433283][T10577] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 308.444033][T10577] kmem_cache_alloc+0x5a/0x2d0 [ 308.451256][T10577] ? skb_clone+0x1eb/0x370 [ 308.455882][T10577] skb_clone+0x1eb/0x370 [ 308.460728][T10577] bpf_clone_redirect+0x16d/0x4a0 [ 308.467291][T10577] bpf_prog_32715bb6222366b1+0x21/0x25 [ 308.477175][T10577] bpf_test_run+0x2df/0x870 [ 308.482343][T10577] ? bpf_test_run+0x174/0x870 [ 308.489905][T10577] ? dst_hold+0x70/0x70 [ 308.495382][T10577] ? __skb_checksum+0x800/0x800 [ 308.500797][T10577] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 308.507385][T10577] ? cpu_online+0x60/0x60 [ 308.514798][T10577] bpf_prog_test_run+0x31f/0x390 [ 308.522470][T10577] __sys_bpf+0x49d/0x890 [ 308.527411][T10577] ? bpf_link_show_fdinfo+0x560/0x560 [ 308.533107][T10577] ? lock_chain_count+0x20/0x20 [ 308.538718][T10577] __x64_sys_bpf+0x7c/0x90 [ 308.543288][T10577] do_syscall_64+0x55/0xb0 [ 308.547830][T10577] ? clear_bhb_loop+0x40/0x90 [ 308.553674][T10577] ? clear_bhb_loop+0x40/0x90 [ 308.559181][T10577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.566428][T10577] RIP: 0033:0x7f452339fb19 [ 308.571852][T10577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.598530][T10577] RSP: 002b:00007f45241f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.612531][T10577] RAX: ffffffffffffffda RBX: 00007f4523625fa0 RCX: 00007f452339fb19 [ 308.626027][T10577] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 308.637861][T10577] RBP: 00007f45241f7090 R08: 0000000000000000 R09: 0000000000000000 [ 308.647777][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.657780][T10577] R13: 00007f4523626038 R14: 00007f4523625fa0 R15: 00007ffda9f97598 [ 308.668176][T10577] [ 310.416762][T10604] netlink: 'syz.2.1514': attribute type 10 has an invalid length. [ 310.546568][T10604] bond0: (slave netdevsim0): Releasing backup interface [ 310.696602][T10604] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 310.714137][T10604] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 310.756443][T10604] team0: Port device netdevsim0 added [ 310.780410][T10606] netlink: 'syz.2.1514': attribute type 10 has an invalid length. [ 310.806186][T10606] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 310.840793][T10606] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 310.863955][T10606] team0: Port device netdevsim0 removed [ 310.887026][T10606] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 310.902992][T10605] netlink: 'syz.0.1513': attribute type 10 has an invalid length. [ 310.965722][T10605] bond0: (slave netdevsim0): Releasing backup interface [ 311.084109][T10605] team0: Port device netdevsim0 added [ 311.101332][T10609] netlink: 'syz.0.1513': attribute type 10 has an invalid length. [ 311.117522][T10609] team0: Port device netdevsim0 removed [ 311.144924][T10609] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 312.119041][T10645] netlink: 'syz.3.1530': attribute type 10 has an invalid length. [ 312.231214][T10645] bond0: (slave netdevsim0): Releasing backup interface [ 312.480485][T10645] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 312.489881][T10645] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 312.519536][T10645] team0: Port device netdevsim0 added [ 312.533414][T10649] netlink: 'syz.2.1529': attribute type 10 has an invalid length. [ 312.563257][T10649] bond0: (slave netdevsim0): Releasing backup interface [ 312.575081][T10649] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 312.586225][T10649] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 312.596270][T10649] team0: Port device netdevsim0 added [ 312.606008][T10646] netlink: 'syz.3.1530': attribute type 10 has an invalid length. [ 312.616145][T10646] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 312.624570][T10646] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 312.642923][T10646] team0: Port device netdevsim0 removed [ 312.652227][T10646] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 312.665457][T10643] netlink: 'syz.2.1529': attribute type 10 has an invalid length. [ 312.680098][T10643] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 312.690448][T10643] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 312.730010][T10643] team0: Port device netdevsim0 removed [ 312.762831][T10643] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 312.801960][T10653] netlink: 'syz.1.1531': attribute type 10 has an invalid length. [ 312.816997][T10653] bond0: (slave netdevsim0): Releasing backup interface [ 312.826036][T10653] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 312.834790][T10653] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 312.845941][T10653] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 312.856083][T10653] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 312.866290][T10653] team0: Port device netdevsim0 added [ 312.873893][T10656] netlink: 'syz.1.1531': attribute type 10 has an invalid length. [ 312.883538][T10656] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 312.892539][T10656] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 312.913081][T10656] team0: Port device netdevsim0 removed [ 312.927617][T10656] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 312.936380][T10656] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 312.947799][T10656] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 314.513759][T10691] netlink: 'syz.0.1547': attribute type 10 has an invalid length. [ 314.609013][T10691] bond0: (slave netdevsim0): Releasing backup interface [ 314.745917][T10691] team0: Port device netdevsim0 added [ 314.772282][T10700] netlink: 'syz.0.1547': attribute type 10 has an invalid length. [ 314.837839][T10700] team0: Port device netdevsim0 removed [ 314.872293][T10700] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 315.041735][T10705] netlink: 'syz.2.1550': attribute type 10 has an invalid length. [ 315.094199][T10705] bond0: (slave netdevsim0): Releasing backup interface [ 315.117964][T10705] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 315.145888][T10705] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 315.161019][T10705] team0: Port device netdevsim0 added [ 315.181609][T10706] netlink: 'syz.2.1550': attribute type 10 has an invalid length. [ 315.227708][T10706] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 315.261297][T10706] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 315.287276][T10706] team0: Port device netdevsim0 removed [ 315.304181][T10706] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 315.669946][T10716] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1556'. [ 317.270425][T10747] netlink: 'syz.0.1567': attribute type 10 has an invalid length. [ 317.347929][T10747] bond0: (slave netdevsim0): Releasing backup interface [ 317.380961][T10747] team0: Port device netdevsim0 added [ 317.407417][T10740] netlink: 'syz.2.1564': attribute type 10 has an invalid length. [ 317.492148][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.514550][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.613467][T10740] bond0: (slave netdevsim0): Releasing backup interface [ 317.819230][T10740] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 317.848474][T10740] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 317.881694][T10740] team0: Port device netdevsim0 added [ 317.912329][T10748] netlink: 'syz.2.1564': attribute type 10 has an invalid length. [ 317.923583][T10748] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 317.935632][T10748] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 317.996294][T10748] team0: Port device netdevsim0 removed [ 318.020206][T10748] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 318.055779][T10751] netlink: 'syz.0.1567': attribute type 10 has an invalid length. [ 318.073014][T10751] team0: Port device netdevsim0 removed [ 318.095373][T10751] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 318.142739][T10755] netlink: 'syz.1.1570': attribute type 27 has an invalid length. [ 318.162851][T10755] netlink: 'syz.1.1570': attribute type 25 has an invalid length. [ 318.409118][T10768] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1573'. [ 318.437765][T10768] team_slave_0: left promiscuous mode [ 318.448680][T10768] team_slave_0: left allmulticast mode [ 318.488705][T10768] team0: Port device team_slave_0 removed [ 318.505086][T10768] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 318.550872][T10767] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1573'. [ 318.568502][T10767] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 318.603789][T10768] netlink: 202284 bytes leftover after parsing attributes in process `syz.2.1573'. [ 318.619577][T10768] openvswitch: netlink: Flow key attribute not present in set flow. [ 319.217064][T10786] netlink: 'syz.3.1581': attribute type 10 has an invalid length. [ 319.292465][T10786] bond0: (slave netdevsim0): Releasing backup interface [ 319.344082][T10786] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 319.361806][T10786] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 319.395375][T10786] team0: Port device netdevsim0 added [ 319.408448][T10789] netlink: 'syz.3.1581': attribute type 10 has an invalid length. [ 319.426140][T10789] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 319.442484][T10789] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 319.577161][T10789] team0: Port device netdevsim0 removed [ 319.612970][T10789] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 320.066575][T10808] netlink: 'syz.1.1584': attribute type 10 has an invalid length. [ 320.125513][T10808] bond0: (slave netdevsim0): Releasing backup interface [ 320.154860][T10808] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 320.168767][T10808] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 320.189120][T10808] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 320.199180][T10808] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 320.240566][T10808] team0: Port device netdevsim0 added [ 320.285487][T10802] netlink: 'syz.1.1584': attribute type 10 has an invalid length. [ 320.376329][T10802] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 320.439494][T10802] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 320.667414][T10802] team0: Port device netdevsim0 removed [ 320.821453][T10802] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 320.847240][T10802] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 320.876965][T10818] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.1593'. [ 320.916411][T10802] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 320.941294][T10818] openvswitch: netlink: Message has 20480 unknown bytes. [ 321.417713][T10824] bond0: (slave netdevsim0): Releasing backup interface [ 321.585626][T10824] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 321.645052][T10824] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 321.668935][T10824] team0: Port device netdevsim0 added [ 321.706827][T10829] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 321.729484][T10829] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 321.778117][T10829] team0: Port device netdevsim0 removed [ 321.807432][T10829] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 322.817752][T10854] validate_nla: 2 callbacks suppressed [ 322.817769][T10854] netlink: 'syz.1.1609': attribute type 10 has an invalid length. [ 322.985013][T10854] bond0: (slave netdevsim0): Releasing backup interface [ 323.039303][T10854] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 323.055017][T10854] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 323.107804][T10854] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 323.124696][T10854] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 323.140862][T10854] team0: Port device netdevsim0 added [ 323.155314][T10855] netlink: 'syz.1.1609': attribute type 10 has an invalid length. [ 323.173667][T10855] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 323.183500][T10855] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 323.213282][T10855] team0: Port device netdevsim0 removed [ 323.253607][T10855] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 323.265274][T10855] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 323.278442][T10855] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 323.397423][T10865] netlink: 'syz.0.1611': attribute type 10 has an invalid length. [ 323.434127][T10865] bond0: (slave netdevsim0): Releasing backup interface [ 323.448852][T10865] team0: Port device netdevsim0 added [ 323.463161][T10867] netlink: 'syz.0.1611': attribute type 10 has an invalid length. [ 323.495708][T10867] team0: Port device netdevsim0 removed [ 323.506659][T10867] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 323.680250][T10882] netlink: 'syz.1.1619': attribute type 10 has an invalid length. [ 323.712124][T10882] netlink: 'syz.1.1619': attribute type 19 has an invalid length. [ 323.813071][T10884] FAULT_INJECTION: forcing a failure. [ 323.813071][T10884] name failslab, interval 1, probability 0, space 0, times 0 [ 323.872135][T10884] CPU: 0 PID: 10884 Comm: syz.0.1620 Not tainted syzkaller #0 [ 323.882257][T10884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 323.895085][T10884] Call Trace: [ 323.899130][T10884] [ 323.902625][T10884] dump_stack_lvl+0x18c/0x250 [ 323.908950][T10884] ? show_regs_print_info+0x20/0x20 [ 323.914278][T10884] ? load_image+0x420/0x420 [ 323.920121][T10884] ? __lock_acquire+0x7eb0/0x7eb0 [ 323.925750][T10884] should_fail_ex+0x394/0x4c0 [ 323.931492][T10884] should_failslab+0x9/0x20 [ 323.936454][T10884] slab_pre_alloc_hook+0x59/0x300 [ 323.942561][T10884] ? security_sk_alloc+0x4b/0x130 [ 323.948736][T10884] ? security_sk_alloc+0x4b/0x130 [ 323.954494][T10884] __kmem_cache_alloc_node+0x53/0x260 [ 323.961663][T10884] ? security_sk_alloc+0x4b/0x130 [ 323.966752][T10884] __kmalloc+0xa7/0x240 [ 323.972348][T10884] ? sk_prot_alloc+0xe7/0x210 [ 323.979232][T10884] security_sk_alloc+0x4b/0x130 [ 323.985245][T10884] sk_prot_alloc+0x101/0x210 [ 323.990338][T10884] ? sk_alloc+0x24/0x350 [ 323.995945][T10884] sk_alloc+0x3a/0x350 [ 324.001855][T10884] ? bpf_ctx_init+0x154/0x190 [ 324.007962][T10884] bpf_prog_test_run_skb+0x371/0x18f0 [ 324.014173][T10884] ? __fget_files+0x28/0x460 [ 324.022282][T10884] ? __fget_files+0x3fc/0x460 [ 324.027209][T10884] ? cpu_online+0x60/0x60 [ 324.032722][T10884] bpf_prog_test_run+0x31f/0x390 [ 324.039434][T10884] __sys_bpf+0x49d/0x890 [ 324.044115][T10884] ? bpf_link_show_fdinfo+0x560/0x560 [ 324.051066][T10884] ? lock_chain_count+0x20/0x20 [ 324.059028][T10884] __x64_sys_bpf+0x7c/0x90 [ 324.064201][T10884] do_syscall_64+0x55/0xb0 [ 324.070048][T10884] ? clear_bhb_loop+0x40/0x90 [ 324.074972][T10884] ? clear_bhb_loop+0x40/0x90 [ 324.081150][T10884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.088106][T10884] RIP: 0033:0x7f182eb9fb19 [ 324.093217][T10884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.117552][T10884] RSP: 002b:00007f182fac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 324.127074][T10884] RAX: ffffffffffffffda RBX: 00007f182ee25fa0 RCX: 00007f182eb9fb19 [ 324.136175][T10884] RDX: 000000000000003d RSI: 0000200000000080 RDI: 000000000000000a [ 324.146277][T10884] RBP: 00007f182fac3090 R08: 0000000000000000 R09: 0000000000000000 [ 324.156654][T10884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.166050][T10884] R13: 00007f182ee26038 R14: 00007f182ee25fa0 R15: 00007fff139123a8 [ 324.174609][T10884] [ 324.934965][T10902] netlink: 'syz.0.1628': attribute type 10 has an invalid length. [ 325.012181][T10902] bond0: (slave netdevsim0): Releasing backup interface [ 325.047809][T10902] team0: Port device netdevsim0 added [ 325.070897][T10903] netlink: 'syz.0.1628': attribute type 10 has an invalid length. [ 325.170346][T10903] team0: Port device netdevsim0 removed [ 325.272076][T10903] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 325.343943][T10916] netlink: 'syz.3.1629': attribute type 10 has an invalid length. [ 325.379284][T10916] bond0: (slave netdevsim0): Releasing backup interface [ 325.434611][T10916] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 325.458911][T10916] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 325.477132][T10916] team0: Port device netdevsim0 added [ 325.502197][T10917] netlink: 'syz.3.1629': attribute type 10 has an invalid length. [ 325.536602][T10917] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 325.567546][T10917] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 325.613234][T10917] team0: Port device netdevsim0 removed [ 325.650496][T10917] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 326.442778][T10933] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1636'. [ 326.474941][T10930] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1636'. [ 327.515379][T10961] bond0: (slave netdevsim0): Releasing backup interface [ 327.547345][T10961] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 327.568107][T10961] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 327.581267][T10961] team0: Port device netdevsim0 added [ 327.596279][T10952] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 327.624831][T10952] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 327.738962][T10952] team0: Port device netdevsim0 removed [ 327.828980][T10952] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 328.048367][T10967] validate_nla: 6 callbacks suppressed [ 328.048387][T10967] netlink: 'syz.0.1645': attribute type 10 has an invalid length. [ 328.140897][T10967] bond0: (slave netdevsim0): Releasing backup interface [ 328.185706][T10967] team0: Port device netdevsim0 added [ 328.208596][T10969] netlink: 'syz.0.1645': attribute type 10 has an invalid length. [ 328.268043][T10969] team0: Port device netdevsim0 removed [ 328.296395][T10969] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 328.900166][T10989] sctp: [Deprecated]: syz.1.1654 (pid 10989) Use of int in max_burst socket option deprecated. [ 328.900166][T10989] Use struct sctp_assoc_value instead [ 328.904089][T10981] netlink: 'syz.2.1651': attribute type 10 has an invalid length. [ 329.044153][T10981] bond0: (slave netdevsim0): Releasing backup interface [ 329.098576][T10981] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 329.113564][T10981] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 329.143984][T10981] team0: Port device netdevsim0 added [ 329.154766][T10984] netlink: 'syz.2.1651': attribute type 10 has an invalid length. [ 329.168591][T10984] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 329.201667][T10984] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 329.225291][T10984] team0: Port device netdevsim0 removed [ 329.249673][T10984] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 329.279481][T10993] netlink: 'syz.3.1655': attribute type 10 has an invalid length. [ 329.313631][T10999] netlink: 148156 bytes leftover after parsing attributes in process `syz.3.1655'. [ 329.368601][T10989] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1654'. [ 329.407733][T10989] : renamed from caif0 [ 329.429902][T10989] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 329.463522][T10997] netlink: 'syz.3.1655': attribute type 19 has an invalid length. [ 330.090912][T11016] netlink: 'syz.2.1660': attribute type 10 has an invalid length. [ 330.232190][T11016] bond0: (slave netdevsim0): Releasing backup interface [ 330.268096][T11016] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 330.302562][T11016] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 330.330217][T11016] team0: Port device netdevsim0 added [ 330.349310][T11011] netlink: 'syz.2.1660': attribute type 10 has an invalid length. [ 330.371353][T11011] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 330.392844][T11011] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 330.464630][T11011] team0: Port device netdevsim0 removed [ 330.493624][T11011] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 330.517727][T11026] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1664'. [ 331.275228][T11047] FAULT_INJECTION: forcing a failure. [ 331.275228][T11047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.293613][T11047] CPU: 1 PID: 11047 Comm: syz.1.1672 Not tainted syzkaller #0 [ 331.304370][T11047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 331.320049][T11047] Call Trace: [ 331.324341][T11047] [ 331.328021][T11047] dump_stack_lvl+0x18c/0x250 [ 331.333462][T11047] ? show_regs_print_info+0x20/0x20 [ 331.341014][T11047] ? load_image+0x420/0x420 [ 331.346711][T11047] ? __might_fault+0xaa/0x120 [ 331.352767][T11047] ? __lock_acquire+0x7eb0/0x7eb0 [ 331.358417][T11047] should_fail_ex+0x394/0x4c0 [ 331.364204][T11047] _copy_from_user+0x2f/0xe0 [ 331.370924][T11047] __sys_bpf+0x23e/0x890 [ 331.376110][T11047] ? bpf_link_show_fdinfo+0x560/0x560 [ 331.382694][T11047] ? lock_chain_count+0x20/0x20 [ 331.388868][T11047] __x64_sys_bpf+0x7c/0x90 [ 331.394467][T11047] do_syscall_64+0x55/0xb0 [ 331.399537][T11047] ? clear_bhb_loop+0x40/0x90 [ 331.404543][T11047] ? clear_bhb_loop+0x40/0x90 [ 331.410522][T11047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.418021][T11047] RIP: 0033:0x7f42f3d9fb19 [ 331.423402][T11047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.447812][T11047] RSP: 002b:00007f42f4d2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 331.458506][T11047] RAX: ffffffffffffffda RBX: 00007f42f4025fa0 RCX: 00007f42f3d9fb19 [ 331.467542][T11047] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 331.477168][T11047] RBP: 00007f42f4d2c090 R08: 0000000000000000 R09: 0000000000000000 [ 331.487600][T11047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.497770][T11047] R13: 00007f42f4026038 R14: 00007f42f4025fa0 R15: 00007fff4e099ea8 [ 331.506397][T11047] [ 331.731715][T11050] netlink: 'syz.3.1674': attribute type 10 has an invalid length. [ 331.876190][T11050] bond0: (slave netdevsim0): Releasing backup interface [ 332.022603][T11050] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 332.064208][T11050] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 332.171178][T11050] team0: Port device netdevsim0 added [ 332.286552][T11051] netlink: 'syz.3.1674': attribute type 10 has an invalid length. [ 332.331815][T11051] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 332.351852][T11051] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 332.401850][T11051] team0: Port device netdevsim0 removed [ 332.425858][T11051] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 332.670629][T11076] FAULT_INJECTION: forcing a failure. [ 332.670629][T11076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.696618][T11076] CPU: 0 PID: 11076 Comm: syz.2.1683 Not tainted syzkaller #0 [ 332.705302][T11076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 332.718134][T11076] Call Trace: [ 332.722971][T11076] [ 332.726964][T11076] dump_stack_lvl+0x18c/0x250 [ 332.733525][T11076] ? show_regs_print_info+0x20/0x20 [ 332.739333][T11076] ? load_image+0x420/0x420 [ 332.743987][T11076] ? __might_fault+0xaa/0x120 [ 332.749496][T11076] ? __lock_acquire+0x7eb0/0x7eb0 [ 332.756617][T11076] should_fail_ex+0x394/0x4c0 [ 332.762978][T11076] _copy_from_iter+0x1cd/0x1290 [ 332.768602][T11076] ? rcu_is_watching+0x15/0xb0 [ 332.775530][T11076] ? copyout_mc+0x70/0x70 [ 332.781085][T11076] ? __virt_addr_valid+0x10c/0x380 [ 332.788076][T11076] ? __virt_addr_valid+0x10c/0x380 [ 332.794593][T11076] ? __virt_addr_valid+0x10c/0x380 [ 332.801497][T11076] ? __check_object_size+0x4fc/0xa40 [ 332.808271][T11076] netlink_sendmsg+0x76b/0xbf0 [ 332.814009][T11076] ? netlink_getsockopt+0x590/0x590 [ 332.821755][T11076] ? apparmor_socket_sendmsg+0x8e/0x330 [ 332.829087][T11076] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 332.835132][T11076] ? security_socket_sendmsg+0x80/0xa0 [ 332.840907][T11076] ? netlink_getsockopt+0x590/0x590 [ 332.846807][T11076] ____sys_sendmsg+0x61b/0x980 [ 332.851799][T11076] ? __asan_memset+0x22/0x40 [ 332.857768][T11076] ? __sys_sendmsg_sock+0x30/0x30 [ 332.863218][T11076] ? __import_iovec+0x5f2/0x850 [ 332.868522][T11076] ? import_iovec+0x73/0xa0 [ 332.874093][T11076] ___sys_sendmsg+0x2a6/0x360 [ 332.879666][T11076] ? __sys_sendmsg+0x2b0/0x2b0 [ 332.885383][T11076] ? __lock_acquire+0x7eb0/0x7eb0 [ 332.891681][T11076] __se_sys_sendmsg+0x1d0/0x2c0 [ 332.896675][T11076] ? __x64_sys_sendmsg+0x80/0x80 [ 332.902429][T11076] ? lockdep_hardirqs_on+0x98/0x150 [ 332.908803][T11076] do_syscall_64+0x55/0xb0 [ 332.913337][T11076] ? clear_bhb_loop+0x40/0x90 [ 332.918299][T11076] ? clear_bhb_loop+0x40/0x90 [ 332.923543][T11076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.930069][T11076] RIP: 0033:0x7f452339fb19 [ 332.934670][T11076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.958215][T11076] RSP: 002b:00007f45241f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.967892][T11076] RAX: ffffffffffffffda RBX: 00007f4523625fa0 RCX: 00007f452339fb19 [ 332.976252][T11076] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 332.987098][T11076] RBP: 00007f45241f7090 R08: 0000000000000000 R09: 0000000000000000 [ 332.995356][T11076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.006704][T11076] R13: 00007f4523626038 R14: 00007f4523625fa0 R15: 00007ffda9f97598 [ 333.016342][T11076] [ 334.128599][T11107] validate_nla: 1 callbacks suppressed [ 334.128616][T11107] netlink: 'syz.1.1692': attribute type 10 has an invalid length. [ 334.179320][T11107] bond0: (slave netdevsim0): Releasing backup interface [ 334.204278][T11107] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 334.232389][T11107] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 334.273455][T11107] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 334.314092][T11107] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 334.326980][T11107] team0: Port device netdevsim0 added [ 334.345031][T11101] netlink: 'syz.1.1692': attribute type 10 has an invalid length. [ 334.369355][T11101] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 334.385181][T11116] netlink: 'syz.0.1695': attribute type 9 has an invalid length. [ 334.397068][T11101] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 334.409207][T11116] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1695'. [ 334.481323][T11101] team0: Port device netdevsim0 removed [ 334.504196][T11101] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 334.516354][T11101] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 334.530411][T11101] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 334.569017][T11111] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.580873][T11111] IPv6: NLM_F_CREATE should be set when creating new route [ 334.591223][T11111] IPv6: NLM_F_CREATE should be set when creating new route [ 334.600814][T11111] IPv6: NLM_F_CREATE should be set when creating new route [ 334.621030][T11113] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1696'. [ 334.665102][T11106] rxe_eth0 speed is unknown, defaulting to 1000 [ 335.811716][T11136] netlink: 'syz.3.1704': attribute type 10 has an invalid length. [ 335.849449][T11136] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1704'. [ 335.887526][T11130] netlink: 'syz.1.1702': attribute type 10 has an invalid length. [ 335.979458][T11130] bond0: (slave netdevsim0): Releasing backup interface [ 336.010994][T11130] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 336.027916][T11130] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 336.115636][T11130] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 336.143745][T11130] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 336.185975][T11130] team0: Port device netdevsim0 added [ 336.221189][T11137] netlink: 'syz.1.1702': attribute type 10 has an invalid length. [ 336.238733][T11137] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 336.251038][T11137] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 336.276346][T11137] team0: Port device netdevsim0 removed [ 336.289397][T11137] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 336.304255][T11137] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 336.316398][T11137] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 336.329807][T11140] netlink: 'syz.2.1706': attribute type 10 has an invalid length. [ 336.381294][T11140] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.449562][T11140] bridge_slave_1 (unregistering): left allmulticast mode [ 336.460618][T11140] bridge_slave_1 (unregistering): left promiscuous mode [ 336.475824][T11140] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.576352][T11154] netlink: 'syz.3.1708': attribute type 10 has an invalid length. [ 336.600168][T11154] bond0: (slave netdevsim0): Releasing backup interface [ 336.617231][T11154] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 336.643323][T11154] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 336.658993][T11154] team0: Port device netdevsim0 added [ 336.678119][T11157] netlink: 'syz.3.1708': attribute type 10 has an invalid length. [ 336.702899][T11157] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 336.710817][T11157] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 336.732366][T11157] team0: Port device netdevsim0 removed [ 336.752438][T11157] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 338.228766][T11190] netlink: 'syz.0.1722': attribute type 21 has an invalid length. [ 340.268666][T11223] netlink: 'syz.2.1735': attribute type 10 has an invalid length. [ 340.333426][T11223] bond0: (slave netdevsim0): Releasing backup interface [ 340.369488][T11223] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 340.411776][T11223] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 340.471939][T11223] team0: Port device netdevsim0 added [ 340.502723][T11224] netlink: 'syz.2.1735': attribute type 10 has an invalid length. [ 340.617175][T11224] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 340.650296][T11224] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 340.785920][T11224] team0: Port device netdevsim0 removed [ 340.893075][T11224] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 341.033321][T11233] netlink: 'syz.0.1736': attribute type 10 has an invalid length. [ 341.117533][T11233] bond0: (slave netdevsim0): Releasing backup interface [ 341.148959][T11233] team0: Port device netdevsim0 added [ 341.175312][T11234] netlink: 'syz.0.1736': attribute type 10 has an invalid length. [ 341.234711][T11234] team0: Port device netdevsim0 removed [ 341.268284][T11234] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 341.323655][T11237] IPv6: Can't replace route, no match found [ 341.980554][T11259] FAULT_INJECTION: forcing a failure. [ 341.980554][T11259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.020076][T11259] CPU: 1 PID: 11259 Comm: syz.2.1746 Not tainted syzkaller #0 [ 342.028858][T11259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 342.044265][T11259] Call Trace: [ 342.047589][T11259] [ 342.050566][T11259] dump_stack_lvl+0x18c/0x250 [ 342.055553][T11259] ? show_regs_print_info+0x20/0x20 [ 342.061337][T11259] ? load_image+0x420/0x420 [ 342.067620][T11259] ? __might_fault+0xaa/0x120 [ 342.073414][T11259] ? __lock_acquire+0x7eb0/0x7eb0 [ 342.080888][T11259] ? __virt_addr_valid+0x10c/0x380 [ 342.086233][T11259] should_fail_ex+0x394/0x4c0 [ 342.092008][T11259] _copy_to_user+0x2f/0xa0 [ 342.097519][T11259] generic_map_lookup_batch+0x8ba/0xc60 [ 342.104103][T11259] ? bpf_map_update_value+0x710/0x710 [ 342.113428][T11259] ? __fdget+0x180/0x210 [ 342.121542][T11259] ? bpf_map_update_value+0x710/0x710 [ 342.130099][T11259] bpf_map_do_batch+0x2e3/0x600 [ 342.135342][T11259] ? bpf_lsm_bpf+0x9/0x10 [ 342.140852][T11259] ? security_bpf+0x7e/0xa0 [ 342.146445][T11259] __sys_bpf+0x7d7/0x890 [ 342.151249][T11259] ? bpf_link_show_fdinfo+0x560/0x560 [ 342.157582][T11259] ? lock_chain_count+0x20/0x20 [ 342.164136][T11259] __x64_sys_bpf+0x7c/0x90 [ 342.168694][T11259] do_syscall_64+0x55/0xb0 [ 342.173345][T11259] ? clear_bhb_loop+0x40/0x90 [ 342.180315][T11259] ? clear_bhb_loop+0x40/0x90 [ 342.185952][T11259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.194624][T11259] RIP: 0033:0x7f452339fb19 [ 342.201415][T11259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.226999][T11259] RSP: 002b:00007f45241f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 342.235633][T11259] RAX: ffffffffffffffda RBX: 00007f4523625fa0 RCX: 00007f452339fb19 [ 342.247995][T11259] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 342.256822][T11259] RBP: 00007f45241f7090 R08: 0000000000000000 R09: 0000000000000000 [ 342.268608][T11259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 342.278442][T11259] R13: 00007f4523626038 R14: 00007f4523625fa0 R15: 00007ffda9f97598 [ 342.292285][T11259] [ 343.473840][T11274] netlink: 'syz.0.1752': attribute type 10 has an invalid length. [ 343.513033][T11274] bridge0: port 5(dummy0) entered disabled state [ 343.523120][T11274] bridge0: port 4(hsr0) entered disabled state [ 343.539638][T11274] bridge0: port 3(batadv0) entered disabled state [ 343.559461][T11274] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.573548][T11274] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.651975][T11274] bridge0: left promiscuous mode [ 343.682547][T11274] bridge0: left allmulticast mode [ 343.878080][T11274] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 343.948602][T11274] bridge0: port 5(dummy0) entered blocking state [ 343.957904][T11274] bridge0: port 5(dummy0) entered forwarding state [ 343.975953][T11274] bridge0: port 4(hsr0) entered blocking state [ 343.985236][T11274] bridge0: port 4(hsr0) entered forwarding state [ 343.995322][T11274] bridge0: port 3(batadv0) entered blocking state [ 344.008194][T11274] bridge0: port 3(batadv0) entered forwarding state [ 344.024735][T11274] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.040839][T11274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.057160][T11274] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.073194][T11274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.125800][T11274] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 344.235491][T11279] netlink: 'syz.3.1751': attribute type 10 has an invalid length. [ 344.323667][T11279] bond0: (slave netdevsim0): Releasing backup interface [ 344.388964][T11279] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 344.425119][T11279] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 344.450090][T11279] team0: Port device netdevsim0 added [ 344.469929][T11290] netlink: 'syz.3.1751': attribute type 10 has an invalid length. [ 344.507366][T11290] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 344.523138][T11290] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 344.682490][T11290] team0: Port device netdevsim0 removed [ 344.716323][T11290] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 344.786126][T11296] netlink: 'syz.0.1757': attribute type 10 has an invalid length. [ 344.813480][T11296] team0: Device vxcan1 is of different type [ 345.538058][T11303] netlink: 'syz.0.1759': attribute type 10 has an invalid length. [ 345.580697][T11303] bond0: (slave netdevsim0): Releasing backup interface [ 345.619420][T11303] team0: Port device netdevsim0 added [ 345.635873][T11304] netlink: 'syz.0.1759': attribute type 10 has an invalid length. [ 345.698270][T11304] team0: Port device netdevsim0 removed [ 345.734463][T11313] netlink: 'syz.2.1763': attribute type 29 has an invalid length. [ 345.818347][T11304] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 345.853503][T11313] netlink: 'syz.2.1763': attribute type 29 has an invalid length. [ 345.873217][T11314] netlink: 'syz.2.1763': attribute type 29 has an invalid length. [ 346.153682][T11321] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1766'. [ 346.181945][T11321] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1766'. [ 346.207073][T11326] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1766'. [ 346.355918][T11321] netlink: 'syz.2.1766': attribute type 29 has an invalid length. [ 346.387992][T11321] netlink: 'syz.2.1766': attribute type 29 has an invalid length. [ 346.412855][T11326] netlink: 'syz.2.1766': attribute type 29 has an invalid length. [ 346.433939][T11321] netlink: 'syz.2.1766': attribute type 29 has an invalid length. [ 346.568666][T11326] netlink: 'syz.2.1766': attribute type 29 has an invalid length. [ 346.591940][T11335] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1770'. [ 346.631908][T11331] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1770'. [ 346.793600][T11332] bond0: (slave netdevsim0): Releasing backup interface [ 346.846758][T11332] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 346.871733][T11332] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 346.892124][T11332] team0: Port device netdevsim0 added [ 346.904375][T11336] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 346.945006][T11336] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 347.035363][T11336] team0: Port device netdevsim0 removed [ 347.083748][T11336] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 347.226837][ T5790] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 347.534015][T11358] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1779'. [ 347.725757][T11364] FAULT_INJECTION: forcing a failure. [ 347.725757][T11364] name failslab, interval 1, probability 0, space 0, times 0 [ 347.758474][T11364] CPU: 0 PID: 11364 Comm: syz.2.1783 Not tainted syzkaller #0 [ 347.766807][T11364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 347.777778][T11364] Call Trace: [ 347.781748][T11364] [ 347.784808][T11364] dump_stack_lvl+0x18c/0x250 [ 347.789666][T11364] ? sctp_sendmsg+0x1519/0x27b0 [ 347.796045][T11364] ? ___sys_sendmsg+0x2a6/0x360 [ 347.802618][T11364] ? show_regs_print_info+0x20/0x20 [ 347.808581][T11364] ? load_image+0x420/0x420 [ 347.813491][T11364] should_fail_ex+0x394/0x4c0 [ 347.818449][T11364] should_failslab+0x9/0x20 [ 347.825154][T11364] slab_pre_alloc_hook+0x59/0x300 [ 347.831183][T11364] ? sctp_add_bind_addr+0x8c/0x360 [ 347.837040][T11364] __kmem_cache_alloc_node+0x53/0x260 [ 347.844593][T11364] ? sctp_add_bind_addr+0x8c/0x360 [ 347.851377][T11364] kmalloc_trace+0x2a/0xe0 [ 347.856541][T11364] sctp_add_bind_addr+0x8c/0x360 [ 347.862199][T11364] sctp_copy_local_addr_list+0x31b/0x4e0 [ 347.869423][T11364] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 347.875441][T11364] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 347.882319][T11364] ? sctp_v4_is_any+0x35/0x60 [ 347.887569][T11364] ? sctp_copy_one_addr+0x8c/0x350 [ 347.893436][T11364] sctp_bind_addr_copy+0xb3/0x3c0 [ 347.898802][T11364] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 347.907169][T11364] sctp_connect_new_asoc+0x2f9/0x6a0 [ 347.914278][T11364] ? __sctp_connect+0xd80/0xd80 [ 347.921081][T11364] ? __local_bh_enable_ip+0x13a/0x1c0 [ 347.927868][T11364] ? _local_bh_enable+0xa0/0xa0 [ 347.933896][T11364] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 347.941847][T11364] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 347.949130][T11364] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 347.956111][T11364] ? security_sctp_bind_connect+0x89/0xb0 [ 347.963097][T11364] sctp_sendmsg+0x1519/0x27b0 [ 347.969026][T11364] ? sctp_getsockopt+0xb60/0xb60 [ 347.976334][T11364] ? aa_sk_perm+0x7bb/0x8e0 [ 347.981666][T11364] ? aa_af_perm+0x330/0x330 [ 347.987379][T11364] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 347.996303][T11364] ? sock_rps_record_flow+0x19/0x3f0 [ 348.002678][T11364] ? inet_sendmsg+0x7e/0x2a0 [ 348.009957][T11364] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 348.016348][T11364] ? inet_send_prepare+0x250/0x250 [ 348.022329][T11364] ____sys_sendmsg+0x61b/0x980 [ 348.027634][T11364] ? __asan_memset+0x22/0x40 [ 348.033837][T11364] ? __sys_sendmsg_sock+0x30/0x30 [ 348.039383][T11364] ? __import_iovec+0x5f2/0x850 [ 348.044632][T11364] ? import_iovec+0x73/0xa0 [ 348.050040][T11364] ___sys_sendmsg+0x2a6/0x360 [ 348.054758][T11364] ? get_pid_task+0x20/0x1e0 [ 348.059895][T11364] ? __sys_sendmsg+0x2b0/0x2b0 [ 348.064959][T11364] ? __lock_acquire+0x7eb0/0x7eb0 [ 348.071083][T11364] __se_sys_sendmsg+0x1d0/0x2c0 [ 348.076823][T11364] ? __x64_sys_sendmsg+0x80/0x80 [ 348.082485][T11364] ? lockdep_hardirqs_on+0x98/0x150 [ 348.089182][T11364] do_syscall_64+0x55/0xb0 [ 348.094603][T11364] ? clear_bhb_loop+0x40/0x90 [ 348.100261][T11364] ? clear_bhb_loop+0x40/0x90 [ 348.106791][T11364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.113428][T11364] RIP: 0033:0x7f452339fb19 [ 348.118388][T11364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.142634][T11364] RSP: 002b:00007f45241f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.151421][T11364] RAX: ffffffffffffffda RBX: 00007f4523625fa0 RCX: 00007f452339fb19 [ 348.162013][T11364] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 348.172458][T11364] RBP: 00007f45241f7090 R08: 0000000000000000 R09: 0000000000000000 [ 348.181447][T11364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 348.190065][T11364] R13: 00007f4523626038 R14: 00007f4523625fa0 R15: 00007ffda9f97598 [ 348.199537][T11364] [ 348.842837][T11384] bond0: (slave netdevsim0): Releasing backup interface [ 348.858802][T11384] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 348.894758][T11384] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 348.923611][T11384] team0: Port device netdevsim0 added [ 348.949576][T11374] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 348.965807][T11374] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 349.063674][T11374] team0: Port device netdevsim0 removed [ 349.144570][T11374] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 349.165187][T11387] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1791'. [ 349.364563][T11401] team0: Device hsr_slave_0 failed to register rx_handler [ 349.409630][ T5790] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 350.099239][T11416] bridge0: port 5(dummy0) entered disabled state [ 350.124199][T11416] bridge0: port 4(hsr0) entered disabled state [ 350.140760][T11416] bridge0: port 3(team0) entered disabled state [ 350.162910][T11416] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.203082][T11416] bridge0: left promiscuous mode [ 350.212029][T11416] bridge0: left allmulticast mode [ 350.310378][T11416] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 350.370093][T11416] bridge0: port 5(dummy0) entered blocking state [ 350.378561][T11416] bridge0: port 5(dummy0) entered forwarding state [ 350.391705][T11416] bridge0: port 4(hsr0) entered blocking state [ 350.403367][T11416] bridge0: port 4(hsr0) entered forwarding state [ 350.420963][T11416] bridge0: port 3(team0) entered blocking state [ 350.436532][T11416] bridge0: port 3(team0) entered forwarding state [ 350.448177][T11416] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.460824][T11416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.499336][T11416] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 350.792600][T11432] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1803'. [ 350.823125][T11430] validate_nla: 6 callbacks suppressed [ 350.823141][T11430] netlink: 'syz.0.1804': attribute type 10 has an invalid length. [ 350.907957][T11430] bond0: (slave netdevsim0): Releasing backup interface [ 350.997111][T11430] team0: Port device netdevsim0 added [ 351.011049][T11435] netlink: 'syz.0.1804': attribute type 10 has an invalid length. [ 351.039517][T11435] team0: Port device netdevsim0 removed [ 351.054008][T11435] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 351.540869][T11464] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1813'. [ 351.592363][ T5790] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 352.528257][T11467] FAULT_INJECTION: forcing a failure. [ 352.528257][T11467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.546359][T11467] CPU: 0 PID: 11467 Comm: syz.0.1814 Not tainted syzkaller #0 [ 352.558714][T11467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 352.569146][T11467] Call Trace: [ 352.573042][T11467] [ 352.576955][T11467] dump_stack_lvl+0x18c/0x250 [ 352.584429][T11467] ? show_regs_print_info+0x20/0x20 [ 352.590384][T11467] ? load_image+0x420/0x420 [ 352.595783][T11467] ? __might_fault+0xaa/0x120 [ 352.604236][T11467] ? __lock_acquire+0x7eb0/0x7eb0 [ 352.609619][T11467] should_fail_ex+0x394/0x4c0 [ 352.616200][T11467] _copy_to_user+0x2f/0xa0 [ 352.622745][T11467] bpf_test_finish+0x25a/0x650 [ 352.627709][T11467] ? bpf_test_run+0x174/0x870 [ 352.634729][T11467] ? convert_skb_to___skb+0x420/0x420 [ 352.642761][T11467] ? slab_build_skb+0x25a/0x3e0 [ 352.649559][T11467] bpf_prog_test_run_skb+0x1135/0x18f0 [ 352.655911][T11467] ? cpu_online+0x60/0x60 [ 352.661352][T11467] bpf_prog_test_run+0x31f/0x390 [ 352.667770][T11467] __sys_bpf+0x49d/0x890 [ 352.673694][T11467] ? bpf_link_show_fdinfo+0x560/0x560 [ 352.681931][T11467] ? lock_chain_count+0x20/0x20 [ 352.687940][T11467] __x64_sys_bpf+0x7c/0x90 [ 352.692632][T11467] do_syscall_64+0x55/0xb0 [ 352.699066][T11467] ? clear_bhb_loop+0x40/0x90 [ 352.704078][T11467] ? clear_bhb_loop+0x40/0x90 [ 352.709424][T11467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.716243][T11467] RIP: 0033:0x7f182eb9fb19 [ 352.721043][T11467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.744468][T11467] RSP: 002b:00007f182fac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 352.757737][T11467] RAX: ffffffffffffffda RBX: 00007f182ee25fa0 RCX: 00007f182eb9fb19 [ 352.767665][T11467] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 352.781425][T11467] RBP: 00007f182fac3090 R08: 0000000000000000 R09: 0000000000000000 [ 352.794303][T11467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.804211][T11467] R13: 00007f182ee26038 R14: 00007f182ee25fa0 R15: 00007fff139123a8 [ 352.814403][T11467] [ 353.585306][T11477] netlink: 'syz.0.1818': attribute type 10 has an invalid length. [ 353.641432][T11477] bond0: (slave netdevsim0): Releasing backup interface [ 354.927379][T11477] team0: Port device netdevsim0 added [ 354.943282][T11478] netlink: 'syz.0.1818': attribute type 10 has an invalid length. [ 354.966642][T11478] team0: Port device netdevsim0 removed [ 354.984867][T11478] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 355.166952][T11498] tap0: tun_chr_ioctl cmd 2147767519 [ 355.187337][T11498] netlink: 'syz.1.1824': attribute type 10 has an invalid length. [ 355.209016][T11498] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1824'. [ 355.269080][T11498] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 355.605483][ T5790] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 355.616797][ T5790] Bluetooth: hci2: Injecting HCI hardware error event [ 355.626077][ T5792] Bluetooth: hci2: hardware error 0x00 [ 357.772281][ T5792] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 357.821646][T11533] netlink: 'syz.0.1835': attribute type 10 has an invalid length. [ 357.965459][T11533] bond0: (slave netdevsim0): Releasing backup interface [ 358.056159][T11533] team0: Port device netdevsim0 added [ 358.088690][T11538] netlink: 'syz.0.1835': attribute type 10 has an invalid length. [ 358.112883][T11538] team0: Port device netdevsim0 removed [ 358.134626][T11538] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 358.156761][T11545] netlink: 'syz.2.1839': attribute type 4 has an invalid length. [ 358.958337][T11561] netlink: 'syz.3.1847': attribute type 10 has an invalid length. [ 359.000742][T11561] bond0: (slave netdevsim0): Releasing backup interface [ 359.040142][T11561] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 359.072056][T11561] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 359.090354][T11561] team0: Port device netdevsim0 added [ 359.114753][T11564] netlink: 'syz.3.1847': attribute type 10 has an invalid length. [ 359.134310][T11564] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 359.152144][T11564] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 359.204189][ T5792] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6 [ 359.208684][T11564] team0: Port device netdevsim0 removed [ 359.269427][T11564] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 359.301302][T11569] netlink: 'syz.2.1849': attribute type 4 has an invalid length. [ 359.614322][T11577] netlink: 'syz.1.1852': attribute type 10 has an invalid length. [ 359.649743][T11577] bond0: (slave netdevsim0): Releasing backup interface [ 359.693503][T11577] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 359.716148][T11577] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 359.800844][T11577] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 359.822925][T11577] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 359.883742][T11577] team0: Port device netdevsim0 added [ 359.985531][T11581] netlink: 'syz.1.1852': attribute type 10 has an invalid length. [ 359.995518][T11581] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 360.015580][T11581] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 360.035033][T11581] team0: Port device netdevsim0 removed [ 360.049300][T11581] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 360.058412][T11581] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 360.083174][T11581] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 360.405174][T11606] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1859'. [ 360.734693][T11612] netlink: 'syz.2.1864': attribute type 10 has an invalid length. [ 360.766541][ T5792] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 360.796864][T11612] bond0: (slave netdevsim0): Releasing backup interface [ 360.901069][T11612] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 360.927303][T11612] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 360.956258][T11612] team0: Port device netdevsim0 added [ 361.004315][T11617] netlink: 'syz.2.1864': attribute type 10 has an invalid length. [ 361.021504][T11617] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 361.035470][T11617] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 361.081016][T11617] team0: Port device netdevsim0 removed [ 361.162224][T11617] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 361.905010][T11639] bond0: (slave netdevsim0): Releasing backup interface [ 361.916919][T11639] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 361.926663][T11639] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 361.938405][T11639] team0: Port device netdevsim0 added [ 361.956349][T11631] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 361.969101][T11631] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 362.010658][T11631] team0: Port device netdevsim0 removed [ 362.060029][T11631] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 362.228193][T11644] tap0: tun_chr_ioctl cmd 2147767519 [ 362.251403][T11644] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1876'. [ 362.276624][T11644] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 362.653557][T11653] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1880'. [ 362.923059][T11657] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1882'. [ 362.961013][T11657] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1882'. [ 363.525166][T11671] validate_nla: 4 callbacks suppressed [ 363.525214][T11671] netlink: 'syz.2.1887': attribute type 10 has an invalid length. [ 363.571058][T11671] bond0: (slave netdevsim0): Releasing backup interface [ 363.615493][T11671] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 363.634469][T11671] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 363.668975][T11671] team0: Port device netdevsim0 added [ 363.714046][T11677] netlink: 'syz.2.1887': attribute type 10 has an invalid length. [ 363.737851][T11677] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 363.761196][T11677] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 363.803053][T11677] team0: Port device netdevsim0 removed [ 363.842471][T11677] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 363.968250][T11689] tap0: tun_chr_ioctl cmd 2147767519 [ 363.983060][T11691] netlink: 'syz.3.1889': attribute type 10 has an invalid length. [ 364.007020][T11691] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1889'. [ 364.164697][T11691] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 364.240074][T11693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.332715][T11699] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1894'. [ 364.540864][T11703] FAULT_INJECTION: forcing a failure. [ 364.540864][T11703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.601562][T11703] CPU: 0 PID: 11703 Comm: syz.1.1895 Not tainted syzkaller #0 [ 364.610066][T11703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 364.624394][T11703] Call Trace: [ 364.629695][T11703] [ 364.633712][T11703] dump_stack_lvl+0x18c/0x250 [ 364.640679][T11703] ? show_regs_print_info+0x20/0x20 [ 364.646954][T11703] ? load_image+0x420/0x420 [ 364.652385][T11703] ? __lock_acquire+0x7eb0/0x7eb0 [ 364.657831][T11703] ? snprintf+0xe9/0x140 [ 364.663986][T11703] should_fail_ex+0x394/0x4c0 [ 364.668908][T11703] _copy_to_user+0x2f/0xa0 [ 364.674709][T11703] simple_read_from_buffer+0xe7/0x150 [ 364.683562][T11703] proc_fail_nth_read+0x1e8/0x260 [ 364.690056][T11703] ? proc_fault_inject_write+0x360/0x360 [ 364.696596][T11703] ? fsnotify_perm+0x271/0x5e0 [ 364.702043][T11703] ? proc_fault_inject_write+0x360/0x360 [ 364.709418][T11703] vfs_read+0x298/0x990 [ 364.714447][T11703] ? kernel_read+0x1e0/0x1e0 [ 364.721424][T11703] ? __fget_files+0x28/0x460 [ 364.726212][T11703] ? __fget_files+0x3fc/0x460 [ 364.732242][T11703] ? __fdget_pos+0x2a3/0x330 [ 364.737672][T11703] ? ksys_read+0x74/0x260 [ 364.742961][T11703] ksys_read+0x151/0x260 [ 364.747821][T11703] ? vfs_write+0x9a0/0x9a0 [ 364.753358][T11703] ? syscall_enter_from_user_mode+0x2e/0x80 [ 364.760450][T11703] do_syscall_64+0x55/0xb0 [ 364.765495][T11703] ? clear_bhb_loop+0x40/0x90 [ 364.770832][T11703] ? clear_bhb_loop+0x40/0x90 [ 364.777554][T11703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.787545][T11703] RIP: 0033:0x7f42f3d6034e [ 364.792433][T11703] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 364.815707][T11703] RSP: 002b:00007f42f4d2bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 364.826749][T11703] RAX: ffffffffffffffda RBX: 00007f42f4d2c6c0 RCX: 00007f42f3d6034e [ 364.836928][T11703] RDX: 000000000000000f RSI: 00007f42f4d2c0a0 RDI: 000000000000000e [ 364.848026][T11703] RBP: 00007f42f4d2c090 R08: 0000000000000000 R09: 0000000000000000 [ 364.857863][T11703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.871882][T11703] R13: 00007f42f4026038 R14: 00007f42f4025fa0 R15: 00007fff4e099ea8 [ 364.882439][T11703] [ 364.916237][ T5792] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 364.930859][ T5792] Bluetooth: hci1: Injecting HCI hardware error event [ 364.941495][ T5792] Bluetooth: hci1: hardware error 0x00 [ 365.036551][T11711] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1897'. [ 365.805829][T11729] netlink: 'syz.0.1900': attribute type 17 has an invalid length. [ 365.844332][T11729] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1900'. [ 365.927451][T11729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.674742][T11734] netlink: 'syz.2.1903': attribute type 2 has an invalid length. [ 366.711465][T11734] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1903'. [ 367.282181][ T5792] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 367.324789][T11744] netlink: 'syz.2.1907': attribute type 10 has an invalid length. [ 367.546570][T11744] bond0: (slave netdevsim0): Releasing backup interface [ 367.682289][T11744] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 367.704792][T11744] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 367.752809][T11744] team0: Port device netdevsim0 added [ 367.783780][T11750] netlink: 'syz.2.1907': attribute type 10 has an invalid length. [ 367.828476][T11750] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 367.852477][T11750] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 367.964759][T11750] team0: Port device netdevsim0 removed [ 367.999858][T11750] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 368.540848][T11766] rxe_eth0 speed is unknown, defaulting to 1000 [ 368.662413][T11763] netlink: 'syz.0.1911': attribute type 10 has an invalid length. [ 368.850071][T11763] bond0: (slave netdevsim0): Releasing backup interface [ 369.124414][T11763] team0: Port device netdevsim0 added [ 369.149550][T11771] netlink: 'syz.0.1911': attribute type 10 has an invalid length. [ 369.233637][T11771] team0: Port device netdevsim0 removed [ 369.325576][T11771] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 370.148061][T11807] netlink: 'syz.3.1923': attribute type 10 has an invalid length. [ 370.223869][T11807] bond0: (slave netdevsim0): Releasing backup interface [ 370.237363][T11807] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 370.257975][T11807] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 370.280353][T11807] team0: Port device netdevsim0 added [ 370.304391][T11805] netlink: 'syz.3.1923': attribute type 10 has an invalid length. [ 370.415191][T11805] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 370.514752][T11805] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 370.617839][T11805] team0: Port device netdevsim0 removed [ 370.797982][T11805] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 371.799216][T11828] netlink: 'syz.1.1930': attribute type 10 has an invalid length. [ 371.872681][T11828] bond0: (slave netdevsim0): Releasing backup interface [ 371.921058][T11828] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 371.946948][T11828] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 372.008190][T11828] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 372.034538][T11828] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 372.072144][T11828] team0: Port device netdevsim0 added [ 372.100664][T11830] netlink: 'syz.1.1930': attribute type 10 has an invalid length. [ 372.131784][T11830] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 372.164317][T11830] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 372.216345][T11830] team0: Port device netdevsim0 removed [ 372.236697][T11830] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 372.256808][T11830] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 372.275698][T11830] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 372.537295][T11837] netlink: 'syz.3.1933': attribute type 10 has an invalid length. [ 372.649542][T11837] bond0: (slave netdevsim0): Releasing backup interface [ 372.669103][T11837] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 372.742979][T11837] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 372.772608][T11837] team0: Port device netdevsim0 added [ 372.811443][T11840] netlink: 'syz.3.1933': attribute type 10 has an invalid length. [ 372.852386][T11840] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 372.864555][T11842] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1935'. [ 372.891565][T11840] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 372.915476][T11840] team0: Port device netdevsim0 removed [ 372.943418][T11840] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 373.024184][T11842] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1935'. [ 373.047070][T11843] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1935'. [ 376.310637][T11856] netlink: 'syz.2.1937': attribute type 10 has an invalid length. [ 376.326111][T11856] bond0: (slave netdevsim0): Releasing backup interface [ 376.337473][T11856] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 376.347609][T11856] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 376.358220][T11856] team0: Port device netdevsim0 added [ 376.366837][T11857] netlink: 'syz.2.1937': attribute type 10 has an invalid length. [ 376.375239][T11857] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 376.382633][T11857] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 376.395775][T11857] team0: Port device netdevsim0 removed [ 376.413673][T11857] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 376.769598][T11888] netlink: 'syz.0.1949': attribute type 10 has an invalid length. [ 376.786471][T11888] bond0: (slave netdevsim0): Releasing backup interface [ 376.800882][T11888] team0: Port device netdevsim0 added [ 376.894388][T11881] netlink: 'syz.0.1949': attribute type 10 has an invalid length. [ 376.989095][T11881] team0: Port device netdevsim0 removed [ 377.085297][T11881] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 378.846319][T11913] rxe_eth0 speed is unknown, defaulting to 1000 [ 378.888411][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.894983][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.470433][T11933] netlink: 'syz.2.1967': attribute type 10 has an invalid length. [ 379.503614][T11933] bond0: (slave netdevsim0): Releasing backup interface [ 379.527204][T11933] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 379.563495][T11933] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 379.625303][T11933] team0: Port device netdevsim0 added [ 379.655637][T11928] netlink: 'syz.2.1967': attribute type 10 has an invalid length. [ 379.701751][T11928] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 379.792578][T11928] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 379.888799][T11928] team0: Port device netdevsim0 removed [ 379.926927][T11928] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 380.145516][T11940] netlink: 'syz.0.1971': attribute type 10 has an invalid length. [ 380.197691][T11940] bond0: (slave netdevsim0): Releasing backup interface [ 380.231239][T11940] team0: Port device netdevsim0 added [ 380.248940][T11942] netlink: 'syz.0.1971': attribute type 10 has an invalid length. [ 380.351292][T11942] team0: Port device netdevsim0 removed [ 380.479940][T11942] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 380.630551][T11951] FAULT_INJECTION: forcing a failure. [ 380.630551][T11951] name failslab, interval 1, probability 0, space 0, times 0 [ 380.644347][T11951] CPU: 0 PID: 11951 Comm: syz.1.1974 Not tainted syzkaller #0 [ 380.651825][T11951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 380.661880][T11951] Call Trace: [ 380.665160][T11951] [ 380.668089][T11951] dump_stack_lvl+0x18c/0x250 [ 380.672779][T11951] ? show_regs_print_info+0x20/0x20 [ 380.677985][T11951] ? load_image+0x420/0x420 [ 380.682492][T11951] ? __lock_acquire+0x7eb0/0x7eb0 [ 380.687528][T11951] should_fail_ex+0x394/0x4c0 [ 380.692212][T11951] should_failslab+0x9/0x20 [ 380.696716][T11951] slab_pre_alloc_hook+0x59/0x300 [ 380.701743][T11951] ? security_sk_alloc+0x4b/0x130 [ 380.706774][T11951] ? security_sk_alloc+0x4b/0x130 [ 380.711801][T11951] __kmem_cache_alloc_node+0x53/0x260 [ 380.717181][T11951] ? security_sk_alloc+0x4b/0x130 [ 380.722206][T11951] __kmalloc+0xa7/0x240 [ 380.726363][T11951] ? sk_prot_alloc+0xe7/0x210 [ 380.731130][T11951] security_sk_alloc+0x4b/0x130 [ 380.736020][T11951] sk_prot_alloc+0x101/0x210 [ 380.740657][T11951] ? sk_alloc+0x24/0x350 [ 380.744917][T11951] sk_alloc+0x3a/0x350 [ 380.748993][T11951] ? bpf_ctx_init+0x154/0x190 [ 380.753692][T11951] bpf_prog_test_run_skb+0x371/0x18f0 [ 380.759078][T11951] ? __fget_files+0x28/0x460 [ 380.763674][T11951] ? __fget_files+0x3fc/0x460 [ 380.768361][T11951] ? cpu_online+0x60/0x60 [ 380.772690][T11951] bpf_prog_test_run+0x31f/0x390 [ 380.777649][T11951] __sys_bpf+0x49d/0x890 [ 380.781905][T11951] ? bpf_link_show_fdinfo+0x560/0x560 [ 380.787294][T11951] ? lock_chain_count+0x20/0x20 [ 380.792156][T11951] __x64_sys_bpf+0x7c/0x90 [ 380.796570][T11951] do_syscall_64+0x55/0xb0 [ 380.800988][T11951] ? clear_bhb_loop+0x40/0x90 [ 380.805675][T11951] ? clear_bhb_loop+0x40/0x90 [ 380.810359][T11951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.816257][T11951] RIP: 0033:0x7f42f3d9fb19 [ 380.820671][T11951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.840281][T11951] RSP: 002b:00007f42f4d2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 380.848697][T11951] RAX: ffffffffffffffda RBX: 00007f42f4025fa0 RCX: 00007f42f3d9fb19 [ 380.856671][T11951] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 380.864642][T11951] RBP: 00007f42f4d2c090 R08: 0000000000000000 R09: 0000000000000000 [ 380.872612][T11951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.880591][T11951] R13: 00007f42f4026038 R14: 00007f42f4025fa0 R15: 00007fff4e099ea8 [ 380.888582][T11951] [ 381.100837][T11956] netlink: 'syz.1.1976': attribute type 2 has an invalid length. [ 381.111113][T11955] netlink: 'syz.1.1976': attribute type 4 has an invalid length. [ 381.122046][T11955] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1976'. [ 381.222950][T11960] syzkaller0: entered promiscuous mode [ 381.239459][T11960] syzkaller0: entered allmulticast mode [ 384.498389][T11978] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1984'. [ 384.507641][T11978] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1984'. [ 384.826827][T12000] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1989'. [ 384.859697][T12000] netlink: 'syz.2.1989': attribute type 28 has an invalid length. [ 384.878284][T12000] netlink: 'syz.2.1989': attribute type 29 has an invalid length. [ 384.887182][T12000] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1989'. [ 385.379423][T12010] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1994'. [ 385.444676][T12014] sctp: [Deprecated]: syz.1.1995 (pid 12014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.444676][T12014] Use struct sctp_sack_info instead [ 385.536778][T12020] netlink: 'syz.3.1993': attribute type 10 has an invalid length. [ 385.554037][T12020] bond0: (slave netdevsim0): Releasing backup interface [ 385.564793][T12020] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 385.581655][T12020] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 385.589913][T12020] team0: Port device netdevsim0 added [ 385.625528][T12008] netlink: 'syz.3.1993': attribute type 10 has an invalid length. [ 385.660008][T12008] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 385.695848][T12008] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 385.904094][T12008] team0: Port device netdevsim0 removed [ 385.952706][T12008] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 386.132228][T12034] netlink: 'syz.0.1999': attribute type 10 has an invalid length. [ 386.220225][T12038] netlink: 'syz.1.2000': attribute type 10 has an invalid length. [ 386.249061][T12038] bridge0: port 5(dummy0) entered disabled state [ 386.255783][T12038] bridge0: port 4(hsr0) entered disabled state [ 386.262210][T12038] bridge0: port 3(team0) entered disabled state [ 386.268978][T12038] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.286980][T12038] bridge0: left promiscuous mode [ 386.292292][T12038] bridge0: left allmulticast mode [ 386.309682][T12038] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 386.333443][T12038] bridge0: port 5(dummy0) entered blocking state [ 386.339963][T12038] bridge0: port 5(dummy0) entered forwarding state [ 386.346847][T12038] bridge0: port 4(hsr0) entered blocking state [ 386.353218][T12038] bridge0: port 4(hsr0) entered forwarding state [ 386.359869][T12038] bridge0: port 3(team0) entered blocking state [ 386.366379][T12038] bridge0: port 3(team0) entered forwarding state [ 386.369061][T12041] FAULT_INJECTION: forcing a failure. [ 386.369061][T12041] name failslab, interval 1, probability 0, space 0, times 0 [ 386.373113][T12038] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.390148][T12041] CPU: 0 PID: 12041 Comm: syz.0.2001 Not tainted syzkaller #0 [ 386.392890][T12038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.400101][T12041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 386.400114][T12041] Call Trace: [ 386.420695][T12041] [ 386.423652][T12041] dump_stack_lvl+0x18c/0x250 [ 386.428365][T12041] ? show_regs_print_info+0x20/0x20 [ 386.433585][T12041] ? load_image+0x420/0x420 [ 386.438111][T12041] ? __lock_acquire+0x7eb0/0x7eb0 [ 386.443164][T12041] should_fail_ex+0x394/0x4c0 [ 386.447881][T12041] should_failslab+0x9/0x20 [ 386.452410][T12041] slab_pre_alloc_hook+0x59/0x300 [ 386.457469][T12041] ? security_sk_alloc+0x4b/0x130 [ 386.462523][T12041] ? security_sk_alloc+0x4b/0x130 [ 386.467572][T12041] __kmem_cache_alloc_node+0x53/0x260 [ 386.472975][T12041] ? security_sk_alloc+0x4b/0x130 [ 386.478065][T12041] __kmalloc+0xa7/0x240 [ 386.482250][T12041] ? sk_prot_alloc+0xe7/0x210 [ 386.486953][T12041] security_sk_alloc+0x4b/0x130 [ 386.491833][T12041] sk_prot_alloc+0x101/0x210 [ 386.496456][T12041] ? sk_alloc+0x24/0x350 [ 386.500728][T12041] sk_alloc+0x3a/0x350 [ 386.504822][T12041] ? bpf_ctx_init+0x154/0x190 [ 386.509525][T12041] bpf_prog_test_run_skb+0x371/0x18f0 [ 386.514917][T12041] ? __fget_files+0x28/0x460 [ 386.519539][T12041] ? __fget_files+0x3fc/0x460 [ 386.524258][T12041] ? cpu_online+0x60/0x60 [ 386.528612][T12041] bpf_prog_test_run+0x31f/0x390 [ 386.533575][T12041] __sys_bpf+0x49d/0x890 [ 386.537927][T12041] ? bpf_link_show_fdinfo+0x560/0x560 [ 386.543471][T12041] ? lock_chain_count+0x20/0x20 [ 386.548366][T12041] __x64_sys_bpf+0x7c/0x90 [ 386.552817][T12041] do_syscall_64+0x55/0xb0 [ 386.557368][T12041] ? clear_bhb_loop+0x40/0x90 [ 386.562235][T12041] ? clear_bhb_loop+0x40/0x90 [ 386.566959][T12041] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.572982][T12041] RIP: 0033:0x7f182eb9fb19 [ 386.577433][T12041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.597066][T12041] RSP: 002b:00007f182faa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 386.605505][T12041] RAX: ffffffffffffffda RBX: 00007f182ee26090 RCX: 00007f182eb9fb19 [ 386.613493][T12041] RDX: 0000000000000050 RSI: 0000200000000f80 RDI: 000000000000000a [ 386.621481][T12041] RBP: 00007f182faa2090 R08: 0000000000000000 R09: 0000000000000000 [ 386.629468][T12041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.637472][T12041] R13: 00007f182ee26128 R14: 00007f182ee26090 R15: 00007fff139123a8 [ 386.645496][T12041] [ 386.962228][T12038] bridge0: port 5(dummy0) entered disabled state [ 386.968922][T12038] bridge0: port 4(hsr0) entered disabled state [ 386.975411][T12038] bridge0: port 3(team0) entered disabled state [ 386.981917][T12038] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.425822][T12049] netlink: 'syz.3.2005': attribute type 12 has an invalid length. [ 387.436170][T12049] netlink: 'syz.3.2005': attribute type 15 has an invalid length. [ 387.546315][T12059] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2005'. [ 387.560851][T12049] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2005'. [ 387.697377][T12062] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2010'. [ 387.755770][T12062] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 388.056346][T12075] netlink: 'syz.3.2015': attribute type 25 has an invalid length. [ 388.087959][T12075] netlink: 'syz.3.2015': attribute type 12 has an invalid length. [ 388.141984][T12075] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2015'. [ 388.597751][T12093] sit0: entered allmulticast mode [ 388.658101][T12093] sit0: entered promiscuous mode [ 388.719058][T12094] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.2022'. [ 392.198432][T12114] validate_nla: 1 callbacks suppressed [ 392.198483][T12114] netlink: 'syz.3.2027': attribute type 9 has an invalid length. [ 392.240782][T12123] FAULT_INJECTION: forcing a failure. [ 392.240782][T12123] name failslab, interval 1, probability 0, space 0, times 0 [ 392.283340][T12114] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2027'. [ 392.298532][T12123] CPU: 1 PID: 12123 Comm: syz.1.2031 Not tainted syzkaller #0 [ 392.306080][T12123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 392.316167][T12123] Call Trace: [ 392.319472][T12123] [ 392.322421][T12123] dump_stack_lvl+0x18c/0x250 [ 392.327140][T12123] ? show_regs_print_info+0x20/0x20 [ 392.332377][T12123] ? load_image+0x420/0x420 [ 392.336913][T12123] ? __might_sleep+0xe0/0xe0 [ 392.341584][T12123] ? __lock_acquire+0x7eb0/0x7eb0 [ 392.346641][T12123] should_fail_ex+0x394/0x4c0 [ 392.351349][T12123] should_failslab+0x9/0x20 [ 392.355870][T12123] slab_pre_alloc_hook+0x59/0x300 [ 392.360925][T12123] kmem_cache_alloc_node+0x5e/0x320 [ 392.366145][T12123] ? __alloc_skb+0x103/0x2c0 [ 392.370771][T12123] __alloc_skb+0x103/0x2c0 [ 392.375224][T12123] _sctp_make_chunk+0x5b/0x430 [ 392.380150][T12123] sctp_make_datafrag_empty+0x12b/0x240 [ 392.385737][T12123] ? sctp_make_ecne+0x350/0x350 [ 392.390620][T12123] ? sctp_auth_send_cid+0x69/0x250 [ 392.395854][T12123] sctp_datamsg_from_user+0x72e/0xee0 [ 392.401276][T12123] sctp_sendmsg_to_asoc+0x1095/0x1970 [ 392.406687][T12123] ? sctp_assoc_add_peer+0xd82/0x1440 [ 392.412109][T12123] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 392.417949][T12123] ? __sctp_connect+0xd80/0xd80 [ 392.422829][T12123] ? __local_bh_enable_ip+0x13a/0x1c0 [ 392.428234][T12123] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 392.433808][T12123] ? security_sctp_bind_connect+0x89/0xb0 [ 392.439571][T12123] sctp_sendmsg+0x1afa/0x27b0 [ 392.444300][T12123] ? sctp_getsockopt+0xb60/0xb60 [ 392.449267][T12123] ? aa_sk_perm+0x7bb/0x8e0 [ 392.453834][T12123] ? aa_af_perm+0x330/0x330 [ 392.458367][T12123] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 392.464823][T12123] ? sock_rps_record_flow+0x19/0x3f0 [ 392.470198][T12123] ? inet_sendmsg+0xce/0x2a0 [ 392.474823][T12123] ? inet_send_prepare+0x250/0x250 [ 392.479966][T12123] ____sys_sendmsg+0x61b/0x980 [ 392.484774][T12123] ? __asan_memset+0x22/0x40 [ 392.489390][T12123] ? __sys_sendmsg_sock+0x30/0x30 [ 392.494431][T12123] ? __import_iovec+0x3fa/0x850 [ 392.499321][T12123] ? import_iovec+0x73/0xa0 [ 392.503855][T12123] ___sys_sendmsg+0x2a6/0x360 [ 392.508558][T12123] ? get_pid_task+0x20/0x1e0 [ 392.513193][T12123] ? __sys_sendmsg+0x2b0/0x2b0 [ 392.518009][T12123] ? __lock_acquire+0x7eb0/0x7eb0 [ 392.523093][T12123] __se_sys_sendmsg+0x1d0/0x2c0 [ 392.527993][T12123] ? __x64_sys_sendmsg+0x80/0x80 [ 392.532999][T12123] ? lockdep_hardirqs_on+0x98/0x150 [ 392.538238][T12123] do_syscall_64+0x55/0xb0 [ 392.542678][T12123] ? clear_bhb_loop+0x40/0x90 [ 392.547386][T12123] ? clear_bhb_loop+0x40/0x90 [ 392.552097][T12123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.558034][T12123] RIP: 0033:0x7f42f3d9fb19 [ 392.562482][T12123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.582125][T12123] RSP: 002b:00007f42f4d2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.590584][T12123] RAX: ffffffffffffffda RBX: 00007f42f4025fa0 RCX: 00007f42f3d9fb19 [ 392.598571][T12123] RDX: 00000000000000c9 RSI: 0000200000000380 RDI: 0000000000000003 [ 392.598644][T12123] RBP: 00007f42f4d2c090 R08: 0000000000000000 R09: 0000000000000000 [ 392.598655][T12123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 392.598664][T12123] R13: 00007f42f4026038 R14: 00007f42f4025fa0 R15: 00007fff4e099ea8 [ 392.598695][T12123] [ 392.859193][T12123] netlink: 'syz.1.2031': attribute type 9 has an invalid length. [ 392.886341][T12123] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2031'. [ 393.769025][T12154] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2041'. [ 394.205382][T12160] netlink: 'syz.3.2043': attribute type 10 has an invalid length. [ 394.256944][T12160] bond0: (slave netdevsim0): Releasing backup interface [ 394.325113][T12160] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 394.345786][T12160] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 394.368028][T12160] team0: Port device netdevsim0 added [ 394.383729][T12161] netlink: 'syz.3.2043': attribute type 10 has an invalid length. [ 394.410496][T12161] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 394.439439][T12161] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 394.467699][T12161] team0: Port device netdevsim0 removed [ 394.478295][T12161] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 394.573203][T12171] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2047'. [ 394.601605][T12171] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2047'. [ 394.622915][T12170] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2047'. [ 395.306977][T12186] FAULT_INJECTION: forcing a failure. [ 395.306977][T12186] name failslab, interval 1, probability 0, space 0, times 0 [ 395.319880][T12186] CPU: 1 PID: 12186 Comm: syz.1.2053 Not tainted syzkaller #0 [ 395.327394][T12186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 395.337464][T12186] Call Trace: [ 395.340736][T12186] [ 395.343660][T12186] dump_stack_lvl+0x18c/0x250 [ 395.348349][T12186] ? __lock_acquire+0x7eb0/0x7eb0 [ 395.353407][T12186] ? show_regs_print_info+0x20/0x20 [ 395.358639][T12186] ? load_image+0x420/0x420 [ 395.363170][T12186] ? read_tsc+0x9/0x20 [ 395.367367][T12186] should_fail_ex+0x394/0x4c0 [ 395.372054][T12186] should_failslab+0x9/0x20 [ 395.376577][T12186] slab_pre_alloc_hook+0x59/0x300 [ 395.381634][T12186] kmem_cache_alloc_bulk+0x52/0x5b0 [ 395.386858][T12186] ? page_pool_alloc_pages+0xba/0x160 [ 395.392379][T12186] bpf_test_run_xdp_live+0x16a9/0x1b30 [ 395.397885][T12186] ? bpf_test_run_xdp_live+0x4df/0x1b30 [ 395.403477][T12186] ? xdp_convert_md_to_buff+0x330/0x330 [ 395.409106][T12186] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 395.415388][T12186] ? _copy_from_user+0xa5/0xe0 [ 395.420193][T12186] ? bpf_test_init+0x119/0x140 [ 395.425002][T12186] ? xdp_convert_md_to_buff+0x5b/0x330 [ 395.430499][T12186] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 395.435908][T12186] ? __lock_acquire+0x7eb0/0x7eb0 [ 395.440971][T12186] ? dev_put+0x80/0x80 [ 395.445088][T12186] ? dev_put+0x80/0x80 [ 395.449182][T12186] bpf_prog_test_run+0x31f/0x390 [ 395.454150][T12186] __sys_bpf+0x49d/0x890 [ 395.458454][T12186] ? bpf_link_show_fdinfo+0x560/0x560 [ 395.463849][T12186] ? lock_chain_count+0x20/0x20 [ 395.468717][T12186] __x64_sys_bpf+0x7c/0x90 [ 395.473139][T12186] do_syscall_64+0x55/0xb0 [ 395.477556][T12186] ? clear_bhb_loop+0x40/0x90 [ 395.482235][T12186] ? clear_bhb_loop+0x40/0x90 [ 395.486917][T12186] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.492815][T12186] RIP: 0033:0x7f42f3d9fb19 [ 395.497232][T12186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.516852][T12186] RSP: 002b:00007f42f4d2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 395.525274][T12186] RAX: ffffffffffffffda RBX: 00007f42f4025fa0 RCX: 00007f42f3d9fb19 [ 395.533294][T12186] RDX: 0000000000000050 RSI: 0000200000001a80 RDI: 000000000000000a [ 395.541283][T12186] RBP: 00007f42f4d2c090 R08: 0000000000000000 R09: 0000000000000000 [ 395.549257][T12186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 395.557228][T12186] R13: 00007f42f4026038 R14: 00007f42f4025fa0 R15: 00007fff4e099ea8 [ 395.565217][T12186] [ 395.764362][T12196] netlink: 'syz.1.2057': attribute type 10 has an invalid length. [ 395.789342][T12196] bond0: (slave netdevsim0): Releasing backup interface [ 395.807475][T12196] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 395.816041][T12196] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 395.834619][T12196] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 395.855150][T12196] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 395.877952][T12196] team0: Port device netdevsim0 added [ 395.910463][T12197] netlink: 'syz.1.2057': attribute type 10 has an invalid length. [ 395.921684][T12197] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 395.936326][T12197] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 395.972895][T12197] team0: Port device netdevsim0 removed [ 396.004070][T12197] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 396.014321][T12197] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 396.032523][T12197] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 396.361995][T12207] netlink: 'syz.2.2062': attribute type 3 has an invalid length. [ 396.384553][T12206] netlink: 212400 bytes leftover after parsing attributes in process `syz.2.2062'. [ 396.401740][T12207] netlink: 'syz.2.2062': attribute type 5 has an invalid length. [ 396.461724][T12207] netlink: 'syz.2.2062': attribute type 6 has an invalid length. [ 396.488454][T12207] netlink: 197520 bytes leftover after parsing attributes in process `syz.2.2062'. [ 396.745419][T12215] netlink: 'syz.1.2066': attribute type 9 has an invalid length. [ 396.770407][T12215] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2066'. [ 397.056813][T12225] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2070'. [ 397.183975][T12230] netlink: 155872 bytes leftover after parsing attributes in process `syz.3.2070'. [ 397.540473][T12242] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 397.581493][T12242] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 397.613641][T12245] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 397.620685][T12245] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 398.536363][T12275] validate_nla: 1 callbacks suppressed [ 398.536381][T12275] netlink: 'syz.2.2087': attribute type 10 has an invalid length. [ 398.560689][T12275] bond0: (slave netdevsim0): Releasing backup interface [ 398.575097][T12275] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 398.587528][T12275] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 398.610247][T12275] team0: Port device netdevsim0 added [ 398.623822][T12269] netlink: 'syz.2.2087': attribute type 10 has an invalid length. [ 398.635207][T12269] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 398.645105][T12269] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 398.677474][T12269] team0: Port device netdevsim0 removed [ 398.700077][T12269] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 398.750606][T12278] syzkaller0: entered promiscuous mode [ 398.756251][T12278] syzkaller0: entered allmulticast mode [ 400.924943][T12284] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 400.932585][T12284] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 401.089642][T12306] netlink: 'syz.1.2100': attribute type 10 has an invalid length. [ 401.109949][T12306] bond0: (slave netdevsim0): Releasing backup interface [ 401.126115][T12306] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 401.138388][T12306] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 401.172736][T12306] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 401.180070][T12312] sctp: [Deprecated]: syz.2.2102 (pid 12312) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.180070][T12312] Use struct sctp_sack_info instead [ 401.201124][T12306] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 401.210723][T12306] team0: Port device netdevsim0 added [ 401.219701][T12307] netlink: 'syz.1.2100': attribute type 10 has an invalid length. [ 401.228824][T12307] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 401.236680][T12307] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 401.283938][T12307] team0: Port device netdevsim0 removed [ 401.294617][T12307] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 401.313297][T12307] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 401.333382][T12307] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 401.449208][T12318] netlink: 'syz.0.2101': attribute type 3 has an invalid length. [ 401.485354][T12318] netlink: 'syz.0.2101': attribute type 5 has an invalid length. [ 401.509289][T12310] netlink: 212400 bytes leftover after parsing attributes in process `syz.0.2101'. [ 401.520159][T12318] netlink: 'syz.0.2101': attribute type 6 has an invalid length. [ 401.601626][T12318] netlink: 197520 bytes leftover after parsing attributes in process `syz.0.2101'. [ 402.267822][T12333] FAULT_INJECTION: forcing a failure. [ 402.267822][T12333] name failslab, interval 1, probability 0, space 0, times 0 [ 402.286844][T12333] CPU: 0 PID: 12333 Comm: syz.0.2110 Not tainted syzkaller #0 [ 402.294376][T12333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 402.304460][T12333] Call Trace: [ 402.307743][T12333] [ 402.310672][T12333] dump_stack_lvl+0x18c/0x250 [ 402.315356][T12333] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 402.321515][T12333] ? show_regs_print_info+0x20/0x20 [ 402.326713][T12333] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 402.332876][T12333] should_fail_ex+0x394/0x4c0 [ 402.337557][T12333] should_failslab+0x9/0x20 [ 402.342076][T12333] slab_pre_alloc_hook+0x59/0x300 [ 402.347116][T12333] ? lockdep_hardirqs_on+0x98/0x150 [ 402.352308][T12333] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 402.358029][T12333] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 402.363745][T12333] __kmem_cache_alloc_node+0x53/0x260 [ 402.369116][T12333] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 402.374830][T12333] __kmalloc+0xa7/0x240 [ 402.379063][T12333] tomoyo_realpath_from_path+0xe6/0x5c0 [ 402.384639][T12333] ? tomoyo_domain+0xd6/0x120 [ 402.389330][T12333] tomoyo_path_number_perm+0x248/0x5e0 [ 402.394790][T12333] ? tomoyo_path_number_perm+0x217/0x5e0 [ 402.400428][T12333] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 402.405887][T12333] ? ksys_write+0x1d2/0x260 [ 402.410439][T12333] ? __fget_files+0x28/0x460 [ 402.415040][T12333] security_file_ioctl+0x70/0xa0 [ 402.419988][T12333] __se_sys_ioctl+0x48/0x170 [ 402.424583][T12333] do_syscall_64+0x55/0xb0 [ 402.429011][T12333] ? clear_bhb_loop+0x40/0x90 [ 402.433692][T12333] ? clear_bhb_loop+0x40/0x90 [ 402.438369][T12333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.444265][T12333] RIP: 0033:0x7f182eb9fb19 [ 402.448676][T12333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.468281][T12333] RSP: 002b:00007f182fac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.476695][T12333] RAX: ffffffffffffffda RBX: 00007f182ee25fa0 RCX: 00007f182eb9fb19 [ 402.484666][T12333] RDX: 0000200000001380 RSI: 0000000000008924 RDI: 000000000000000d [ 402.492635][T12333] RBP: 00007f182fac3090 R08: 0000000000000000 R09: 0000000000000000 [ 402.500654][T12333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.508625][T12333] R13: 00007f182ee26038 R14: 00007f182ee25fa0 R15: 00007fff139123a8 [ 402.516612][T12333] [ 402.531529][T12333] ERROR: Out of memory at tomoyo_realpath_from_path. [ 402.801772][T12344] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 402.808841][T12344] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 402.863046][T12339] netlink: 'syz.2.2112': attribute type 10 has an invalid length. [ 402.900104][T12339] bridge0: port 5(dummy0) entered disabled state [ 402.907840][T12339] bridge0: port 4(hsr0) entered disabled state [ 402.915066][T12339] bridge0: port 3(team0) entered disabled state [ 402.923480][T12339] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.180738][T12349] netlink: 'syz.1.2115': attribute type 10 has an invalid length. [ 403.242395][T12349] bond0: (slave netdevsim0): Releasing backup interface [ 403.267078][T12349] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 403.276036][T12349] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 403.326508][T12349] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 403.334787][T12349] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 403.351185][T12349] team0: Port device netdevsim0 added [ 403.371166][T12352] netlink: 'syz.1.2115': attribute type 10 has an invalid length. [ 403.383518][T12352] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 403.390837][T12352] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 403.417221][T12352] team0: Port device netdevsim0 removed [ 403.425818][T12352] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 403.436440][T12352] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 403.445169][T12352] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 403.558795][T12357] bond0: (slave netdevsim0): Releasing backup interface [ 403.623022][T12357] team0: Port device netdevsim0 added [ 403.652863][T12354] validate_nla: 1 callbacks suppressed [ 403.653090][T12354] netlink: 'syz.3.2118': attribute type 10 has an invalid length. [ 403.746796][T12354] bond0: (slave netdevsim0): Releasing backup interface [ 403.826014][T12354] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 403.851169][T12354] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 403.895373][T12354] team0: Port device netdevsim0 added [ 403.936204][T12359] netlink: 'syz.0.2117': attribute type 10 has an invalid length. [ 403.965614][T12359] team0: Port device netdevsim0 removed [ 403.990478][T12359] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 404.000771][T12358] netlink: 'syz.3.2118': attribute type 10 has an invalid length. [ 404.012260][T12358] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 404.019500][T12358] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 404.040149][T12358] team0: Port device netdevsim0 removed [ 404.070204][T12358] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 404.997686][T12383] netlink: 'syz.2.2129': attribute type 10 has an invalid length. [ 405.054305][T12383] bond0: (slave netdevsim0): Releasing backup interface [ 405.085808][T12389] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.2131'. [ 405.097623][T12383] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 405.106762][T12383] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 405.132498][T12383] team0: Port device netdevsim0 added [ 405.139644][T12386] netlink: 'syz.2.2129': attribute type 10 has an invalid length. [ 405.151011][T12386] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 405.179848][T12386] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 405.210012][T12386] team0: Port device netdevsim0 removed [ 405.235295][T12386] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 405.275681][T12399] FAULT_INJECTION: forcing a failure. [ 405.275681][T12399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.288833][T12399] CPU: 0 PID: 12399 Comm: syz.1.2134 Not tainted syzkaller #0 [ 405.296316][T12399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 405.306401][T12399] Call Trace: [ 405.309699][T12399] [ 405.312650][T12399] dump_stack_lvl+0x18c/0x250 [ 405.317359][T12399] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 405.323111][T12399] ? show_regs_print_info+0x20/0x20 [ 405.328336][T12399] ? load_image+0x420/0x420 [ 405.332862][T12399] ? __bpf_ringbuf_reserve+0x47c/0x5c0 [ 405.338377][T12399] should_fail_ex+0x394/0x4c0 [ 405.343098][T12399] strncpy_from_user+0x36/0x2f0 [ 405.347985][T12399] ? __local_bh_disable_ip+0x108/0x1a0 [ 405.353474][T12399] strncpy_from_user_nofault+0x71/0x140 [ 405.359058][T12399] bpf_probe_read_user_str+0x2a/0x70 [ 405.364414][T12399] bpf_prog_0c70681b89b9d13a+0x68/0x6c [ 405.369907][T12399] bpf_test_run+0x2df/0x870 [ 405.374454][T12399] ? bpf_test_run+0x174/0x870 [ 405.379164][T12399] ? dst_hold+0x70/0x70 [ 405.383346][T12399] ? eth_get_headlen+0x210/0x210 [ 405.388408][T12399] ? slab_build_skb+0x25a/0x3e0 [ 405.393294][T12399] ? convert___skb_to_skb+0x3d/0x590 [ 405.398618][T12399] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 405.404050][T12399] ? cpu_online+0x60/0x60 [ 405.408417][T12399] bpf_prog_test_run+0x31f/0x390 [ 405.413396][T12399] __sys_bpf+0x49d/0x890 [ 405.417681][T12399] ? bpf_link_show_fdinfo+0x560/0x560 [ 405.423096][T12399] ? lock_chain_count+0x20/0x20 [ 405.427987][T12399] __x64_sys_bpf+0x7c/0x90 [ 405.432433][T12399] do_syscall_64+0x55/0xb0 [ 405.436883][T12399] ? clear_bhb_loop+0x40/0x90 [ 405.441590][T12399] ? clear_bhb_loop+0x40/0x90 [ 405.446307][T12399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.452239][T12399] RIP: 0033:0x7f42f3d9fb19 [ 405.456697][T12399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.460247][T12398] netlink: 'syz.0.2133': attribute type 10 has an invalid length. [ 405.476314][T12399] RSP: 002b:00007f42f4d2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 405.476356][T12399] RAX: ffffffffffffffda RBX: 00007f42f4025fa0 RCX: 00007f42f3d9fb19 [ 405.476368][T12399] RDX: 000000000000004c RSI: 0000200000000a00 RDI: 000000000000000a [ 405.476378][T12399] RBP: 00007f42f4d2c090 R08: 0000000000000000 R09: 0000000000000000 [ 405.476388][T12399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 405.476396][T12399] R13: 00007f42f4026038 R14: 00007f42f4025fa0 R15: 00007fff4e099ea8 [ 405.476424][T12399] [ 405.568112][T12398] bond0: (slave netdevsim0): Releasing backup interface [ 405.640120][T12398] team0: Port device netdevsim0 added [ 405.667475][T12400] netlink: 'syz.0.2133': attribute type 10 has an invalid length. [ 405.719287][T12400] team0: Port device netdevsim0 removed [ 405.778006][T12400] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 406.444631][T12420] netlink: 'syz.2.2143': attribute type 15 has an invalid length. [ 406.459006][T12420] netlink: 'syz.2.2143': attribute type 7 has an invalid length. [ 406.468196][T12420] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2143'. [ 406.892944][T12432] netlink: 'syz.3.2146': attribute type 39 has an invalid length. [ 407.390710][T12449] tap0: tun_chr_ioctl cmd 1074025677 [ 407.402148][T12449] tap0: linktype set to 778 [ 407.519984][T12455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.279444][T12471] bond0: (slave netdevsim0): Releasing backup interface [ 408.293526][T12471] team0: Port device netdevsim0 added [ 408.383476][T12466] team0: Port device netdevsim0 removed [ 408.514061][T12466] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 409.140945][T12491] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2170'. [ 409.638063][T12497] validate_nla: 3 callbacks suppressed [ 409.638079][T12497] netlink: 'syz.0.2171': attribute type 29 has an invalid length. [ 409.683891][T12497] netlink: 'syz.0.2171': attribute type 29 has an invalid length. [ 409.736626][T12501] netlink: 'syz.0.2171': attribute type 29 has an invalid length. [ 409.793907][T12497] netlink: 'syz.0.2171': attribute type 29 has an invalid length. [ 409.843860][T12503] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2173'. [ 409.910029][T12503] netlink: 'syz.2.2173': attribute type 9 has an invalid length. [ 409.929130][T12503] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2173'. [ 410.391608][T12513] netlink: 'syz.1.2175': attribute type 15 has an invalid length. [ 410.411484][T12513] netlink: 'syz.1.2175': attribute type 7 has an invalid length. [ 410.419646][T12513] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2175'. [ 410.558554][T12506] delete_channel: no stack [ 411.064852][T12517] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2176'. [ 411.087315][T12517] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 411.106248][T12517] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 411.571440][T12530] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2182'. [ 412.791690][T12547] netlink: 'syz.3.2188': attribute type 15 has an invalid length. [ 412.799616][T12547] netlink: 'syz.3.2188': attribute type 7 has an invalid length. [ 412.842938][T12547] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2188'. [ 413.641410][T12560] netlink: 'syz.1.2194': attribute type 10 has an invalid length. [ 413.756743][T12560] bond0: (slave netdevsim0): Releasing backup interface [ 413.780337][T12560] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 413.804958][T12560] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 413.861982][T12560] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 413.900043][T12560] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 413.911106][T12560] team0: Port device netdevsim0 added [ 413.926120][T12561] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 413.947555][T12561] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 413.986127][T12561] team0: Port device netdevsim0 removed [ 414.022014][T12561] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 414.040260][T12561] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 414.062847][T12561] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 415.353040][T12591] FAULT_INJECTION: forcing a failure. [ 415.353040][T12591] name failslab, interval 1, probability 0, space 0, times 0 [ 415.452692][T12591] CPU: 1 PID: 12591 Comm: syz.3.2206 Not tainted syzkaller #0 [ 415.457160][T12592] validate_nla: 1 callbacks suppressed [ 415.457226][T12592] netlink: 'syz.2.2205': attribute type 21 has an invalid length. [ 415.460207][T12591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 415.460226][T12591] Call Trace: [ 415.460237][T12591] [ 415.460250][T12591] dump_stack_lvl+0x18c/0x250 [ 415.460298][T12591] ? show_regs_print_info+0x20/0x20 [ 415.460330][T12591] ? load_image+0x420/0x420 [ 415.460358][T12591] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 415.460399][T12591] ? lock_chain_count+0x20/0x20 [ 415.460446][T12591] should_fail_ex+0x394/0x4c0 [ 415.460493][T12591] should_failslab+0x9/0x20 [ 415.460514][T12591] slab_pre_alloc_hook+0x59/0x300 [ 415.460536][T12591] ? __debug_object_init+0xec/0x450 [ 415.460577][T12591] kmem_cache_alloc+0x5a/0x2d0 [ 415.460597][T12591] ? slab_build_skb+0x28/0x3e0 [ 415.460640][T12591] slab_build_skb+0x28/0x3e0 [ 415.460677][T12591] bpf_prog_test_run_skb+0x38f/0x18f0 [ 415.460717][T12591] ? __fget_files+0x28/0x460 [ 415.460751][T12591] ? __fget_files+0x3fc/0x460 [ 415.460816][T12591] ? cpu_online+0x60/0x60 [ 415.460847][T12591] bpf_prog_test_run+0x31f/0x390 [ 415.460885][T12591] __sys_bpf+0x49d/0x890 [ 415.460921][T12591] ? bpf_link_show_fdinfo+0x560/0x560 [ 415.460996][T12591] ? lock_chain_count+0x20/0x20 [ 415.461054][T12591] __x64_sys_bpf+0x7c/0x90 [ 415.461086][T12591] do_syscall_64+0x55/0xb0 [ 415.461110][T12591] ? clear_bhb_loop+0x40/0x90 [ 415.461138][T12591] ? clear_bhb_loop+0x40/0x90 [ 415.461173][T12591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.461199][T12591] RIP: 0033:0x7f83baf9fb19 [ 415.461224][T12591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.461243][T12591] RSP: 002b:00007f83bbdb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.461272][T12591] RAX: ffffffffffffffda RBX: 00007f83bb225fa0 RCX: 00007f83baf9fb19 [ 415.461289][T12591] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 415.461307][T12591] RBP: 00007f83bbdb4090 R08: 0000000000000000 R09: 0000000000000000 [ 415.461323][T12591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.461338][T12591] R13: 00007f83bb226038 R14: 00007f83bb225fa0 R15: 00007fffa4624308 [ 415.461401][T12591] [ 415.850665][T12592] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2205'. [ 415.961050][T12592] sit0: entered allmulticast mode [ 416.094112][T12601] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2207'. [ 416.097838][T12592] sit0: entered promiscuous mode [ 416.312140][T12600] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2207'. [ 418.617218][T12640] netlink: 'syz.3.2222': attribute type 21 has an invalid length. [ 418.632894][T12640] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2222'. [ 418.777417][T12640] sit0: left promiscuous mode [ 419.650733][T12641] sit0: entered promiscuous mode [ 419.733090][T12650] netlink: 'syz.1.2223': attribute type 10 has an invalid length. [ 419.872412][T12650] bond0: (slave netdevsim0): Releasing backup interface [ 419.918255][T12650] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 419.930412][T12650] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 419.954906][T12650] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 419.963168][T12650] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 419.976584][T12650] team0: Port device netdevsim0 added [ 419.991931][T12651] netlink: 'syz.1.2223': attribute type 10 has an invalid length. [ 420.009105][T12651] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 420.035718][T12651] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 420.091148][T12651] team0: Port device netdevsim0 removed [ 420.117017][T12651] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 420.129099][T12651] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 420.139890][T12651] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 420.443624][T12682] netlink: 'syz.1.2233': attribute type 27 has an invalid length. [ 420.451595][T12682] netlink: 'syz.1.2233': attribute type 3 has an invalid length. [ 420.632178][T12686] netlink: 'syz.0.2231': attribute type 21 has an invalid length. [ 420.659655][T12686] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2231'. [ 420.822231][T12672] rxe_eth0 speed is unknown, defaulting to 1000 [ 421.022710][T12695] netlink: 'syz.1.2234': attribute type 10 has an invalid length. [ 421.101653][T12695] bond0: (slave netdevsim0): Releasing backup interface [ 421.121988][T12695] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 421.129274][T12695] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 421.151081][T12695] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 421.167877][T12695] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 421.182758][T12695] team0: Port device netdevsim0 added [ 421.197256][T12691] netlink: 'syz.1.2234': attribute type 10 has an invalid length. [ 421.285417][T12691] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 421.297328][T12691] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 421.381849][T12691] team0: Port device netdevsim0 removed [ 421.426898][T12691] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 421.438331][T12691] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 421.456820][T12691] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 421.825134][T12710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 421.832652][T12710] IPv6: NLM_F_CREATE should be set when creating new route [ 421.840191][T12710] IPv6: NLM_F_CREATE should be set when creating new route [ 421.847680][T12710] IPv6: NLM_F_CREATE should be set when creating new route [ 421.911157][T12707] netlink: 'syz.3.2240': attribute type 10 has an invalid length. [ 421.968087][T12707] bond0: (slave netdevsim0): Releasing backup interface [ 422.014023][T12707] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 422.024312][T12707] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 422.037884][T12707] team0: Port device netdevsim0 added [ 422.051697][T12711] netlink: 'syz.3.2240': attribute type 10 has an invalid length. [ 422.059832][T12711] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 422.067358][T12711] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 422.086659][T12711] team0: Port device netdevsim0 removed [ 422.096007][T12711] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 422.140574][T12718] netlink: 'syz.0.2242': attribute type 10 has an invalid length. [ 422.158571][T12718] bond0: (slave netdevsim0): Releasing backup interface [ 422.182116][T12718] team0: Port device netdevsim0 added [ 422.222236][T12713] netlink: 'syz.0.2242': attribute type 10 has an invalid length. [ 422.362591][T12713] team0: Port device netdevsim0 removed [ 422.390740][T12713] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 423.039745][T12734] netlink: 'syz.0.2249': attribute type 10 has an invalid length. [ 423.090376][T12734] bond0: (slave netdevsim0): Releasing backup interface [ 423.132912][T12742] FAULT_INJECTION: forcing a failure. [ 423.132912][T12742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.146777][T12742] CPU: 1 PID: 12742 Comm: syz.1.2253 Not tainted syzkaller #0 [ 423.154272][T12742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 423.164351][T12742] Call Trace: [ 423.167628][T12742] [ 423.170554][T12742] dump_stack_lvl+0x18c/0x250 [ 423.175243][T12742] ? show_regs_print_info+0x20/0x20 [ 423.180441][T12742] ? load_image+0x420/0x420 [ 423.184942][T12742] ? __might_fault+0xaa/0x120 [ 423.189615][T12742] ? __lock_acquire+0x7eb0/0x7eb0 [ 423.194638][T12742] should_fail_ex+0x394/0x4c0 [ 423.199321][T12742] _copy_to_user+0x2f/0xa0 [ 423.203749][T12742] bpf_prog_test_run_syscall+0x33f/0x4b0 [ 423.209384][T12742] ? sock_gen_cookie+0x60/0x60 [ 423.214155][T12742] ? sock_gen_cookie+0x60/0x60 [ 423.218918][T12742] bpf_prog_test_run+0x31f/0x390 [ 423.223861][T12742] __sys_bpf+0x49d/0x890 [ 423.228111][T12742] ? bpf_link_show_fdinfo+0x560/0x560 [ 423.233493][T12742] ? lock_chain_count+0x20/0x20 [ 423.238352][T12742] __x64_sys_bpf+0x7c/0x90 [ 423.242765][T12742] do_syscall_64+0x55/0xb0 [ 423.247181][T12742] ? clear_bhb_loop+0x40/0x90 [ 423.251855][T12742] ? clear_bhb_loop+0x40/0x90 [ 423.256537][T12742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.262429][T12742] RIP: 0033:0x7f42f3d9fb19 [ 423.266844][T12742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.286463][T12742] RSP: 002b:00007f42f4d2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 423.294880][T12742] RAX: ffffffffffffffda RBX: 00007f42f4025fa0 RCX: 00007f42f3d9fb19 [ 423.302852][T12742] RDX: 000000000000000c RSI: 0000200000000840 RDI: 000000000000000a [ 423.310820][T12742] RBP: 00007f42f4d2c090 R08: 0000000000000000 R09: 0000000000000000 [ 423.318804][T12742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.326774][T12742] R13: 00007f42f4026038 R14: 00007f42f4025fa0 R15: 00007fff4e099ea8 [ 423.334756][T12742] [ 423.357963][T12734] team0: Port device netdevsim0 added [ 423.387299][T12740] netlink: 'syz.0.2249': attribute type 10 has an invalid length. [ 423.427099][T12740] team0: Port device netdevsim0 removed [ 423.450370][T12740] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 423.611052][T12745] netlink: 'syz.1.2254': attribute type 10 has an invalid length. [ 423.667714][T12745] bond0: (slave netdevsim0): Releasing backup interface [ 423.689773][T12745] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 423.715468][T12745] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 423.757464][T12745] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 423.775527][T12745] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 423.795862][T12745] team0: Port device netdevsim0 added [ 423.810658][T12750] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 423.828024][T12750] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 423.856077][T12750] team0: Port device netdevsim0 removed [ 423.864496][T12750] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 423.872814][T12750] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 423.881534][T12750] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 423.897083][T12754] FAULT_INJECTION: forcing a failure. [ 423.897083][T12754] name failslab, interval 1, probability 0, space 0, times 0 [ 423.910202][T12754] CPU: 0 PID: 12754 Comm: syz.2.2257 Not tainted syzkaller #0 [ 423.917676][T12754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 423.927765][T12754] Call Trace: [ 423.931066][T12754] [ 423.934016][T12754] dump_stack_lvl+0x18c/0x250 [ 423.938731][T12754] ? show_regs_print_info+0x20/0x20 [ 423.943960][T12754] ? load_image+0x420/0x420 [ 423.948493][T12754] ? skb_network_protocol+0x529/0x790 [ 423.953930][T12754] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 423.960127][T12754] should_fail_ex+0x394/0x4c0 [ 423.964842][T12754] should_failslab+0x9/0x20 [ 423.969373][T12754] slab_pre_alloc_hook+0x59/0x300 [ 423.974435][T12754] ? netif_skb_features+0xa51/0x1330 [ 423.979760][T12754] kmem_cache_alloc+0x5a/0x2d0 [ 423.984552][T12754] ? skb_clone+0x1eb/0x370 [ 423.989004][T12754] skb_clone+0x1eb/0x370 [ 423.993276][T12754] ? dev_queue_xmit_nit+0x204/0xba0 [ 423.998510][T12754] dev_queue_xmit_nit+0x23f/0xba0 [ 424.003565][T12754] ? dev_queue_xmit_nit+0x2d/0xba0 [ 424.008739][T12754] dev_hard_start_xmit+0x150/0x790 [ 424.013897][T12754] __dev_queue_xmit+0x1d1e/0x3a30 [ 424.018951][T12754] ? __dev_queue_xmit+0x6d1/0x3a30 [ 424.024101][T12754] ? __copy_skb_header+0xa3/0x4a0 [ 424.029155][T12754] ? netdev_core_pick_tx+0x370/0x370 [ 424.034472][T12754] ? __skb_clone+0x446/0x6c0 [ 424.039099][T12754] ? skb_clone+0x21f/0x370 [ 424.043548][T12754] __netlink_deliver_tap+0x579/0x7f0 [ 424.048892][T12754] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.054116][T12754] netlink_deliver_tap+0x19c/0x1b0 [ 424.059254][T12754] __netlink_sendskb+0x4b/0x90 [ 424.064052][T12754] netlink_dump+0xab3/0xec0 [ 424.068595][T12754] ? netlink_lookup+0x200/0x200 [ 424.073492][T12754] ? netlink_lookup+0x30/0x200 [ 424.078283][T12754] ? netlink_lookup+0x30/0x200 [ 424.083078][T12754] __netlink_dump_start+0x57c/0x7a0 [ 424.088314][T12754] rtnetlink_rcv_msg+0xe19/0xf90 [ 424.093397][T12754] ? rtnetlink_rcv_msg+0x220/0xf90 [ 424.098536][T12754] ? tc_ctl_chain+0x1710/0x1710 [ 424.103499][T12754] ? rtnetlink_bind+0x80/0x80 [ 424.108197][T12754] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 424.113948][T12754] ? perf_trace_preemptirq_template+0x269/0x330 [ 424.120224][T12754] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 424.126233][T12754] ? lock_chain_count+0x20/0x20 [ 424.131110][T12754] ? __local_bh_enable_ip+0x13a/0x1c0 [ 424.136509][T12754] ? lockdep_hardirqs_on+0x98/0x150 [ 424.141733][T12754] ? __local_bh_enable_ip+0x13a/0x1c0 [ 424.147126][T12754] ? _local_bh_enable+0xa0/0xa0 [ 424.152011][T12754] ? __dev_queue_xmit+0x1481/0x3a30 [ 424.157250][T12754] ? __dev_queue_xmit+0x6d1/0x3a30 [ 424.162399][T12754] ? tc_ctl_chain+0x1710/0x1710 [ 424.167278][T12754] ? ref_tracker_free+0x686/0x830 [ 424.172337][T12754] netlink_rcv_skb+0x235/0x4c0 [ 424.177128][T12754] ? rtnetlink_bind+0x80/0x80 [ 424.181823][T12754] ? netlink_ack+0x1160/0x1160 [ 424.186609][T12754] ? __lock_acquire+0x7eb0/0x7eb0 [ 424.191654][T12754] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.196849][T12754] netlink_unicast+0x856/0x9e0 [ 424.201628][T12754] netlink_sendmsg+0x8d0/0xbf0 [ 424.206392][T12754] ? netlink_getsockopt+0x590/0x590 [ 424.211582][T12754] ? apparmor_socket_sendmsg+0x8e/0x330 [ 424.217131][T12754] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 424.222413][T12754] ? security_socket_sendmsg+0x80/0xa0 [ 424.227869][T12754] ? netlink_getsockopt+0x590/0x590 [ 424.233069][T12754] ____sys_sendmsg+0x61b/0x980 [ 424.237843][T12754] ? __asan_memset+0x22/0x40 [ 424.242430][T12754] ? __sys_sendmsg_sock+0x30/0x30 [ 424.247450][T12754] ? __import_iovec+0x5f2/0x850 [ 424.252301][T12754] ? import_iovec+0x73/0xa0 [ 424.256817][T12754] ___sys_sendmsg+0x2a6/0x360 [ 424.261502][T12754] ? __sys_sendmsg+0x2b0/0x2b0 [ 424.266285][T12754] ? ktime_get+0x7f/0x280 [ 424.270672][T12754] __se_sys_sendmsg+0x1d0/0x2c0 [ 424.275517][T12754] ? perf_trace_preemptirq_template+0x269/0x330 [ 424.281757][T12754] ? __x64_sys_sendmsg+0x80/0x80 [ 424.286698][T12754] ? lockdep_hardirqs_on+0x98/0x150 [ 424.291888][T12754] do_syscall_64+0x55/0xb0 [ 424.296295][T12754] ? clear_bhb_loop+0x40/0x90 [ 424.300975][T12754] ? clear_bhb_loop+0x40/0x90 [ 424.305665][T12754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.311562][T12754] RIP: 0033:0x7f452339fb19 [ 424.315981][T12754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.335607][T12754] RSP: 002b:00007f45241f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.344030][T12754] RAX: ffffffffffffffda RBX: 00007f4523625fa0 RCX: 00007f452339fb19 [ 424.351999][T12754] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 000000000000000a [ 424.359962][T12754] RBP: 00007f45241f7090 R08: 0000000000000000 R09: 0000000000000000 [ 424.367930][T12754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.375894][T12754] R13: 00007f4523626038 R14: 00007f4523625fa0 R15: 00007ffda9f97598 [ 424.383870][T12754] [ 424.620541][T12777] FAULT_INJECTION: forcing a failure. [ 424.620541][T12777] name failslab, interval 1, probability 0, space 0, times 0 [ 424.635309][T12777] CPU: 1 PID: 12777 Comm: syz.1.2265 Not tainted syzkaller #0 [ 424.642810][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 424.652895][T12777] Call Trace: [ 424.656201][T12777] [ 424.659147][T12777] dump_stack_lvl+0x18c/0x250 [ 424.663857][T12777] ? sctp_sendmsg+0x1519/0x27b0 [ 424.668721][T12777] ? ___sys_sendmsg+0x2a6/0x360 [ 424.673579][T12777] ? show_regs_print_info+0x20/0x20 [ 424.678782][T12777] ? load_image+0x420/0x420 [ 424.683295][T12777] should_fail_ex+0x394/0x4c0 [ 424.687976][T12777] should_failslab+0x9/0x20 [ 424.692478][T12777] slab_pre_alloc_hook+0x59/0x300 [ 424.697514][T12777] ? sctp_add_bind_addr+0x8c/0x360 [ 424.702627][T12777] __kmem_cache_alloc_node+0x53/0x260 [ 424.708001][T12777] ? sctp_add_bind_addr+0x8c/0x360 [ 424.713142][T12777] kmalloc_trace+0x2a/0xe0 [ 424.717588][T12777] sctp_add_bind_addr+0x8c/0x360 [ 424.722546][T12777] sctp_copy_local_addr_list+0x31b/0x4e0 [ 424.728190][T12777] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 424.733912][T12777] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 424.739980][T12777] ? sctp_v4_is_any+0x35/0x60 [ 424.744655][T12777] ? sctp_copy_one_addr+0x8c/0x350 [ 424.749771][T12777] sctp_bind_addr_copy+0xb3/0x3c0 [ 424.754799][T12777] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 424.761131][T12777] sctp_connect_new_asoc+0x2f9/0x6a0 [ 424.766423][T12777] ? __sctp_connect+0xd80/0xd80 [ 424.771305][T12777] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 424.776872][T12777] ? security_sctp_bind_connect+0x89/0xb0 [ 424.782623][T12777] sctp_sendmsg+0x1519/0x27b0 [ 424.787341][T12777] ? sctp_getsockopt+0xb60/0xb60 [ 424.792287][T12777] ? aa_sk_perm+0x7bb/0x8e0 [ 424.796801][T12777] ? aa_af_perm+0x330/0x330 [ 424.801301][T12777] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 424.807734][T12777] ? sock_rps_record_flow+0x19/0x3f0 [ 424.813029][T12777] ? inet_sendmsg+0xce/0x2a0 [ 424.817619][T12777] ? inet_send_prepare+0x250/0x250 [ 424.822732][T12777] ____sys_sendmsg+0x61b/0x980 [ 424.827508][T12777] ? __asan_memset+0x22/0x40 [ 424.832107][T12777] ? __sys_sendmsg_sock+0x30/0x30 [ 424.837128][T12777] ? __import_iovec+0x5f2/0x850 [ 424.841983][T12777] ? import_iovec+0x73/0xa0 [ 424.846489][T12777] ___sys_sendmsg+0x2a6/0x360 [ 424.851165][T12777] ? get_pid_task+0x20/0x1e0 [ 424.855761][T12777] ? __sys_sendmsg+0x2b0/0x2b0 [ 424.860537][T12777] ? __lock_acquire+0x7eb0/0x7eb0 [ 424.865585][T12777] __se_sys_sendmsg+0x1d0/0x2c0 [ 424.870439][T12777] ? __x64_sys_sendmsg+0x80/0x80 [ 424.875385][T12777] ? syscall_enter_from_user_mode+0x2e/0x80 [ 424.881368][T12777] do_syscall_64+0x55/0xb0 [ 424.885801][T12777] ? clear_bhb_loop+0x40/0x90 [ 424.890490][T12777] ? clear_bhb_loop+0x40/0x90 [ 424.895169][T12777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.901062][T12777] RIP: 0033:0x7f42f3d9fb19 [ 424.905481][T12777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.925120][T12777] RSP: 002b:00007f42f4d2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.933535][T12777] RAX: ffffffffffffffda RBX: 00007f42f4025fa0 RCX: 00007f42f3d9fb19 [ 424.941502][T12777] RDX: 0000000004000040 RSI: 00002000000010c0 RDI: 0000000000000006 [ 424.949473][T12777] RBP: 00007f42f4d2c090 R08: 0000000000000000 R09: 0000000000000000 [ 424.957473][T12777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 424.965440][T12777] R13: 00007f42f4026038 R14: 00007f42f4025fa0 R15: 00007fff4e099ea8 [ 424.973427][T12777] [ 426.693485][T12783] validate_nla: 1 callbacks suppressed [ 426.693571][T12783] netlink: 'syz.3.2267': attribute type 10 has an invalid length. [ 426.827539][T12783] bond0: (slave netdevsim0): Releasing backup interface [ 426.861160][T12783] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 426.884163][T12783] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 426.909023][T12783] team0: Port device netdevsim0 added [ 426.939974][T12797] netlink: 'syz.3.2267': attribute type 10 has an invalid length. [ 426.949793][T12797] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 426.957424][T12797] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 426.973070][T12797] team0: Port device netdevsim0 removed [ 426.983152][T12797] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 428.439322][T12817] netlink: 'syz.3.2278': attribute type 10 has an invalid length. [ 428.513839][T12826] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2283'. [ 428.536962][T12817] bond0: (slave netdevsim0): Releasing backup interface [ 428.613825][T12817] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 428.625347][T12817] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 428.649988][T12817] team0: Port device netdevsim0 added [ 428.661216][T12822] netlink: 'syz.3.2278': attribute type 10 has an invalid length. [ 428.670877][T12822] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 428.691693][T12822] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 428.722840][T12822] team0: Port device netdevsim0 removed [ 428.738892][T12822] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 428.973938][T12843] netlink: 'syz.2.2287': attribute type 10 has an invalid length. [ 429.001245][T12843] bond0: (slave netdevsim0): Releasing backup interface [ 429.013346][T12843] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 429.021097][T12843] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 429.030139][T12843] team0: Port device netdevsim0 added [ 429.080619][T12838] netlink: 'syz.2.2287': attribute type 10 has an invalid length. [ 429.116778][T12838] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 429.127881][T12838] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 429.248697][T12838] team0: Port device netdevsim0 removed [ 429.301589][T12838] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 429.784234][T12866] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2299'. [ 429.889983][T12877] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2302'. [ 430.007307][T12883] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2306'. [ 430.163989][T12887] FAULT_INJECTION: forcing a failure. [ 430.163989][T12887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.190755][T12887] CPU: 1 PID: 12887 Comm: syz.1.2307 Not tainted syzkaller #0 [ 430.198292][T12887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 430.208361][T12887] Call Trace: [ 430.211657][T12887] [ 430.214599][T12887] dump_stack_lvl+0x18c/0x250 [ 430.219302][T12887] ? show_regs_print_info+0x20/0x20 [ 430.224518][T12887] ? load_image+0x420/0x420 [ 430.229044][T12887] ? __might_fault+0xaa/0x120 [ 430.233739][T12887] ? __lock_acquire+0x7eb0/0x7eb0 [ 430.238803][T12887] should_fail_ex+0x394/0x4c0 [ 430.243508][T12887] _copy_to_user+0x2f/0xa0 [ 430.247941][T12887] bpf_test_finish+0x4e7/0x650 [ 430.252736][T12887] ? bpf_test_run+0x174/0x870 [ 430.257441][T12887] ? convert_skb_to___skb+0x420/0x420 [ 430.262850][T12887] ? slab_build_skb+0x25a/0x3e0 [ 430.267727][T12887] bpf_prog_test_run_skb+0x1135/0x18f0 [ 430.273259][T12887] ? cpu_online+0x60/0x60 [ 430.277612][T12887] bpf_prog_test_run+0x31f/0x390 [ 430.282574][T12887] __sys_bpf+0x49d/0x890 [ 430.286836][T12887] ? read_tsc+0x9/0x20 [ 430.290929][T12887] ? bpf_link_show_fdinfo+0x560/0x560 [ 430.296351][T12887] ? lock_chain_count+0x20/0x20 [ 430.301235][T12887] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 430.307256][T12887] __x64_sys_bpf+0x7c/0x90 [ 430.311691][T12887] do_syscall_64+0x55/0xb0 [ 430.316124][T12887] ? clear_bhb_loop+0x40/0x90 [ 430.320815][T12887] ? clear_bhb_loop+0x40/0x90 [ 430.325514][T12887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.331424][T12887] RIP: 0033:0x7f42f3d9fb19 [ 430.335859][T12887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.355490][T12887] RSP: 002b:00007f42f4d2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 430.363924][T12887] RAX: ffffffffffffffda RBX: 00007f42f4025fa0 RCX: 00007f42f3d9fb19 [ 430.371909][T12887] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 430.379893][T12887] RBP: 00007f42f4d2c090 R08: 0000000000000000 R09: 0000000000000000 [ 430.387875][T12887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.395860][T12887] R13: 00007f42f4026038 R14: 00007f42f4025fa0 R15: 00007fff4e099ea8 [ 430.403882][T12887] [ 430.443433][ T5792] Bluetooth: hci3: unexpected event 0x10 length: 15 > 1 [ 430.444858][ T5790] Bluetooth: hci3: hardware error 0x00 [ 430.773749][T12901] netlink: 'syz.0.2313': attribute type 6 has an invalid length. [ 430.781788][T12901] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2313'. [ 430.795980][T12901] netlink: 'syz.0.2313': attribute type 13 has an invalid length. [ 431.145678][T12911] netlink: 'syz.3.2318': attribute type 10 has an invalid length. [ 432.403453][T12911] bond0: (slave netdevsim0): Releasing backup interface [ 432.443265][T12911] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 432.453272][T12911] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 432.467969][T12911] team0: Port device netdevsim0 added [ 432.477396][T12917] netlink: 'syz.3.2318': attribute type 10 has an invalid length. [ 432.481552][ T5790] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 432.487592][T12917] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 432.499007][T12917] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 432.515871][T12917] team0: Port device netdevsim0 removed [ 432.523668][T12917] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 435.836109][T12934] netlink: 'syz.1.2325': attribute type 21 has an invalid length. [ 435.845144][T12934] netlink: 'syz.1.2325': attribute type 1 has an invalid length. [ 435.862448][T12934] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2325'. [ 435.886389][T12938] netlink: 'syz.0.2332': attribute type 1 has an invalid length. [ 435.898411][T12934] netlink: 'syz.1.2325': attribute type 21 has an invalid length. [ 436.334330][T12945] netlink: 'syz.0.2328': attribute type 10 has an invalid length. [ 436.420851][T12945] bond0: (slave netdevsim0): Releasing backup interface [ 436.505519][T12945] team0: Port device netdevsim0 added [ 436.527024][T12950] netlink: 'syz.0.2328': attribute type 10 has an invalid length. [ 436.545892][T12950] team0: Port device netdevsim0 removed [ 436.575417][T12950] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 436.910084][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 436.925199][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 436.939867][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 436.949862][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 436.959332][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 436.977839][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 439.051104][ T5790] Bluetooth: hci1: command tx timeout [ 439.912596][T12967] netlink: 'syz.3.2337': attribute type 1 has an invalid length. [ 440.049903][T12975] netlink: 'syz.2.2338': attribute type 10 has an invalid length. [ 440.066795][T12975] bond0: (slave netdevsim0): Releasing backup interface [ 440.077251][T12975] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 440.085017][T12975] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 440.093352][T12975] team0: Port device netdevsim0 added [ 440.099355][T12976] netlink: 'syz.2.2338': attribute type 10 has an invalid length. [ 440.107774][T12976] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 440.115323][T12976] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 440.139302][T12976] team0: Port device netdevsim0 removed [ 440.151283][T12976] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 440.326155][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.341286][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.121712][ T5790] Bluetooth: hci1: command tx timeout [ 443.195394][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.217657][ T5790] Bluetooth: hci1: command tx timeout [ 443.241412][T12960] rxe_eth0 speed is unknown, defaulting to 1000 [ 443.379741][T12983] netlink: 'syz.3.2339': attribute type 10 has an invalid length. [ 443.412373][T12983] bond0: (slave netdevsim0): Releasing backup interface [ 443.422718][T12983] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 443.430242][T12983] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 443.448644][T12983] team0: Port device netdevsim0 added [ 443.470067][T12985] netlink: 'syz.3.2339': attribute type 10 has an invalid length. [ 443.491828][T12985] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 443.499233][T12985] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 443.525678][T12985] team0: Port device netdevsim0 removed [ 443.540371][T12985] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 443.588138][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.680604][T12994] netlink: 'syz.2.2344': attribute type 29 has an invalid length. [ 443.693542][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.720039][T12994] netlink: 'syz.2.2344': attribute type 29 has an invalid length. [ 443.796621][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 443.808935][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 443.831952][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 443.843496][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.149708][T13007] netlink: 'syz.2.2347': attribute type 1 has an invalid length. [ 444.230954][T12960] chnl_net:caif_netlink_parms(): no params data found [ 445.281500][ T5790] Bluetooth: hci1: command tx timeout [ 447.322755][T13024] netlink: 'syz.3.2350': attribute type 10 has an invalid length. [ 447.343952][T13024] bond0: (slave netdevsim0): Releasing backup interface [ 447.357403][T13024] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 447.367999][T13024] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 447.378846][T13024] team0: Port device netdevsim0 added [ 447.388680][T13025] netlink: 'syz.3.2350': attribute type 10 has an invalid length. [ 447.399682][T13025] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 447.410326][T13025] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 447.430384][T13025] team0: Port device netdevsim0 removed [ 447.439250][T13025] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 447.450218][T13028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2351'. [ 447.716937][T12960] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.740952][T12960] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.757231][T12960] bridge_slave_0: entered allmulticast mode [ 447.773029][T12960] bridge_slave_0: entered promiscuous mode [ 447.869193][T12960] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.890041][T12960] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.912770][T12960] bridge_slave_1: entered allmulticast mode [ 447.937055][T12960] bridge_slave_1: entered promiscuous mode [ 447.968794][T13056] netlink: 'syz.2.2359': attribute type 1 has an invalid length. [ 448.006868][T13056] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2359'. [ 448.170877][T13053] €Â0: renamed from pim6reg1 [ 448.196118][T13063] netlink: 'syz.0.2364': attribute type 9 has an invalid length. [ 448.226823][T13063] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2364'. [ 448.229878][T12960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.257569][T12960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.513540][T12960] team0: Port device team_slave_0 added [ 448.529505][T12960] team0: Port device team_slave_1 added [ 448.581882][T13046] netlink: 'syz.0.2364': attribute type 9 has an invalid length. [ 448.589896][T13046] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2364'. [ 448.705409][T12960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.712654][T12960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.741365][T12960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.766782][T13085] netlink: 'syz.2.2363': attribute type 10 has an invalid length. [ 448.780438][T13085] bond0: (slave netdevsim0): Releasing backup interface [ 448.794101][T13085] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 448.802581][T13085] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 448.810548][T13085] team0: Port device netdevsim0 added [ 448.837275][T12960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.849543][T12960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.877049][T12960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.896093][T13081] netlink: 'syz.2.2363': attribute type 10 has an invalid length. [ 448.910392][T13081] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 448.937356][T13081] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 448.990818][T13081] team0: Port device netdevsim0 removed [ 449.014385][T13081] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 449.074164][T12960] hsr_slave_0: entered promiscuous mode [ 449.080475][T12960] hsr_slave_1: entered promiscuous mode [ 449.088356][T12960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.096000][T12960] Cannot create hsr debugfs directory [ 449.816360][T12960] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 449.826740][T12960] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 449.852616][T12960] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 449.895333][T12960] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 450.050360][ T11] hsr_slave_0: left promiscuous mode [ 450.056508][ T11] hsr_slave_1: left promiscuous mode [ 450.065001][ T11] dummy0: left allmulticast mode [ 450.070385][ T11] bridge0: port 5(dummy0) entered disabled state [ 450.080103][ T11] bridge0: port 4(hsr0) entered disabled state [ 450.088053][ T11] bridge0: port 3(team0) entered disabled state [ 450.096029][ T11] bridge_slave_0: left allmulticast mode [ 450.101976][ T11] bridge_slave_0: left promiscuous mode [ 450.107634][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.452820][ T11] team_slave_1 (unregistering): left promiscuous mode [ 450.460012][ T11] team_slave_1 (unregistering): left allmulticast mode [ 450.479769][ T11] team0 (unregistering): Port device team_slave_1 removed [ 450.557858][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.582144][ T11] bond_slave_1 (unregistering): left promiscuous mode [ 450.588959][ T11] bond_slave_1 (unregistering): left allmulticast mode [ 450.668898][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.680036][ T11] bond_slave_0 (unregistering): left promiscuous mode [ 450.691717][ T11] bond_slave_0 (unregistering): left allmulticast mode [ 450.748653][ T11] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 450.760196][ T11] bridge_slave_1 (unregistering): left promiscuous mode [ 450.768674][ T11] bridge_slave_1 (unregistering): left allmulticast mode [ 451.086138][ T11] bond0 (unregistering): left promiscuous mode [ 451.095022][ T11] team0 (unregistering): Port device bond0 removed [ 451.126131][ T11] bond0 (unregistering): Released all slaves [ 451.198695][T12960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.224639][T12960] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.253776][ T8027] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.260951][ T8027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.271194][ T8027] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.278403][ T8027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.364917][T12960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.732719][T12960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.819754][T12960] veth0_vlan: entered promiscuous mode [ 451.845374][T12960] veth1_vlan: entered promiscuous mode [ 451.893812][T12960] veth0_macvtap: entered promiscuous mode [ 451.909646][T12960] veth1_macvtap: entered promiscuous mode [ 451.954337][T12960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.980190][T12960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.990991][T12960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.002197][T12960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.014666][T12960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.028060][T12960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.044894][T12960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.055240][T12960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.071369][T12960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.081241][T12960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.111407][T12960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.133052][T12960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.160628][T12960] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.172956][T12960] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.188287][T12960] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.210773][T12960] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.328590][ T2950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.358142][ T2950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.403970][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.431567][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 Stopping sshd: stopped /usr/sbin/sshd (pid 5536) OK Stopping crond: stopped /usr/sbin/crond (pid 5521) OK [ 453.703688][T13157] netlink: 'syz.0.2376': attribute type 10 has an invalid length. [ 453.718244][T13157] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2376'. Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5446) Stopping network: [ 455.797660][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 455.807565][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 455.825437][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 455.850411][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 455.860934][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 455.868562][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.949806][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 OK [ 456.167642][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Stopping iptables: [ 456.216482][T13221] rxe_eth0 speed is unknown, defaulting to 1000 [ 456.333727][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 OK Stopping system message bus: [ 456.606940][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 456.632872][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.717016][T13249] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2391'. done [ 457.732990][T13221] chnl_net:caif_netlink_parms(): no params data found [ 457.932712][ T5790] Bluetooth: hci0: command tx timeout [ 458.125151][T13293] netlink: 'syz.3.2399': attribute type 10 has an invalid length. [ 458.158892][T13293] bond0: (slave netdevsim0): Releasing backup interface [ 458.185302][T13293] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 458.209181][T13293] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 458.229856][T13293] team0: Port device netdevsim0 added [ 458.246174][T13278] netlink: 'syz.3.2399': attribute type 10 has an invalid length. [ 458.280275][T13278] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 458.324218][T13278] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 458.417541][T13278] team0: Port device netdevsim0 removed [ 458.485572][T13278] bond0: (slave netdevsim0): Enslaving as an active interface with an up link Stopping klogd: OK Stopping acpid: [ 460.011505][ T5790] Bluetooth: hci0: command tx timeout OK Stopping syslogd: stopped /sbin/syslogd (pid 5134) OK umount: can't remount debugfs read-only [ 461.260881][T13221] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.336566][T13221] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.363798][T13221] bridge_slave_0: entered allmulticast mode [ 461.395118][T13221] bridge_slave_0: entered promiscuous mode [ 461.474922][T13221] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.522031][T13221] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.530474][T13221] bridge_slave_1: entered allmulticast mode [ 461.556176][T13221] bridge_slave_1: entered promiscuous mode [ 461.576979][T13335] netlink: 'syz.1.2408': attribute type 10 has an invalid length. [ 461.593140][T13335] macvlan0: entered promiscuous mode [ 461.600152][T13335] macvlan0: entered allmulticast mode [ 461.626037][T13335] veth1_vlan: entered allmulticast mode [ 461.759988][T13341] netlink: 'syz.3.2409': attribute type 10 has an invalid length. [ 461.858702][T13341] bridge0: port 5(dummy0) entered disabled state [ 461.930702][T13341] dummy0: left allmulticast mode [ 461.997015][T13341] dummy0: left promiscuous mode [ 462.025096][T13341] bridge0: port 5(dummy0) entered disabled state [ 462.066094][T13341] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 462.082408][ T5790] Bluetooth: hci0: command tx timeout [ 462.206955][T13346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.256871][T13346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.268434][T13346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.286052][T13346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.326741][T13346] batadv0 (unregistering): left promiscuous mode [ 462.338189][T13346] batadv0 (unregistering): left allmulticast mode [ 462.358293][T13346] team0: Port device batadv0 removed umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only [ 462.423929][T13351] netlink: 'syz.2.2411': attribute type 10 has an invalid length. umount: can't remount /dev/root read-only [ 462.451000][T13351] bond0: (slave netdevsim0): Releasing backup interface The system is going down NOW! Sent SIGTERM to all processes [ 462.508712][T13351] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 462.516629][T13351] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 462.540849][T13351] team0: Port device netdevsim0 added Connection to 10.128.0.224 closed by remote host. [ 462.584719][T13352] netlink: 'syz.2.2411': attribute type 10 has an invalid length. [ 462.598331][T13352] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 462.605687][T13352] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 462.678745][T13352] team0: Port device netdevsim0 removed [ 462.704485][T13352] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 462.747630][T13221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link Sent SIGKILL to all processes Requesting system poweroff [ 464.123642][ T11] hsr_slave_0: left promiscuous mode [ 464.130035][ T11] hsr_slave_1: left promiscuous mode [ 464.144776][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.152329][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.160474][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.168729][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.176662][ T11] bridge0: port 5(dummy0) entered disabled state [ 464.185264][ T11] hsr0: left allmulticast mode [ 464.190150][ T11] bridge0: port 4(hsr0) entered disabled state [ 464.197638][ T11] batadv0: left allmulticast mode [ 464.202871][ T11] batadv0: left promiscuous mode [ 464.207915][ T11] bridge0: port 3(batadv0) entered disabled state [ 464.218056][ T11] bridge_slave_1: left allmulticast mode [ 464.223795][ T11] bridge_slave_1: left promiscuous mode [ 464.229456][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.238837][ T11] bridge_slave_0: left allmulticast mode [ 464.244779][ T11] bridge_slave_0: left promiscuous mode [ 464.250419][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.565517][ T11] team0 (unregistering): Port device team_slave_1 removed [ 464.609188][ T11] team0 (unregistering): Port device team_slave_0 removed [ 464.618625][T13354] smc: removing ib device rxe0 [ 464.653214][T13354] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 464.674022][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.696153][T13354] ACPI: PM: Preparing to enter system sleep state S5 [ 464.708832][T13354] kvm: exiting hardware virtualization [ 464.728437][T13354] reboot: Power down [ 464.767316][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface serialport: VM disconnected.