last executing test programs: 5.253093709s ago: executing program 1 (id=3462): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$sock(r0, 0x0, 0x4804) 5.043471076s ago: executing program 1 (id=3464): r0 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x2, 0x3, 0xb, 0x9, 0xfffffffffffffffc, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{0x0}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x2000000000000000) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/N'], 0x6a) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r8, 0x29, 0x15, &(0x7f0000000100), 0x3d) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8) 4.62389661s ago: executing program 2 (id=3467): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r0 = socket$kcm(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fad182c2f87bea1d6c54740f190c852a8a89e1e3"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_config_ext={0x1, 0x5}, 0x114905, 0x4, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x1f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4044000) sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) r4 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x500, &(0x7f00000008c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f6", 0x3e}, {0x0}, {&(0x7f0000000940)="f29f018d228c8f30c27a68d59eceb2d42eb070e58d9797cb6468453773af070be696d11f683713e2156c5e3f5c62889216487d9e894b766e6e1e500cca3ffd61dc60f035ac3c504ceb804b73d26dcca0ca80ad6f362affdd59087b33e26f3177b6cd914d7f2446155f1e972483f6e20347f724aa75358aaa11bd77bac437052f658ef1c9", 0x84}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x40000) 4.62317956s ago: executing program 1 (id=3468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe"], 0xfdef) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x1000}) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000040)) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10500c00", 0x2e}], 0x1}, 0x0) 4.458733096s ago: executing program 2 (id=3472): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16=r0], 0xffdd) 4.110032147s ago: executing program 3 (id=3474): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xd, &(0x7f0000000040)=[{&(0x7f00000004c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1}, 0x0) (fail_nth: 6) 2.712978612s ago: executing program 0 (id=3480): socket$kcm(0x2, 0x3, 0x106) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030025000b12d25a80648c2594f90224fc60100c034002bf0900053582c137153e370248078000f01700d1", 0x2d}], 0x1}, 0x600300) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x10140) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x0, 0x10000, 0x0, 0x2, 0x582, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x4008040) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000001c0)=r2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) socketpair(0x2c, 0x800, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba", 0x29}], 0x1, 0x0, 0x0, 0x3000000}, 0x24000000) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffff7}}, @ip_retopts={{0x74, 0x0, 0x7, {[@cipso={0x86, 0x48, 0x0, [{0x6, 0xe, "911d004d305440ef3601f031"}, {0x1, 0xe, "e77542ca5b05ecdc5e4914bd"}, {0x0, 0x8, "b47dcba1f02f"}, {0x1, 0x5, "2bcccc"}, {0x2, 0x12, "3115ab2e8fc397767cd819e61b8267fe"}, {0x0, 0x7, "02fb0db26e"}]}, @rr={0x7, 0x13, 0x11, [@multicast1, @local, @empty, @dev={0xac, 0x14, 0x14, 0x2f}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}], 0x90}, 0x4000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90224fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000240)=r3, 0x4) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 2.571672896s ago: executing program 0 (id=3481): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f8d90000004f0c0400010000000062d95800000000000101871edd0000a69d35a2ff7f4708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a0300", 0x4c}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB="0000000000000000000040000080000000008f45", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469de", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(r3) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001480)={@cgroup, 0x34, 0x0, 0xfffffffa, &(0x7f00000010c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0], 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="0000000000000000000000c300", @ANYRES32=r4, @ANYBLOB, @ANYRES64=r5], 0x20) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000000)=@phonet={0x23, 0x14, 0xc, 0xc0}, 0x80, 0x0}, 0x2400c019) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000008c0)="d80000001a0081024e81f782db4cb904021d0800fe0055a11500150002f3102ae81dba4e3000142603600e12080009007a010401a8041600200002400400027c035c0461c1d6ff6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941000000000000000000", 0xd9}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000014c0)) 1.391533525s ago: executing program 3 (id=3482): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xd, &(0x7f0000000040)=[{&(0x7f00000004c0)="2e00000001008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1}, 0x0) 1.390618035s ago: executing program 0 (id=3483): sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) 1.328242516s ago: executing program 1 (id=3484): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x2}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1c}, 0x40, 0x0, 0x0, 0x4, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001040)="f2", 0x1}], 0x1}, 0x40084) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) 1.312341107s ago: executing program 2 (id=3485): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r1], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r1}) 1.302331308s ago: executing program 3 (id=3486): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0xa}, {0x10, 0x110, 0x2}], 0x20}, 0xfc40) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x25, 0x2, 0x8, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/time\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 1.009502877s ago: executing program 2 (id=3487): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) 1.008464307s ago: executing program 3 (id=3488): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000780)='syz1\x00', 0x1ff) r1 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000240)="1ff517f6fc2504005eafd70988ca", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 4) 488.886924ms ago: executing program 2 (id=3489): socket$kcm(0x2, 0x3, 0x106) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030025000b12d25a80648c2594f90224fc60100c034002bf0900053582c137153e370248078000f01700d1", 0x2d}], 0x1}, 0x600300) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x10140) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x0, 0x10000, 0x0, 0x2, 0x582, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x4008040) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000001c0)=r2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) socketpair(0x2c, 0x800, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba800000", 0x2c}], 0x1, 0x0, 0x0, 0x3000000}, 0x24000000) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffff7}}, @ip_retopts={{0x74, 0x0, 0x7, {[@cipso={0x86, 0x48, 0x0, [{0x6, 0xe, "911d004d305440ef3601f031"}, {0x1, 0xe, "e77542ca5b05ecdc5e4914bd"}, {0x0, 0x8, "b47dcba1f02f"}, {0x1, 0x5, "2bcccc"}, {0x2, 0x12, "3115ab2e8fc397767cd819e61b8267fe"}, {0x0, 0x7, "02fb0db26e"}]}, @rr={0x7, 0x13, 0x11, [@multicast1, @local, @empty, @dev={0xac, 0x14, 0x14, 0x2f}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}], 0x90}, 0x4000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90224fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000240)=r3, 0x4) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 432.497146ms ago: executing program 3 (id=3490): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x16, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x9) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 361.780788ms ago: executing program 0 (id=3491): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) sendmsg$sock(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c937452515eae867806", 0x2a}], 0x1}, 0x4804) 281.778561ms ago: executing program 1 (id=3492): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f8d90000004f0c0400010000000062d95800000000000101871edd0000a69d35a2ff7f4708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a0300", 0x4c}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB="0000000000000000000040000080000000008f45", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469de", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f884c1fa9f46b3472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a39a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0) close(r3) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001480)={@cgroup, 0x34, 0x0, 0xfffffffa, &(0x7f00000010c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0], 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="0000000000000000000000c300", @ANYRES32=r4, @ANYBLOB, @ANYRES64=r5], 0x20) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000000)=@phonet={0x23, 0x14, 0xc, 0xc0}, 0x80, 0x0}, 0x2400c019) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000008c0)="d80000001a0081024e81f782db4cb904021d0800fe0055a11500150002f3102ae81dba4e3000142603600e12080009007a010401a8041600200002400400027c035c0461c1d6ff6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941000000000000000000", 0xd9}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000014c0)) 216.485263ms ago: executing program 0 (id=3493): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16=r0], 0xffdd) 203.145723ms ago: executing program 2 (id=3494): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x6}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) write$cgroup_pid(r4, &(0x7f0000002a80), 0x12) 191.447344ms ago: executing program 3 (id=3495): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x8000}, 0x114905, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x6, 0xfffffffffffffffc, 0x0, 0x2e, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8002, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0xf, 0x5, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000800000000000", @ANYRES32=0x1, @ANYBLOB="0400"/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000200"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), 0x0}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x6, 0x242b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x69d27239}, 0xa000, 0x7, 0x43a1bd73, 0x7, 0x9, 0x658, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x1) sendmsg$inet(r1, 0x0, 0x4080) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0xa, &(0x7f0000000040), 0x4) socket$kcm(0x2, 0x3, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f0f3000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00ff0ee60000bf250000000000002d35f3ff000000006507000002080000070700004c0000003e75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2726f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfda047bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded527a0bfe5504eb355cb0000000000000073be27152effbed9ed6a4e8f9c55a2ff11245f2c20856d491b80d749cf8917dbe01cc6c7b747923621bb16efb2025d19a1a27b0348135e32e442da8f26e05283ece8ad92c77f8141c7a2037380f28c9c638ee0151f4620b9b64185db0321a4e809a5438cdef28f7adac1735a50006fbae20d0930b55f0081db6fa0d14024cefa1611ef384de38787324bfb9f79a1e164c8fe80a2d9e4199960"], &(0x7f0000000100)='GPL\x00'}, 0x27) 11.626509ms ago: executing program 1 (id=3496): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2c0000000}, 0x115905, 0x4, 0x0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="d8000000100081044e81f782db44b904021d08390b000000000000a1260015000600142603600e1209002100ff000401a80016000400144006000300036010faf9d113fe5c0461c1d67f6f94007134c76ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f877573bda0b18f92590d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9acbb1086de373d809d5e1cace81ed0bffece0b42a9ecbee5de6ccbb0dd6e4ed", 0xd8}], 0x1}, 0x4004084) (fail_nth: 4) 0s ago: executing program 0 (id=3497): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$sock(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)}, 0x4804) kernel console output (not intermixed with test programs): : 002b:00007f6dddf37fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 632.061551][T13587] RAX: ffffffffffffffda RBX: 00007f6dddf386c0 RCX: 00007f6ddcf5d68e [ 632.069591][T13587] RDX: 000000000000000f RSI: 00007f6dddf380a0 RDI: 0000000000000005 [ 632.077645][T13587] RBP: 00007f6dddf38090 R08: 0000000000000000 R09: 0000000000000000 [ 632.085675][T13587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.093711][T13587] R13: 00007f6ddd216038 R14: 00007f6ddd215fa0 R15: 00007ffdec613488 [ 632.101775][T13587] [ 632.432482][T13590] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 632.834639][T13598] netlink: 'syz.3.2539': attribute type 10 has an invalid length. [ 632.913220][T13598] bond0: (slave team0): Releasing backup interface [ 632.959627][T13598] team0 (unregistering): Port device team_slave_0 removed [ 633.000723][T13598] team0 (unregistering): Port device team_slave_1 removed [ 633.192573][T13608] netlink: 'syz.0.2543': attribute type 10 has an invalid length. [ 633.373667][T13611] netlink: 'syz.0.2543': attribute type 11 has an invalid length. [ 633.397560][T13611] netlink: 126292 bytes leftover after parsing attributes in process `syz.0.2543'. [ 633.421068][T13608] team0: Device wg1 is of different type [ 633.738117][T13608] syz.0.2543 (13608) used greatest stack depth: 17896 bytes left [ 634.017862][T13638] netlink: 'syz.2.2554': attribute type 10 has an invalid length. [ 634.149641][T13638] bond0: (slave team0): Releasing backup interface [ 634.210326][T13638] team0 (unregistering): Port device team_slave_0 removed [ 634.256318][T13638] team0 (unregistering): Port device team_slave_1 removed [ 634.421120][T13650] FAULT_INJECTION: forcing a failure. [ 634.421120][T13650] name failslab, interval 1, probability 0, space 0, times 0 [ 634.434022][T13650] CPU: 1 PID: 13650 Comm: syz.1.2560 Not tainted syzkaller #0 [ 634.441534][T13650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 634.451636][T13650] Call Trace: [ 634.454963][T13650] [ 634.457937][T13650] dump_stack_lvl+0x18c/0x250 [ 634.462672][T13650] ? show_regs_print_info+0x20/0x20 [ 634.467920][T13650] ? load_image+0x420/0x420 [ 634.472493][T13650] ? __lock_acquire+0x7d40/0x7d40 [ 634.477572][T13650] should_fail_ex+0x39d/0x4d0 [ 634.482344][T13650] should_failslab+0x9/0x20 [ 634.486900][T13650] slab_pre_alloc_hook+0x59/0x310 [ 634.491985][T13650] ? apparmor_sk_alloc_security+0x77/0x100 [ 634.497852][T13650] __kmem_cache_alloc_node+0x53/0x250 [ 634.503282][T13650] ? apparmor_sk_alloc_security+0x77/0x100 [ 634.509148][T13650] kmalloc_trace+0x2a/0xe0 [ 634.513622][T13650] apparmor_sk_alloc_security+0x77/0x100 [ 634.519375][T13650] security_sk_alloc+0x6e/0xa0 [ 634.524204][T13650] sk_prot_alloc+0x101/0x210 [ 634.528859][T13650] sk_alloc+0x3a/0x360 [ 634.532989][T13650] inet6_create+0x7f0/0x11d0 [ 634.537638][T13650] ? inet6_create+0x83/0x11d0 [ 634.542379][T13650] __sock_create+0x4a6/0x940 [ 634.547038][T13650] mptcp_subflow_create_socket+0x10b/0xac0 [ 634.552904][T13650] ? verify_lock_unused+0x140/0x140 [ 634.558162][T13650] ? __mptcp_subflow_connect+0x1450/0x1450 [ 634.564035][T13650] ? mark_lock+0x94/0x320 [ 634.568423][T13650] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 634.574461][T13650] __mptcp_nmpc_sk+0x157/0x740 [ 634.579285][T13650] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 634.586114][T13650] ? __local_bh_enable_ip+0x13a/0x1c0 [ 634.591552][T13650] ? lockdep_hardirqs_on+0x98/0x150 [ 634.596823][T13650] ? __local_bh_enable_ip+0x13a/0x1c0 [ 634.602252][T13650] mptcp_sendmsg_fastopen+0x7f/0x4d0 [ 634.607626][T13650] mptcp_sendmsg+0x14b2/0x16d0 [ 634.612442][T13650] ? __lock_acquire+0x1273/0x7d40 [ 634.617518][T13650] ? verify_lock_unused+0x140/0x140 [ 634.622771][T13650] ? aa_sk_perm+0x83c/0x970 [ 634.627393][T13650] ? aa_af_perm+0x330/0x330 [ 634.631944][T13650] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 634.638407][T13650] ? mptcp_shutdown+0x80/0x80 [ 634.643142][T13650] ? inet6_sendmsg+0x5f/0xd0 [ 634.647781][T13650] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 634.653031][T13650] ____sys_sendmsg+0x5ba/0x960 [ 634.657853][T13650] ? __lock_acquire+0x7d40/0x7d40 [ 634.662932][T13650] ? __asan_memset+0x22/0x40 [ 634.667572][T13650] ? __sys_sendmsg_sock+0x30/0x30 [ 634.672647][T13650] ? __import_iovec+0x3fa/0x850 [ 634.677556][T13650] ? import_iovec+0x73/0xa0 [ 634.682114][T13650] ___sys_sendmsg+0x2a6/0x360 [ 634.686843][T13650] ? get_pid_task+0x20/0x1e0 [ 634.691495][T13650] ? __sys_sendmsg+0x2a0/0x2a0 [ 634.696340][T13650] ? __lock_acquire+0x7d40/0x7d40 [ 634.701441][T13650] __se_sys_sendmsg+0x1c2/0x2b0 [ 634.706351][T13650] ? __x64_sys_sendmsg+0x80/0x80 [ 634.711400][T13650] ? lockdep_hardirqs_on+0x98/0x150 [ 634.716701][T13650] do_syscall_64+0x55/0xb0 [ 634.721163][T13650] ? clear_bhb_loop+0x40/0x90 [ 634.725890][T13650] ? clear_bhb_loop+0x40/0x90 [ 634.730624][T13650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 634.736584][T13650] RIP: 0033:0x7fc4b019ce59 [ 634.741150][T13650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.760817][T13650] RSP: 002b:00007fc4b111c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.769293][T13650] RAX: ffffffffffffffda RBX: 00007fc4b0415fa0 RCX: 00007fc4b019ce59 [ 634.777326][T13650] RDX: e07e872420dfef8a RSI: 0000200000000780 RDI: 0000000000000003 [ 634.785351][T13650] RBP: 00007fc4b111c090 R08: 0000000000000000 R09: 0000000000000000 [ 634.793359][T13650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.801364][T13650] R13: 00007fc4b0416038 R14: 00007fc4b0415fa0 R15: 00007ffc4e39e218 [ 634.809386][T13650] [ 635.494915][T13679] netlink: 'syz.2.2570': attribute type 10 has an invalid length. [ 635.827355][T13683] netlink: 'syz.3.2572': attribute type 10 has an invalid length. [ 636.750293][T13709] netlink: 'syz.2.2582': attribute type 10 has an invalid length. [ 638.131764][T13742] netlink: 'syz.0.2593': attribute type 10 has an invalid length. [ 638.272437][T13742] team0 (unregistering): Port device team_slave_0 removed [ 638.300669][T13742] team0 (unregistering): Port device team_slave_1 removed [ 638.906468][T13757] netlink: 'syz.3.2598': attribute type 10 has an invalid length. [ 639.503081][T13773] netlink: 'syz.2.2605': attribute type 10 has an invalid length. [ 639.758241][T13782] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.767136][T13782] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.787695][T13782] bridge0: entered allmulticast mode [ 639.837517][T13782] bridge_slave_1: left allmulticast mode [ 639.843614][T13782] bridge_slave_1: left promiscuous mode [ 639.869024][T13782] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.880193][T13782] bridge_slave_0: left allmulticast mode [ 639.886138][T13782] bridge_slave_0: left promiscuous mode [ 639.892589][T13782] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.013018][T13787] netlink: 'syz.0.2610': attribute type 10 has an invalid length. [ 640.825875][T13800] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.834116][T13800] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.891359][T13800] bridge0: entered allmulticast mode [ 640.980366][T13803] netlink: 'syz.3.2615': attribute type 10 has an invalid length. [ 641.432101][T13811] FAULT_INJECTION: forcing a failure. [ 641.432101][T13811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.454801][T13811] CPU: 1 PID: 13811 Comm: syz.1.2619 Not tainted syzkaller #0 [ 641.462353][T13811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 641.472462][T13811] Call Trace: [ 641.475783][T13811] [ 641.478756][T13811] dump_stack_lvl+0x18c/0x250 [ 641.483506][T13811] ? show_regs_print_info+0x20/0x20 [ 641.488766][T13811] ? load_image+0x420/0x420 [ 641.493302][T13811] ? __might_fault+0xaa/0x120 [ 641.498019][T13811] ? __lock_acquire+0x7d40/0x7d40 [ 641.503134][T13811] should_fail_ex+0x39d/0x4d0 [ 641.507885][T13811] _copy_from_iter+0x1d9/0x12e0 [ 641.512788][T13811] ? __virt_addr_valid+0x18c/0x540 [ 641.517948][T13811] ? __lock_acquire+0x7d40/0x7d40 [ 641.523019][T13811] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 641.528444][T13811] ? copyout_mc+0x70/0x70 [ 641.532826][T13811] ? __virt_addr_valid+0x18c/0x540 [ 641.537986][T13811] ? __virt_addr_valid+0x18c/0x540 [ 641.543178][T13811] ? __virt_addr_valid+0x469/0x540 [ 641.548345][T13811] ? __check_object_size+0x506/0xa20 [ 641.553673][T13811] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 641.559447][T13811] ? skb_put+0x11b/0x210 [ 641.563745][T13811] tun_get_user+0x15db/0x3ca0 [ 641.568492][T13811] ? aa_file_perm+0x11b/0xee0 [ 641.573222][T13811] ? rcu_read_unlock+0xa0/0xa0 [ 641.578051][T13811] ? tun_get+0x1c/0x2e0 [ 641.582265][T13811] ? __lock_acquire+0x7d40/0x7d40 [ 641.587340][T13811] ? tun_get+0x1c/0x2e0 [ 641.591552][T13811] tun_chr_write_iter+0x119/0x200 [ 641.596636][T13811] vfs_write+0x46c/0x990 [ 641.600955][T13811] ? file_end_write+0x250/0x250 [ 641.605858][T13811] ? __fget_files+0x43d/0x4b0 [ 641.610595][T13811] ? __fdget_pos+0x1d8/0x330 [ 641.615246][T13811] ? ksys_write+0x75/0x260 [ 641.619722][T13811] ksys_write+0x150/0x260 [ 641.624108][T13811] ? __ia32_sys_read+0x90/0x90 [ 641.628984][T13811] ? lockdep_hardirqs_on+0x98/0x150 [ 641.634260][T13811] do_syscall_64+0x55/0xb0 [ 641.638732][T13811] ? clear_bhb_loop+0x40/0x90 [ 641.643455][T13811] ? clear_bhb_loop+0x40/0x90 [ 641.648173][T13811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.654562][T13811] RIP: 0033:0x7fc4b019ce59 [ 641.659027][T13811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.678692][T13811] RSP: 002b:00007fc4b111c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 641.687162][T13811] RAX: ffffffffffffffda RBX: 00007fc4b0415fa0 RCX: 00007fc4b019ce59 [ 641.695193][T13811] RDX: 000000000000ffdd RSI: 0000200000000140 RDI: 0000000000000003 [ 641.703216][T13811] RBP: 00007fc4b111c090 R08: 0000000000000000 R09: 0000000000000000 [ 641.711240][T13811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.719263][T13811] R13: 00007fc4b0416038 R14: 00007fc4b0415fa0 R15: 00007ffc4e39e218 [ 641.727300][T13811] [ 641.910080][T13819] netlink: 'syz.1.2622': attribute type 10 has an invalid length. [ 642.419178][T13829] netlink: 'syz.2.2625': attribute type 10 has an invalid length. [ 642.647625][T13833] FAULT_INJECTION: forcing a failure. [ 642.647625][T13833] name failslab, interval 1, probability 0, space 0, times 0 [ 642.671207][T13833] CPU: 1 PID: 13833 Comm: syz.2.2626 Not tainted syzkaller #0 [ 642.678776][T13833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 642.688873][T13833] Call Trace: [ 642.692162][T13833] [ 642.695106][T13833] dump_stack_lvl+0x18c/0x250 [ 642.699839][T13833] ? show_regs_print_info+0x20/0x20 [ 642.705066][T13833] ? load_image+0x420/0x420 [ 642.709612][T13833] ? __lock_acquire+0x7d40/0x7d40 [ 642.714680][T13833] should_fail_ex+0x39d/0x4d0 [ 642.719401][T13833] should_failslab+0x9/0x20 [ 642.723953][T13833] slab_pre_alloc_hook+0x59/0x310 [ 642.729021][T13833] kmem_cache_alloc_node+0x60/0x320 [ 642.734254][T13833] ? __alloc_skb+0x103/0x2c0 [ 642.738876][T13833] __alloc_skb+0x103/0x2c0 [ 642.743328][T13833] tipc_msg_append+0x15e/0x640 [ 642.748130][T13833] __tipc_sendstream+0x7b9/0x1270 [ 642.753215][T13833] ? tsk_advance_rx_queue+0x310/0x310 [ 642.758620][T13833] ? wait_woken+0x180/0x180 [ 642.763148][T13833] ? _local_bh_enable+0xa0/0xa0 [ 642.768032][T13833] tipc_sendstream+0x55/0x70 [ 642.772653][T13833] ? tipc_getsockopt+0x5a0/0x5a0 [ 642.777625][T13833] ____sys_sendmsg+0x5ba/0x960 [ 642.782426][T13833] ? __lock_acquire+0x7d40/0x7d40 [ 642.787484][T13833] ? __asan_memset+0x22/0x40 [ 642.792102][T13833] ? __sys_sendmsg_sock+0x30/0x30 [ 642.797150][T13833] ? __import_iovec+0x3fa/0x850 [ 642.802035][T13833] ? import_iovec+0x73/0xa0 [ 642.806586][T13833] ___sys_sendmsg+0x2a6/0x360 [ 642.811299][T13833] ? __sys_sendmsg+0x2a0/0x2a0 [ 642.816125][T13833] ? __lock_acquire+0x7d40/0x7d40 [ 642.821236][T13833] __se_sys_sendmsg+0x1c2/0x2b0 [ 642.826119][T13833] ? __x64_sys_sendmsg+0x80/0x80 [ 642.831106][T13833] ? lockdep_hardirqs_on+0x98/0x150 [ 642.836347][T13833] do_syscall_64+0x55/0xb0 [ 642.840790][T13833] ? clear_bhb_loop+0x40/0x90 [ 642.845507][T13833] ? clear_bhb_loop+0x40/0x90 [ 642.850223][T13833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 642.856150][T13833] RIP: 0033:0x7f6ddcf9ce59 [ 642.860598][T13833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.880230][T13833] RSP: 002b:00007f6dddef6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.888670][T13833] RAX: ffffffffffffffda RBX: 00007f6ddd216180 RCX: 00007f6ddcf9ce59 [ 642.896662][T13833] RDX: 0000000000000000 RSI: 0000200000001480 RDI: 0000000000000004 [ 642.904669][T13833] RBP: 00007f6dddef6090 R08: 0000000000000000 R09: 0000000000000000 [ 642.912672][T13833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.920680][T13833] R13: 00007f6ddd216218 R14: 00007f6ddd216180 R15: 00007ffdec613488 [ 642.928711][T13833] [ 643.393954][T13845] netlink: 'syz.1.2631': attribute type 10 has an invalid length. [ 643.854539][T13853] netlink: 'syz.1.2634': attribute type 10 has an invalid length. [ 644.897987][T13871] netlink: 'syz.3.2642': attribute type 10 has an invalid length. [ 645.222950][T13879] netlink: 'syz.1.2645': attribute type 10 has an invalid length. [ 645.363492][T13881] netlink: 'syz.0.2654': attribute type 10 has an invalid length. [ 647.135235][T13910] netlink: 'syz.2.2656': attribute type 10 has an invalid length. [ 647.368320][T13916] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2659'. [ 647.395311][T13919] netlink: 'syz.1.2660': attribute type 10 has an invalid length. [ 650.762819][T13940] netlink: 'syz.1.2668': attribute type 10 has an invalid length. [ 651.544655][T13950] netlink: 'syz.2.2674': attribute type 10 has an invalid length. [ 652.236134][T13963] netlink: 'syz.3.2678': attribute type 10 has an invalid length. [ 652.678714][T13982] netlink: 'syz.3.2685': attribute type 10 has an invalid length. [ 653.655146][T13992] netlink: 'syz.0.2688': attribute type 10 has an invalid length. [ 654.211914][T14014] netlink: 'syz.1.2698': attribute type 10 has an invalid length. [ 654.542506][T14026] netlink: 'syz.0.2702': attribute type 10 has an invalid length. [ 655.638179][T14052] netlink: 'syz.1.2713': attribute type 10 has an invalid length. [ 655.719390][T14050] netlink: 'syz.0.2712': attribute type 9 has an invalid length. [ 655.747631][T14050] netlink: 391 bytes leftover after parsing attributes in process `syz.0.2712'. [ 657.278410][T14097] FAULT_INJECTION: forcing a failure. [ 657.278410][T14097] name failslab, interval 1, probability 0, space 0, times 0 [ 657.307598][T14097] CPU: 1 PID: 14097 Comm: syz.2.2725 Not tainted syzkaller #0 [ 657.315192][T14097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 657.325445][T14097] Call Trace: [ 657.328849][T14097] [ 657.331857][T14097] dump_stack_lvl+0x18c/0x250 [ 657.336636][T14097] ? show_regs_print_info+0x20/0x20 [ 657.341928][T14097] ? load_image+0x420/0x420 [ 657.346541][T14097] ? __might_sleep+0xe0/0xe0 [ 657.351217][T14097] ? __lock_acquire+0x7d40/0x7d40 [ 657.356347][T14097] should_fail_ex+0x39d/0x4d0 [ 657.361139][T14097] should_failslab+0x9/0x20 [ 657.365721][T14097] slab_pre_alloc_hook+0x59/0x310 [ 657.370814][T14097] ? trace_call_bpf+0x5e9/0x6c0 [ 657.375727][T14097] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 657.381495][T14097] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 657.387264][T14097] __kmem_cache_alloc_node+0x53/0x250 [ 657.392707][T14097] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 657.398472][T14097] __kmalloc+0xa4/0x230 [ 657.402707][T14097] tomoyo_realpath_from_path+0xe3/0x5d0 [ 657.408334][T14097] tomoyo_path_number_perm+0x248/0x620 [ 657.413835][T14097] ? tomoyo_path_number_perm+0x217/0x620 [ 657.419527][T14097] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 657.425036][T14097] ? ksys_write+0x1c4/0x260 [ 657.429685][T14097] ? __fget_files+0x28/0x4b0 [ 657.434324][T14097] ? __fget_files+0x28/0x4b0 [ 657.439003][T14097] security_file_ioctl+0x70/0xa0 [ 657.444001][T14097] __se_sys_ioctl+0x48/0x170 [ 657.448656][T14097] do_syscall_64+0x55/0xb0 [ 657.453135][T14097] ? clear_bhb_loop+0x40/0x90 [ 657.457867][T14097] ? clear_bhb_loop+0x40/0x90 [ 657.462603][T14097] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 657.468553][T14097] RIP: 0033:0x7f6ddcf9ce59 [ 657.473013][T14097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.492676][T14097] RSP: 002b:00007f6dddf38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 657.501139][T14097] RAX: ffffffffffffffda RBX: 00007f6ddd215fa0 RCX: 00007f6ddcf9ce59 [ 657.509162][T14097] RDX: 0000200000000140 RSI: 0000000000008b06 RDI: 0000000000000006 [ 657.517187][T14097] RBP: 00007f6dddf38090 R08: 0000000000000000 R09: 0000000000000000 [ 657.525205][T14097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.533217][T14097] R13: 00007f6ddd216038 R14: 00007f6ddd215fa0 R15: 00007ffdec613488 [ 657.541290][T14097] [ 657.617574][T14097] ERROR: Out of memory at tomoyo_realpath_from_path. [ 664.389780][T14240] FAULT_INJECTION: forcing a failure. [ 664.389780][T14240] name failslab, interval 1, probability 0, space 0, times 0 [ 664.404219][T14240] CPU: 1 PID: 14240 Comm: syz.0.2784 Not tainted syzkaller #0 [ 664.411753][T14240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 664.421874][T14240] Call Trace: [ 664.425201][T14240] [ 664.428175][T14240] dump_stack_lvl+0x18c/0x250 [ 664.432915][T14240] ? show_regs_print_info+0x20/0x20 [ 664.438165][T14240] ? load_image+0x420/0x420 [ 664.442727][T14240] ? __might_sleep+0xe0/0xe0 [ 664.447373][T14240] ? __lock_acquire+0x7d40/0x7d40 [ 664.452460][T14240] should_fail_ex+0x39d/0x4d0 [ 664.457209][T14240] should_failslab+0x9/0x20 [ 664.461776][T14240] slab_pre_alloc_hook+0x59/0x310 [ 664.466887][T14240] kmem_cache_alloc_node+0x60/0x320 [ 664.472154][T14240] ? __alloc_skb+0x103/0x2c0 [ 664.476805][T14240] __alloc_skb+0x103/0x2c0 [ 664.481295][T14240] alloc_skb_with_frags+0xca/0x7b0 [ 664.486475][T14240] ? __lock_acquire+0x7d40/0x7d40 [ 664.491587][T14240] sock_alloc_send_pskb+0x883/0x9a0 [ 664.496864][T14240] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 664.503007][T14240] ? sock_kzfree_s+0x50/0x50 [ 664.507640][T14240] ? perf_trace_lock+0xfc/0x3b0 [ 664.512575][T14240] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 664.518441][T14240] __ip_append_data+0x2a2f/0x3b80 [ 664.523545][T14240] ? trace_event_raw_event_lock+0x250/0x250 [ 664.529507][T14240] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 664.534421][T14240] ? ip_setup_cork+0x860/0x860 [ 664.539236][T14240] ? ip_setup_cork+0x530/0x860 [ 664.544067][T14240] ip_make_skb+0x22b/0x440 [ 664.548530][T14240] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 664.553433][T14240] ? ip_flush_pending_frames+0x250/0x250 [ 664.559123][T14240] udp_sendmsg+0x1ade/0x23b0 [ 664.563769][T14240] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 664.568661][T14240] ? udp_cmsg_send+0x350/0x350 [ 664.573481][T14240] ? trace_call_bpf+0xc3/0x6c0 [ 664.578290][T14240] ? trace_call_bpf+0xc3/0x6c0 [ 664.583095][T14240] ? trace_call_bpf+0xc3/0x6c0 [ 664.587916][T14240] udpv6_sendmsg+0x790/0x2390 [ 664.592643][T14240] ? udp_v6_early_demux+0xf80/0xf80 [ 664.597883][T14240] ? lock_chain_count+0x20/0x20 [ 664.602780][T14240] ? _local_bh_enable+0xa0/0xa0 [ 664.607666][T14240] ? inet_send_prepare+0x1b3/0x260 [ 664.612814][T14240] ? inet_send_prepare+0x1b3/0x260 [ 664.617964][T14240] ? inet6_sendmsg+0x5f/0xd0 [ 664.622592][T14240] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 664.627842][T14240] ____sys_sendmsg+0x5ba/0x960 [ 664.632643][T14240] ? __lock_acquire+0x7d40/0x7d40 [ 664.637706][T14240] ? __sys_sendmsg_sock+0x30/0x30 [ 664.642758][T14240] ? __import_iovec+0x3fa/0x850 [ 664.647653][T14240] ? import_iovec+0x73/0xa0 [ 664.652189][T14240] ___sys_sendmsg+0x2a6/0x360 [ 664.656907][T14240] ? __sys_sendmsg+0x2a0/0x2a0 [ 664.661728][T14240] ? trace_call_bpf+0xc3/0x6c0 [ 664.666579][T14240] __se_sys_sendmsg+0x1c2/0x2b0 [ 664.671467][T14240] ? __x64_sys_sendmsg+0x80/0x80 [ 664.676459][T14240] ? lockdep_hardirqs_on+0x98/0x150 [ 664.681708][T14240] do_syscall_64+0x55/0xb0 [ 664.686153][T14240] ? clear_bhb_loop+0x40/0x90 [ 664.690857][T14240] ? clear_bhb_loop+0x40/0x90 [ 664.695571][T14240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 664.701502][T14240] RIP: 0033:0x7f2384b9ce59 [ 664.705945][T14240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.725586][T14240] RSP: 002b:00007f2385a46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 664.734032][T14240] RAX: ffffffffffffffda RBX: 00007f2384e15fa0 RCX: 00007f2384b9ce59 [ 664.742031][T14240] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 664.750024][T14240] RBP: 00007f2385a46090 R08: 0000000000000000 R09: 0000000000000000 [ 664.758035][T14240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.766032][T14240] R13: 00007f2384e16038 R14: 00007f2384e15fa0 R15: 00007fff1d3a0028 [ 664.774046][T14240] [ 665.003317][T14245] netlink: 'syz.3.2786': attribute type 21 has an invalid length. [ 665.043693][T14245] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2786'. [ 665.679855][T14263] FAULT_INJECTION: forcing a failure. [ 665.679855][T14263] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 665.712652][T14263] CPU: 1 PID: 14263 Comm: syz.1.2793 Not tainted syzkaller #0 [ 665.720273][T14263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 665.730408][T14263] Call Trace: [ 665.733779][T14263] [ 665.736793][T14263] dump_stack_lvl+0x18c/0x250 [ 665.741569][T14263] ? show_regs_print_info+0x20/0x20 [ 665.746865][T14263] ? load_image+0x420/0x420 [ 665.751461][T14263] ? __lock_acquire+0x7d40/0x7d40 [ 665.756606][T14263] should_fail_ex+0x39d/0x4d0 [ 665.761398][T14263] prepare_alloc_pages+0x1e2/0x5f0 [ 665.766616][T14263] __alloc_pages+0x134/0x460 [ 665.771305][T14263] ? zone_statistics+0x170/0x170 [ 665.776341][T14263] ? _copy_from_user+0x41/0xe0 [ 665.781226][T14263] bpf_prog_test_run_xdp+0xc37/0x10e0 [ 665.786745][T14263] ? dev_put+0x80/0x80 [ 665.790943][T14263] ? dev_put+0x80/0x80 [ 665.795101][T14263] bpf_prog_test_run+0x321/0x390 [ 665.800134][T14263] __sys_bpf+0x49d/0x890 [ 665.804470][T14263] ? bpf_link_show_fdinfo+0x390/0x390 [ 665.809981][T14263] ? lock_chain_count+0x20/0x20 [ 665.814952][T14263] __x64_sys_bpf+0x7c/0x90 [ 665.819458][T14263] do_syscall_64+0x55/0xb0 [ 665.823955][T14263] ? clear_bhb_loop+0x40/0x90 [ 665.828718][T14263] ? clear_bhb_loop+0x40/0x90 [ 665.833477][T14263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 665.839462][T14263] RIP: 0033:0x7fc4b019ce59 [ 665.843957][T14263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.863646][T14263] RSP: 002b:00007fc4b111c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 665.872163][T14263] RAX: ffffffffffffffda RBX: 00007fc4b0415fa0 RCX: 00007fc4b019ce59 [ 665.880222][T14263] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 665.888278][T14263] RBP: 00007fc4b111c090 R08: 0000000000000000 R09: 0000000000000000 [ 665.896335][T14263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.904386][T14263] R13: 00007fc4b0416038 R14: 00007fc4b0415fa0 R15: 00007ffc4e39e218 [ 665.912444][T14263] [ 665.915954][T14266] netlink: 'syz.3.2795': attribute type 12 has an invalid length. [ 665.927973][T14266] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2795'. [ 665.959830][T14266] syzkaller0: entered promiscuous mode [ 665.966059][T14266] syzkaller0: entered allmulticast mode [ 666.578817][T14280] FAULT_INJECTION: forcing a failure. [ 666.578817][T14280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.596721][T14280] CPU: 0 PID: 14280 Comm: syz.1.2798 Not tainted syzkaller #0 [ 666.604293][T14280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 666.614416][T14280] Call Trace: [ 666.617746][T14280] [ 666.620739][T14280] dump_stack_lvl+0x18c/0x250 [ 666.625517][T14280] ? show_regs_print_info+0x20/0x20 [ 666.630791][T14280] ? load_image+0x420/0x420 [ 666.635360][T14280] ? __lock_acquire+0x7d40/0x7d40 [ 666.640454][T14280] ? __virt_addr_valid+0x18c/0x540 [ 666.645651][T14280] should_fail_ex+0x39d/0x4d0 [ 666.650423][T14280] _copy_from_user+0x2f/0xe0 [ 666.655099][T14280] bpf_prog_test_run_skb+0x26c/0x18c0 [ 666.660567][T14280] ? __fget_files+0x28/0x4b0 [ 666.665248][T14280] ? __fget_files+0x28/0x4b0 [ 666.669932][T14280] ? __fget_files+0x43d/0x4b0 [ 666.674742][T14280] ? cpu_online+0x60/0x60 [ 666.679148][T14280] bpf_prog_test_run+0x321/0x390 [ 666.684161][T14280] __sys_bpf+0x49d/0x890 [ 666.688498][T14280] ? bpf_link_show_fdinfo+0x390/0x390 [ 666.693990][T14280] ? lock_chain_count+0x20/0x20 [ 666.698933][T14280] __x64_sys_bpf+0x7c/0x90 [ 666.703421][T14280] do_syscall_64+0x55/0xb0 [ 666.707909][T14280] ? clear_bhb_loop+0x40/0x90 [ 666.712641][T14280] ? clear_bhb_loop+0x40/0x90 [ 666.717381][T14280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 666.723343][T14280] RIP: 0033:0x7fc4b019ce59 [ 666.727816][T14280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.747493][T14280] RSP: 002b:00007fc4b111c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 666.755988][T14280] RAX: ffffffffffffffda RBX: 00007fc4b0415fa0 RCX: 00007fc4b019ce59 [ 666.764041][T14280] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 666.772085][T14280] RBP: 00007fc4b111c090 R08: 0000000000000000 R09: 0000000000000000 [ 666.780133][T14280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.788179][T14280] R13: 00007fc4b0416038 R14: 00007fc4b0415fa0 R15: 00007ffc4e39e218 [ 666.796265][T14280] [ 666.894962][T14285] netlink: 'syz.2.2800': attribute type 21 has an invalid length. [ 666.920651][T14285] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2800'. [ 666.996066][T14289] netlink: 'syz.0.2801': attribute type 10 has an invalid length. [ 668.368091][T14322] netlink: 'syz.2.2814': attribute type 10 has an invalid length. [ 668.389749][T14316] netlink: 'syz.0.2812': attribute type 21 has an invalid length. [ 668.431954][T14316] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2812'. [ 669.134373][T14336] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2819'. [ 669.487452][T14349] netlink: 'syz.1.2824': attribute type 10 has an invalid length. [ 669.843194][T14362] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2829'. [ 669.895949][T14366] netlink: 'syz.3.2832': attribute type 10 has an invalid length. [ 670.210925][T14375] netlink: 'syz.1.2835': attribute type 10 has an invalid length. [ 670.352094][T14384] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2840'. [ 670.412549][T14387] netlink: 'syz.0.2841': attribute type 5 has an invalid length. [ 671.283156][T14402] netlink: 'syz.3.2848': attribute type 10 has an invalid length. [ 671.544082][T14414] netlink: 'syz.2.2853': attribute type 12 has an invalid length. [ 671.556657][T14414] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2853'. [ 671.574392][T14414] syzkaller0: entered promiscuous mode [ 671.584618][T14414] syzkaller0: entered allmulticast mode [ 672.220845][T14430] netlink: 'syz.0.2860': attribute type 10 has an invalid length. [ 673.320745][T14455] netlink: 'syz.0.2870': attribute type 10 has an invalid length. [ 674.112001][T14474] netlink: 'syz.3.2879': attribute type 10 has an invalid length. [ 674.671065][T14484] netlink: 'syz.0.2882': attribute type 12 has an invalid length. [ 674.691905][T14484] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2882'. [ 674.707382][T14484] syzkaller0: entered promiscuous mode [ 674.712929][T14484] syzkaller0: entered allmulticast mode [ 675.185711][T14496] netlink: 'syz.3.2888': attribute type 10 has an invalid length. [ 676.447606][T14523] netlink: 'syz.3.2900': attribute type 10 has an invalid length. [ 677.666578][T14557] netlink: 'syz.0.2914': attribute type 10 has an invalid length. [ 678.512602][T14588] netlink: 'syz.0.2927': attribute type 10 has an invalid length. [ 679.411786][T14616] netlink: 'syz.1.2938': attribute type 10 has an invalid length. [ 680.314657][T14642] C: renamed from team_slave_0 [ 680.344379][T14642] netlink: 'syz.3.2949': attribute type 3 has an invalid length. [ 680.384765][T14642] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2949'. [ 680.413969][T14642] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 680.614440][T14652] netlink: 'syz.3.2951': attribute type 10 has an invalid length. [ 680.874009][T14653] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2953'. [ 680.938954][T14653] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2953'. [ 680.962617][T14650] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2953'. [ 681.003527][T14654] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2953'. [ 681.086129][T14650] netlink: 'syz.1.2953': attribute type 10 has an invalid length. [ 681.113666][T14650] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2953'. [ 681.159067][T14650] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 681.176496][T14650] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.246082][T14650] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 681.798231][T14684] netlink: 'syz.3.2963': attribute type 10 has an invalid length. [ 682.247973][T14703] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2972'. [ 682.287403][T14703] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2972'. [ 682.533880][T14714] FAULT_INJECTION: forcing a failure. [ 682.533880][T14714] name failslab, interval 1, probability 0, space 0, times 0 [ 682.580610][T14714] CPU: 1 PID: 14714 Comm: syz.3.2977 Not tainted syzkaller #0 [ 682.588177][T14714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 682.598287][T14714] Call Trace: [ 682.601612][T14714] [ 682.604592][T14714] dump_stack_lvl+0x18c/0x250 [ 682.609344][T14714] ? show_regs_print_info+0x20/0x20 [ 682.614601][T14714] ? load_image+0x420/0x420 [ 682.619164][T14714] ? __might_sleep+0xe0/0xe0 [ 682.623843][T14714] ? __lock_acquire+0x7d40/0x7d40 [ 682.628927][T14714] should_fail_ex+0x39d/0x4d0 [ 682.633691][T14714] should_failslab+0x9/0x20 [ 682.638258][T14714] slab_pre_alloc_hook+0x59/0x310 [ 682.643391][T14714] ? sctp_association_new+0x89/0x25c0 [ 682.648827][T14714] __kmem_cache_alloc_node+0x53/0x250 [ 682.654277][T14714] ? sctp_association_new+0x89/0x25c0 [ 682.659712][T14714] kmalloc_trace+0x2a/0xe0 [ 682.664195][T14714] sctp_association_new+0x89/0x25c0 [ 682.669462][T14714] ? sctp_has_association+0x1cd/0x1e0 [ 682.674889][T14714] ? sctp_has_association+0x2f/0x1e0 [ 682.680226][T14714] sctp_connect_new_asoc+0x2de/0x6a0 [ 682.685556][T14714] ? __sctp_connect+0xd80/0xd80 [ 682.690441][T14714] ? __local_bh_enable_ip+0x13a/0x1c0 [ 682.695859][T14714] ? _local_bh_enable+0xa0/0xa0 [ 682.700735][T14714] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 682.706590][T14714] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 682.712442][T14714] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 682.718044][T14714] ? security_sctp_bind_connect+0x89/0xb0 [ 682.723814][T14714] sctp_sendmsg+0x15d2/0x2910 [ 682.728542][T14714] ? sctp_getsockopt+0xb60/0xb60 [ 682.733522][T14714] ? aa_sk_perm+0x83c/0x970 [ 682.738069][T14714] ? aa_af_perm+0x330/0x330 [ 682.742602][T14714] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 682.749060][T14714] ? sock_rps_record_flow+0x19/0x3f0 [ 682.754389][T14714] ? inet_sendmsg+0x7c/0x2f0 [ 682.759017][T14714] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 682.764335][T14714] ? security_socket_sendmsg+0x80/0xa0 [ 682.769820][T14714] ? inet_send_prepare+0x260/0x260 [ 682.774972][T14714] ____sys_sendmsg+0x5ba/0x960 [ 682.779766][T14714] ? __lock_acquire+0x7d40/0x7d40 [ 682.784821][T14714] ? __asan_memset+0x22/0x40 [ 682.789456][T14714] ? __sys_sendmsg_sock+0x30/0x30 [ 682.794512][T14714] ? __import_iovec+0x5f2/0x850 [ 682.799397][T14714] ? import_iovec+0x73/0xa0 [ 682.803928][T14714] ___sys_sendmsg+0x2a6/0x360 [ 682.808652][T14714] ? get_pid_task+0x20/0x1e0 [ 682.813283][T14714] ? __sys_sendmsg+0x2a0/0x2a0 [ 682.818098][T14714] ? __lock_acquire+0x7d40/0x7d40 [ 682.823170][T14714] __se_sys_sendmsg+0x1c2/0x2b0 [ 682.828057][T14714] ? __x64_sys_sendmsg+0x80/0x80 [ 682.833040][T14714] ? lockdep_hardirqs_on+0x98/0x150 [ 682.838289][T14714] do_syscall_64+0x55/0xb0 [ 682.842753][T14714] ? clear_bhb_loop+0x40/0x90 [ 682.847466][T14714] ? clear_bhb_loop+0x40/0x90 [ 682.852182][T14714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 682.858114][T14714] RIP: 0033:0x7ff5c699ce59 [ 682.862556][T14714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.882367][T14714] RSP: 002b:00007ff5c78fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.890815][T14714] RAX: ffffffffffffffda RBX: 00007ff5c6c15fa0 RCX: 00007ff5c699ce59 [ 682.898819][T14714] RDX: 0000000000000010 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 682.906814][T14714] RBP: 00007ff5c78fd090 R08: 0000000000000000 R09: 0000000000000000 [ 682.914815][T14714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.922814][T14714] R13: 00007ff5c6c16038 R14: 00007ff5c6c15fa0 R15: 00007ffcf1af2e68 [ 682.930827][T14714] [ 683.192525][T14724] FAULT_INJECTION: forcing a failure. [ 683.192525][T14724] name failslab, interval 1, probability 0, space 0, times 0 [ 683.229619][T14724] CPU: 0 PID: 14724 Comm: syz.2.2981 Not tainted syzkaller #0 [ 683.237185][T14724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 683.247300][T14724] Call Trace: [ 683.250615][T14724] [ 683.253582][T14724] dump_stack_lvl+0x18c/0x250 [ 683.258317][T14724] ? show_regs_print_info+0x20/0x20 [ 683.263570][T14724] ? load_image+0x420/0x420 [ 683.268128][T14724] ? __might_sleep+0xe0/0xe0 [ 683.272815][T14724] ? __lock_acquire+0x7d40/0x7d40 [ 683.277898][T14724] should_fail_ex+0x39d/0x4d0 [ 683.282643][T14724] should_failslab+0x9/0x20 [ 683.287207][T14724] slab_pre_alloc_hook+0x59/0x310 [ 683.292300][T14724] ? sk_prot_alloc+0xe7/0x210 [ 683.297044][T14724] ? sk_prot_alloc+0xe7/0x210 [ 683.301771][T14724] __kmem_cache_alloc_node+0x53/0x250 [ 683.307182][T14724] ? sk_prot_alloc+0xe7/0x210 [ 683.311895][T14724] __kmalloc+0xa4/0x230 [ 683.316102][T14724] sk_prot_alloc+0xe7/0x210 [ 683.320642][T14724] ? sk_alloc+0x24/0x360 [ 683.324922][T14724] sk_alloc+0x3a/0x360 [ 683.329032][T14724] ? bpf_ctx_init+0x163/0x1a0 [ 683.333735][T14724] ? bpf_prog_test_run_skb+0x279/0x18c0 [ 683.339320][T14724] bpf_prog_test_run_skb+0x3d1/0x18c0 [ 683.344729][T14724] ? __fget_files+0x28/0x4b0 [ 683.349353][T14724] ? __fget_files+0x43d/0x4b0 [ 683.354068][T14724] ? cpu_online+0x60/0x60 [ 683.358433][T14724] bpf_prog_test_run+0x321/0x390 [ 683.363404][T14724] __sys_bpf+0x49d/0x890 [ 683.367682][T14724] ? bpf_link_show_fdinfo+0x390/0x390 [ 683.373098][T14724] ? lock_chain_count+0x20/0x20 [ 683.377991][T14724] __x64_sys_bpf+0x7c/0x90 [ 683.382437][T14724] do_syscall_64+0x55/0xb0 [ 683.386885][T14724] ? clear_bhb_loop+0x40/0x90 [ 683.391587][T14724] ? clear_bhb_loop+0x40/0x90 [ 683.396291][T14724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 683.402219][T14724] RIP: 0033:0x7f6ddcf9ce59 [ 683.406668][T14724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.426326][T14724] RSP: 002b:00007f6dddf38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 683.434770][T14724] RAX: ffffffffffffffda RBX: 00007f6ddd215fa0 RCX: 00007f6ddcf9ce59 [ 683.442778][T14724] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 683.450779][T14724] RBP: 00007f6dddf38090 R08: 0000000000000000 R09: 0000000000000000 [ 683.458775][T14724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.466775][T14724] R13: 00007f6ddd216038 R14: 00007f6ddd215fa0 R15: 00007ffdec613488 [ 683.474785][T14724] [ 683.621603][T14734] netlink: 'syz.2.2985': attribute type 10 has an invalid length. [ 683.671886][T14734] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 684.443380][T14767] netlink: 'syz.2.3000': attribute type 10 has an invalid length. [ 684.994629][T14787] FAULT_INJECTION: forcing a failure. [ 684.994629][T14787] name failslab, interval 1, probability 0, space 0, times 0 [ 685.030369][T14787] CPU: 0 PID: 14787 Comm: syz.1.3009 Not tainted syzkaller #0 [ 685.038042][T14787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 685.048261][T14787] Call Trace: [ 685.051689][T14787] [ 685.054772][T14787] dump_stack_lvl+0x18c/0x250 [ 685.059676][T14787] ? show_regs_print_info+0x20/0x20 [ 685.065042][T14787] ? load_image+0x420/0x420 [ 685.069758][T14787] ? __might_sleep+0xe0/0xe0 [ 685.074527][T14787] ? __lock_acquire+0x7d40/0x7d40 [ 685.079716][T14787] ? ip_rt_ioctl+0x4dc/0x11b0 [ 685.084574][T14787] ? sock_do_ioctl+0xfc/0x310 [ 685.089447][T14787] ? sock_ioctl+0x5ba/0x7e0 [ 685.094151][T14787] should_fail_ex+0x39d/0x4d0 [ 685.099096][T14787] should_failslab+0x9/0x20 [ 685.103761][T14787] slab_pre_alloc_hook+0x59/0x310 [ 685.109007][T14787] ? ip_fib_metrics_init+0xbf/0x710 [ 685.114337][T14787] __kmem_cache_alloc_node+0x53/0x250 [ 685.119862][T14787] ? ip_fib_metrics_init+0xbf/0x710 [ 685.125226][T14787] kmalloc_trace+0x2a/0xe0 [ 685.129798][T14787] ip_fib_metrics_init+0xbf/0x710 [ 685.134997][T14787] ? skb_gro_incr_csum_unnecessary+0x300/0x300 [ 685.141291][T14787] ? fib_create_info+0xa61/0x2460 [ 685.146431][T14787] ? rcu_is_watching+0x15/0xb0 [ 685.151310][T14787] ? fib_create_info+0xa61/0x2460 [ 685.156459][T14787] ? __kmalloc+0xe2/0x230 [ 685.160951][T14787] fib_create_info+0xab2/0x2460 [ 685.166113][T14787] fib_table_insert+0xc6/0x1b20 [ 685.171251][T14787] ? fib_new_table+0x10a/0x2d0 [ 685.176166][T14787] ip_rt_ioctl+0x4dc/0x11b0 [ 685.180855][T14787] ? fib_validate_source+0x1330/0x1330 [ 685.186564][T14787] ? __might_fault+0xc6/0x120 [ 685.191341][T14787] ? __might_fault+0xaa/0x120 [ 685.196196][T14787] inet_ioctl+0x49e/0x560 [ 685.200657][T14787] ? tomoyo_path_number_perm+0x217/0x620 [ 685.206415][T14787] ? inet_shutdown+0x370/0x370 [ 685.211295][T14787] ? slab_free_freelist_hook+0x130/0x1a0 [ 685.217107][T14787] ? tomoyo_path_number_perm+0x500/0x620 [ 685.222874][T14787] ? __kmem_cache_free+0xba/0x1e0 [ 685.228127][T14787] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 685.233854][T14787] sock_do_ioctl+0xfc/0x310 [ 685.238516][T14787] ? sock_show_fdinfo+0xb0/0xb0 [ 685.243634][T14787] sock_ioctl+0x5ba/0x7e0 [ 685.248113][T14787] ? sock_poll+0x3e0/0x3e0 [ 685.252737][T14787] ? bpf_lsm_file_ioctl+0x9/0x10 [ 685.257812][T14787] ? security_file_ioctl+0x80/0xa0 [ 685.263053][T14787] ? sock_poll+0x3e0/0x3e0 [ 685.267591][T14787] __se_sys_ioctl+0xfd/0x170 [ 685.272346][T14787] do_syscall_64+0x55/0xb0 [ 685.276863][T14787] ? clear_bhb_loop+0x40/0x90 [ 685.281636][T14787] ? clear_bhb_loop+0x40/0x90 [ 685.286455][T14787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 685.292462][T14787] RIP: 0033:0x7fc4b019ce59 [ 685.297006][T14787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.316727][T14787] RSP: 002b:00007fc4b111c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 685.325287][T14787] RAX: ffffffffffffffda RBX: 00007fc4b0415fa0 RCX: 00007fc4b019ce59 [ 685.333359][T14787] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000005 [ 685.341438][T14787] RBP: 00007fc4b111c090 R08: 0000000000000000 R09: 0000000000000000 [ 685.349523][T14787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.357622][T14787] R13: 00007fc4b0416038 R14: 00007fc4b0415fa0 R15: 00007ffc4e39e218 [ 685.365942][T14787] [ 685.483637][T14791] C: renamed from team_slave_0 [ 685.503528][T14791] netlink: 'syz.2.3010': attribute type 3 has an invalid length. [ 685.522122][T14791] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3010'. [ 685.539773][T14791] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 685.567556][T14793] netlink: 'syz.3.3011': attribute type 21 has an invalid length. [ 685.575513][T14793] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3011'. [ 685.754131][T14803] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3016'. [ 685.805220][T14803] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3016'. [ 686.000700][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.008073][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.432905][ T5789] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 686.669211][T14832] netlink: 'syz.3.3026': attribute type 10 has an invalid length. [ 686.711118][T14835] netlink: 'syz.1.3027': attribute type 10 has an invalid length. [ 686.893571][T14839] netlink: 'syz.0.3029': attribute type 10 has an invalid length. [ 686.971009][T14838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.218680][T14855] netlink: 'syz.2.3036': attribute type 10 has an invalid length. [ 687.233944][T14855] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3036'. [ 687.247442][T14855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 687.259406][T14855] hsr0: entered promiscuous mode [ 687.299143][T14861] netlink: 'syz.3.3038': attribute type 10 has an invalid length. [ 687.594285][T14870] netlink: 'syz.3.3042': attribute type 10 has an invalid length. [ 687.711553][T14874] netlink: 'syz.3.3044': attribute type 6 has an invalid length. [ 687.720726][T14874] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3044'. [ 688.002594][T14880] netlink: 'syz.3.3048': attribute type 10 has an invalid length. [ 688.445956][T14891] netlink: 'syz.0.3052': attribute type 10 has an invalid length. [ 688.662143][T14894] netlink: 'syz.3.3054': attribute type 9 has an invalid length. [ 688.747366][T14894] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3054'. [ 689.291391][T14914] netlink: 'syz.3.3059': attribute type 10 has an invalid length. [ 690.048086][T14932] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3067'. [ 690.143981][T14934] netlink: 'syz.3.3068': attribute type 10 has an invalid length. [ 690.473334][T14951] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.481454][T14951] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.518025][T14951] bridge0: entered allmulticast mode [ 690.579083][T14956] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3075'. [ 690.736032][T14959] hsr0: left promiscuous mode [ 690.780997][T14961] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3078'. [ 691.925995][T14997] validate_nla: 4 callbacks suppressed [ 691.926013][T14997] netlink: 'syz.2.3093': attribute type 10 has an invalid length. [ 692.101090][T15003] netlink: 'syz.0.3095': attribute type 6 has an invalid length. [ 692.110818][T15003] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3095'. [ 692.796826][T15023] netlink: 'syz.3.3105': attribute type 10 has an invalid length. [ 693.865017][T15040] netlink: 'syz.3.3112': attribute type 6 has an invalid length. [ 693.873321][T15040] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3112'. [ 694.119097][T15049] netlink: 'syz.3.3115': attribute type 10 has an invalid length. [ 694.326071][T15053] netlink: 'syz.1.3117': attribute type 10 has an invalid length. [ 694.396737][T15052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.151885][T15070] netlink: 'syz.3.3122': attribute type 6 has an invalid length. [ 695.164489][T15070] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3122'. [ 695.540583][T15083] netlink: 'syz.0.3127': attribute type 10 has an invalid length. [ 695.841047][T15093] netlink: 'syz.3.3133': attribute type 6 has an invalid length. [ 695.867247][T15093] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3133'. [ 696.215037][T15106] netlink: 'syz.3.3139': attribute type 10 has an invalid length. [ 696.423813][T15104] syzkaller0: entered promiscuous mode [ 696.436515][T15104] syzkaller0: entered allmulticast mode [ 698.829174][T15131] netlink: 'syz.3.3149': attribute type 10 has an invalid length. [ 699.463276][T15157] FAULT_INJECTION: forcing a failure. [ 699.463276][T15157] name failslab, interval 1, probability 0, space 0, times 0 [ 699.497020][T15157] CPU: 0 PID: 15157 Comm: syz.1.3161 Not tainted syzkaller #0 [ 699.504575][T15157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 699.514680][T15157] Call Trace: [ 699.518022][T15157] [ 699.521001][T15157] dump_stack_lvl+0x18c/0x250 [ 699.525741][T15157] ? show_regs_print_info+0x20/0x20 [ 699.530999][T15157] ? load_image+0x420/0x420 [ 699.535558][T15157] ? __might_sleep+0xe0/0xe0 [ 699.540208][T15157] ? __lock_acquire+0x7d40/0x7d40 [ 699.545299][T15157] should_fail_ex+0x39d/0x4d0 [ 699.550046][T15157] should_failslab+0x9/0x20 [ 699.554653][T15157] slab_pre_alloc_hook+0x59/0x310 [ 699.559738][T15157] ? __inet_diag_dump_start+0x8b/0x9f0 [ 699.565247][T15157] __kmem_cache_alloc_node+0x53/0x250 [ 699.570678][T15157] ? __inet_diag_dump_start+0x8b/0x9f0 [ 699.576226][T15157] kmalloc_trace+0x2a/0xe0 [ 699.580716][T15157] __inet_diag_dump_start+0x8b/0x9f0 [ 699.586055][T15157] ? netlink_lookup+0x30/0x200 [ 699.590869][T15157] ? netlink_lookup+0x30/0x200 [ 699.595809][T15157] __netlink_dump_start+0x4a9/0x810 [ 699.601108][T15157] inet_diag_handler_cmd+0x1e1/0x2c0 [ 699.606460][T15157] ? inet_diag_unregister+0xb0/0xb0 [ 699.611711][T15157] ? inet_diag_handler_get_info+0x7a0/0x7a0 [ 699.617658][T15157] ? inet_diag_dump_start+0x20/0x20 [ 699.622904][T15157] ? inet_diag_dump+0x50/0x50 [ 699.627643][T15157] ? sock_diag_lock_handler+0x19/0x280 [ 699.633159][T15157] ? sock_diag_lock_handler+0x19/0x280 [ 699.638676][T15157] ? inet_diag_unregister+0xb0/0xb0 [ 699.643909][T15157] sock_diag_rcv_msg+0x3d8/0x600 [ 699.648892][T15157] netlink_rcv_skb+0x241/0x4d0 [ 699.653707][T15157] ? sock_diag_bind+0xb0/0xb0 [ 699.658423][T15157] ? netlink_ack+0x1180/0x1180 [ 699.663226][T15157] ? __lock_acquire+0x7d40/0x7d40 [ 699.668292][T15157] ? netlink_deliver_tap+0x2e/0x1b0 [ 699.673541][T15157] sock_diag_rcv+0x2a/0x40 [ 699.678012][T15157] netlink_unicast+0x751/0x8d0 [ 699.682812][T15157] netlink_sendmsg+0x8d0/0xbf0 [ 699.687613][T15157] ? netlink_getsockopt+0x590/0x590 [ 699.692844][T15157] ? aa_sock_msg_perm+0x94/0x150 [ 699.697819][T15157] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 699.703136][T15157] ? security_socket_sendmsg+0x80/0xa0 [ 699.708626][T15157] ? netlink_getsockopt+0x590/0x590 [ 699.713859][T15157] ____sys_sendmsg+0x5ba/0x960 [ 699.718668][T15157] ? __asan_memset+0x22/0x40 [ 699.723295][T15157] ? __sys_sendmsg_sock+0x30/0x30 [ 699.728348][T15157] ? __import_iovec+0x5f2/0x850 [ 699.733233][T15157] ? import_iovec+0x73/0xa0 [ 699.737778][T15157] ___sys_sendmsg+0x2a6/0x360 [ 699.742492][T15157] ? get_pid_task+0x20/0x1e0 [ 699.747123][T15157] ? __sys_sendmsg+0x2a0/0x2a0 [ 699.751935][T15157] ? __lock_acquire+0x7d40/0x7d40 [ 699.757034][T15157] __se_sys_sendmsg+0x1c2/0x2b0 [ 699.761923][T15157] ? __x64_sys_sendmsg+0x80/0x80 [ 699.766899][T15157] ? lockdep_hardirqs_on+0x98/0x150 [ 699.772146][T15157] do_syscall_64+0x55/0xb0 [ 699.776594][T15157] ? clear_bhb_loop+0x40/0x90 [ 699.781320][T15157] ? clear_bhb_loop+0x40/0x90 [ 699.786027][T15157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 699.791956][T15157] RIP: 0033:0x7fc4b019ce59 [ 699.796412][T15157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.816041][T15157] RSP: 002b:00007fc4b111c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.824485][T15157] RAX: ffffffffffffffda RBX: 00007fc4b0415fa0 RCX: 00007fc4b019ce59 [ 699.832528][T15157] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 699.840546][T15157] RBP: 00007fc4b111c090 R08: 0000000000000000 R09: 0000000000000000 [ 699.848548][T15157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.856544][T15157] R13: 00007fc4b0416038 R14: 00007fc4b0415fa0 R15: 00007ffc4e39e218 [ 699.864645][T15157] [ 699.919989][T15161] FAULT_INJECTION: forcing a failure. [ 699.919989][T15161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.943238][T15161] CPU: 0 PID: 15161 Comm: syz.0.3162 Not tainted syzkaller #0 [ 699.950806][T15161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 699.960916][T15161] Call Trace: [ 699.964247][T15161] [ 699.967237][T15161] dump_stack_lvl+0x18c/0x250 [ 699.971991][T15161] ? show_regs_print_info+0x20/0x20 [ 699.977255][T15161] ? load_image+0x420/0x420 [ 699.981818][T15161] ? __lock_acquire+0x7d40/0x7d40 [ 699.986903][T15161] ? __virt_addr_valid+0x18c/0x540 [ 699.992086][T15161] should_fail_ex+0x39d/0x4d0 [ 699.996827][T15161] _copy_from_user+0x2f/0xe0 [ 700.001479][T15161] bpf_test_init+0xde/0x140 [ 700.006055][T15161] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 700.011495][T15161] ? dev_put+0x80/0x80 [ 700.015617][T15161] ? dev_put+0x80/0x80 [ 700.019721][T15161] bpf_prog_test_run+0x321/0x390 [ 700.024709][T15161] __sys_bpf+0x49d/0x890 [ 700.028987][T15161] ? bpf_link_show_fdinfo+0x390/0x390 [ 700.034402][T15161] ? lock_chain_count+0x20/0x20 [ 700.039290][T15161] __x64_sys_bpf+0x7c/0x90 [ 700.043733][T15161] do_syscall_64+0x55/0xb0 [ 700.048182][T15161] ? clear_bhb_loop+0x40/0x90 [ 700.052892][T15161] ? clear_bhb_loop+0x40/0x90 [ 700.057592][T15161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 700.063519][T15161] RIP: 0033:0x7f2384b9ce59 [ 700.067959][T15161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.087596][T15161] RSP: 002b:00007f2385a46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 700.096045][T15161] RAX: ffffffffffffffda RBX: 00007f2384e15fa0 RCX: 00007f2384b9ce59 [ 700.104063][T15161] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 700.112071][T15161] RBP: 00007f2385a46090 R08: 0000000000000000 R09: 0000000000000000 [ 700.120072][T15161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.128096][T15161] R13: 00007f2384e16038 R14: 00007f2384e15fa0 R15: 00007fff1d3a0028 [ 700.136116][T15161] [ 700.670564][T15179] netlink: 'syz.0.3171': attribute type 1 has an invalid length. [ 700.682001][T15179] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3171'. [ 700.877224][T15187] netlink: 'syz.2.3174': attribute type 10 has an invalid length. [ 701.036544][T15196] sock: sock_timestamping_bind_phc: sock not bind to device [ 701.051911][T15196] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3179'. [ 701.065106][T15196] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 701.586697][T15209] netlink: 'syz.3.3184': attribute type 1 has an invalid length. [ 701.599232][T15209] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3184'. [ 701.814044][T15213] netlink: 'syz.1.3186': attribute type 10 has an invalid length. [ 702.206336][T15231] netlink: 'syz.0.3194': attribute type 29 has an invalid length. [ 702.268467][T15231] netlink: 'syz.0.3194': attribute type 29 has an invalid length. [ 702.294287][T15233] netlink: 'syz.0.3194': attribute type 29 has an invalid length. [ 702.469890][T15240] netlink: 'syz.2.3196': attribute type 1 has an invalid length. [ 702.507131][T15240] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3196'. [ 703.020597][T15256] netlink: 'syz.2.3201': attribute type 10 has an invalid length. [ 703.130338][T15258] FAULT_INJECTION: forcing a failure. [ 703.130338][T15258] name failslab, interval 1, probability 0, space 0, times 0 [ 703.143763][T15258] CPU: 0 PID: 15258 Comm: syz.1.3202 Not tainted syzkaller #0 [ 703.151283][T15258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 703.161387][T15258] Call Trace: [ 703.164736][T15258] [ 703.167714][T15258] dump_stack_lvl+0x18c/0x250 [ 703.172470][T15258] ? show_regs_print_info+0x20/0x20 [ 703.177736][T15258] ? load_image+0x420/0x420 [ 703.182313][T15258] ? __might_sleep+0xe0/0xe0 [ 703.186942][T15258] ? __lock_acquire+0x7d40/0x7d40 [ 703.192002][T15258] ? trace_call_bpf+0xc3/0x6c0 [ 703.196799][T15258] ? verify_lock_unused+0x140/0x140 [ 703.202033][T15258] should_fail_ex+0x39d/0x4d0 [ 703.206770][T15258] should_failslab+0x9/0x20 [ 703.211339][T15258] slab_pre_alloc_hook+0x59/0x310 [ 703.216421][T15258] kmem_cache_alloc_node+0x60/0x320 [ 703.221664][T15258] ? __alloc_skb+0x103/0x2c0 [ 703.226291][T15258] __alloc_skb+0x103/0x2c0 [ 703.230751][T15258] alloc_skb_with_frags+0xca/0x7b0 [ 703.235899][T15258] ? mark_lock+0x94/0x320 [ 703.240268][T15258] ? __lock_acquire+0x1273/0x7d40 [ 703.245328][T15258] sock_alloc_send_pskb+0x883/0x9a0 [ 703.250583][T15258] ? sock_kzfree_s+0x50/0x50 [ 703.255199][T15258] ? verify_lock_unused+0x140/0x140 [ 703.260447][T15258] ? kasan_set_track+0x5f/0x70 [ 703.265241][T15258] ? __kasan_kmalloc+0x8f/0xa0 [ 703.270028][T15258] ? ip6_setup_cork+0x1d6/0xfe0 [ 703.274912][T15258] ? ip6_append_data+0x220/0x350 [ 703.279879][T15258] ? l2tp_ip6_sendmsg+0x1237/0x1690 [ 703.285109][T15258] __ip6_append_data+0x2a8d/0x3cf0 [ 703.290276][T15258] ? ip6_mtu+0x7d/0x3f0 [ 703.294466][T15258] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 703.299361][T15258] ? ip6_mtu+0x7d/0x3f0 [ 703.303550][T15258] ? ip6_setup_cork+0xfe0/0xfe0 [ 703.308453][T15258] ip6_append_data+0x1b0/0x350 [ 703.313260][T15258] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 703.318171][T15258] l2tp_ip6_sendmsg+0x1237/0x1690 [ 703.323238][T15258] ? __might_sleep+0xe0/0xe0 [ 703.327861][T15258] ? l2tp_ip6_destroy_sock+0x60/0x60 [ 703.333197][T15258] ? aa_af_perm+0x330/0x330 [ 703.337732][T15258] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 703.344177][T15258] ? sock_rps_record_flow+0x19/0x3f0 [ 703.349510][T15258] ? inet_sendmsg+0x7c/0x2f0 [ 703.354130][T15258] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 703.359482][T15258] ? security_socket_sendmsg+0x80/0xa0 [ 703.364975][T15258] ? inet_send_prepare+0x260/0x260 [ 703.370126][T15258] ____sys_sendmsg+0x5ba/0x960 [ 703.374933][T15258] ? __lock_acquire+0x7d40/0x7d40 [ 703.379990][T15258] ? __sys_sendmsg_sock+0x30/0x30 [ 703.385049][T15258] ? __import_iovec+0x3fa/0x850 [ 703.389941][T15258] ? import_iovec+0x73/0xa0 [ 703.394475][T15258] ___sys_sendmsg+0x2a6/0x360 [ 703.399185][T15258] ? __sys_sendmsg+0x2a0/0x2a0 [ 703.403999][T15258] ? trace_call_bpf+0xc3/0x6c0 [ 703.408831][T15258] __se_sys_sendmsg+0x1c2/0x2b0 [ 703.413721][T15258] ? __x64_sys_sendmsg+0x80/0x80 [ 703.418716][T15258] ? lockdep_hardirqs_on+0x98/0x150 [ 703.423948][T15258] do_syscall_64+0x55/0xb0 [ 703.428404][T15258] ? clear_bhb_loop+0x40/0x90 [ 703.433112][T15258] ? clear_bhb_loop+0x40/0x90 [ 703.437818][T15258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 703.443740][T15258] RIP: 0033:0x7fc4b019ce59 [ 703.448215][T15258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.467846][T15258] RSP: 002b:00007fc4b111c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 703.476290][T15258] RAX: ffffffffffffffda RBX: 00007fc4b0415fa0 RCX: 00007fc4b019ce59 [ 703.484289][T15258] RDX: 000000000000c900 RSI: 0000200000001180 RDI: 0000000000000003 [ 703.492289][T15258] RBP: 00007fc4b111c090 R08: 0000000000000000 R09: 0000000000000000 [ 703.500290][T15258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.508288][T15258] R13: 00007fc4b0416038 R14: 00007fc4b0415fa0 R15: 00007ffc4e39e218 [ 703.516303][T15258] [ 703.530947][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 703.643053][T15263] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3205'. [ 703.671078][T15263] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3205'. [ 703.689810][T15265] FAULT_INJECTION: forcing a failure. [ 703.689810][T15265] name failslab, interval 1, probability 0, space 0, times 0 [ 703.702843][T15265] CPU: 0 PID: 15265 Comm: syz.2.3206 Not tainted syzkaller #0 [ 703.710362][T15265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 703.720475][T15265] Call Trace: [ 703.723797][T15265] [ 703.726772][T15265] dump_stack_lvl+0x18c/0x250 [ 703.731505][T15265] ? show_regs_print_info+0x20/0x20 [ 703.736740][T15265] ? load_image+0x420/0x420 [ 703.741282][T15265] should_fail_ex+0x39d/0x4d0 [ 703.746009][T15265] should_failslab+0x9/0x20 [ 703.750543][T15265] slab_pre_alloc_hook+0x59/0x310 [ 703.755612][T15265] ? nf_ct_ext_add+0x1ab/0x440 [ 703.760403][T15265] ? nf_ct_ext_add+0x1ab/0x440 [ 703.765186][T15265] __kmem_cache_alloc_node+0x53/0x250 [ 703.770600][T15265] ? nf_ct_ext_add+0x1ab/0x440 [ 703.775392][T15265] __kmalloc_node_track_caller+0xa2/0x230 [ 703.781151][T15265] krealloc+0x86/0x120 [ 703.785263][T15265] nf_ct_ext_add+0x1ab/0x440 [ 703.789886][T15265] init_conntrack+0x69c/0xf10 [ 703.794613][T15265] ? early_drop+0x7f0/0x7f0 [ 703.799152][T15265] ? nf_conntrack_find_get+0x650/0x650 [ 703.804641][T15265] ? __local_bh_enable_ip+0x13a/0x1c0 [ 703.810036][T15265] ? __siphash_unaligned+0x22e/0x3a0 [ 703.815443][T15265] nf_conntrack_in+0xc06/0x15c0 [ 703.820351][T15265] ? nf_ct_pernet+0x270/0x270 [ 703.825068][T15265] ? ipt_do_table+0x2c1/0x15e0 [ 703.829875][T15265] ? read_lock_is_recursive+0x20/0x20 [ 703.835275][T15265] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 703.840787][T15265] ? ipv4_conntrack_local+0x123/0x200 [ 703.846195][T15265] ? ipv4_conntrack_in+0x20/0x20 [ 703.851253][T15265] nf_hook_slow+0xbd/0x200 [ 703.855711][T15265] ? nf_hook+0x390/0x390 [ 703.859984][T15265] nf_hook+0x228/0x390 [ 703.864175][T15265] ? nf_hook+0xa2/0x390 [ 703.868368][T15265] ? __ip_local_out+0x5f0/0x5f0 [ 703.873255][T15265] ? nf_hook+0x390/0x390 [ 703.877531][T15265] ? ip_fast_csum+0x1ee/0x2b0 [ 703.882247][T15265] __ip_local_out+0x4db/0x5f0 [ 703.886970][T15265] ? nf_hook+0x390/0x390 [ 703.891249][T15265] ip_send_skb+0x4c/0x1d0 [ 703.895611][T15265] udp_send_skb+0xa37/0x13a0 [ 703.900255][T15265] udp_sendmsg+0x1b16/0x23b0 [ 703.904886][T15265] ? __lock_acquire+0x1347/0x7d40 [ 703.909952][T15265] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 703.914838][T15265] ? udp_cmsg_send+0x350/0x350 [ 703.919645][T15265] ? __lock_acquire+0x1273/0x7d40 [ 703.924709][T15265] ? verify_lock_unused+0x140/0x140 [ 703.929964][T15265] udpv6_sendmsg+0x790/0x2390 [ 703.934689][T15265] ? print_unlock_imbalance_bug+0x160/0x160 [ 703.940620][T15265] ? udp_v6_early_demux+0xf80/0xf80 [ 703.945869][T15265] ? lock_chain_count+0x20/0x20 [ 703.950766][T15265] ? _local_bh_enable+0xa0/0xa0 [ 703.955652][T15265] ? inet_send_prepare+0x1b3/0x260 [ 703.960798][T15265] ? inet_send_prepare+0x1b3/0x260 [ 703.965953][T15265] ? inet6_sendmsg+0x5f/0xd0 [ 703.970571][T15265] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 703.975799][T15265] ____sys_sendmsg+0x5ba/0x960 [ 703.980598][T15265] ? __lock_acquire+0x7d40/0x7d40 [ 703.985653][T15265] ? __asan_memset+0x22/0x40 [ 703.990272][T15265] ? __sys_sendmsg_sock+0x30/0x30 [ 703.995340][T15265] ? __import_iovec+0x3fa/0x850 [ 704.000233][T15265] ? import_iovec+0x73/0xa0 [ 704.004766][T15265] ___sys_sendmsg+0x2a6/0x360 [ 704.009470][T15265] ? get_pid_task+0x20/0x1e0 [ 704.014094][T15265] ? __sys_sendmsg+0x2a0/0x2a0 [ 704.018909][T15265] ? __lock_acquire+0x7d40/0x7d40 [ 704.024024][T15265] __se_sys_sendmsg+0x1c2/0x2b0 [ 704.028920][T15265] ? __x64_sys_sendmsg+0x80/0x80 [ 704.033907][T15265] ? lockdep_hardirqs_on+0x98/0x150 [ 704.039171][T15265] do_syscall_64+0x55/0xb0 [ 704.043651][T15265] ? clear_bhb_loop+0x40/0x90 [ 704.048396][T15265] ? clear_bhb_loop+0x40/0x90 [ 704.053101][T15265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 704.059033][T15265] RIP: 0033:0x7f6ddcf9ce59 [ 704.063487][T15265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.083127][T15265] RSP: 002b:00007f6dddf38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.091582][T15265] RAX: ffffffffffffffda RBX: 00007f6ddd215fa0 RCX: 00007f6ddcf9ce59 [ 704.099589][T15265] RDX: 0000000000000080 RSI: 00002000000004c0 RDI: 0000000000000003 [ 704.107582][T15265] RBP: 00007f6dddf38090 R08: 0000000000000000 R09: 0000000000000000 [ 704.115587][T15265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.123589][T15265] R13: 00007f6ddd216038 R14: 00007f6ddd215fa0 R15: 00007ffdec613488 [ 704.131616][T15265] [ 704.173745][T15268] netlink: 'syz.3.3207': attribute type 10 has an invalid length. [ 704.187051][T15268] syz_tun: entered promiscuous mode [ 704.531783][T15286] FAULT_INJECTION: forcing a failure. [ 704.531783][T15286] name failslab, interval 1, probability 0, space 0, times 0 [ 704.566154][T15286] CPU: 0 PID: 15286 Comm: syz.3.3214 Not tainted syzkaller #0 [ 704.573717][T15286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 704.583826][T15286] Call Trace: [ 704.587159][T15286] [ 704.590135][T15286] dump_stack_lvl+0x18c/0x250 [ 704.594882][T15286] ? show_regs_print_info+0x20/0x20 [ 704.600134][T15286] ? load_image+0x420/0x420 [ 704.604683][T15286] ? __might_sleep+0xe0/0xe0 [ 704.609306][T15286] ? __lock_acquire+0x7d40/0x7d40 [ 704.614366][T15286] should_fail_ex+0x39d/0x4d0 [ 704.619083][T15286] should_failslab+0x9/0x20 [ 704.623619][T15286] slab_pre_alloc_hook+0x59/0x310 [ 704.628678][T15286] ? rtnl_newlink+0x10d/0x20a0 [ 704.633472][T15286] __kmem_cache_alloc_node+0x53/0x250 [ 704.638907][T15286] ? rtnl_newlink+0x10d/0x20a0 [ 704.643706][T15286] kmalloc_trace+0x2a/0xe0 [ 704.648156][T15286] ? rtnl_setlink+0x4e0/0x4e0 [ 704.652875][T15286] rtnl_newlink+0x10d/0x20a0 [ 704.657500][T15286] ? arch_stack_walk+0x160/0x190 [ 704.662494][T15286] ? __mutex_trylock_common+0x159/0x260 [ 704.668066][T15286] ? rtnl_setlink+0x4e0/0x4e0 [ 704.672766][T15286] ? trace_raw_output_contention_end+0xd0/0xd0 [ 704.678954][T15286] ? rcu_is_watching+0x15/0xb0 [ 704.683749][T15286] ? trace_contention_end+0x39/0xe0 [ 704.688976][T15286] ? __mutex_lock+0x315/0xcc0 [ 704.693685][T15286] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 704.698826][T15286] ? mutex_lock_nested+0x20/0x20 [ 704.703804][T15286] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 704.708945][T15286] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 704.714100][T15286] ? rtnl_setlink+0x4e0/0x4e0 [ 704.718805][T15286] rtnetlink_rcv_msg+0x869/0xfa0 [ 704.723772][T15286] ? lockdep_hardirqs_on+0x98/0x150 [ 704.729059][T15286] ? rtnetlink_bind+0x80/0x80 [ 704.733768][T15286] ? perf_trace_preemptirq_template+0xac/0x330 [ 704.739964][T15286] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 704.745982][T15286] ? lock_chain_count+0x20/0x20 [ 704.750868][T15286] ? __local_bh_enable_ip+0x13a/0x1c0 [ 704.756267][T15286] ? lockdep_hardirqs_on+0x98/0x150 [ 704.761525][T15286] ? __local_bh_enable_ip+0x13a/0x1c0 [ 704.766920][T15286] ? _local_bh_enable+0xa0/0xa0 [ 704.771843][T15286] ? __dev_queue_xmit+0x265/0x3660 [ 704.777007][T15286] ? __dev_queue_xmit+0x265/0x3660 [ 704.782157][T15286] ? __dev_queue_xmit+0x1b2c/0x3660 [ 704.787400][T15286] ? __dev_queue_xmit+0x265/0x3660 [ 704.792564][T15286] ? ref_tracker_free+0x690/0x840 [ 704.797634][T15286] netlink_rcv_skb+0x241/0x4d0 [ 704.802445][T15286] ? rtnetlink_bind+0x80/0x80 [ 704.807185][T15286] ? netlink_ack+0x1180/0x1180 [ 704.812002][T15286] ? __lock_acquire+0x7d40/0x7d40 [ 704.817072][T15286] ? netlink_deliver_tap+0x2e/0x1b0 [ 704.822311][T15286] netlink_unicast+0x751/0x8d0 [ 704.827143][T15286] netlink_sendmsg+0x8d0/0xbf0 [ 704.831953][T15286] ? netlink_getsockopt+0x590/0x590 [ 704.837183][T15286] ? aa_sock_msg_perm+0x94/0x150 [ 704.842153][T15286] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 704.847471][T15286] ? security_socket_sendmsg+0x80/0xa0 [ 704.852972][T15286] ? netlink_getsockopt+0x590/0x590 [ 704.858200][T15286] ____sys_sendmsg+0x5ba/0x960 [ 704.862999][T15286] ? __asan_memset+0x22/0x40 [ 704.867623][T15286] ? __sys_sendmsg_sock+0x30/0x30 [ 704.872707][T15286] ? __import_iovec+0x5f2/0x850 [ 704.877625][T15286] ? import_iovec+0x73/0xa0 [ 704.882176][T15286] ___sys_sendmsg+0x2a6/0x360 [ 704.886879][T15286] ? get_pid_task+0x20/0x1e0 [ 704.891501][T15286] ? __sys_sendmsg+0x2a0/0x2a0 [ 704.896313][T15286] ? __lock_acquire+0x7d40/0x7d40 [ 704.901395][T15286] __se_sys_sendmsg+0x1c2/0x2b0 [ 704.906290][T15286] ? __x64_sys_sendmsg+0x80/0x80 [ 704.911268][T15286] ? lockdep_hardirqs_on+0x98/0x150 [ 704.916524][T15286] do_syscall_64+0x55/0xb0 [ 704.920971][T15286] ? clear_bhb_loop+0x40/0x90 [ 704.925672][T15286] ? clear_bhb_loop+0x40/0x90 [ 704.930376][T15286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 704.936312][T15286] RIP: 0033:0x7ff5c699ce59 [ 704.940753][T15286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.960386][T15286] RSP: 002b:00007ff5c78fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.968828][T15286] RAX: ffffffffffffffda RBX: 00007ff5c6c15fa0 RCX: 00007ff5c699ce59 [ 704.976914][T15286] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000003 [ 704.984917][T15286] RBP: 00007ff5c78fd090 R08: 0000000000000000 R09: 0000000000000000 [ 704.992921][T15286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.000916][T15286] R13: 00007ff5c6c16038 R14: 00007ff5c6c15fa0 R15: 00007ffcf1af2e68 [ 705.008928][T15286] [ 705.065724][T15288] netlink: 'syz.2.3216': attribute type 10 has an invalid length. [ 705.100774][T15288] syz_tun: entered promiscuous mode [ 705.158867][T15288] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 705.302035][T15292] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3218'. [ 706.010524][T15318] FAULT_INJECTION: forcing a failure. [ 706.010524][T15318] name failslab, interval 1, probability 0, space 0, times 0 [ 706.051054][T15318] CPU: 1 PID: 15318 Comm: syz.2.3226 Not tainted syzkaller #0 [ 706.058625][T15318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 706.068747][T15318] Call Trace: [ 706.072085][T15318] [ 706.075136][T15318] dump_stack_lvl+0x18c/0x250 [ 706.079885][T15318] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 706.086125][T15318] ? show_regs_print_info+0x20/0x20 [ 706.091399][T15318] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 706.097656][T15318] ? dump_stack+0x9/0x20 [ 706.101977][T15318] should_fail_ex+0x39d/0x4d0 [ 706.106748][T15318] should_failslab+0x9/0x20 [ 706.111323][T15318] slab_pre_alloc_hook+0x59/0x310 [ 706.116425][T15318] ? sctp_association_new+0x89/0x25c0 [ 706.121871][T15318] __kmem_cache_alloc_node+0x53/0x250 [ 706.127323][T15318] ? sctp_association_new+0x89/0x25c0 [ 706.132851][T15318] kmalloc_trace+0x2a/0xe0 [ 706.137337][T15318] sctp_association_new+0x89/0x25c0 [ 706.142596][T15318] ? sctp_do_bind+0x6bd/0x990 [ 706.147345][T15318] sctp_connect_new_asoc+0x2de/0x6a0 [ 706.152695][T15318] ? __sctp_connect+0xd80/0xd80 [ 706.157607][T15318] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 706.163298][T15318] ? security_sctp_bind_connect+0x89/0xb0 [ 706.169080][T15318] sctp_sendmsg+0x15d2/0x2910 [ 706.173844][T15318] ? sctp_getsockopt+0xb60/0xb60 [ 706.178845][T15318] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 706.185067][T15318] ? lockdep_hardirqs_on+0x98/0x150 [ 706.190354][T15318] ? sock_rps_record_flow+0x19/0x3f0 [ 706.195713][T15318] ? inet_sendmsg+0xe9/0x2f0 [ 706.200385][T15318] ? inet_send_prepare+0x260/0x260 [ 706.205578][T15318] ____sys_sendmsg+0x5ba/0x960 [ 706.210407][T15318] ? __lock_acquire+0x7d40/0x7d40 [ 706.215506][T15318] ? __asan_memset+0x22/0x40 [ 706.220169][T15318] ? __sys_sendmsg_sock+0x30/0x30 [ 706.225262][T15318] ? __import_iovec+0x5f2/0x850 [ 706.230197][T15318] ? import_iovec+0x73/0xa0 [ 706.234760][T15318] ___sys_sendmsg+0x2a6/0x360 [ 706.239504][T15318] ? __fget_files+0x28/0x4b0 [ 706.244174][T15318] ? __sys_sendmsg+0x2a0/0x2a0 [ 706.249070][T15318] __se_sys_sendmsg+0x1c2/0x2b0 [ 706.253996][T15318] ? __x64_sys_sendmsg+0x80/0x80 [ 706.259014][T15318] ? syscall_enter_from_user_mode+0x2e/0x80 [ 706.265026][T15318] do_syscall_64+0x55/0xb0 [ 706.269509][T15318] ? clear_bhb_loop+0x40/0x90 [ 706.274253][T15318] ? clear_bhb_loop+0x40/0x90 [ 706.279001][T15318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 706.284963][T15318] RIP: 0033:0x7f6ddcf9ce59 [ 706.289609][T15318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.309539][T15318] RSP: 002b:00007f6dddf38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 706.318027][T15318] RAX: ffffffffffffffda RBX: 00007f6ddd215fa0 RCX: 00007f6ddcf9ce59 [ 706.326063][T15318] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000007 [ 706.334099][T15318] RBP: 00007f6dddf38090 R08: 0000000000000000 R09: 0000000000000000 [ 706.342131][T15318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.350169][T15318] R13: 00007f6ddd216038 R14: 00007f6ddd215fa0 R15: 00007ffdec613488 [ 706.358271][T15318] [ 707.754572][T15349] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3235'. [ 708.060660][T15355] FAULT_INJECTION: forcing a failure. [ 708.060660][T15355] name failslab, interval 1, probability 0, space 0, times 0 [ 708.081172][T15355] CPU: 1 PID: 15355 Comm: syz.2.3239 Not tainted syzkaller #0 [ 708.088721][T15355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 708.098871][T15355] Call Trace: [ 708.102199][T15355] [ 708.105174][T15355] dump_stack_lvl+0x18c/0x250 [ 708.109907][T15355] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 708.116140][T15355] ? show_regs_print_info+0x20/0x20 [ 708.121398][T15355] ? load_image+0x420/0x420 [ 708.125970][T15355] should_fail_ex+0x39d/0x4d0 [ 708.130735][T15355] should_failslab+0x9/0x20 [ 708.135297][T15355] slab_pre_alloc_hook+0x59/0x310 [ 708.140389][T15355] ? sk_prot_alloc+0xe7/0x210 [ 708.145127][T15355] ? sk_prot_alloc+0xe7/0x210 [ 708.149863][T15355] __kmem_cache_alloc_node+0x53/0x250 [ 708.155303][T15355] ? sk_prot_alloc+0xe7/0x210 [ 708.160047][T15355] __kmalloc+0xa4/0x230 [ 708.164267][T15355] sk_prot_alloc+0xe7/0x210 [ 708.168863][T15355] ? sk_alloc+0x24/0x360 [ 708.173180][T15355] sk_alloc+0x3a/0x360 [ 708.177315][T15355] ? bpf_ctx_init+0x163/0x1a0 [ 708.182063][T15355] ? bpf_prog_test_run_skb+0x279/0x18c0 [ 708.187671][T15355] bpf_prog_test_run_skb+0x3d1/0x18c0 [ 708.193117][T15355] ? __fget_files+0x28/0x4b0 [ 708.197768][T15355] ? __fget_files+0x43d/0x4b0 [ 708.202509][T15355] ? cpu_online+0x60/0x60 [ 708.206917][T15355] bpf_prog_test_run+0x321/0x390 [ 708.211918][T15355] __sys_bpf+0x49d/0x890 [ 708.216221][T15355] ? bpf_link_show_fdinfo+0x390/0x390 [ 708.221663][T15355] ? lock_chain_count+0x20/0x20 [ 708.226562][T15355] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 708.232611][T15355] __x64_sys_bpf+0x7c/0x90 [ 708.237086][T15355] do_syscall_64+0x55/0xb0 [ 708.241556][T15355] ? clear_bhb_loop+0x40/0x90 [ 708.246291][T15355] ? clear_bhb_loop+0x40/0x90 [ 708.251033][T15355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 708.257070][T15355] RIP: 0033:0x7f6ddcf9ce59 [ 708.261538][T15355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.281209][T15355] RSP: 002b:00007f6dddf38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 708.289688][T15355] RAX: ffffffffffffffda RBX: 00007f6ddd215fa0 RCX: 00007f6ddcf9ce59 [ 708.297712][T15355] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 708.305738][T15355] RBP: 00007f6dddf38090 R08: 0000000000000000 R09: 0000000000000000 [ 708.313780][T15355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.321798][T15355] R13: 00007f6ddd216038 R14: 00007f6ddd215fa0 R15: 00007ffdec613488 [ 708.329861][T15355] [ 708.351029][T15363] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.3240'. [ 708.915750][T15384] netlink: 'syz.1.3246': attribute type 10 has an invalid length. [ 708.924899][T15384] syz_tun: entered promiscuous mode [ 708.950859][T15384] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 709.151944][T15388] FAULT_INJECTION: forcing a failure. [ 709.151944][T15388] name failslab, interval 1, probability 0, space 0, times 0 [ 709.171838][T15388] CPU: 0 PID: 15388 Comm: syz.3.3248 Not tainted syzkaller #0 [ 709.179371][T15388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 709.189474][T15388] Call Trace: [ 709.192766][T15388] [ 709.195713][T15388] dump_stack_lvl+0x18c/0x250 [ 709.200418][T15388] ? show_regs_print_info+0x20/0x20 [ 709.205637][T15388] ? load_image+0x420/0x420 [ 709.210153][T15388] ? __might_sleep+0xe0/0xe0 [ 709.214767][T15388] ? __lock_acquire+0x7d40/0x7d40 [ 709.219824][T15388] should_fail_ex+0x39d/0x4d0 [ 709.224561][T15388] should_failslab+0x9/0x20 [ 709.229095][T15388] slab_pre_alloc_hook+0x59/0x310 [ 709.234170][T15388] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 709.239912][T15388] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 709.245644][T15388] __kmem_cache_alloc_node+0x53/0x250 [ 709.251038][T15388] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 709.256768][T15388] __kmalloc+0xa4/0x230 [ 709.260945][T15388] tomoyo_realpath_from_path+0xe3/0x5d0 [ 709.266513][T15388] tomoyo_path_number_perm+0x248/0x620 [ 709.272040][T15388] ? tomoyo_path_number_perm+0x217/0x620 [ 709.277709][T15388] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 709.283202][T15388] ? ksys_write+0x1c4/0x260 [ 709.287760][T15388] ? __fget_files+0x28/0x4b0 [ 709.292387][T15388] ? __fget_files+0x28/0x4b0 [ 709.297030][T15388] security_file_ioctl+0x70/0xa0 [ 709.302008][T15388] __se_sys_ioctl+0x48/0x170 [ 709.306634][T15388] do_syscall_64+0x55/0xb0 [ 709.311104][T15388] ? clear_bhb_loop+0x40/0x90 [ 709.315815][T15388] ? clear_bhb_loop+0x40/0x90 [ 709.320523][T15388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 709.326448][T15388] RIP: 0033:0x7ff5c699ce59 [ 709.330897][T15388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.350535][T15388] RSP: 002b:00007ff5c78fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 709.359014][T15388] RAX: ffffffffffffffda RBX: 00007ff5c6c15fa0 RCX: 00007ff5c699ce59 [ 709.367034][T15388] RDX: 0000200000000000 RSI: 0000000000008b15 RDI: 0000000000000008 [ 709.375050][T15388] RBP: 00007ff5c78fd090 R08: 0000000000000000 R09: 0000000000000000 [ 709.383054][T15388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.391056][T15388] R13: 00007ff5c6c16038 R14: 00007ff5c6c15fa0 R15: 00007ffcf1af2e68 [ 709.399068][T15388] [ 709.433131][T15389] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3248'. [ 709.442970][T15388] ERROR: Out of memory at tomoyo_realpath_from_path. [ 709.460822][T15389] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3248'. [ 709.474057][T15388] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3248'. [ 709.716412][T15395] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3251'. [ 709.728881][T15395] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3251'. [ 709.750984][T15395] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3251'. [ 710.033026][T15406] netlink: 'syz.2.3255': attribute type 1 has an invalid length. [ 710.041951][T15406] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3255'. [ 711.384175][T15426] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3263'. [ 712.138244][T15436] netlink: 'syz.0.3266': attribute type 1 has an invalid length. [ 713.157948][T15458] __nla_validate_parse: 4 callbacks suppressed [ 713.157969][T15458] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3277'. [ 713.179502][T15458] netlink: get zone limit has 4 unknown bytes [ 713.355449][T15462] netlink: 'syz.1.3279': attribute type 1 has an invalid length. [ 713.364965][T15462] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3279'. [ 713.458978][T15464] netlink: 'syz.2.3280': attribute type 21 has an invalid length. [ 713.467769][T15464] IPv6: NLM_F_CREATE should be specified when creating new route [ 713.476332][T15464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 713.484321][T15464] IPv6: NLM_F_CREATE should be set when creating new route [ 713.492560][T15464] IPv6: NLM_F_CREATE should be set when creating new route [ 713.500189][T15464] IPv6: NLM_F_CREATE should be set when creating new route [ 713.606575][T15469] FAULT_INJECTION: forcing a failure. [ 713.606575][T15469] name failslab, interval 1, probability 0, space 0, times 0 [ 713.619909][T15469] CPU: 1 PID: 15469 Comm: syz.1.3282 Not tainted syzkaller #0 [ 713.627449][T15469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 713.637586][T15469] Call Trace: [ 713.640916][T15469] [ 713.643886][T15469] dump_stack_lvl+0x18c/0x250 [ 713.648598][T15469] ? show_regs_print_info+0x20/0x20 [ 713.653911][T15469] ? load_image+0x420/0x420 [ 713.658477][T15469] ? __might_sleep+0xe0/0xe0 [ 713.663114][T15469] ? __lock_acquire+0x7d40/0x7d40 [ 713.668176][T15469] ? __asan_memset+0x22/0x40 [ 713.672804][T15469] should_fail_ex+0x39d/0x4d0 [ 713.677528][T15469] should_failslab+0x9/0x20 [ 713.682083][T15469] slab_pre_alloc_hook+0x59/0x310 [ 713.687165][T15469] ? sctp_add_bind_addr+0x8c/0x360 [ 713.692326][T15469] __kmem_cache_alloc_node+0x53/0x250 [ 713.697743][T15469] ? sctp_add_bind_addr+0x8c/0x360 [ 713.702889][T15469] kmalloc_trace+0x2a/0xe0 [ 713.707390][T15469] sctp_add_bind_addr+0x8c/0x360 [ 713.712376][T15469] sctp_bind_addr_copy+0xb3/0x3c0 [ 713.717438][T15469] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 713.723847][T15469] sctp_connect_new_asoc+0x2f9/0x6a0 [ 713.729177][T15469] ? __sctp_connect+0xd80/0xd80 [ 713.734062][T15469] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 713.739902][T15469] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 713.745758][T15469] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 713.751687][T15469] __sctp_connect+0x5b7/0xd80 [ 713.756410][T15469] ? sctp_send_asconf+0x170/0x170 [ 713.761474][T15469] ? __local_bh_enable_ip+0x13a/0x1c0 [ 713.766879][T15469] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 713.772520][T15469] ? security_sctp_bind_connect+0x89/0xb0 [ 713.778292][T15469] sctp_setsockopt_connectx+0x104/0x1a0 [ 713.783887][T15469] sctp_setsockopt+0x6d8/0x11e0 [ 713.788779][T15469] ? sock_common_recvmsg+0x190/0x190 [ 713.794095][T15469] do_sock_setsockopt+0x175/0x1a0 [ 713.799150][T15469] ? __fdget+0x180/0x210 [ 713.803424][T15469] __x64_sys_setsockopt+0x182/0x200 [ 713.808659][T15469] do_syscall_64+0x55/0xb0 [ 713.813103][T15469] ? clear_bhb_loop+0x40/0x90 [ 713.817802][T15469] ? clear_bhb_loop+0x40/0x90 [ 713.822530][T15469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 713.828458][T15469] RIP: 0033:0x7fc4b019ce59 [ 713.832916][T15469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.852551][T15469] RSP: 002b:00007fc4b111c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 713.860999][T15469] RAX: ffffffffffffffda RBX: 00007fc4b0415fa0 RCX: 00007fc4b019ce59 [ 713.868995][T15469] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 713.876995][T15469] RBP: 00007fc4b111c090 R08: 0000000000000010 R09: 0000000000000000 [ 713.884999][T15469] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.892997][T15469] R13: 00007fc4b0416038 R14: 00007fc4b0415fa0 R15: 00007ffc4e39e218 [ 713.901009][T15469] [ 715.033456][T15495] netlink: 'syz.0.3294': attribute type 21 has an invalid length. [ 715.043231][T15495] IPv6: NLM_F_CREATE should be specified when creating new route [ 715.053095][T15495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 715.060628][T15495] IPv6: NLM_F_CREATE should be set when creating new route [ 715.068392][T15495] IPv6: NLM_F_CREATE should be set when creating new route [ 715.076117][T15495] IPv6: NLM_F_CREATE should be set when creating new route [ 716.527421][T15520] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3304'. [ 716.551122][T15520] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3304'. [ 716.575388][T15520] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3304'. [ 717.455102][T15531] netlink: 'syz.1.3308': attribute type 21 has an invalid length. [ 717.463747][T15531] IPv6: NLM_F_CREATE should be specified when creating new route [ 717.476186][T15531] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 717.483718][T15531] IPv6: NLM_F_CREATE should be set when creating new route [ 717.491331][T15531] IPv6: NLM_F_CREATE should be set when creating new route [ 717.498990][T15531] IPv6: NLM_F_CREATE should be set when creating new route [ 718.797579][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 721.401618][T15585] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 721.879673][T15607] FAULT_INJECTION: forcing a failure. [ 721.879673][T15607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.899910][T15607] CPU: 0 PID: 15607 Comm: syz.0.3341 Not tainted syzkaller #0 [ 721.907480][T15607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 721.917597][T15607] Call Trace: [ 721.920931][T15607] [ 721.923905][T15607] dump_stack_lvl+0x18c/0x250 [ 721.928650][T15607] ? show_regs_print_info+0x20/0x20 [ 721.933910][T15607] ? load_image+0x420/0x420 [ 721.938470][T15607] ? __lock_acquire+0x7d40/0x7d40 [ 721.943559][T15607] ? snprintf+0xe9/0x140 [ 721.947873][T15607] should_fail_ex+0x39d/0x4d0 [ 721.952616][T15607] _copy_to_user+0x2f/0xa0 [ 721.957130][T15607] simple_read_from_buffer+0xe7/0x150 [ 721.962578][T15607] proc_fail_nth_read+0x1e8/0x260 [ 721.967672][T15607] ? proc_fault_inject_write+0x360/0x360 [ 721.973464][T15607] ? proc_fault_inject_write+0x360/0x360 [ 721.979181][T15607] vfs_read+0x28b/0x970 [ 721.983405][T15607] ? kernel_read+0x1e0/0x1e0 [ 721.988071][T15607] ? __fget_files+0x28/0x4b0 [ 721.992723][T15607] ? __fget_files+0x28/0x4b0 [ 721.997382][T15607] ? __fget_files+0x43d/0x4b0 [ 722.002123][T15607] ? __fdget_pos+0x2a3/0x330 [ 722.006769][T15607] ? ksys_read+0x75/0x260 [ 722.011171][T15607] ksys_read+0x150/0x260 [ 722.015488][T15607] ? vfs_write+0x990/0x990 [ 722.019975][T15607] ? lockdep_hardirqs_on+0x98/0x150 [ 722.025244][T15607] do_syscall_64+0x55/0xb0 [ 722.029718][T15607] ? clear_bhb_loop+0x40/0x90 [ 722.034449][T15607] ? clear_bhb_loop+0x40/0x90 [ 722.039188][T15607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 722.045145][T15607] RIP: 0033:0x7f2384b5d68e [ 722.049622][T15607] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 722.069291][T15607] RSP: 002b:00007f2385a45fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 722.077771][T15607] RAX: ffffffffffffffda RBX: 00007f2385a466c0 RCX: 00007f2384b5d68e [ 722.085803][T15607] RDX: 000000000000000f RSI: 00007f2385a460a0 RDI: 0000000000000048 [ 722.093836][T15607] RBP: 00007f2385a46090 R08: 0000000000000000 R09: 0000000000000000 [ 722.101861][T15607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.109891][T15607] R13: 00007f2384e16038 R14: 00007f2384e15fa0 R15: 00007fff1d3a0028 [ 722.117974][T15607] [ 723.353674][T15646] syzkaller0: entered promiscuous mode [ 723.367080][T15646] syzkaller0: entered allmulticast mode [ 723.401822][T15646] FAULT_INJECTION: forcing a failure. [ 723.401822][T15646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.432719][T15646] CPU: 1 PID: 15646 Comm: syz.0.3354 Not tainted syzkaller #0 [ 723.440281][T15646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 723.450396][T15646] Call Trace: [ 723.453766][T15646] [ 723.456741][T15646] dump_stack_lvl+0x18c/0x250 [ 723.461494][T15646] ? show_regs_print_info+0x20/0x20 [ 723.466751][T15646] ? load_image+0x420/0x420 [ 723.471309][T15646] ? __might_fault+0xaa/0x120 [ 723.476043][T15646] ? __lock_acquire+0x7d40/0x7d40 [ 723.481133][T15646] should_fail_ex+0x39d/0x4d0 [ 723.485888][T15646] _copy_from_iter+0x1d9/0x12e0 [ 723.490812][T15646] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 723.497485][T15646] ? copyout_mc+0x70/0x70 [ 723.501949][T15646] tun_get_user+0x1f2/0x3ca0 [ 723.506633][T15646] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 723.513291][T15646] ? aa_file_perm+0x11b/0xee0 [ 723.518046][T15646] ? rcu_read_unlock+0xa0/0xa0 [ 723.522882][T15646] ? tun_get+0x1c/0x2e0 [ 723.527100][T15646] ? __lock_acquire+0x7d40/0x7d40 [ 723.532184][T15646] ? tun_get+0x1c/0x2e0 [ 723.536410][T15646] tun_chr_write_iter+0x119/0x200 [ 723.541519][T15646] vfs_write+0x46c/0x990 [ 723.545832][T15646] ? file_end_write+0x250/0x250 [ 723.550752][T15646] ? __fget_files+0x43d/0x4b0 [ 723.555504][T15646] ? __fdget_pos+0x1d8/0x330 [ 723.560151][T15646] ? ksys_write+0x75/0x260 [ 723.564641][T15646] ksys_write+0x150/0x260 [ 723.569037][T15646] ? __ia32_sys_read+0x90/0x90 [ 723.573871][T15646] ? lockdep_hardirqs_on+0x98/0x150 [ 723.579136][T15646] do_syscall_64+0x55/0xb0 [ 723.583613][T15646] ? clear_bhb_loop+0x40/0x90 [ 723.588340][T15646] ? clear_bhb_loop+0x40/0x90 [ 723.593067][T15646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 723.599020][T15646] RIP: 0033:0x7f2384b9ce59 [ 723.603484][T15646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.623151][T15646] RSP: 002b:00007f2385a46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 723.631638][T15646] RAX: ffffffffffffffda RBX: 00007f2384e15fa0 RCX: 00007f2384b9ce59 [ 723.639668][T15646] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000008 [ 723.647685][T15646] RBP: 00007f2385a46090 R08: 0000000000000000 R09: 0000000000000000 [ 723.655702][T15646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.663701][T15646] R13: 00007f2384e16038 R14: 00007f2384e15fa0 R15: 00007fff1d3a0028 [ 723.671727][T15646] [ 723.897504][T15656] netlink: 'syz.2.3357': attribute type 10 has an invalid length. [ 726.587452][T15661] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.3362'. [ 726.610375][T15663] netlink: 'syz.0.3368': attribute type 10 has an invalid length. [ 727.958579][T15695] FAULT_INJECTION: forcing a failure. [ 727.958579][T15695] name failslab, interval 1, probability 0, space 0, times 0 [ 728.081053][T15695] CPU: 1 PID: 15695 Comm: syz.1.3373 Not tainted syzkaller #0 [ 728.088637][T15695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 728.098772][T15695] Call Trace: [ 728.102129][T15695] [ 728.105181][T15695] dump_stack_lvl+0x18c/0x250 [ 728.109973][T15695] ? show_regs_print_info+0x20/0x20 [ 728.115263][T15695] ? load_image+0x420/0x420 [ 728.119859][T15695] ? __might_sleep+0xe0/0xe0 [ 728.124543][T15695] ? __lock_acquire+0x7d40/0x7d40 [ 728.129677][T15695] should_fail_ex+0x39d/0x4d0 [ 728.134466][T15695] should_failslab+0x9/0x20 [ 728.139060][T15695] slab_pre_alloc_hook+0x59/0x310 [ 728.144181][T15695] ? __get_vm_area_node+0x125/0x370 [ 728.149469][T15695] __kmem_cache_alloc_node+0x53/0x250 [ 728.154942][T15695] ? __get_vm_area_node+0x125/0x370 [ 728.160237][T15695] kmalloc_node_trace+0x26/0xe0 [ 728.165312][T15695] __get_vm_area_node+0x125/0x370 [ 728.170427][T15695] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 728.176383][T15695] __vmalloc_node_range+0x36e/0x1330 [ 728.181855][T15695] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 728.187518][T15695] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 728.194270][T15695] ? free_vm_area+0x50/0x50 [ 728.198890][T15695] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 728.204512][T15695] __vmalloc+0x7a/0x90 [ 728.208713][T15695] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 728.214388][T15695] bpf_prog_alloc_no_stats+0x47/0x440 [ 728.219839][T15695] ? bpf_prog_alloc+0x2b/0x1a0 [ 728.224686][T15695] bpf_prog_alloc+0x3d/0x1a0 [ 728.229386][T15695] ? bpf_prog_create+0x61/0x200 [ 728.234342][T15695] bpf_prog_create+0x9e/0x200 [ 728.239129][T15695] ppp_get_filter+0x143/0x1d0 [ 728.243910][T15695] ? ppp_set_compress+0x730/0x730 [ 728.249115][T15695] ppp_ioctl+0xebf/0x1ac0 [ 728.253587][T15695] ? ppp_poll+0x250/0x250 [ 728.258011][T15695] ? __fget_files+0x28/0x4b0 [ 728.262738][T15695] ? bpf_lsm_file_ioctl+0x9/0x10 [ 728.267756][T15695] ? security_file_ioctl+0x80/0xa0 [ 728.272960][T15695] ? ppp_poll+0x250/0x250 [ 728.277387][T15695] __se_sys_ioctl+0xfd/0x170 [ 728.282075][T15695] do_syscall_64+0x55/0xb0 [ 728.286566][T15695] ? clear_bhb_loop+0x40/0x90 [ 728.291320][T15695] ? clear_bhb_loop+0x40/0x90 [ 728.296073][T15695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 728.302062][T15695] RIP: 0033:0x7fc4b019ce59 [ 728.306567][T15695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.326278][T15695] RSP: 002b:00007fc4b10fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 728.334809][T15695] RAX: ffffffffffffffda RBX: 00007fc4b0416090 RCX: 00007fc4b019ce59 [ 728.342868][T15695] RDX: 0000200000000180 RSI: 0000000040107447 RDI: 0000000000000003 [ 728.350929][T15695] RBP: 00007fc4b10fb090 R08: 0000000000000000 R09: 0000000000000000 [ 728.358977][T15695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.367016][T15695] R13: 00007fc4b0416128 R14: 00007fc4b0416090 R15: 00007ffc4e39e218 [ 728.375121][T15695] [ 728.391299][T15695] syz.1.3373: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 728.510820][T15695] CPU: 0 PID: 15695 Comm: syz.1.3373 Not tainted syzkaller #0 [ 728.518423][T15695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 728.528564][T15695] Call Trace: [ 728.531917][T15695] [ 728.534929][T15695] dump_stack_lvl+0x18c/0x250 [ 728.539715][T15695] ? show_regs_print_info+0x20/0x20 [ 728.545006][T15695] ? load_image+0x420/0x420 [ 728.549611][T15695] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 728.556116][T15695] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 728.562714][T15695] warn_alloc+0x246/0x340 [ 728.567135][T15695] ? __get_vm_area_node+0x125/0x370 [ 728.572435][T15695] ? zone_watermark_ok_safe+0x230/0x230 [ 728.578079][T15695] ? rcu_is_watching+0x15/0xb0 [ 728.582993][T15695] ? __get_vm_area_node+0x356/0x370 [ 728.588309][T15695] __vmalloc_node_range+0x393/0x1330 [ 728.593709][T15695] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 728.600461][T15695] ? free_vm_area+0x50/0x50 [ 728.605087][T15695] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 728.610715][T15695] __vmalloc+0x7a/0x90 [ 728.614877][T15695] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 728.620512][T15695] bpf_prog_alloc_no_stats+0x47/0x440 [ 728.625978][T15695] ? bpf_prog_alloc+0x2b/0x1a0 [ 728.630839][T15695] bpf_prog_alloc+0x3d/0x1a0 [ 728.635514][T15695] ? bpf_prog_create+0x61/0x200 [ 728.640464][T15695] bpf_prog_create+0x9e/0x200 [ 728.645250][T15695] ppp_get_filter+0x143/0x1d0 [ 728.650019][T15695] ? ppp_set_compress+0x730/0x730 [ 728.655192][T15695] ppp_ioctl+0xebf/0x1ac0 [ 728.659631][T15695] ? ppp_poll+0x250/0x250 [ 728.664040][T15695] ? __fget_files+0x28/0x4b0 [ 728.668759][T15695] ? bpf_lsm_file_ioctl+0x9/0x10 [ 728.673773][T15695] ? security_file_ioctl+0x80/0xa0 [ 728.678968][T15695] ? ppp_poll+0x250/0x250 [ 728.683383][T15695] __se_sys_ioctl+0xfd/0x170 [ 728.688069][T15695] do_syscall_64+0x55/0xb0 [ 728.692557][T15695] ? clear_bhb_loop+0x40/0x90 [ 728.697317][T15695] ? clear_bhb_loop+0x40/0x90 [ 728.702075][T15695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 728.708059][T15695] RIP: 0033:0x7fc4b019ce59 [ 728.712550][T15695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.732246][T15695] RSP: 002b:00007fc4b10fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 728.740790][T15695] RAX: ffffffffffffffda RBX: 00007fc4b0416090 RCX: 00007fc4b019ce59 [ 728.748958][T15695] RDX: 0000200000000180 RSI: 0000000040107447 RDI: 0000000000000003 [ 728.757016][T15695] RBP: 00007fc4b10fb090 R08: 0000000000000000 R09: 0000000000000000 [ 728.765066][T15695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.773219][T15695] R13: 00007fc4b0416128 R14: 00007fc4b0416090 R15: 00007ffc4e39e218 [ 728.781330][T15695] [ 729.098874][T15695] Mem-Info: [ 729.102094][T15695] active_anon:5788 inactive_anon:0 isolated_anon:0 [ 729.102094][T15695] active_file:19210 inactive_file:40200 isolated_file:0 [ 729.102094][T15695] unevictable:768 dirty:422 writeback:0 [ 729.102094][T15695] slab_reclaimable:10783 slab_unreclaimable:94467 [ 729.102094][T15695] mapped:25195 shmem:1361 pagetables:574 [ 729.102094][T15695] sec_pagetables:0 bounce:0 [ 729.102094][T15695] kernel_misc_reclaimable:0 [ 729.102094][T15695] free:1327774 free_pcp:10139 free_cma:0 [ 729.277360][T15695] Node 0 active_anon:23192kB inactive_anon:0kB active_file:76840kB inactive_file:160600kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100780kB dirty:1688kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10192kB pagetables:2244kB sec_pagetables:0kB all_unreclaimable? no [ 729.362137][T15695] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 729.472619][T15695] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 729.597007][T15695] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 729.602966][T15695] Node 0 DMA32 free:1397048kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22952kB inactive_anon:0kB active_file:76840kB inactive_file:159780kB unevictable:1536kB writepending:1688kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:19256kB local_pcp:11088kB free_cma:0kB [ 729.663114][T15695] lowmem_reserve[]: 0 0 0 0 0 [ 729.672784][T15695] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 729.700647][T15700] netlink: 'syz.3.3375': attribute type 10 has an invalid length. [ 729.733552][T15695] lowmem_reserve[]: 0 0 0 0 0 [ 729.743336][T15695] Node 1 Normal free:3893116kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20996kB local_pcp:8484kB free_cma:0kB [ 729.800359][T15695] lowmem_reserve[]: 0 0 0 0 0 [ 729.805194][T15695] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 729.827137][T15695] Node 0 DMA32: 664*4kB (ME) 524*8kB (UME) 1214*16kB (UME) 461*32kB (UME) 312*64kB (ME) 29*128kB (UME) 20*256kB (UM) 21*512kB (M) 9*1024kB (M) 5*2048kB (M) 315*4096kB (M) = 1390272kB [ 729.869925][T15695] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 729.885237][T15695] Node 1 Normal: 201*4kB (UME) 59*8kB (UME) 38*16kB (UME) 51*32kB (UME) 19*64kB (UE) 4*128kB (UME) 1*256kB (U) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3893116kB [ 729.904308][T15695] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 729.914821][T15695] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 729.924482][T15695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 729.934275][T15695] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 729.948325][T15695] 60771 total pagecache pages [ 729.953679][T15695] 0 pages in swap cache [ 729.962275][T15695] Free swap = 124996kB [ 729.966573][T15695] Total swap = 124996kB [ 729.973560][T15695] 2097051 pages RAM [ 729.980886][T15695] 0 pages HighMem/MovableOnly [ 729.985788][T15695] 416933 pages reserved [ 729.991884][T15695] 0 pages cma reserved [ 730.874776][T15731] netlink: 'syz.0.3390': attribute type 10 has an invalid length. [ 731.413582][T15754] FAULT_INJECTION: forcing a failure. [ 731.413582][T15754] name failslab, interval 1, probability 0, space 0, times 0 [ 731.447027][T15754] CPU: 0 PID: 15754 Comm: syz.2.3397 Not tainted syzkaller #0 [ 731.454585][T15754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 731.464690][T15754] Call Trace: [ 731.468010][T15754] [ 731.470978][T15754] dump_stack_lvl+0x18c/0x250 [ 731.475716][T15754] ? show_regs_print_info+0x20/0x20 [ 731.480968][T15754] ? load_image+0x420/0x420 [ 731.485516][T15754] ? __might_sleep+0xe0/0xe0 [ 731.490159][T15754] ? __lock_acquire+0x7d40/0x7d40 [ 731.495244][T15754] should_fail_ex+0x39d/0x4d0 [ 731.499984][T15754] should_failslab+0x9/0x20 [ 731.504563][T15754] slab_pre_alloc_hook+0x59/0x310 [ 731.509666][T15754] ? sctp_association_new+0x89/0x25c0 [ 731.515133][T15754] __kmem_cache_alloc_node+0x53/0x250 [ 731.520580][T15754] ? sctp_association_new+0x89/0x25c0 [ 731.526027][T15754] kmalloc_trace+0x2a/0xe0 [ 731.530518][T15754] sctp_association_new+0x89/0x25c0 [ 731.535784][T15754] ? sctp_do_bind+0x6bd/0x990 [ 731.540543][T15754] sctp_connect_new_asoc+0x2de/0x6a0 [ 731.545902][T15754] ? __sctp_connect+0xd80/0xd80 [ 731.550807][T15754] ? __local_bh_enable_ip+0x13a/0x1c0 [ 731.556241][T15754] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 731.561845][T15754] ? security_sctp_bind_connect+0x89/0xb0 [ 731.567604][T15754] sctp_sendmsg+0x15d2/0x2910 [ 731.572348][T15754] ? sctp_getsockopt+0xb60/0xb60 [ 731.577340][T15754] ? aa_sk_perm+0x83c/0x970 [ 731.581915][T15754] ? aa_af_perm+0x330/0x330 [ 731.586443][T15754] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 731.592890][T15754] ? sock_rps_record_flow+0x19/0x3f0 [ 731.598235][T15754] ? inet_sendmsg+0xe9/0x2f0 [ 731.602865][T15754] ? inet_send_prepare+0x260/0x260 [ 731.608030][T15754] ____sys_sendmsg+0x5ba/0x960 [ 731.612909][T15754] ? __lock_acquire+0x7d40/0x7d40 [ 731.617967][T15754] ? __asan_memset+0x22/0x40 [ 731.622600][T15754] ? __sys_sendmsg_sock+0x30/0x30 [ 731.627653][T15754] ? __import_iovec+0x5f2/0x850 [ 731.632587][T15754] ? import_iovec+0x73/0xa0 [ 731.637123][T15754] ___sys_sendmsg+0x2a6/0x360 [ 731.641855][T15754] ? get_pid_task+0x20/0x1e0 [ 731.646487][T15754] ? __sys_sendmsg+0x2a0/0x2a0 [ 731.651326][T15754] ? __lock_acquire+0x7d40/0x7d40 [ 731.656521][T15754] __se_sys_sendmsg+0x1c2/0x2b0 [ 731.661430][T15754] ? __x64_sys_sendmsg+0x80/0x80 [ 731.666426][T15754] ? lockdep_hardirqs_on+0x98/0x150 [ 731.671678][T15754] do_syscall_64+0x55/0xb0 [ 731.676145][T15754] ? clear_bhb_loop+0x40/0x90 [ 731.680864][T15754] ? clear_bhb_loop+0x40/0x90 [ 731.685624][T15754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 731.691575][T15754] RIP: 0033:0x7f6ddcf9ce59 [ 731.696019][T15754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.715658][T15754] RSP: 002b:00007f6dddf38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 731.724102][T15754] RAX: ffffffffffffffda RBX: 00007f6ddd215fa0 RCX: 00007f6ddcf9ce59 [ 731.732097][T15754] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 000000000000003a [ 731.740095][T15754] RBP: 00007f6dddf38090 R08: 0000000000000000 R09: 0000000000000000 [ 731.748092][T15754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.756093][T15754] R13: 00007f6ddd216038 R14: 00007f6ddd215fa0 R15: 00007ffdec613488 [ 731.764112][T15754] [ 731.803258][T15756] syzkaller0: entered allmulticast mode [ 731.980211][T15760] netlink: 'syz.1.3402': attribute type 10 has an invalid length. [ 732.651450][T15776] netlink: 'syz.3.3408': attribute type 6 has an invalid length. [ 732.659997][T15776] netlink: 'syz.3.3408': attribute type 1 has an invalid length. [ 732.670455][T15776] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.3408'. [ 732.772845][T15782] FAULT_INJECTION: forcing a failure. [ 732.772845][T15782] name failslab, interval 1, probability 0, space 0, times 0 [ 732.812657][T15782] CPU: 1 PID: 15782 Comm: syz.2.3410 Not tainted syzkaller #0 [ 732.820217][T15782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 732.830335][T15782] Call Trace: [ 732.833679][T15782] [ 732.836656][T15782] dump_stack_lvl+0x18c/0x250 [ 732.841401][T15782] ? show_regs_print_info+0x20/0x20 [ 732.846666][T15782] ? load_image+0x420/0x420 [ 732.851232][T15782] ? __might_sleep+0xe0/0xe0 [ 732.855894][T15782] ? __lock_acquire+0x7d40/0x7d40 [ 732.860986][T15782] should_fail_ex+0x39d/0x4d0 [ 732.865734][T15782] should_failslab+0x9/0x20 [ 732.870304][T15782] slab_pre_alloc_hook+0x59/0x310 [ 732.875396][T15782] kmem_cache_alloc_node+0x60/0x320 [ 732.880661][T15782] ? __alloc_skb+0x103/0x2c0 [ 732.885307][T15782] __alloc_skb+0x103/0x2c0 [ 732.889785][T15782] __ip_append_data+0x2af5/0x3b80 [ 732.894892][T15782] ? raw_send_hdrinc+0x1140/0x1140 [ 732.900059][T15782] ? mark_lock+0x94/0x320 [ 732.904625][T15782] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 732.910669][T15782] ? ip_setup_cork+0x860/0x860 [ 732.915497][T15782] ? ip_setup_cork+0x530/0x860 [ 732.920326][T15782] ip_append_data+0x10d/0x180 [ 732.925065][T15782] ? raw_send_hdrinc+0x1140/0x1140 [ 732.930241][T15782] raw_sendmsg+0x15c1/0x1c00 [ 732.934897][T15782] ? compat_raw_ioctl+0x70/0x70 [ 732.939805][T15782] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 732.946252][T15782] ? sock_rps_record_flow+0x19/0x3f0 [ 732.951576][T15782] ? inet_sendmsg+0x7c/0x2f0 [ 732.956199][T15782] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 732.961521][T15782] ? security_socket_sendmsg+0x80/0xa0 [ 732.967026][T15782] ? inet_send_prepare+0x260/0x260 [ 732.972177][T15782] ____sys_sendmsg+0x5ba/0x960 [ 732.976980][T15782] ? __lock_acquire+0x7d40/0x7d40 [ 732.982041][T15782] ? __sys_sendmsg_sock+0x30/0x30 [ 732.987093][T15782] ? __import_iovec+0x3fa/0x850 [ 732.991983][T15782] ? import_iovec+0x73/0xa0 [ 732.996516][T15782] ___sys_sendmsg+0x2a6/0x360 [ 733.001221][T15782] ? get_pid_task+0x20/0x1e0 [ 733.005848][T15782] ? __sys_sendmsg+0x2a0/0x2a0 [ 733.010665][T15782] ? __lock_acquire+0x7d40/0x7d40 [ 733.015738][T15782] __se_sys_sendmsg+0x1c2/0x2b0 [ 733.020629][T15782] ? __x64_sys_sendmsg+0x80/0x80 [ 733.025789][T15782] ? lockdep_hardirqs_on+0x98/0x150 [ 733.031045][T15782] do_syscall_64+0x55/0xb0 [ 733.035507][T15782] ? clear_bhb_loop+0x40/0x90 [ 733.040226][T15782] ? clear_bhb_loop+0x40/0x90 [ 733.044941][T15782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 733.050876][T15782] RIP: 0033:0x7f6ddcf9ce59 [ 733.055325][T15782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.074968][T15782] RSP: 002b:00007f6dddf38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.083418][T15782] RAX: ffffffffffffffda RBX: 00007f6ddd215fa0 RCX: 00007f6ddcf9ce59 [ 733.091421][T15782] RDX: 0000000020002800 RSI: 0000200000001640 RDI: 0000000000000003 [ 733.099421][T15782] RBP: 00007f6dddf38090 R08: 0000000000000000 R09: 0000000000000000 [ 733.107422][T15782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.115425][T15782] R13: 00007f6ddd216038 R14: 00007f6ddd215fa0 R15: 00007ffdec613488 [ 733.123451][T15782] [ 733.220997][T15788] netlink: 'syz.3.3413': attribute type 10 has an invalid length. [ 733.758222][T15807] FAULT_INJECTION: forcing a failure. [ 733.758222][T15807] name failslab, interval 1, probability 0, space 0, times 0 [ 733.771264][T15807] CPU: 0 PID: 15807 Comm: syz.2.3422 Not tainted syzkaller #0 [ 733.778795][T15807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 733.788914][T15807] Call Trace: [ 733.792257][T15807] [ 733.795278][T15807] dump_stack_lvl+0x18c/0x250 [ 733.800025][T15807] ? show_regs_print_info+0x20/0x20 [ 733.805329][T15807] ? load_image+0x420/0x420 [ 733.809899][T15807] ? skb_network_protocol+0x51f/0x780 [ 733.815354][T15807] ? perf_trace_lock_acquire+0x104/0x410 [ 733.821060][T15807] should_fail_ex+0x39d/0x4d0 [ 733.825804][T15807] should_failslab+0x9/0x20 [ 733.830376][T15807] slab_pre_alloc_hook+0x59/0x310 [ 733.835476][T15807] kmem_cache_alloc+0x5a/0x2d0 [ 733.840307][T15807] ? skb_clone+0x1eb/0x370 [ 733.844766][T15807] skb_clone+0x1eb/0x370 [ 733.849162][T15807] ? dev_queue_xmit_nit+0x212/0xbb0 [ 733.854508][T15807] dev_queue_xmit_nit+0x24d/0xbb0 [ 733.859572][T15807] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 733.864723][T15807] ? validate_xmit_skb+0x949/0xf60 [ 733.869874][T15807] dev_hard_start_xmit+0x148/0x740 [ 733.875044][T15807] __dev_queue_xmit+0x19a3/0x3660 [ 733.880120][T15807] ? __dev_queue_xmit+0x265/0x3660 [ 733.885276][T15807] ? netdev_core_pick_tx+0x340/0x340 [ 733.890599][T15807] ? __copy_skb_header+0xa3/0x4a0 [ 733.895661][T15807] ? __asan_memcpy+0x40/0x70 [ 733.900307][T15807] ? __skb_clone+0x63/0x790 [ 733.904851][T15807] ? __skb_clone+0x480/0x790 [ 733.909486][T15807] ? skb_clone+0x21f/0x370 [ 733.913940][T15807] __netlink_deliver_tap+0x5ab/0x830 [ 733.919287][T15807] ? netlink_deliver_tap+0x2e/0x1b0 [ 733.924539][T15807] netlink_deliver_tap+0x19c/0x1b0 [ 733.929692][T15807] netlink_unicast+0x72c/0x8d0 [ 733.934502][T15807] netlink_sendmsg+0x8d0/0xbf0 [ 733.939312][T15807] ? netlink_getsockopt+0x590/0x590 [ 733.944553][T15807] ? aa_sock_msg_perm+0x94/0x150 [ 733.949528][T15807] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 733.954864][T15807] ? security_socket_sendmsg+0x80/0xa0 [ 733.960367][T15807] ? netlink_getsockopt+0x590/0x590 [ 733.965610][T15807] ____sys_sendmsg+0x5ba/0x960 [ 733.970412][T15807] ? __asan_memset+0x22/0x40 [ 733.975050][T15807] ? __sys_sendmsg_sock+0x30/0x30 [ 733.980105][T15807] ? __import_iovec+0x5f2/0x850 [ 733.984987][T15807] ? import_iovec+0x73/0xa0 [ 733.989547][T15807] ___sys_sendmsg+0x2a6/0x360 [ 733.994284][T15807] ? get_pid_task+0x20/0x1e0 [ 733.998928][T15807] ? __sys_sendmsg+0x2a0/0x2a0 [ 734.003752][T15807] ? __lock_acquire+0x7d40/0x7d40 [ 734.008840][T15807] __se_sys_sendmsg+0x1c2/0x2b0 [ 734.013832][T15807] ? __x64_sys_sendmsg+0x80/0x80 [ 734.018819][T15807] ? lockdep_hardirqs_on+0x98/0x150 [ 734.024061][T15807] do_syscall_64+0x55/0xb0 [ 734.028512][T15807] ? clear_bhb_loop+0x40/0x90 [ 734.033216][T15807] ? clear_bhb_loop+0x40/0x90 [ 734.037922][T15807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 734.043875][T15807] RIP: 0033:0x7f6ddcf9ce59 [ 734.048322][T15807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.067968][T15807] RSP: 002b:00007f6dddf38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.076417][T15807] RAX: ffffffffffffffda RBX: 00007f6ddd215fa0 RCX: 00007f6ddcf9ce59 [ 734.084428][T15807] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 734.092434][T15807] RBP: 00007f6dddf38090 R08: 0000000000000000 R09: 0000000000000000 [ 734.100434][T15807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.108482][T15807] R13: 00007f6ddd216038 R14: 00007f6ddd215fa0 R15: 00007ffdec613488 [ 734.116502][T15807] [ 734.187051][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 734.275118][T15811] netlink: 'syz.0.3424': attribute type 12 has an invalid length. [ 734.314033][T15811] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3424'. [ 734.967508][T15815] netlink: 'syz.1.3425': attribute type 10 has an invalid length. [ 736.224324][T15839] FAULT_INJECTION: forcing a failure. [ 736.224324][T15839] name failslab, interval 1, probability 0, space 0, times 0 [ 736.247266][T15839] CPU: 1 PID: 15839 Comm: syz.3.3435 Not tainted syzkaller #0 [ 736.254824][T15839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 736.264937][T15839] Call Trace: [ 736.268264][T15839] [ 736.271247][T15839] dump_stack_lvl+0x18c/0x250 [ 736.275983][T15839] ? fib_rules_lookup+0x9c/0xb40 [ 736.280981][T15839] ? show_regs_print_info+0x20/0x20 [ 736.286243][T15839] ? load_image+0x420/0x420 [ 736.290890][T15839] ? fib_rules_lookup+0x9c/0xb40 [ 736.295900][T15839] should_fail_ex+0x39d/0x4d0 [ 736.300657][T15839] should_failslab+0x9/0x20 [ 736.305237][T15839] slab_pre_alloc_hook+0x59/0x310 [ 736.310340][T15839] kmem_cache_alloc+0x5a/0x2d0 [ 736.315157][T15839] ? dst_alloc+0x105/0x170 [ 736.319626][T15839] dst_alloc+0x105/0x170 [ 736.323914][T15839] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 736.330022][T15839] ? ip_route_output_key_hash_rcu+0x1321/0x2370 [ 736.336310][T15839] ? ip_route_output_key_hash+0x13d/0x330 [ 736.342078][T15839] ip_route_output_key_hash+0x1f3/0x330 [ 736.347665][T15839] ? ip_route_input_rcu+0x30f0/0x30f0 [ 736.353086][T15839] ? rcu_force_quiescent_state+0x230/0x230 [ 736.358944][T15839] ip_route_output_flow+0x2a/0x150 [ 736.364086][T15839] ? security_sk_classify_flow+0x7b/0x90 [ 736.369768][T15839] tcp_v4_connect+0x7ad/0x18e0 [ 736.374569][T15839] ? __stack_depot_save+0x1f/0x630 [ 736.379732][T15839] ? tcp_twsk_unique+0x990/0x990 [ 736.384712][T15839] __inet_stream_connect+0x254/0xdc0 [ 736.390062][T15839] ? inet_dgram_connect+0x360/0x360 [ 736.395318][T15839] tcp_sendmsg_fastopen+0x3a7/0x5d0 [ 736.400552][T15839] tcp_sendmsg_locked+0x4621/0x4bd0 [ 736.405793][T15839] ? verify_lock_unused+0x140/0x140 [ 736.411029][T15839] ? verify_lock_unused+0x140/0x140 [ 736.416276][T15839] ? __might_sleep+0xe0/0xe0 [ 736.420913][T15839] ? mark_lock+0x94/0x320 [ 736.425281][T15839] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 736.431303][T15839] ? lock_chain_count+0x20/0x20 [ 736.436207][T15839] ? tcp_set_state+0x680/0x680 [ 736.441018][T15839] tcp_sendmsg+0x2f/0x50 [ 736.445292][T15839] ? inet_send_prepare+0x260/0x260 [ 736.450445][T15839] ____sys_sendmsg+0x5ba/0x960 [ 736.455244][T15839] ? __lock_acquire+0x7d40/0x7d40 [ 736.460312][T15839] ? __asan_memset+0x22/0x40 [ 736.464946][T15839] ? __sys_sendmsg_sock+0x30/0x30 [ 736.470005][T15839] ? __import_iovec+0x3fa/0x850 [ 736.474895][T15839] ? import_iovec+0x73/0xa0 [ 736.479435][T15839] ___sys_sendmsg+0x2a6/0x360 [ 736.484147][T15839] ? get_pid_task+0x20/0x1e0 [ 736.488784][T15839] ? __sys_sendmsg+0x2a0/0x2a0 [ 736.493605][T15839] ? __lock_acquire+0x7d40/0x7d40 [ 736.498688][T15839] __se_sys_sendmsg+0x1c2/0x2b0 [ 736.503579][T15839] ? __x64_sys_sendmsg+0x80/0x80 [ 736.508596][T15839] ? lockdep_hardirqs_on+0x98/0x150 [ 736.513841][T15839] do_syscall_64+0x55/0xb0 [ 736.518298][T15839] ? clear_bhb_loop+0x40/0x90 [ 736.523006][T15839] ? clear_bhb_loop+0x40/0x90 [ 736.527711][T15839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 736.533639][T15839] RIP: 0033:0x7ff5c699ce59 [ 736.538104][T15839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.557746][T15839] RSP: 002b:00007ff5c78fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 736.566194][T15839] RAX: ffffffffffffffda RBX: 00007ff5c6c15fa0 RCX: 00007ff5c699ce59 [ 736.574194][T15839] RDX: 00000000200000d2 RSI: 0000200000000080 RDI: 0000000000000003 [ 736.582198][T15839] RBP: 00007ff5c78fd090 R08: 0000000000000000 R09: 0000000000000000 [ 736.590204][T15839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.598214][T15839] R13: 00007ff5c6c16038 R14: 00007ff5c6c15fa0 R15: 00007ffcf1af2e68 [ 736.606232][T15839] [ 736.660227][T15844] netlink: 'syz.1.3436': attribute type 10 has an invalid length. [ 736.838499][T15848] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3439'. [ 736.864266][T15848] openvswitch: netlink: Key type 4112 is out of range max 32 [ 738.526433][T15889] FAULT_INJECTION: forcing a failure. [ 738.526433][T15889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.542121][T15889] CPU: 0 PID: 15889 Comm: syz.0.3456 Not tainted syzkaller #0 [ 738.549695][T15889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 738.559829][T15889] Call Trace: [ 738.563181][T15889] [ 738.566201][T15889] dump_stack_lvl+0x18c/0x250 [ 738.570988][T15889] ? show_regs_print_info+0x20/0x20 [ 738.576274][T15889] ? load_image+0x420/0x420 [ 738.580878][T15889] ? __lock_acquire+0x7d40/0x7d40 [ 738.585997][T15889] ? snprintf+0xe9/0x140 [ 738.590353][T15889] should_fail_ex+0x39d/0x4d0 [ 738.595155][T15889] _copy_to_user+0x2f/0xa0 [ 738.599672][T15889] simple_read_from_buffer+0xe7/0x150 [ 738.605162][T15889] proc_fail_nth_read+0x1e8/0x260 [ 738.610289][T15889] ? proc_fault_inject_write+0x360/0x360 [ 738.616032][T15889] ? fsnotify_perm+0x271/0x5e0 [ 738.620892][T15889] ? proc_fault_inject_write+0x360/0x360 [ 738.626677][T15889] vfs_read+0x28b/0x970 [ 738.630957][T15889] ? kernel_read+0x1e0/0x1e0 [ 738.635645][T15889] ? __fget_files+0x28/0x4b0 [ 738.640321][T15889] ? __fget_files+0x28/0x4b0 [ 738.645008][T15889] ? __fget_files+0x43d/0x4b0 [ 738.649820][T15889] ? __fdget_pos+0x2a3/0x330 [ 738.654550][T15889] ? ksys_read+0x75/0x260 [ 738.659026][T15889] ksys_read+0x150/0x260 [ 738.663377][T15889] ? vfs_write+0x990/0x990 [ 738.667898][T15889] ? lockdep_hardirqs_on+0x98/0x150 [ 738.673203][T15889] do_syscall_64+0x55/0xb0 [ 738.677698][T15889] ? clear_bhb_loop+0x40/0x90 [ 738.682448][T15889] ? clear_bhb_loop+0x40/0x90 [ 738.687212][T15889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 738.693191][T15889] RIP: 0033:0x7f2384b5d68e [ 738.697686][T15889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 738.717383][T15889] RSP: 002b:00007f2385a45fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 738.725896][T15889] RAX: ffffffffffffffda RBX: 00007f2385a466c0 RCX: 00007f2384b5d68e [ 738.733959][T15889] RDX: 000000000000000f RSI: 00007f2385a460a0 RDI: 0000000000000005 [ 738.742008][T15889] RBP: 00007f2385a46090 R08: 0000000000000000 R09: 0000000000000000 [ 738.750077][T15889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.758136][T15889] R13: 00007f2384e16038 R14: 00007f2384e15fa0 R15: 00007fff1d3a0028 [ 738.766266][T15889] [ 740.217463][T15920] syzkaller0: entered promiscuous mode [ 740.225435][T15920] syzkaller0: entered allmulticast mode [ 742.720789][T15935] FAULT_INJECTION: forcing a failure. [ 742.720789][T15935] name failslab, interval 1, probability 0, space 0, times 0 [ 742.733923][T15935] CPU: 0 PID: 15935 Comm: syz.3.3474 Not tainted syzkaller #0 [ 742.741430][T15935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 742.751540][T15935] Call Trace: [ 742.754844][T15935] [ 742.757795][T15935] dump_stack_lvl+0x18c/0x250 [ 742.762513][T15935] ? show_regs_print_info+0x20/0x20 [ 742.767746][T15935] ? load_image+0x420/0x420 [ 742.772291][T15935] ? __might_sleep+0xe0/0xe0 [ 742.776926][T15935] ? __lock_acquire+0x7d40/0x7d40 [ 742.782004][T15935] should_fail_ex+0x39d/0x4d0 [ 742.786712][T15935] should_failslab+0x9/0x20 [ 742.791252][T15935] slab_pre_alloc_hook+0x59/0x310 [ 742.796325][T15935] ? finish_task_switch+0x265/0x8f0 [ 742.801549][T15935] ? rtnl_newlink+0x10d/0x20a0 [ 742.806336][T15935] __kmem_cache_alloc_node+0x53/0x250 [ 742.811751][T15935] ? rtnl_newlink+0x10d/0x20a0 [ 742.816560][T15935] kmalloc_trace+0x2a/0xe0 [ 742.821019][T15935] ? rtnl_setlink+0x4e0/0x4e0 [ 742.825741][T15935] rtnl_newlink+0x10d/0x20a0 [ 742.830401][T15935] ? __mutex_lock+0x94c/0xcc0 [ 742.835129][T15935] ? __lock_acquire+0x7d40/0x7d40 [ 742.840181][T15935] ? do_raw_spin_lock+0x11f/0x2c0 [ 742.845228][T15935] ? rtnl_setlink+0x4e0/0x4e0 [ 742.849953][T15935] ? __rwlock_init+0x150/0x150 [ 742.854790][T15935] ? do_raw_spin_unlock+0x121/0x230 [ 742.860125][T15935] ? __mutex_lock+0x956/0xcc0 [ 742.864848][T15935] ? __mutex_lock+0x4f9/0xcc0 [ 742.869561][T15935] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 742.874718][T15935] ? mutex_lock_nested+0x20/0x20 [ 742.879705][T15935] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 742.884869][T15935] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 742.890028][T15935] ? rtnl_setlink+0x4e0/0x4e0 [ 742.894768][T15935] rtnetlink_rcv_msg+0x869/0xfa0 [ 742.899766][T15935] ? rtnetlink_bind+0x80/0x80 [ 742.904494][T15935] ? trace_call_bpf+0xc3/0x6c0 [ 742.909315][T15935] ? trace_call_bpf+0xc3/0x6c0 [ 742.914132][T15935] ? __lock_acquire+0x7d40/0x7d40 [ 742.919187][T15935] ? __local_bh_enable_ip+0x13a/0x1c0 [ 742.924619][T15935] ? trace_call_bpf+0xc3/0x6c0 [ 742.929424][T15935] ? trace_call_bpf+0xc3/0x6c0 [ 742.934272][T15935] ? trace_call_bpf+0x5e9/0x6c0 [ 742.939183][T15935] ? __dev_queue_xmit+0x265/0x3660 [ 742.944338][T15935] ? trace_call_bpf+0xc3/0x6c0 [ 742.949190][T15935] ? __dev_queue_xmit+0x1b2c/0x3660 [ 742.954464][T15935] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 742.960602][T15935] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 742.966452][T15935] ? perf_trace_lock+0x304/0x3b0 [ 742.971483][T15935] netlink_rcv_skb+0x241/0x4d0 [ 742.976282][T15935] ? rtnetlink_bind+0x80/0x80 [ 742.981022][T15935] ? netlink_ack+0x1180/0x1180 [ 742.985834][T15935] ? __lock_acquire+0x7d40/0x7d40 [ 742.990923][T15935] ? netlink_deliver_tap+0x2e/0x1b0 [ 742.996169][T15935] netlink_unicast+0x751/0x8d0 [ 743.000987][T15935] netlink_sendmsg+0x8d0/0xbf0 [ 743.005786][T15935] ? perf_trace_lock+0x304/0x3b0 [ 743.010797][T15935] ? netlink_getsockopt+0x590/0x590 [ 743.016047][T15935] ? aa_sock_msg_perm+0x94/0x150 [ 743.021041][T15935] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 743.026372][T15935] ? security_socket_sendmsg+0x80/0xa0 [ 743.031869][T15935] ? netlink_getsockopt+0x590/0x590 [ 743.037116][T15935] ____sys_sendmsg+0x5ba/0x960 [ 743.041930][T15935] ? __asan_memset+0x22/0x40 [ 743.046560][T15935] ? __sys_sendmsg_sock+0x30/0x30 [ 743.051619][T15935] ? __import_iovec+0x5f2/0x850 [ 743.056511][T15935] ? import_iovec+0x73/0xa0 [ 743.061049][T15935] ___sys_sendmsg+0x2a6/0x360 [ 743.065770][T15935] ? __sys_sendmsg+0x2a0/0x2a0 [ 743.070584][T15935] ? __lock_acquire+0x7d40/0x7d40 [ 743.075661][T15935] __se_sys_sendmsg+0x1c2/0x2b0 [ 743.080551][T15935] ? __x64_sys_sendmsg+0x80/0x80 [ 743.085558][T15935] ? lockdep_hardirqs_on+0x98/0x150 [ 743.090803][T15935] do_syscall_64+0x55/0xb0 [ 743.095255][T15935] ? clear_bhb_loop+0x40/0x90 [ 743.099960][T15935] ? clear_bhb_loop+0x40/0x90 [ 743.104669][T15935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 743.110601][T15935] RIP: 0033:0x7ff5c699ce59 [ 743.115046][T15935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.134682][T15935] RSP: 002b:00007ff5c78fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 743.143124][T15935] RAX: ffffffffffffffda RBX: 00007ff5c6c15fa0 RCX: 00007ff5c699ce59 [ 743.151121][T15935] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 743.159115][T15935] RBP: 00007ff5c78fd090 R08: 0000000000000000 R09: 0000000000000000 [ 743.167115][T15935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.175108][T15935] R13: 00007ff5c6c16038 R14: 00007ff5c6c15fa0 R15: 00007ffcf1af2e68 [ 743.183147][T15935] [ 743.737557][T15967] FAULT_INJECTION: forcing a failure. [ 743.737557][T15967] name failslab, interval 1, probability 0, space 0, times 0 [ 743.754168][T15967] CPU: 0 PID: 15967 Comm: syz.3.3488 Not tainted syzkaller #0 [ 743.761742][T15967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 743.771964][T15967] Call Trace: [ 743.775371][T15967] [ 743.778385][T15967] dump_stack_lvl+0x18c/0x250 [ 743.783167][T15967] ? show_regs_print_info+0x20/0x20 [ 743.788448][T15967] ? load_image+0x420/0x420 [ 743.793068][T15967] ? __might_sleep+0xe0/0xe0 [ 743.797747][T15967] ? __lock_acquire+0x7d40/0x7d40 [ 743.802872][T15967] should_fail_ex+0x39d/0x4d0 [ 743.807662][T15967] should_failslab+0x9/0x20 [ 743.812253][T15967] slab_pre_alloc_hook+0x59/0x310 [ 743.817419][T15967] ? __lock_acquire+0x7d40/0x7d40 [ 743.822619][T15967] ? kvmalloc_node+0x70/0x180 [ 743.827383][T15967] ? kvmalloc_node+0x70/0x180 [ 743.832157][T15967] __kmem_cache_alloc_node+0x53/0x250 [ 743.837617][T15967] ? __schedule_delayed_monitor_work+0x200/0x200 [ 743.844042][T15967] ? kvmalloc_node+0x70/0x180 [ 743.848804][T15967] __kmalloc_node+0xa4/0x230 [ 743.853509][T15967] kvmalloc_node+0x70/0x180 [ 743.858123][T15967] bpf_test_run_xdp_live+0x1c2/0x1b20 [ 743.863605][T15967] ? 0xffffffffa0004740 [ 743.867821][T15967] ? 0xffffffffa0004740 [ 743.872034][T15967] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 743.877988][T15967] ? 0xffffffffa0004740 [ 743.882222][T15967] ? xdp_convert_md_to_buff+0x330/0x330 [ 743.887959][T15967] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 743.894270][T15967] ? _copy_from_user+0xa5/0xe0 [ 743.899096][T15967] ? bpf_test_init+0x119/0x140 [ 743.903918][T15967] ? xdp_convert_md_to_buff+0x5b/0x330 [ 743.909455][T15967] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 743.914933][T15967] ? dev_put+0x80/0x80 [ 743.919104][T15967] ? dev_put+0x80/0x80 [ 743.923243][T15967] bpf_prog_test_run+0x321/0x390 [ 743.928251][T15967] __sys_bpf+0x49d/0x890 [ 743.932574][T15967] ? bpf_link_show_fdinfo+0x390/0x390 [ 743.938122][T15967] ? lock_chain_count+0x20/0x20 [ 743.943050][T15967] __x64_sys_bpf+0x7c/0x90 [ 743.947522][T15967] do_syscall_64+0x55/0xb0 [ 743.951991][T15967] ? clear_bhb_loop+0x40/0x90 [ 743.956714][T15967] ? clear_bhb_loop+0x40/0x90 [ 743.961454][T15967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 743.967408][T15967] RIP: 0033:0x7ff5c699ce59 [ 743.971880][T15967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.991540][T15967] RSP: 002b:00007ff5c78fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 744.000012][T15967] RAX: ffffffffffffffda RBX: 00007ff5c6c15fa0 RCX: 00007ff5c699ce59 [ 744.008036][T15967] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 744.016061][T15967] RBP: 00007ff5c78fd090 R08: 0000000000000000 R09: 0000000000000000 [ 744.024083][T15967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.032100][T15967] R13: 00007ff5c6c16038 R14: 00007ff5c6c15fa0 R15: 00007ffcf1af2e68 [ 744.040167][T15967] [ 744.250617][T15973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 744.397094][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 744.815148][T15983] ================================================================== [ 744.823312][T15983] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 744.831200][T15983] Write of size 32 at addr ffff888022e4f890 by task syz.2.3494/15983 [ 744.839347][T15983] [ 744.841722][T15983] CPU: 1 PID: 15983 Comm: syz.2.3494 Not tainted syzkaller #0 [ 744.849235][T15983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 744.859340][T15983] Call Trace: [ 744.859729][T15992] FAULT_INJECTION: forcing a failure. [ 744.859729][T15992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.862646][T15983] [ 744.862658][T15983] dump_stack_lvl+0x18c/0x250 [ 744.883434][T15983] ? __lock_acquire+0x7d40/0x7d40 [ 744.888518][T15983] ? show_regs_print_info+0x20/0x20 [ 744.893771][T15983] ? load_image+0x420/0x420 [ 744.898339][T15983] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 744.903859][T15983] ? __virt_addr_valid+0x18c/0x540 [ 744.909025][T15983] ? __virt_addr_valid+0x469/0x540 [ 744.914192][T15983] print_report+0xa8/0x210 [ 744.918675][T15983] ? __bpf_get_stackid+0x6bf/0x900 [ 744.923971][T15983] kasan_report+0x117/0x150 [ 744.928530][T15983] ? __bpf_get_stackid+0x6bf/0x900 [ 744.933717][T15983] kasan_check_range+0x241/0x290 [ 744.938717][T15983] ? __bpf_get_stackid+0x6bf/0x900 [ 744.943907][T15983] __asan_memcpy+0x40/0x70 [ 744.948380][T15983] __bpf_get_stackid+0x6bf/0x900 [ 744.953386][T15983] bpf_get_stackid_pe+0x2f0/0x410 [ 744.958468][T15983] bpf_prog_dc8122861f23e86a+0x33/0x43 [ 744.963981][T15983] bpf_overflow_handler+0x1fc/0x510 [ 744.969245][T15983] ? bpf_overflow_handler+0xde/0x510 [ 744.974596][T15983] ? tp_perf_event_destroy+0x20/0x20 [ 744.979942][T15983] ? mark_lock+0x94/0x320 [ 744.984317][T15983] ? __perf_event_account_interrupt+0x187/0x280 [ 744.990612][T15983] __perf_event_overflow+0x447/0x630 [ 744.995964][T15983] perf_swevent_overflow+0x268/0x340 [ 745.001325][T15983] ? perf_event_switch_output+0x790/0x790 [ 745.007122][T15983] ? rcu_is_watching+0x15/0xb0 [ 745.011960][T15983] perf_swevent_event+0x45c/0x570 [ 745.017060][T15983] ? perf_tp_event+0x1520/0x1520 [ 745.022059][T15983] ? perf_trace_lock_acquire+0x104/0x410 [ 745.027817][T15983] ___perf_sw_event+0x4a7/0x730 [ 745.032735][T15983] ? ___perf_sw_event+0x199/0x730 [ 745.037827][T15983] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 745.044298][T15983] ? task_mm_cid_work+0x31d/0x770 [ 745.049430][T15983] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 745.055654][T15983] ? lockdep_hardirqs_on+0x98/0x150 [ 745.060928][T15983] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 745.067153][T15983] __perf_sw_event+0x139/0x270 [ 745.071971][T15983] do_user_addr_fault+0x123e/0x12c0 [ 745.077243][T15983] ? rcu_is_watching+0x15/0xb0 [ 745.082086][T15983] exc_page_fault+0x64/0x100 [ 745.086750][T15983] ? clear_bhb_loop+0x40/0x90 [ 745.091484][T15983] asm_exc_page_fault+0x26/0x30 [ 745.096389][T15983] RIP: 0033:0x7ffdec704a21 [ 745.100848][T15983] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36 [ 745.120608][T15983] RSP: 002b:00007f6dddf37ff0 EFLAGS: 00010203 [ 745.126748][T15983] RAX: 002c5b8a49686a5e RBX: 00007ffdec7000b0 RCX: 0000000000000018 [ 745.134775][T15983] RDX: 000000002d30bfd9 RSI: 00007f6dddf380b0 RDI: 7fffffffffffffff [ 745.142799][T15983] RBP: 00007f6dddf38030 R08: 00000000000002e8 R09: 0000000000745d1e [ 745.150840][T15983] R10: 0000017f7cbb12d4 R11: 00000000000231d6 R12: 0000000000000010 [ 745.158864][T15983] R13: 00007f6ddd216038 R14: 00007ffdec700080 R15: 00000000000231d6 [ 745.166898][T15983] [ 745.169962][T15983] [ 745.172322][T15983] Allocated by task 15983: [ 745.176778][T15983] kasan_set_track+0x4e/0x70 [ 745.181422][T15983] __kasan_kmalloc+0x8f/0xa0 [ 745.186068][T15983] __kmalloc_node+0xb4/0x230 [ 745.190724][T15983] bpf_map_area_alloc+0x5e/0x110 [ 745.191862][T15992] CPU: 0 PID: 15992 Comm: syz.1.3496 Not tainted syzkaller #0 [ 745.195713][T15983] prealloc_elems_and_freelist+0x86/0x1c0 [ 745.203195][T15992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 745.208930][T15983] stack_map_alloc+0x33a/0x4c0 [ 745.219013][T15992] Call Trace: [ 745.223797][T15983] map_create+0x877/0x12f0 [ 745.227117][T15992] [ 745.231529][T15983] __sys_bpf+0x651/0x890 [ 745.234490][T15992] dump_stack_lvl+0x18c/0x250 [ 745.238727][T15983] __x64_sys_bpf+0x7c/0x90 [ 745.243450][T15992] ? show_regs_print_info+0x20/0x20 [ 745.247843][T15983] do_syscall_64+0x55/0xb0 [ 745.253070][T15992] ? load_image+0x420/0x420 [ 745.257479][T15983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.262045][T15992] ? __might_fault+0xaa/0x120 [ 745.268010][T15983] [ 745.268017][T15983] Last potentially related work creation: [ 745.268025][T15983] kasan_save_stack+0x3e/0x60 [ 745.272709][T15992] ? __lock_acquire+0x7d40/0x7d40 [ 745.275038][T15983] __kasan_record_aux_stack+0xaf/0xc0 [ 745.280811][T15992] should_fail_ex+0x39d/0x4d0 [ 745.285457][T15983] kvfree_call_rcu+0xee/0x790 [ 745.290637][T15992] _copy_from_iter+0x1d9/0x12e0 [ 745.295947][T15983] trie_update_elem+0xa3f/0xea0 [ 745.300660][T15992] ? slab_post_alloc_hook+0x8a/0x4b0 [ 745.305337][T15983] bpf_map_update_value+0x660/0x720 [ 745.310225][T15992] ? __virt_addr_valid+0x18c/0x540 [ 745.315169][T15983] generic_map_update_batch+0x5ec/0x810 [ 745.320473][T15992] ? __lock_acquire+0x7d40/0x7d40 [ 745.325672][T15983] bpf_map_do_batch+0x3d7/0x610 [ 745.330818][T15992] ? rcu_is_watching+0x15/0xb0 [ 745.336362][T15983] __sys_bpf+0x381/0x890 [ 745.341441][T15992] ? copyout_mc+0x70/0x70 [ 745.346262][T15983] __x64_sys_bpf+0x7c/0x90 [ 745.351046][T15992] ? __virt_addr_valid+0x18c/0x540 [ 745.355292][T15983] do_syscall_64+0x55/0xb0 [ 745.359647][T15992] ? __virt_addr_valid+0x18c/0x540 [ 745.364059][T15983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.369196][T15992] ? __virt_addr_valid+0x469/0x540 [ 745.373606][T15983] [ 745.373614][T15983] The buggy address belongs to the object at ffff888022e4f880 [ 745.373614][T15983] which belongs to the cache kmalloc-cg-64 of size 64 [ 745.378762][T15992] ? __check_object_size+0x506/0xa20 [ 745.384636][T15983] The buggy address is located 16 bytes inside of [ 745.384636][T15983] allocated 40-byte region [ffff888022e4f880, ffff888022e4f8a8) [ 745.389797][T15992] netlink_sendmsg+0x76b/0xbf0 [ 745.392101][T15983] [ 745.392109][T15983] The buggy address belongs to the physical page: [ 745.392154][T15983] page:ffffea00008b93c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22e4f [ 745.406361][T15992] ? netlink_getsockopt+0x590/0x590 [ 745.411558][T15983] memcg:ffff88803045f601 [ 745.411570][T15983] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 745.425577][T15992] ? aa_sock_msg_perm+0x94/0x150 [ 745.430322][T15983] page_type: 0xffffffff() [ 745.430351][T15983] raw: 00fff00000000800 ffff888017c4da00 ffffea0000c5d400 0000000000000006 [ 745.432687][T15992] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 745.439185][T15983] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88803045f601 [ 745.449333][T15992] ? security_socket_sendmsg+0x80/0xa0 [ 745.454532][T15983] page dumped because: kasan: bad access detected [ 745.454573][T15983] page_owner tracks the page as allocated [ 745.458876][T15992] ? netlink_getsockopt+0x590/0x590 [ 745.466425][T15983] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5776, tgid 5776 (syz-executor), ts 570386202862, free_ts 570385316051 [ 745.471400][T15992] ____sys_sendmsg+0x5ba/0x960 [ 745.475735][T15983] post_alloc_hook+0x1c1/0x200 [ 745.484406][T15992] ? __asan_memset+0x22/0x40 [ 745.489619][T15983] get_page_from_freelist+0x1951/0x19e0 [ 745.498275][T15992] ? __sys_sendmsg_sock+0x30/0x30 [ 745.503732][T15983] __alloc_pages+0x1f0/0x460 [ 745.510162][T15992] ? __import_iovec+0x5f2/0x850 [ 745.515886][T15983] alloc_slab_page+0x5d/0x160 [ 745.521172][T15992] ? import_iovec+0x73/0xa0 [ 745.539504][T15983] new_slab+0x87/0x2d0 [ 745.544324][T15992] ___sys_sendmsg+0x2a6/0x360 [ 745.549059][T15983] ___slab_alloc+0xc5d/0x12f0 [ 745.553666][T15992] ? get_pid_task+0x20/0x1e0 [ 745.559204][T15983] __kmem_cache_alloc_node+0x19e/0x250 [ 745.564278][T15992] ? __sys_sendmsg+0x2a0/0x2a0 [ 745.568837][T15983] kmalloc_trace+0x2a/0xe0 [ 745.573929][T15992] ? __lock_acquire+0x7d40/0x7d40 [ 745.578383][T15983] alloc_fdtable+0xca/0x2c0 [ 745.583153][T15992] __se_sys_sendmsg+0x1c2/0x2b0 [ 745.586978][T15983] dup_fd+0x786/0xa50 [ 745.591710][T15992] ? __x64_sys_sendmsg+0x80/0x80 [ 745.596449][T15983] copy_files+0xc3/0x120 [ 745.601197][T15992] ? lockdep_hardirqs_on+0x98/0x150 [ 745.606515][T15983] copy_process+0x15ab/0x3dc0 [ 745.611320][T15992] do_syscall_64+0x55/0xb0 [ 745.615721][T15983] kernel_clone+0x24b/0x8a0 [ 745.620761][T15992] ? clear_bhb_loop+0x40/0x90 [ 745.625349][T15983] __x64_sys_clone+0x1b7/0x230 [ 745.630210][T15992] ? clear_bhb_loop+0x40/0x90 [ 745.634232][T15983] do_syscall_64+0x55/0xb0 [ 745.639192][T15992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.643423][T15983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.648641][T15992] RIP: 0033:0x7fc4b019ce59 [ 745.653315][T15983] page last free stack trace: [ 745.653325][T15983] free_unref_page_prepare+0x7b2/0x8c0 [ 745.657753][T15992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.662262][T15983] free_unref_page+0x32/0x2e0 [ 745.666956][T15992] RSP: 002b:00007fc4b111c028 EFLAGS: 00000246 [ 745.671730][T15983] vfree+0x1a6/0x320 [ 745.676424][T15992] ORIG_RAX: 000000000000002e [ 745.680840][T15983] do_ip6t_get_ctl+0xf21/0x1210 [ 745.686736][T15992] RAX: ffffffffffffffda RBX: 00007fc4b0415fa0 RCX: 00007fc4b019ce59 [ 745.692629][T15983] nf_getsockopt+0x262/0x280 [ 745.697068][T15992] RDX: 0000000004004084 RSI: 0000200000000100 RDI: 0000000000000003 [ 745.701748][T15983] ipv6_getsockopt+0x226/0x2e0 [ 745.707234][T15992] RBP: 00007fc4b111c090 R08: 0000000000000000 R09: 0000000000000000 [ 745.726854][T15983] do_sock_getsockopt+0x379/0x450 [ 745.731566][T15992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.737644][T15983] __x64_sys_getsockopt+0x1d6/0x280 [ 745.741567][T15992] R13: 00007fc4b0416038 R14: 00007fc4b0415fa0 R15: 00007ffc4e39e218 [ 745.746251][T15983] do_syscall_64+0x55/0xb0 [ 745.751264][T15992] [ 745.759162][T15983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.825294][T15983] [ 745.827654][T15983] Memory state around the buggy address: [ 745.833420][T15983] ffff888022e4f780: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 745.841524][T15983] ffff888022e4f800: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 745.849629][T15983] >ffff888022e4f880: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 745.857736][T15983] ^ [ 745.863152][T15983] ffff888022e4f900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 745.871282][T15983] ffff888022e4f980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 745.879386][T15983] ================================================================== [ 745.887501][T15983] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 745.894734][T15983] CPU: 1 PID: 15983 Comm: syz.2.3494 Not tainted syzkaller #0 [ 745.902227][T15983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 745.912325][T15983] Call Trace: [ 745.915650][T15983] [ 745.918627][T15983] dump_stack_lvl+0x18c/0x250 [ 745.923358][T15983] ? show_regs_print_info+0x20/0x20 [ 745.928605][T15983] ? load_image+0x420/0x420 [ 745.933165][T15983] panic+0x2dc/0x730 [ 745.937195][T15983] ? __lock_acquire+0x7d40/0x7d40 [ 745.942270][T15983] ? bpf_jit_dump+0xd0/0xd0 [ 745.946838][T15983] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 745.952800][T15983] ? _raw_spin_unlock+0x40/0x40 [ 745.957709][T15983] ? __bpf_get_stackid+0x6bf/0x900 [ 745.962866][T15983] check_panic_on_warn+0x84/0xa0 [ 745.967853][T15983] ? __bpf_get_stackid+0x6bf/0x900 [ 745.973011][T15983] end_report+0x6f/0x130 [ 745.977296][T15983] kasan_report+0x128/0x150 [ 745.981845][T15983] ? __bpf_get_stackid+0x6bf/0x900 [ 745.987020][T15983] kasan_check_range+0x241/0x290 [ 745.992011][T15983] ? __bpf_get_stackid+0x6bf/0x900 [ 745.997177][T15983] __asan_memcpy+0x40/0x70 [ 746.001664][T15983] __bpf_get_stackid+0x6bf/0x900 [ 746.006654][T15983] bpf_get_stackid_pe+0x2f0/0x410 [ 746.011735][T15983] bpf_prog_dc8122861f23e86a+0x33/0x43 [ 746.017243][T15983] bpf_overflow_handler+0x1fc/0x510 [ 746.022498][T15983] ? bpf_overflow_handler+0xde/0x510 [ 746.027893][T15983] ? tp_perf_event_destroy+0x20/0x20 [ 746.033254][T15983] ? mark_lock+0x94/0x320 [ 746.037631][T15983] ? __perf_event_account_interrupt+0x187/0x280 [ 746.043936][T15983] __perf_event_overflow+0x447/0x630 [ 746.049265][T15983] perf_swevent_overflow+0x268/0x340 [ 746.054608][T15983] ? perf_event_switch_output+0x790/0x790 [ 746.060384][T15983] ? rcu_is_watching+0x15/0xb0 [ 746.065198][T15983] perf_swevent_event+0x45c/0x570 [ 746.070276][T15983] ? perf_tp_event+0x1520/0x1520 [ 746.075259][T15983] ? perf_trace_lock_acquire+0x104/0x410 [ 746.081040][T15983] ___perf_sw_event+0x4a7/0x730 [ 746.085928][T15983] ? ___perf_sw_event+0x199/0x730 [ 746.090987][T15983] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 746.097429][T15983] ? task_mm_cid_work+0x31d/0x770 [ 746.102507][T15983] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 746.108695][T15983] ? lockdep_hardirqs_on+0x98/0x150 [ 746.113931][T15983] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 746.120121][T15983] __perf_sw_event+0x139/0x270 [ 746.124916][T15983] do_user_addr_fault+0x123e/0x12c0 [ 746.130162][T15983] ? rcu_is_watching+0x15/0xb0 [ 746.134975][T15983] exc_page_fault+0x64/0x100 [ 746.139605][T15983] ? clear_bhb_loop+0x40/0x90 [ 746.144310][T15983] asm_exc_page_fault+0x26/0x30 [ 746.149196][T15983] RIP: 0033:0x7ffdec704a21 [ 746.153636][T15983] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36 [ 746.173353][T15983] RSP: 002b:00007f6dddf37ff0 EFLAGS: 00010203 [ 746.179448][T15983] RAX: 002c5b8a49686a5e RBX: 00007ffdec7000b0 RCX: 0000000000000018 [ 746.187445][T15983] RDX: 000000002d30bfd9 RSI: 00007f6dddf380b0 RDI: 7fffffffffffffff [ 746.195440][T15983] RBP: 00007f6dddf38030 R08: 00000000000002e8 R09: 0000000000745d1e [ 746.203465][T15983] R10: 0000017f7cbb12d4 R11: 00000000000231d6 R12: 0000000000000010 [ 746.211466][T15983] R13: 00007f6ddd216038 R14: 00007ffdec700080 R15: 00000000000231d6 [ 746.219484][T15983] [ 746.223131][T15983] Kernel Offset: disabled [ 746.227485][T15983] Rebooting in 86400 seconds..