last executing test programs: 12.110296635s ago: executing program 1 (id=4479): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa5, 0xdeb}, 0x0, 0x0, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x5460, &(0x7f0000000000)=0xfffffffffffff2ff) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000080), 0xfa016798a36a392d}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b9cbbefce3babab}, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100048d4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20400, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0xe, 0x1, 0xfffff038}, {0x6, 0x5, 0x4, 0x8}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffffc}}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200)={'gre0', 0x32, 0x32}, 0x7) close(r3) 7.069930382s ago: executing program 0 (id=4490): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000001f7dc0d8000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffecd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000380)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 7.002706316s ago: executing program 2 (id=4491): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1, 0x2000}}, 0x10, 0x0}, 0x4040000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) 6.771021127s ago: executing program 0 (id=4492): close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) 6.599457776s ago: executing program 0 (id=4494): r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRESOCT=r0, @ANYRES16, @ANYRES16, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xfffffffa}, 0x8) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x42008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x17}, 0x0, 0xc8, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x7, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, 0x0, 0x8000) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) 6.465736652s ago: executing program 0 (id=4495): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000070000000500000004080000", @ANYRES32, @ANYBLOB="0120000000000000000000000000000000bf2af7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/17], 0x50) 6.411964644s ago: executing program 2 (id=4496): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0xc18f67e3097f9963, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000040000"], 0x50) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0xa, 0x0, &(0x7f0000000540)="e460334470b8d480eb00", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'macsec0\x00', @remote}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x27, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r3, r0, 0x4, r0}, 0x10) 6.09291018s ago: executing program 1 (id=4497): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20) sendmsg$inet(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="98"], 0x98}, 0x4000000) 4.912726578s ago: executing program 1 (id=4499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.699121069s ago: executing program 1 (id=4500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x48) socketpair(0x25, 0x800, 0x6, &(0x7f0000000000)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, 0xd0, 0x10000}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000001700)='cpu.weight.nice\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x20) 4.306073778s ago: executing program 1 (id=4501): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000001f7dc0d8000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffecd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000380)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.918052107s ago: executing program 0 (id=4502): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x1}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5c6fa8aec5e2d98b, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x3f}, 0x11368, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) close(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) write$cgroup_subtree(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0xa, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, @perf_config_ext={0x4, 0x10000080000001}, 0x0, 0x22, 0xfffffffe, 0x0, 0x0, 0x1, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{}, &(0x7f0000000300), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) 2.905531027s ago: executing program 2 (id=4503): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 2.726106746s ago: executing program 3 (id=4504): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 2.486898768s ago: executing program 3 (id=4505): r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xab, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11ef0, 0x4, 0x2, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x14, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.402418262s ago: executing program 2 (id=4506): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, 0x0, &(0x7f0000000300)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000240)='U', 0x1}], 0x1}, 0x20000044) 2.186177682s ago: executing program 2 (id=4507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x3, [@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local]}) 2.185905152s ago: executing program 3 (id=4508): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000080000000000, 0x802}, 0x110c40, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18006000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 1.62320712s ago: executing program 3 (id=4509): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x9e}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.550778843s ago: executing program 3 (id=4510): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x4, 0x0, 0x0, 0x66, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 99.824375ms ago: executing program 1 (id=4511): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 18.008029ms ago: executing program 3 (id=4512): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000000000400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280"], 0x50) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x86, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<-0||!') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_clone(0x4002003a, 0x0, 0x0, 0x0, 0x0, 0x0) 17.777869ms ago: executing program 0 (id=4513): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 2 (id=4514): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) kernel console output (not intermixed with test programs): etlink: 40 bytes leftover after parsing attributes in process `syz.2.3594'. [ 848.451075][T19170] bridge0: port 3(ipvlan1) entered blocking state [ 848.474092][T19170] bridge0: port 3(ipvlan1) entered disabled state [ 848.481853][T19170] ipvlan1: entered allmulticast mode [ 848.491618][T19170] veth0_vlan: entered allmulticast mode [ 848.499808][T19170] ipvlan1: left allmulticast mode [ 848.505267][T19170] veth0_vlan: left allmulticast mode [ 848.516737][T19170] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 848.737396][T19180] netlink: 'syz.2.3598': attribute type 19 has an invalid length. [ 848.813166][T19183] netlink: 'syz.2.3598': attribute type 19 has an invalid length. [ 849.117619][T19191] netlink: 'syz.2.3600': attribute type 10 has an invalid length. [ 849.185909][T19191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.217033][T19191] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 849.249477][T19197] netlink: 'syz.1.3603': attribute type 10 has an invalid length. [ 849.893301][T19210] netlink: 'syz.2.3609': attribute type 10 has an invalid length. [ 850.025343][T19210] team0: Device vxcan1 is of different type [ 850.143686][T19216] bridge0: port 3(batadv0) entered blocking state [ 850.166802][T19216] bridge0: port 3(batadv0) entered disabled state [ 850.180482][T19216] batadv0: entered allmulticast mode [ 850.214949][T19216] batadv0: entered promiscuous mode [ 850.233705][T19216] bridge0: port 3(batadv0) entered blocking state [ 850.242080][T19216] bridge0: port 3(batadv0) entered forwarding state [ 850.359928][T19219] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3607'. [ 850.389938][T19219] bridge0: port 4(ipvlan1) entered blocking state [ 850.403166][T19219] bridge0: port 4(ipvlan1) entered disabled state [ 850.416760][T19219] ipvlan1: entered allmulticast mode [ 850.426702][T19219] veth0_vlan: entered allmulticast mode [ 850.450686][T19219] ipvlan1: left allmulticast mode [ 850.460107][T19219] veth0_vlan: left allmulticast mode [ 850.469570][T19219] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 850.498818][T19221] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.3611'. [ 850.667093][ T3415] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 850.676920][ T3415] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 851.498788][T19242] FAULT_INJECTION: forcing a failure. [ 851.498788][T19242] name failslab, interval 1, probability 0, space 0, times 0 [ 851.549056][T19242] CPU: 1 PID: 19242 Comm: syz.2.3618 Not tainted syzkaller #0 [ 851.556599][T19242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 851.566801][T19242] Call Trace: [ 851.570129][T19242] [ 851.573102][T19242] dump_stack_lvl+0x18c/0x250 [ 851.577844][T19242] ? show_regs_print_info+0x20/0x20 [ 851.583079][T19242] ? load_image+0x400/0x400 [ 851.587595][T19242] ? __might_sleep+0xe0/0xe0 [ 851.592227][T19242] ? __lock_acquire+0x7d40/0x7d40 [ 851.597302][T19242] should_fail_ex+0x39d/0x4d0 [ 851.602034][T19242] should_failslab+0x9/0x20 [ 851.606579][T19242] slab_pre_alloc_hook+0x59/0x310 [ 851.611828][T19242] ? __inet_diag_dump_start+0x8b/0x9f0 [ 851.617335][T19242] __kmem_cache_alloc_node+0x53/0x250 [ 851.622839][T19242] ? __inet_diag_dump_start+0x8b/0x9f0 [ 851.628339][T19242] kmalloc_trace+0x2a/0xe0 [ 851.632813][T19242] __inet_diag_dump_start+0x8b/0x9f0 [ 851.638225][T19242] ? netlink_lookup+0x30/0x200 [ 851.643037][T19242] ? netlink_lookup+0x30/0x200 [ 851.647934][T19242] __netlink_dump_start+0x4a9/0x810 [ 851.653196][T19242] inet_diag_handler_cmd+0x1e1/0x2c0 [ 851.658528][T19242] ? inet_diag_unregister+0xb0/0xb0 [ 851.663785][T19242] ? inet_diag_handler_get_info+0x7a0/0x7a0 [ 851.669717][T19242] ? inet_diag_dump_start+0x20/0x20 [ 851.675043][T19242] ? inet_diag_dump+0x50/0x50 [ 851.679764][T19242] ? sock_diag_lock_handler+0x19/0x280 [ 851.685258][T19242] ? sock_diag_lock_handler+0x19/0x280 [ 851.690751][T19242] ? inet_diag_unregister+0xb0/0xb0 [ 851.695986][T19242] sock_diag_rcv_msg+0x3d8/0x600 [ 851.701055][T19242] netlink_rcv_skb+0x241/0x4d0 [ 851.705857][T19242] ? sock_diag_bind+0xb0/0xb0 [ 851.710576][T19242] ? netlink_ack+0x1180/0x1180 [ 851.715389][T19242] ? __lock_acquire+0x7d40/0x7d40 [ 851.720452][T19242] ? netlink_deliver_tap+0x2e/0x1b0 [ 851.725695][T19242] sock_diag_rcv+0x2a/0x40 [ 851.730141][T19242] netlink_unicast+0x751/0x8d0 [ 851.734982][T19242] netlink_sendmsg+0x8d0/0xbf0 [ 851.739824][T19242] ? netlink_getsockopt+0x590/0x590 [ 851.745168][T19242] ? aa_sock_msg_perm+0x94/0x150 [ 851.750159][T19242] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 851.755501][T19242] ? security_socket_sendmsg+0x80/0xa0 [ 851.760995][T19242] ? netlink_getsockopt+0x590/0x590 [ 851.766328][T19242] ____sys_sendmsg+0x5ba/0x960 [ 851.771138][T19242] ? __asan_memset+0x22/0x40 [ 851.775763][T19242] ? __sys_sendmsg_sock+0x30/0x30 [ 851.780815][T19242] ? __import_iovec+0x5f2/0x850 [ 851.785726][T19242] ? import_iovec+0x73/0xa0 [ 851.790352][T19242] ___sys_sendmsg+0x2a6/0x360 [ 851.795076][T19242] ? get_pid_task+0x20/0x1e0 [ 851.799720][T19242] ? __sys_sendmsg+0x2a0/0x2a0 [ 851.804540][T19242] ? __lock_acquire+0x7d40/0x7d40 [ 851.809634][T19242] __se_sys_sendmsg+0x1c2/0x2b0 [ 851.814622][T19242] ? __x64_sys_sendmsg+0x80/0x80 [ 851.819696][T19242] ? lockdep_hardirqs_on+0x98/0x150 [ 851.824937][T19242] do_syscall_64+0x55/0xa0 [ 851.829406][T19242] ? clear_bhb_loop+0x40/0x90 [ 851.834118][T19242] ? clear_bhb_loop+0x40/0x90 [ 851.838832][T19242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 851.844757][T19242] RIP: 0033:0x7fa06699c799 [ 851.849208][T19242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.868872][T19242] RSP: 002b:00007fa0678b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 851.877339][T19242] RAX: ffffffffffffffda RBX: 00007fa066c15fa0 RCX: 00007fa06699c799 [ 851.885405][T19242] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 851.893428][T19242] RBP: 00007fa0678b5090 R08: 0000000000000000 R09: 0000000000000000 [ 851.901531][T19242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.909554][T19242] R13: 00007fa066c16038 R14: 00007fa066c15fa0 R15: 00007ffe40f85a08 [ 851.917594][T19242] [ 852.241982][T19249] validate_nla: 4 callbacks suppressed [ 852.242035][T19249] netlink: 'syz.1.3622': attribute type 16 has an invalid length. [ 852.257947][T19249] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3622'. [ 852.269895][T19249] veth1_macvtap: entered allmulticast mode [ 852.504418][T19259] netlink: 'syz.0.3625': attribute type 10 has an invalid length. [ 852.624635][T19254] netlink: 'syz.2.3623': attribute type 4 has an invalid length. [ 852.635578][T19254] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3623'. [ 853.212483][T19254] .`: renamed from bond0 (while UP) [ 853.713674][T19279] netlink: 'syz.1.3629': attribute type 10 has an invalid length. [ 854.053312][T19288] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3633'. [ 854.817837][T19303] netlink: 'syz.1.3639': attribute type 4 has an invalid length. [ 854.827720][T19303] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3639'. [ 855.183990][T19303] .`: renamed from bond0 (while UP) [ 855.718070][T19321] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3645'. [ 855.729647][T19321] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3645'. [ 855.739448][T19321] FAULT_INJECTION: forcing a failure. [ 855.739448][T19321] name failslab, interval 1, probability 0, space 0, times 0 [ 855.753066][T19321] CPU: 1 PID: 19321 Comm: syz.0.3645 Not tainted syzkaller #0 [ 855.760581][T19321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 855.770660][T19321] Call Trace: [ 855.773952][T19321] [ 855.776893][T19321] dump_stack_lvl+0x18c/0x250 [ 855.781600][T19321] ? show_regs_print_info+0x20/0x20 [ 855.786821][T19321] ? load_image+0x400/0x400 [ 855.791349][T19321] ? perf_trace_lock+0xfc/0x3b0 [ 855.796225][T19321] should_fail_ex+0x39d/0x4d0 [ 855.800924][T19321] should_failslab+0x9/0x20 [ 855.805445][T19321] slab_pre_alloc_hook+0x59/0x310 [ 855.810606][T19321] kmem_cache_alloc+0x5a/0x2d0 [ 855.815388][T19321] ? skb_clone+0x1eb/0x370 [ 855.819823][T19321] skb_clone+0x1eb/0x370 [ 855.824078][T19321] __netlink_deliver_tap+0x41c/0x830 [ 855.829414][T19321] ? netlink_deliver_tap+0x2e/0x1b0 [ 855.834667][T19321] netlink_deliver_tap+0x19c/0x1b0 [ 855.839819][T19321] netlink_dump+0x94b/0xe50 [ 855.844367][T19321] ? netlink_lookup+0x200/0x200 [ 855.849248][T19321] ? netlink_autobind+0x300/0x300 [ 855.854289][T19321] ? netlink_lookup+0x30/0x200 [ 855.859079][T19321] ? netlink_lookup+0x30/0x200 [ 855.863863][T19321] __netlink_dump_start+0x5f1/0x810 [ 855.869085][T19321] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 855.874212][T19321] rtnetlink_rcv_msg+0xe1d/0xfa0 [ 855.879164][T19321] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 855.884350][T19321] ? rtnl_getlink+0xd20/0xd20 [ 855.889131][T19321] ? rtnetlink_bind+0x80/0x80 [ 855.893876][T19321] ? __dev_queue_xmit+0x265/0x3660 [ 855.899008][T19321] ? rtnl_getlink+0xd20/0xd20 [ 855.903872][T19321] ? perf_trace_lock+0xfc/0x3b0 [ 855.908746][T19321] netlink_rcv_skb+0x241/0x4d0 [ 855.913524][T19321] ? rtnetlink_bind+0x80/0x80 [ 855.918211][T19321] ? netlink_ack+0x1180/0x1180 [ 855.923065][T19321] ? __lock_acquire+0x7d40/0x7d40 [ 855.928396][T19321] ? netlink_deliver_tap+0x2e/0x1b0 [ 855.933778][T19321] netlink_unicast+0x751/0x8d0 [ 855.938612][T19321] netlink_sendmsg+0x8d0/0xbf0 [ 855.943411][T19321] ? netlink_getsockopt+0x590/0x590 [ 855.948721][T19321] ? aa_sock_msg_perm+0x94/0x150 [ 855.953772][T19321] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 855.959092][T19321] ? security_socket_sendmsg+0x80/0xa0 [ 855.964589][T19321] ? netlink_getsockopt+0x590/0x590 [ 855.969823][T19321] ____sys_sendmsg+0x5ba/0x960 [ 855.974618][T19321] ? __asan_memset+0x22/0x40 [ 855.979225][T19321] ? __sys_sendmsg_sock+0x30/0x30 [ 855.984386][T19321] ? __import_iovec+0x5f2/0x850 [ 855.989389][T19321] ? import_iovec+0x73/0xa0 [ 855.993924][T19321] ___sys_sendmsg+0x2a6/0x360 [ 855.998637][T19321] ? __sys_sendmsg+0x2a0/0x2a0 [ 856.003444][T19321] ? trace_call_bpf+0xc3/0x6c0 [ 856.008255][T19321] __se_sys_sendmsg+0x1c2/0x2b0 [ 856.013130][T19321] ? __x64_sys_sendmsg+0x80/0x80 [ 856.018091][T19321] ? lockdep_hardirqs_on+0x98/0x150 [ 856.023416][T19321] do_syscall_64+0x55/0xa0 [ 856.027856][T19321] ? clear_bhb_loop+0x40/0x90 [ 856.032549][T19321] ? clear_bhb_loop+0x40/0x90 [ 856.037415][T19321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 856.043364][T19321] RIP: 0033:0x7f083dd9c799 [ 856.047791][T19321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.067497][T19321] RSP: 002b:00007f083ec16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 856.076026][T19321] RAX: ffffffffffffffda RBX: 00007f083e015fa0 RCX: 00007f083dd9c799 [ 856.084011][T19321] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 856.091994][T19321] RBP: 00007f083ec16090 R08: 0000000000000000 R09: 0000000000000000 [ 856.100335][T19321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.108316][T19321] R13: 00007f083e016038 R14: 00007f083e015fa0 R15: 00007ffd9f0d9948 [ 856.116321][T19321] [ 856.163325][T19321] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3645'. [ 856.174862][T19321] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3645'. [ 856.263372][T19326] pim6reg1: entered allmulticast mode [ 857.164970][T19341] netlink: 'syz.0.3650': attribute type 10 has an invalid length. [ 858.323140][T19361] netlink: 'syz.1.3656': attribute type 10 has an invalid length. [ 858.339872][T19361] team0: Device vxcan1 is of different type [ 858.538643][T19363] netlink: 'syz.0.3658': attribute type 16 has an invalid length. [ 858.575791][T19363] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3658'. [ 858.596374][T19363] veth1_macvtap: entered allmulticast mode [ 858.624531][T19365] FAULT_INJECTION: forcing a failure. [ 858.624531][T19365] name failslab, interval 1, probability 0, space 0, times 0 [ 858.646206][T19365] CPU: 0 PID: 19365 Comm: syz.2.3659 Not tainted syzkaller #0 [ 858.653758][T19365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 858.663847][T19365] Call Trace: [ 858.667149][T19365] [ 858.670103][T19365] dump_stack_lvl+0x18c/0x250 [ 858.674814][T19365] ? show_regs_print_info+0x20/0x20 [ 858.680034][T19365] ? load_image+0x400/0x400 [ 858.684555][T19365] ? __might_sleep+0xe0/0xe0 [ 858.689156][T19365] ? __lock_acquire+0x7d40/0x7d40 [ 858.694326][T19365] should_fail_ex+0x39d/0x4d0 [ 858.699032][T19365] should_failslab+0x9/0x20 [ 858.703553][T19365] slab_pre_alloc_hook+0x59/0x310 [ 858.708596][T19365] ? finish_task_switch+0x265/0x8f0 [ 858.713809][T19365] ? rtnl_newlink+0x10d/0x20a0 [ 858.718585][T19365] __kmem_cache_alloc_node+0x53/0x250 [ 858.723978][T19365] ? rtnl_newlink+0x10d/0x20a0 [ 858.728757][T19365] kmalloc_trace+0x2a/0xe0 [ 858.733196][T19365] ? rtnl_setlink+0x4e0/0x4e0 [ 858.737904][T19365] rtnl_newlink+0x10d/0x20a0 [ 858.742560][T19365] ? __mutex_lock+0x94c/0xcc0 [ 858.747273][T19365] ? __lock_acquire+0x7d40/0x7d40 [ 858.752327][T19365] ? do_raw_spin_lock+0x11f/0x2c0 [ 858.757420][T19365] ? rtnl_setlink+0x4e0/0x4e0 [ 858.762311][T19365] ? __rwlock_init+0x150/0x150 [ 858.767109][T19365] ? do_raw_spin_unlock+0x121/0x230 [ 858.772603][T19365] ? __mutex_lock+0x956/0xcc0 [ 858.777303][T19365] ? __mutex_lock+0x4f9/0xcc0 [ 858.782016][T19365] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 858.787229][T19365] ? mutex_lock_nested+0x20/0x20 [ 858.792281][T19365] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 858.797402][T19365] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 858.802521][T19365] ? rtnl_setlink+0x4e0/0x4e0 [ 858.807215][T19365] rtnetlink_rcv_msg+0x869/0xfa0 [ 858.812259][T19365] ? lockdep_hardirqs_on+0x98/0x150 [ 858.817686][T19365] ? rtnetlink_bind+0x80/0x80 [ 858.822402][T19365] ? perf_trace_preemptirq_template+0xac/0x330 [ 858.828609][T19365] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 858.834613][T19365] ? lock_chain_count+0x20/0x20 [ 858.839497][T19365] ? __local_bh_enable_ip+0x13a/0x1c0 [ 858.844881][T19365] ? lockdep_hardirqs_on+0x98/0x150 [ 858.850180][T19365] ? __local_bh_enable_ip+0x13a/0x1c0 [ 858.855570][T19365] ? _local_bh_enable+0xa0/0xa0 [ 858.860441][T19365] ? __dev_queue_xmit+0x265/0x3660 [ 858.865595][T19365] ? __dev_queue_xmit+0x265/0x3660 [ 858.870853][T19365] ? __dev_queue_xmit+0x1b2c/0x3660 [ 858.876268][T19365] ? __dev_queue_xmit+0x265/0x3660 [ 858.881414][T19365] ? ref_tracker_free+0x690/0x840 [ 858.886490][T19365] netlink_rcv_skb+0x241/0x4d0 [ 858.891316][T19365] ? rtnetlink_bind+0x80/0x80 [ 858.896004][T19365] ? netlink_ack+0x1180/0x1180 [ 858.900881][T19365] ? __lock_acquire+0x7d40/0x7d40 [ 858.905933][T19365] ? netlink_deliver_tap+0x2e/0x1b0 [ 858.911172][T19365] netlink_unicast+0x751/0x8d0 [ 858.915980][T19365] netlink_sendmsg+0x8d0/0xbf0 [ 858.920765][T19365] ? netlink_getsockopt+0x590/0x590 [ 858.926586][T19365] ? aa_sock_msg_perm+0x94/0x150 [ 858.931712][T19365] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 858.937009][T19365] ? security_socket_sendmsg+0x80/0xa0 [ 858.942477][T19365] ? netlink_getsockopt+0x590/0x590 [ 858.947694][T19365] ____sys_sendmsg+0x5ba/0x960 [ 858.952480][T19365] ? __asan_memset+0x22/0x40 [ 858.957085][T19365] ? __sys_sendmsg_sock+0x30/0x30 [ 858.962489][T19365] ? __import_iovec+0x5f2/0x850 [ 858.967542][T19365] ? import_iovec+0x73/0xa0 [ 858.972054][T19365] ___sys_sendmsg+0x2a6/0x360 [ 858.976739][T19365] ? get_pid_task+0x20/0x1e0 [ 858.981550][T19365] ? __sys_sendmsg+0x2a0/0x2a0 [ 858.986361][T19365] ? __lock_acquire+0x7d40/0x7d40 [ 858.991456][T19365] __se_sys_sendmsg+0x1c2/0x2b0 [ 858.996344][T19365] ? __x64_sys_sendmsg+0x80/0x80 [ 859.001314][T19365] ? lockdep_hardirqs_on+0x98/0x150 [ 859.006532][T19365] do_syscall_64+0x55/0xa0 [ 859.010968][T19365] ? clear_bhb_loop+0x40/0x90 [ 859.015667][T19365] ? clear_bhb_loop+0x40/0x90 [ 859.020358][T19365] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 859.026263][T19365] RIP: 0033:0x7fa06699c799 [ 859.030788][T19365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.050526][T19365] RSP: 002b:00007fa0678b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 859.058966][T19365] RAX: ffffffffffffffda RBX: 00007fa066c15fa0 RCX: 00007fa06699c799 [ 859.066947][T19365] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 859.074924][T19365] RBP: 00007fa0678b5090 R08: 0000000000000000 R09: 0000000000000000 [ 859.082942][T19365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.090953][T19365] R13: 00007fa066c16038 R14: 00007fa066c15fa0 R15: 00007ffe40f85a08 [ 859.098988][T19365] [ 859.177591][T19368] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.3660'. [ 859.294261][T19368] netlink: 'syz.3.3660': attribute type 10 has an invalid length. [ 859.322193][T19368] team0: Device wlan1 is up. Set it down before adding it as a team port [ 860.123922][T19395] netlink: 'syz.2.3670': attribute type 10 has an invalid length. [ 860.548501][T19408] netlink: 'syz.0.3672': attribute type 10 has an invalid length. [ 860.566781][T19408] team0: Device vxcan1 is of different type [ 860.741741][T19410] netlink: 'syz.3.3675': attribute type 16 has an invalid length. [ 860.751693][T19410] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3675'. [ 861.352386][T19427] netlink: 'syz.1.3682': attribute type 10 has an invalid length. [ 862.891044][T19460] netlink: 'syz.1.3694': attribute type 10 has an invalid length. [ 862.943666][T19453] netlink: 'syz.3.3691': attribute type 4 has an invalid length. [ 862.969127][T19453] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3691'. [ 863.276902][T19453] .`: renamed from bond0 (while UP) [ 863.533756][T19467] netlink: 'syz.2.3695': attribute type 10 has an invalid length. [ 863.577850][T19467] team0: Device vxcan1 is of different type [ 864.829973][T19497] netlink: 'syz.0.3706': attribute type 10 has an invalid length. [ 865.252305][T19507] netlink: 'syz.2.3709': attribute type 5 has an invalid length. [ 865.310602][T19505] netlink: 'syz.2.3709': attribute type 1 has an invalid length. [ 865.340270][T19505] netlink: 'syz.2.3709': attribute type 3 has an invalid length. [ 865.366808][T19505] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3709'. [ 865.723353][T19514] netlink: 'syz.3.3713': attribute type 10 has an invalid length. [ 866.084286][T19514] team0: Device vxcan1 is of different type [ 866.202483][T19518] netlink: 'syz.1.3714': attribute type 10 has an invalid length. [ 866.256696][T19518] veth0_macvtap: left promiscuous mode [ 866.601104][T19539] netlink: 'syz.0.3719': attribute type 10 has an invalid length. [ 867.632818][T19565] netlink: 'syz.2.3728': attribute type 46 has an invalid length. [ 867.642637][T19565] netlink: 'syz.2.3728': attribute type 46 has an invalid length. [ 868.276331][T19571] team0: Device vxcan1 is of different type [ 870.048766][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.057504][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.737712][T19609] validate_nla: 2 callbacks suppressed [ 870.737764][T19609] netlink: 'syz.1.3741': attribute type 1 has an invalid length. [ 870.811515][T19609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3741'. [ 870.881846][T19611] netlink: 'syz.0.3742': attribute type 10 has an invalid length. [ 871.032826][T19611] team0: Device vxcan1 is of different type [ 871.258705][T19609] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3741'. [ 871.563350][T19633] netlink: 'syz.1.3746': attribute type 10 has an invalid length. [ 871.703499][T19633] team0: Device vxcan1 is of different type [ 871.885042][T19639] netlink: 'syz.0.3747': attribute type 10 has an invalid length. [ 871.949529][T19639] team0: Device vxcan1 is of different type [ 871.995223][T19642] netlink: 'syz.2.3748': attribute type 10 has an invalid length. [ 872.859611][T19664] netlink: 'syz.1.3756': attribute type 10 has an invalid length. [ 872.947342][T19664] team0: Device vxcan1 is of different type [ 873.108177][T19670] netlink: 'syz.2.3758': attribute type 10 has an invalid length. [ 873.131647][T19672] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3759'. [ 873.897396][T19690] netlink: 'syz.1.3764': attribute type 10 has an invalid length. [ 873.991095][T19690] team0: Device vxcan1 is of different type [ 874.151702][T19702] netlink: 'syz.0.3769': attribute type 10 has an invalid length. [ 875.350600][T19716] netlink: 'syz.3.3773': attribute type 10 has an invalid length. [ 875.513761][T19716] team0: Device vxcan1 is of different type [ 876.426330][T19748] FAULT_INJECTION: forcing a failure. [ 876.426330][T19748] name failslab, interval 1, probability 0, space 0, times 0 [ 876.467698][T19748] CPU: 0 PID: 19748 Comm: syz.2.3780 Not tainted syzkaller #0 [ 876.475214][T19748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 876.485272][T19748] Call Trace: [ 876.488719][T19748] [ 876.491865][T19748] dump_stack_lvl+0x18c/0x250 [ 876.496653][T19748] ? show_regs_print_info+0x20/0x20 [ 876.501890][T19748] ? load_image+0x400/0x400 [ 876.506384][T19748] ? verify_lock_unused+0x140/0x140 [ 876.511588][T19748] ? perf_trace_lock_acquire+0x34f/0x410 [ 876.517216][T19748] should_fail_ex+0x39d/0x4d0 [ 876.521888][T19748] should_failslab+0x9/0x20 [ 876.526414][T19748] slab_pre_alloc_hook+0x59/0x310 [ 876.531463][T19748] kmem_cache_alloc+0x5a/0x2d0 [ 876.536240][T19748] ? skb_clone+0x1eb/0x370 [ 876.540672][T19748] skb_clone+0x1eb/0x370 [ 876.544925][T19748] __netlink_deliver_tap+0x41c/0x830 [ 876.550265][T19748] ? netlink_deliver_tap+0x2e/0x1b0 [ 876.555487][T19748] netlink_deliver_tap+0x19c/0x1b0 [ 876.560618][T19748] netlink_unicast+0x72c/0x8d0 [ 876.565493][T19748] netlink_sendmsg+0x8d0/0xbf0 [ 876.570294][T19748] ? netlink_getsockopt+0x590/0x590 [ 876.575608][T19748] ? aa_sock_msg_perm+0x94/0x150 [ 876.580584][T19748] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 876.585889][T19748] ? security_socket_sendmsg+0x80/0xa0 [ 876.591374][T19748] ? netlink_getsockopt+0x590/0x590 [ 876.596605][T19748] ____sys_sendmsg+0x5ba/0x960 [ 876.601386][T19748] ? __asan_memset+0x22/0x40 [ 876.605993][T19748] ? __sys_sendmsg_sock+0x30/0x30 [ 876.611021][T19748] ? __import_iovec+0x5f2/0x850 [ 876.616260][T19748] ? import_iovec+0x73/0xa0 [ 876.620775][T19748] ___sys_sendmsg+0x2a6/0x360 [ 876.625462][T19748] ? get_pid_task+0x20/0x1e0 [ 876.630075][T19748] ? __sys_sendmsg+0x2a0/0x2a0 [ 876.634869][T19748] ? __lock_acquire+0x7d40/0x7d40 [ 876.639943][T19748] __se_sys_sendmsg+0x1c2/0x2b0 [ 876.644825][T19748] ? __x64_sys_sendmsg+0x80/0x80 [ 876.649793][T19748] ? lockdep_hardirqs_on+0x98/0x150 [ 876.655007][T19748] do_syscall_64+0x55/0xa0 [ 876.659443][T19748] ? clear_bhb_loop+0x40/0x90 [ 876.664223][T19748] ? clear_bhb_loop+0x40/0x90 [ 876.668916][T19748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 876.674820][T19748] RIP: 0033:0x7fa06699c799 [ 876.679250][T19748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.698867][T19748] RSP: 002b:00007fa0678b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 876.707301][T19748] RAX: ffffffffffffffda RBX: 00007fa066c15fa0 RCX: 00007fa06699c799 [ 876.715286][T19748] RDX: 0000000004000004 RSI: 0000200000000040 RDI: 0000000000000004 [ 876.723266][T19748] RBP: 00007fa0678b5090 R08: 0000000000000000 R09: 0000000000000000 [ 876.731247][T19748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.739230][T19748] R13: 00007fa066c16038 R14: 00007fa066c15fa0 R15: 00007ffe40f85a08 [ 876.747227][T19748] [ 876.786576][T19748] netlink: 'syz.2.3780': attribute type 10 has an invalid length. [ 876.794742][T19748] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3780'. [ 876.818225][T19748] caif0: entered promiscuous mode [ 876.823425][T19748] caif0: entered allmulticast mode [ 876.832865][T19748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 876.950527][T19756] netlink: 'syz.1.3782': attribute type 10 has an invalid length. [ 877.185041][T19759] netlink: 'syz.3.3781': attribute type 10 has an invalid length. [ 877.215046][T19759] team0: Device vxcan1 is of different type [ 877.420715][T19773] netlink: 'syz.2.3786': attribute type 10 has an invalid length. [ 877.436564][T19773] team0: Device vxcan1 is of different type [ 878.472012][T19797] netlink: 'syz.0.3790': attribute type 4 has an invalid length. [ 878.501654][T19797] netlink: 162596 bytes leftover after parsing attributes in process `syz.0.3790'. [ 879.143666][T19796] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3793'. [ 879.340490][T19802] netlink: 'syz.3.3795': attribute type 10 has an invalid length. [ 880.134577][T19821] netlink: 'syz.0.3802': attribute type 21 has an invalid length. [ 880.342204][T19821] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3802'. [ 880.646983][T19844] netlink: 'syz.0.3808': attribute type 10 has an invalid length. [ 881.693041][T19864] netlink: 'syz.2.3816': attribute type 10 has an invalid length. [ 881.734873][T19864] team0: Device vxcan1 is of different type [ 883.930309][T19868] netlink: 'syz.1.3817': attribute type 10 has an invalid length. [ 883.944720][T19868] team0: Device vxcan1 is of different type [ 884.103240][T19876] netlink: 'syz.0.3819': attribute type 10 has an invalid length. [ 884.499098][T19888] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.3823'. [ 885.437897][T19897] netlink: 'syz.0.3826': attribute type 10 has an invalid length. [ 885.849258][T19897] geneve1: entered promiscuous mode [ 885.867118][T19897] geneve1: entered allmulticast mode [ 885.908882][T19897] team0: Port device geneve1 added [ 886.016696][T19909] netlink: 'syz.1.3831': attribute type 10 has an invalid length. [ 886.829202][T19929] netlink: 'syz.1.3837': attribute type 41 has an invalid length. [ 887.439580][T19947] netlink: 'syz.1.3843': attribute type 10 has an invalid length. [ 888.989750][T19979] netlink: 'syz.2.3855': attribute type 10 has an invalid length. [ 889.405984][T19982] netlink: 'syz.0.3857': attribute type 10 has an invalid length. [ 889.562841][T19982] team0: Device vxcan1 is of different type [ 889.803140][T20004] wg2: left promiscuous mode [ 889.808050][T20004] wg2: left allmulticast mode [ 890.214522][T20014] netlink: 'syz.3.3867': attribute type 10 has an invalid length. [ 890.713029][T20020] netlink: 'syz.2.3869': attribute type 1 has an invalid length. [ 890.751614][T20028] netlink: 'syz.3.3870': attribute type 10 has an invalid length. [ 890.822094][T20028] team0: Port device geneve1 added [ 890.994374][T20034] FAULT_INJECTION: forcing a failure. [ 890.994374][T20034] name failslab, interval 1, probability 0, space 0, times 0 [ 891.063147][T20034] CPU: 0 PID: 20034 Comm: syz.0.3874 Not tainted syzkaller #0 [ 891.070684][T20034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 891.080773][T20034] Call Trace: [ 891.084079][T20034] [ 891.087048][T20034] dump_stack_lvl+0x18c/0x250 [ 891.091767][T20034] ? show_regs_print_info+0x20/0x20 [ 891.097001][T20034] ? load_image+0x400/0x400 [ 891.101547][T20034] ? __might_sleep+0xe0/0xe0 [ 891.106170][T20034] ? __lock_acquire+0x7d40/0x7d40 [ 891.111229][T20034] should_fail_ex+0x39d/0x4d0 [ 891.115951][T20034] should_failslab+0x9/0x20 [ 891.120499][T20034] slab_pre_alloc_hook+0x59/0x310 [ 891.125576][T20034] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 891.131343][T20034] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 891.137094][T20034] __kmem_cache_alloc_node+0x53/0x250 [ 891.142523][T20034] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 891.148271][T20034] __kmalloc+0xa4/0x230 [ 891.152468][T20034] tomoyo_realpath_from_path+0xe3/0x5d0 [ 891.158067][T20034] tomoyo_path_number_perm+0x248/0x620 [ 891.163592][T20034] ? tomoyo_path_number_perm+0x217/0x620 [ 891.169278][T20034] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 891.174793][T20034] ? ksys_write+0x1c4/0x260 [ 891.179471][T20034] ? __fget_files+0x28/0x4b0 [ 891.184127][T20034] ? __fget_files+0x28/0x4b0 [ 891.188788][T20034] security_file_ioctl+0x70/0xa0 [ 891.193799][T20034] __se_sys_ioctl+0x48/0x170 [ 891.198456][T20034] do_syscall_64+0x55/0xa0 [ 891.202931][T20034] ? clear_bhb_loop+0x40/0x90 [ 891.207663][T20034] ? clear_bhb_loop+0x40/0x90 [ 891.212389][T20034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.218420][T20034] RIP: 0033:0x7f083dd9c799 [ 891.222872][T20034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.243121][T20034] RSP: 002b:00007f083ec16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 891.251557][T20034] RAX: ffffffffffffffda RBX: 00007f083e015fa0 RCX: 00007f083dd9c799 [ 891.259540][T20034] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000005 [ 891.267525][T20034] RBP: 00007f083ec16090 R08: 0000000000000000 R09: 0000000000000000 [ 891.275510][T20034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.283495][T20034] R13: 00007f083e016038 R14: 00007f083e015fa0 R15: 00007ffd9f0d9948 [ 891.291574][T20034] [ 891.448844][T20034] ERROR: Out of memory at tomoyo_realpath_from_path. [ 892.167905][T20056] netlink: 'syz.0.3882': attribute type 10 has an invalid length. [ 892.231825][T20056] team0: Device vxcan1 is of different type [ 892.325443][T20054] netlink: 'syz.2.3881': attribute type 10 has an invalid length. [ 892.428920][T20054] team0: Device vxcan1 is of different type [ 893.514778][T20086] netlink: 'syz.1.3889': attribute type 1 has an invalid length. [ 894.258544][T20105] netlink: 'syz.0.3896': attribute type 10 has an invalid length. [ 894.368784][T20105] team0: Device vxcan1 is of different type [ 895.351492][T20121] netlink: 'syz.0.3902': attribute type 10 has an invalid length. [ 895.709174][T20130] netlink: 'syz.2.3903': attribute type 10 has an invalid length. [ 895.737539][T20130] team0: Device vxcan1 is of different type [ 896.300447][T20144] netlink: 'syz.3.3907': attribute type 1 has an invalid length. [ 896.386015][T20148] netlink: 'syz.0.3918': attribute type 10 has an invalid length. [ 896.487454][T20148] team0: Device vxcan1 is of different type [ 896.564099][T20151] netlink: 'syz.1.3910': attribute type 10 has an invalid length. [ 896.595261][T20151] team0: Device vxcan1 is of different type [ 897.260753][T20157] netlink: 'syz.3.3911': attribute type 10 has an invalid length. [ 897.286902][T20157] team0: Device vxcan1 is of different type [ 897.517509][T20164] netlink: 'syz.2.3914': attribute type 10 has an invalid length. [ 897.788314][T20170] netlink: 'syz.2.3917': attribute type 10 has an invalid length. [ 897.802880][T20170] team0: Device vxcan1 is of different type [ 897.815481][T20172] netlink: 'syz.0.3919': attribute type 2 has an invalid length. [ 897.824727][T20172] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3919'. [ 897.920516][T20173] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3919'. [ 897.960463][T20173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3919'. [ 898.006969][T20172] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3919'. [ 898.121790][T20173] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3919'. [ 898.162910][T20173] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 898.206029][T20173] openvswitch: netlink: Message has 1 unknown bytes. [ 898.392827][T20186] team0: Device vxcan1 is of different type [ 898.530700][T20189] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3924'. [ 898.555037][T20189] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3924'. [ 898.589835][T20189] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3924'. [ 898.610614][T20189] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3924'. [ 898.645657][T20189] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3924'. [ 900.376522][T20226] validate_nla: 3 callbacks suppressed [ 900.376543][T20226] netlink: 'syz.0.3936': attribute type 10 has an invalid length. [ 900.764409][T20236] FAULT_INJECTION: forcing a failure. [ 900.764409][T20236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.805081][T20236] CPU: 1 PID: 20236 Comm: syz.3.3938 Not tainted syzkaller #0 [ 900.812624][T20236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 900.822712][T20236] Call Trace: [ 900.826027][T20236] [ 900.828986][T20236] dump_stack_lvl+0x18c/0x250 [ 900.833721][T20236] ? show_regs_print_info+0x20/0x20 [ 900.838962][T20236] ? load_image+0x400/0x400 [ 900.843510][T20236] ? __might_fault+0xaa/0x120 [ 900.848213][T20236] ? __lock_acquire+0x7d40/0x7d40 [ 900.853273][T20236] should_fail_ex+0x39d/0x4d0 [ 900.858008][T20236] _copy_from_user+0x2f/0xe0 [ 900.862637][T20236] vmemdup_user+0xac/0x1e0 [ 900.867094][T20236] map_get_next_key+0x228/0x620 [ 900.871973][T20236] ? __might_fault+0xc6/0x120 [ 900.876708][T20236] ? __might_fault+0xaa/0x120 [ 900.881427][T20236] ? bpf_lsm_bpf+0x9/0x10 [ 900.885800][T20236] __sys_bpf+0x715/0x890 [ 900.890113][T20236] ? bpf_link_show_fdinfo+0x390/0x390 [ 900.895547][T20236] ? lock_chain_count+0x20/0x20 [ 900.900460][T20236] __x64_sys_bpf+0x7c/0x90 [ 900.905004][T20236] do_syscall_64+0x55/0xa0 [ 900.909488][T20236] ? clear_bhb_loop+0x40/0x90 [ 900.914241][T20236] ? clear_bhb_loop+0x40/0x90 [ 900.918929][T20236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 900.924968][T20236] RIP: 0033:0x7fc7a999c799 [ 900.929445][T20236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.949372][T20236] RSP: 002b:00007fc7a7bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 900.957853][T20236] RAX: ffffffffffffffda RBX: 00007fc7a9c16090 RCX: 00007fc7a999c799 [ 900.965876][T20236] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000004 [ 900.974056][T20236] RBP: 00007fc7a7bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 900.982144][T20236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.990179][T20236] R13: 00007fc7a9c16128 R14: 00007fc7a9c16090 R15: 00007fff197353b8 [ 900.998230][T20236] [ 902.367155][T20266] netlink: 'syz.0.3946': attribute type 10 has an invalid length. [ 902.375094][T20266] FAULT_INJECTION: forcing a failure. [ 902.375094][T20266] name failslab, interval 1, probability 0, space 0, times 0 [ 902.436108][T20266] CPU: 0 PID: 20266 Comm: syz.0.3946 Not tainted syzkaller #0 [ 902.443748][T20266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 902.453870][T20266] Call Trace: [ 902.457184][T20266] [ 902.460155][T20266] dump_stack_lvl+0x18c/0x250 [ 902.464892][T20266] ? show_regs_print_info+0x20/0x20 [ 902.470130][T20266] ? load_image+0x400/0x400 [ 902.474676][T20266] ? __might_sleep+0xe0/0xe0 [ 902.479315][T20266] ? __lock_acquire+0x7d40/0x7d40 [ 902.484450][T20266] ? netdev_has_upper_dev+0x3b6/0x470 [ 902.489866][T20266] should_fail_ex+0x39d/0x4d0 [ 902.494599][T20266] should_failslab+0x9/0x20 [ 902.499146][T20266] slab_pre_alloc_hook+0x59/0x310 [ 902.504226][T20266] ? team_add_slave+0x2ce/0x29a0 [ 902.509221][T20266] ? team_add_slave+0x2ce/0x29a0 [ 902.514195][T20266] __kmem_cache_alloc_node+0x53/0x250 [ 902.519620][T20266] ? team_add_slave+0x2ce/0x29a0 [ 902.524628][T20266] __kmalloc+0xa4/0x230 [ 902.528843][T20266] team_add_slave+0x2ce/0x29a0 [ 902.533656][T20266] ? __local_bh_enable_ip+0x13a/0x1c0 [ 902.539078][T20266] ? _local_bh_enable+0xa0/0xa0 [ 902.544083][T20266] ? __dev_change_flags+0x6a0/0x6a0 [ 902.549317][T20266] ? __dev_change_flags+0x4d4/0x6a0 [ 902.554644][T20266] ? team_netpoll_cleanup+0xf0/0xf0 [ 902.559885][T20266] ? vprintk_emit+0x53d/0x610 [ 902.564597][T20266] ? dev_get_flags+0x1c0/0x1c0 [ 902.569402][T20266] ? printk_sprint+0x460/0x460 [ 902.574203][T20266] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 902.580132][T20266] ? _raw_spin_unlock+0x40/0x40 [ 902.585054][T20266] ? mutex_is_locked+0x12/0x40 [ 902.589856][T20266] do_setlink+0xdfe/0x4130 [ 902.594306][T20266] ? arch_stack_walk+0x160/0x190 [ 902.599305][T20266] ? load_image+0x400/0x400 [ 902.603851][T20266] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 902.610032][T20266] ? stack_trace_save+0xaa/0x100 [ 902.615023][T20266] ? __nla_validate_parse+0x2522/0x2ea0 [ 902.620661][T20266] ? __nla_validate+0x50/0x50 [ 902.625456][T20266] ? validate_linkmsg+0x719/0x910 [ 902.630537][T20266] rtnl_newlink+0x17da/0x20a0 [ 902.635284][T20266] ? rtnl_newlink+0x501/0x20a0 [ 902.640112][T20266] ? rtnl_setlink+0x4e0/0x4e0 [ 902.644833][T20266] ? trace_raw_output_contention_end+0xd0/0xd0 [ 902.651029][T20266] ? rcu_is_watching+0x15/0xb0 [ 902.655839][T20266] ? trace_contention_end+0x39/0xe0 [ 902.661098][T20266] ? __mutex_lock+0x315/0xcc0 [ 902.665884][T20266] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 902.671035][T20266] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 902.676177][T20266] ? rtnl_setlink+0x4e0/0x4e0 [ 902.680886][T20266] rtnetlink_rcv_msg+0x869/0xfa0 [ 902.685878][T20266] ? lockdep_hardirqs_on+0x98/0x150 [ 902.691199][T20266] ? rtnetlink_bind+0x80/0x80 [ 902.695923][T20266] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 902.702030][T20266] ? lock_chain_count+0x20/0x20 [ 902.706929][T20266] ? __local_bh_enable_ip+0x13a/0x1c0 [ 902.712343][T20266] ? lockdep_hardirqs_on+0x98/0x150 [ 902.717585][T20266] ? __local_bh_enable_ip+0x13a/0x1c0 [ 902.722984][T20266] ? _local_bh_enable+0xa0/0xa0 [ 902.727878][T20266] ? __dev_queue_xmit+0x265/0x3660 [ 902.733021][T20266] ? __dev_queue_xmit+0x265/0x3660 [ 902.738168][T20266] ? __dev_queue_xmit+0x1b2c/0x3660 [ 902.743427][T20266] ? __dev_queue_xmit+0x265/0x3660 [ 902.748600][T20266] ? ref_tracker_free+0x690/0x840 [ 902.753686][T20266] netlink_rcv_skb+0x241/0x4d0 [ 902.758499][T20266] ? rtnetlink_bind+0x80/0x80 [ 902.763300][T20266] ? netlink_ack+0x1180/0x1180 [ 902.768225][T20266] ? __lock_acquire+0x7d40/0x7d40 [ 902.773311][T20266] ? netlink_deliver_tap+0x2e/0x1b0 [ 902.778556][T20266] netlink_unicast+0x751/0x8d0 [ 902.783389][T20266] netlink_sendmsg+0x8d0/0xbf0 [ 902.788222][T20266] ? netlink_getsockopt+0x590/0x590 [ 902.793475][T20266] ? aa_sock_msg_perm+0x94/0x150 [ 902.798453][T20266] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 902.803782][T20266] ? security_socket_sendmsg+0x80/0xa0 [ 902.809276][T20266] ? netlink_getsockopt+0x590/0x590 [ 902.814522][T20266] ____sys_sendmsg+0x5ba/0x960 [ 902.819339][T20266] ? __asan_memset+0x22/0x40 [ 902.823962][T20266] ? __sys_sendmsg_sock+0x30/0x30 [ 902.829095][T20266] ? __import_iovec+0x5f2/0x850 [ 902.834008][T20266] ? import_iovec+0x73/0xa0 [ 902.838555][T20266] ___sys_sendmsg+0x2a6/0x360 [ 902.843284][T20266] ? get_pid_task+0x20/0x1e0 [ 902.847924][T20266] ? __sys_sendmsg+0x2a0/0x2a0 [ 902.852792][T20266] ? __lock_acquire+0x7d40/0x7d40 [ 902.857926][T20266] __se_sys_sendmsg+0x1c2/0x2b0 [ 902.862819][T20266] ? __x64_sys_sendmsg+0x80/0x80 [ 902.867834][T20266] ? lockdep_hardirqs_on+0x98/0x150 [ 902.873085][T20266] do_syscall_64+0x55/0xa0 [ 902.877533][T20266] ? clear_bhb_loop+0x40/0x90 [ 902.882240][T20266] ? clear_bhb_loop+0x40/0x90 [ 902.886961][T20266] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 902.892895][T20266] RIP: 0033:0x7f083dd9c799 [ 902.897361][T20266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.916998][T20266] RSP: 002b:00007f083ec16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.925459][T20266] RAX: ffffffffffffffda RBX: 00007f083e015fa0 RCX: 00007f083dd9c799 [ 902.934552][T20266] RDX: 0000000000080054 RSI: 00002000000000c0 RDI: 0000000000000003 [ 902.942573][T20266] RBP: 00007f083ec16090 R08: 0000000000000000 R09: 0000000000000000 [ 902.950576][T20266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.958582][T20266] R13: 00007f083e016038 R14: 00007f083e015fa0 R15: 00007ffd9f0d9948 [ 902.966655][T20266] [ 902.991126][T20269] netlink: 'syz.3.3947': attribute type 10 has an invalid length. [ 903.170212][T20271] netlink: 'syz.2.3948': attribute type 10 has an invalid length. [ 903.191586][T20271] team0: Device vxcan1 is of different type [ 903.234503][T20274] netlink: 'syz.1.3949': attribute type 10 has an invalid length. [ 903.252643][T20274] team0: Device vxcan1 is of different type [ 903.485690][T20282] netlink: 'syz.1.3953': attribute type 2 has an invalid length. [ 903.494782][T20282] __nla_validate_parse: 8 callbacks suppressed [ 903.494801][T20282] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.3953'. [ 903.572905][T20282] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3953'. [ 904.796455][T20305] netlink: 'syz.3.3960': attribute type 10 has an invalid length. [ 904.974096][T20309] FAULT_INJECTION: forcing a failure. [ 904.974096][T20309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.987712][T20309] CPU: 1 PID: 20309 Comm: syz.0.3962 Not tainted syzkaller #0 [ 904.995225][T20309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 905.005317][T20309] Call Trace: [ 905.008637][T20309] [ 905.011605][T20309] dump_stack_lvl+0x18c/0x250 [ 905.016344][T20309] ? show_regs_print_info+0x20/0x20 [ 905.021603][T20309] ? load_image+0x400/0x400 [ 905.026140][T20309] ? __might_fault+0xaa/0x120 [ 905.031102][T20309] ? __lock_acquire+0x7d40/0x7d40 [ 905.036159][T20309] should_fail_ex+0x39d/0x4d0 [ 905.040874][T20309] _copy_from_user+0x2f/0xe0 [ 905.045501][T20309] __sys_bpf+0x23e/0x890 [ 905.049792][T20309] ? bpf_link_show_fdinfo+0x390/0x390 [ 905.055205][T20309] ? lock_chain_count+0x20/0x20 [ 905.060358][T20309] __x64_sys_bpf+0x7c/0x90 [ 905.064797][T20309] do_syscall_64+0x55/0xa0 [ 905.069252][T20309] ? clear_bhb_loop+0x40/0x90 [ 905.074042][T20309] ? clear_bhb_loop+0x40/0x90 [ 905.078839][T20309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 905.084847][T20309] RIP: 0033:0x7f083dd9c799 [ 905.089381][T20309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.109108][T20309] RSP: 002b:00007f083ec16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 905.117552][T20309] RAX: ffffffffffffffda RBX: 00007f083e015fa0 RCX: 00007f083dd9c799 [ 905.125544][T20309] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 905.133879][T20309] RBP: 00007f083ec16090 R08: 0000000000000000 R09: 0000000000000000 [ 905.141967][T20309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.149976][T20309] R13: 00007f083e016038 R14: 00007f083e015fa0 R15: 00007ffd9f0d9948 [ 905.158075][T20309] [ 905.260089][T20314] netlink: 'syz.3.3964': attribute type 10 has an invalid length. [ 905.529597][T20314] team0: Device vxcan1 is of different type [ 909.074536][T20344] netlink: 'syz.1.3972': attribute type 10 has an invalid length. [ 909.160112][T20351] FAULT_INJECTION: forcing a failure. [ 909.160112][T20351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.182853][T20351] CPU: 1 PID: 20351 Comm: syz.3.3975 Not tainted syzkaller #0 [ 909.190392][T20351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 909.200739][T20351] Call Trace: [ 909.204094][T20351] [ 909.207048][T20351] dump_stack_lvl+0x18c/0x250 [ 909.211773][T20351] ? show_regs_print_info+0x20/0x20 [ 909.217005][T20351] ? load_image+0x400/0x400 [ 909.221630][T20351] ? __might_fault+0xaa/0x120 [ 909.226432][T20351] ? __lock_acquire+0x7d40/0x7d40 [ 909.231494][T20351] should_fail_ex+0x39d/0x4d0 [ 909.236253][T20351] _copy_from_user+0x2f/0xe0 [ 909.240885][T20351] ___sys_recvmsg+0x176/0x590 [ 909.245611][T20351] ? __sys_recvmsg+0x2a0/0x2a0 [ 909.250410][T20351] ? ksys_write+0x1c4/0x260 [ 909.254956][T20351] ? __fget_files+0x43d/0x4b0 [ 909.259680][T20351] __x64_sys_recvmsg+0x20c/0x2e0 [ 909.264646][T20351] ? ___sys_recvmsg+0x590/0x590 [ 909.269534][T20351] ? syscall_enter_from_user_mode+0x20/0x80 [ 909.275474][T20351] ? lockdep_hardirqs_on+0x98/0x150 [ 909.280705][T20351] do_syscall_64+0x55/0xa0 [ 909.285159][T20351] ? clear_bhb_loop+0x40/0x90 [ 909.289866][T20351] ? clear_bhb_loop+0x40/0x90 [ 909.294590][T20351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 909.300510][T20351] RIP: 0033:0x7fc7a999c799 [ 909.304951][T20351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.324760][T20351] RSP: 002b:00007fc7a7bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 909.333207][T20351] RAX: ffffffffffffffda RBX: 00007fc7a9c15fa0 RCX: 00007fc7a999c799 [ 909.341204][T20351] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 909.349211][T20351] RBP: 00007fc7a7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 909.357301][T20351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.365323][T20351] R13: 00007fc7a9c16038 R14: 00007fc7a9c15fa0 R15: 00007fff197353b8 [ 909.373377][T20351] [ 909.608784][T20358] netlink: 'syz.2.3978': attribute type 10 has an invalid length. [ 909.649472][T20358] team0: Device vxcan1 is of different type [ 909.790816][T20364] FAULT_INJECTION: forcing a failure. [ 909.790816][T20364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.804775][T20364] CPU: 1 PID: 20364 Comm: syz.0.3980 Not tainted syzkaller #0 [ 909.812293][T20364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 909.822393][T20364] Call Trace: [ 909.825711][T20364] [ 909.828669][T20364] dump_stack_lvl+0x18c/0x250 [ 909.833400][T20364] ? show_regs_print_info+0x20/0x20 [ 909.838623][T20364] ? load_image+0x400/0x400 [ 909.843143][T20364] ? __might_fault+0xaa/0x120 [ 909.847832][T20364] ? __lock_acquire+0x7d40/0x7d40 [ 909.852966][T20364] should_fail_ex+0x39d/0x4d0 [ 909.857669][T20364] _copy_from_user+0x2f/0xe0 [ 909.862276][T20364] __sys_bpf+0x23e/0x890 [ 909.866621][T20364] ? bpf_link_show_fdinfo+0x390/0x390 [ 909.872028][T20364] ? lock_chain_count+0x20/0x20 [ 909.876895][T20364] __x64_sys_bpf+0x7c/0x90 [ 909.881322][T20364] do_syscall_64+0x55/0xa0 [ 909.885752][T20364] ? clear_bhb_loop+0x40/0x90 [ 909.890450][T20364] ? clear_bhb_loop+0x40/0x90 [ 909.895146][T20364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 909.901053][T20364] RIP: 0033:0x7f083dd9c799 [ 909.905578][T20364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.925290][T20364] RSP: 002b:00007f083ec16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 909.933716][T20364] RAX: ffffffffffffffda RBX: 00007f083e015fa0 RCX: 00007f083dd9c799 [ 909.941695][T20364] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 909.949676][T20364] RBP: 00007f083ec16090 R08: 0000000000000000 R09: 0000000000000000 [ 909.957654][T20364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.965719][T20364] R13: 00007f083e016038 R14: 00007f083e015fa0 R15: 00007ffd9f0d9948 [ 909.973714][T20364] [ 910.306550][T20374] FAULT_INJECTION: forcing a failure. [ 910.306550][T20374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 910.545807][T20374] CPU: 0 PID: 20374 Comm: syz.2.3984 Not tainted syzkaller #0 [ 910.553375][T20374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 910.563573][T20374] Call Trace: [ 910.566895][T20374] [ 910.569961][T20374] dump_stack_lvl+0x18c/0x250 [ 910.574703][T20374] ? show_regs_print_info+0x20/0x20 [ 910.579982][T20374] ? load_image+0x400/0x400 [ 910.584532][T20374] ? __might_fault+0xaa/0x120 [ 910.589242][T20374] ? __lock_acquire+0x7d40/0x7d40 [ 910.594300][T20374] should_fail_ex+0x39d/0x4d0 [ 910.599020][T20374] _copy_from_user+0x2f/0xe0 [ 910.603653][T20374] ___sys_sendmsg+0x1c7/0x360 [ 910.608367][T20374] ? get_pid_task+0x20/0x1e0 [ 910.613004][T20374] ? __sys_sendmsg+0x2a0/0x2a0 [ 910.617833][T20374] ? __lock_acquire+0x7d40/0x7d40 [ 910.622912][T20374] __se_sys_sendmsg+0x1c2/0x2b0 [ 910.627782][T20374] ? __x64_sys_sendmsg+0x80/0x80 [ 910.632803][T20374] ? lockdep_hardirqs_on+0x98/0x150 [ 910.638017][T20374] do_syscall_64+0x55/0xa0 [ 910.642471][T20374] ? clear_bhb_loop+0x40/0x90 [ 910.647198][T20374] ? clear_bhb_loop+0x40/0x90 [ 910.651912][T20374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 910.657828][T20374] RIP: 0033:0x7fa06699c799 [ 910.662256][T20374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.681873][T20374] RSP: 002b:00007fa0678b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 910.690298][T20374] RAX: ffffffffffffffda RBX: 00007fa066c15fa0 RCX: 00007fa06699c799 [ 910.698275][T20374] RDX: 0000000004008050 RSI: 0000200000001780 RDI: 0000000000000003 [ 910.706252][T20374] RBP: 00007fa0678b5090 R08: 0000000000000000 R09: 0000000000000000 [ 910.714233][T20374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.722210][T20374] R13: 00007fa066c16038 R14: 00007fa066c15fa0 R15: 00007ffe40f85a08 [ 910.730202][T20374] [ 911.160094][T20391] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.3989'. [ 911.167302][T20393] FAULT_INJECTION: forcing a failure. [ 911.167302][T20393] name failslab, interval 1, probability 0, space 0, times 0 [ 911.182938][T20393] CPU: 1 PID: 20393 Comm: syz.1.3990 Not tainted syzkaller #0 [ 911.190518][T20393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 911.200591][T20393] Call Trace: [ 911.203863][T20393] [ 911.206809][T20393] dump_stack_lvl+0x18c/0x250 [ 911.211541][T20393] ? show_regs_print_info+0x20/0x20 [ 911.216804][T20393] ? load_image+0x400/0x400 [ 911.221347][T20393] ? __might_sleep+0xe0/0xe0 [ 911.225979][T20393] ? __lock_acquire+0x7d40/0x7d40 [ 911.231110][T20393] should_fail_ex+0x39d/0x4d0 [ 911.235836][T20393] should_failslab+0x9/0x20 [ 911.240379][T20393] slab_pre_alloc_hook+0x59/0x310 [ 911.245445][T20393] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 911.251289][T20393] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 911.257057][T20393] __kmem_cache_alloc_node+0x53/0x250 [ 911.262536][T20393] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 911.268322][T20393] __kmalloc+0xa4/0x230 [ 911.272536][T20393] tomoyo_realpath_from_path+0xe3/0x5d0 [ 911.278241][T20393] tomoyo_path_number_perm+0x248/0x620 [ 911.283739][T20393] ? tomoyo_path_number_perm+0x217/0x620 [ 911.289370][T20393] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 911.294856][T20393] ? ksys_write+0x1c4/0x260 [ 911.299388][T20393] ? __fget_files+0x28/0x4b0 [ 911.303968][T20393] ? __fget_files+0x28/0x4b0 [ 911.308564][T20393] security_file_ioctl+0x70/0xa0 [ 911.313507][T20393] __se_sys_ioctl+0x48/0x170 [ 911.318103][T20393] do_syscall_64+0x55/0xa0 [ 911.322597][T20393] ? clear_bhb_loop+0x40/0x90 [ 911.327278][T20393] ? clear_bhb_loop+0x40/0x90 [ 911.331968][T20393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.337887][T20393] RIP: 0033:0x7efe0f59c799 [ 911.342386][T20393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.362004][T20393] RSP: 002b:00007efe0d7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 911.370403][T20393] RAX: ffffffffffffffda RBX: 00007efe0f815fa0 RCX: 00007efe0f59c799 [ 911.378358][T20393] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 911.386406][T20393] RBP: 00007efe0d7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 911.394361][T20393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.402332][T20393] R13: 00007efe0f816038 R14: 00007efe0f815fa0 R15: 00007fff19327ff8 [ 911.410291][T20393] [ 911.429620][T20393] ERROR: Out of memory at tomoyo_realpath_from_path. [ 911.622233][T20399] netlink: 'syz.2.3992': attribute type 10 has an invalid length. [ 911.657464][T20399] team0: Device vxcan1 is of different type [ 911.746934][T20404] netlink: 'syz.3.3994': attribute type 10 has an invalid length. [ 911.754899][T20404] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3994'. [ 911.773336][T20404] hsr_slave_0: entered promiscuous mode [ 911.906545][T20402] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.3993'. [ 911.912165][T20406] FAULT_INJECTION: forcing a failure. [ 911.912165][T20406] name failslab, interval 1, probability 0, space 0, times 0 [ 911.969557][T20406] CPU: 1 PID: 20406 Comm: syz.3.3995 Not tainted syzkaller #0 [ 911.977115][T20406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 911.987226][T20406] Call Trace: [ 911.990628][T20406] [ 911.993591][T20406] dump_stack_lvl+0x18c/0x250 [ 911.998336][T20406] ? show_regs_print_info+0x20/0x20 [ 912.003596][T20406] ? load_image+0x400/0x400 [ 912.008146][T20406] ? __might_sleep+0xe0/0xe0 [ 912.012790][T20406] ? __lock_acquire+0x7d40/0x7d40 [ 912.018055][T20406] should_fail_ex+0x39d/0x4d0 [ 912.022796][T20406] should_failslab+0x9/0x20 [ 912.027352][T20406] slab_pre_alloc_hook+0x59/0x310 [ 912.032434][T20406] ? __get_vm_area_node+0x125/0x370 [ 912.037769][T20406] __kmem_cache_alloc_node+0x53/0x250 [ 912.043193][T20406] ? __get_vm_area_node+0x125/0x370 [ 912.048434][T20406] kmalloc_node_trace+0x26/0xe0 [ 912.053332][T20406] __get_vm_area_node+0x125/0x370 [ 912.058409][T20406] __vmalloc_node_range+0x36e/0x1330 [ 912.063734][T20406] ? netlink_sendmsg+0x602/0xbf0 [ 912.068717][T20406] ? netlink_insert+0x109f/0x13a0 [ 912.073896][T20406] ? netlink_data_ready+0x10/0x10 [ 912.079014][T20406] ? free_vm_area+0x50/0x50 [ 912.083584][T20406] ? netlink_sendmsg+0x602/0xbf0 [ 912.088564][T20406] vmalloc+0x79/0x90 [ 912.092500][T20406] ? netlink_sendmsg+0x602/0xbf0 [ 912.097479][T20406] netlink_sendmsg+0x602/0xbf0 [ 912.102299][T20406] ? netlink_getsockopt+0x590/0x590 [ 912.107546][T20406] ? aa_sock_msg_perm+0x94/0x150 [ 912.112526][T20406] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 912.117852][T20406] ? security_socket_sendmsg+0x80/0xa0 [ 912.123359][T20406] sock_write_iter+0x2df/0x420 [ 912.128164][T20406] ? sock_read_iter+0x3e0/0x3e0 [ 912.133075][T20406] ? common_file_perm+0x198/0x1f0 [ 912.138157][T20406] vfs_write+0x46c/0x990 [ 912.142451][T20406] ? file_end_write+0x250/0x250 [ 912.147475][T20406] ? __fget_files+0x43d/0x4b0 [ 912.152328][T20406] ? __fdget_pos+0x1d8/0x330 [ 912.157061][T20406] ? ksys_write+0x75/0x260 [ 912.161546][T20406] ksys_write+0x150/0x260 [ 912.165940][T20406] ? __ia32_sys_read+0x90/0x90 [ 912.170775][T20406] ? lockdep_hardirqs_on+0x98/0x150 [ 912.176023][T20406] do_syscall_64+0x55/0xa0 [ 912.180499][T20406] ? clear_bhb_loop+0x40/0x90 [ 912.185223][T20406] ? clear_bhb_loop+0x40/0x90 [ 912.189942][T20406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 912.195881][T20406] RIP: 0033:0x7fc7a999c799 [ 912.200328][T20406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.219983][T20406] RSP: 002b:00007fc7a7bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 912.228417][T20406] RAX: ffffffffffffffda RBX: 00007fc7a9c15fa0 RCX: 00007fc7a999c799 [ 912.236395][T20406] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 912.244370][T20406] RBP: 00007fc7a7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 912.252344][T20406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.260319][T20406] R13: 00007fc7a9c16038 R14: 00007fc7a9c15fa0 R15: 00007fff197353b8 [ 912.268309][T20406] [ 912.287338][T20406] syz.3.3995: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 912.303719][T20406] CPU: 1 PID: 20406 Comm: syz.3.3995 Not tainted syzkaller #0 [ 912.311233][T20406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 912.321401][T20406] Call Trace: [ 912.324687][T20406] [ 912.327623][T20406] dump_stack_lvl+0x18c/0x250 [ 912.332325][T20406] ? show_regs_print_info+0x20/0x20 [ 912.337537][T20406] ? load_image+0x400/0x400 [ 912.342061][T20406] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 912.348484][T20406] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 912.355264][T20406] warn_alloc+0x246/0x340 [ 912.359610][T20406] ? __get_vm_area_node+0x125/0x370 [ 912.364822][T20406] ? zone_watermark_ok_safe+0x230/0x230 [ 912.370387][T20406] ? rcu_is_watching+0x15/0xb0 [ 912.375256][T20406] ? __get_vm_area_node+0x356/0x370 [ 912.380475][T20406] __vmalloc_node_range+0x393/0x1330 [ 912.385770][T20406] ? netlink_insert+0x109f/0x13a0 [ 912.390823][T20406] ? netlink_data_ready+0x10/0x10 [ 912.395860][T20406] ? free_vm_area+0x50/0x50 [ 912.400377][T20406] ? netlink_sendmsg+0x602/0xbf0 [ 912.405353][T20406] vmalloc+0x79/0x90 [ 912.409287][T20406] ? netlink_sendmsg+0x602/0xbf0 [ 912.414348][T20406] netlink_sendmsg+0x602/0xbf0 [ 912.419147][T20406] ? netlink_getsockopt+0x590/0x590 [ 912.424890][T20406] ? aa_sock_msg_perm+0x94/0x150 [ 912.429847][T20406] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 912.435146][T20406] ? security_socket_sendmsg+0x80/0xa0 [ 912.440618][T20406] sock_write_iter+0x2df/0x420 [ 912.445399][T20406] ? sock_read_iter+0x3e0/0x3e0 [ 912.450267][T20406] ? common_file_perm+0x198/0x1f0 [ 912.455483][T20406] vfs_write+0x46c/0x990 [ 912.459754][T20406] ? file_end_write+0x250/0x250 [ 912.464625][T20406] ? __fget_files+0x43d/0x4b0 [ 912.469320][T20406] ? __fdget_pos+0x1d8/0x330 [ 912.473920][T20406] ? ksys_write+0x75/0x260 [ 912.478357][T20406] ksys_write+0x150/0x260 [ 912.482712][T20406] ? __ia32_sys_read+0x90/0x90 [ 912.487496][T20406] ? lockdep_hardirqs_on+0x98/0x150 [ 912.492794][T20406] do_syscall_64+0x55/0xa0 [ 912.497223][T20406] ? clear_bhb_loop+0x40/0x90 [ 912.501910][T20406] ? clear_bhb_loop+0x40/0x90 [ 912.506601][T20406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 912.512601][T20406] RIP: 0033:0x7fc7a999c799 [ 912.517030][T20406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.536729][T20406] RSP: 002b:00007fc7a7bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 912.545171][T20406] RAX: ffffffffffffffda RBX: 00007fc7a9c15fa0 RCX: 00007fc7a999c799 [ 912.553239][T20406] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 912.561235][T20406] RBP: 00007fc7a7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 912.569210][T20406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.577186][T20406] R13: 00007fc7a9c16038 R14: 00007fc7a9c15fa0 R15: 00007fff197353b8 [ 912.585175][T20406] [ 912.605189][T20408] netlink: 'syz.0.3996': attribute type 10 has an invalid length. [ 912.623756][T20406] Mem-Info: [ 912.628189][T20406] active_anon:5353 inactive_anon:0 isolated_anon:0 [ 912.628189][T20406] active_file:16891 inactive_file:40268 isolated_file:0 [ 912.628189][T20406] unevictable:768 dirty:242 writeback:0 [ 912.628189][T20406] slab_reclaimable:10323 slab_unreclaimable:93620 [ 912.628189][T20406] mapped:24764 shmem:1361 pagetables:502 [ 912.628189][T20406] sec_pagetables:0 bounce:0 [ 912.628189][T20406] kernel_misc_reclaimable:0 [ 912.628189][T20406] free:1344817 free_pcp:9063 free_cma:0 [ 912.649605][T20408] team0: Device vxcan1 is of different type [ 912.719686][T20406] Node 0 active_anon:21376kB inactive_anon:0kB active_file:67564kB inactive_file:160872kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99040kB dirty:984kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9980kB pagetables:1984kB sec_pagetables:0kB all_unreclaimable? no [ 912.779246][T20406] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 912.865049][T20406] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 912.922043][T20406] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 912.930665][T20406] Node 0 DMA32 free:1469864kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21500kB inactive_anon:0kB active_file:67564kB inactive_file:160044kB unevictable:1536kB writepending:1096kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:18332kB local_pcp:8768kB free_cma:0kB [ 912.962888][T20406] lowmem_reserve[]: 0 0 0 0 0 [ 912.995709][T20406] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 913.056784][T20420] FAULT_INJECTION: forcing a failure. [ 913.056784][T20420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.063092][T20406] lowmem_reserve[]: 0 0 0 0 0 [ 913.080553][T20406] Node 1 Normal free:3893792kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18392kB local_pcp:6560kB free_cma:0kB [ 913.110699][T20420] CPU: 0 PID: 20420 Comm: syz.0.4001 Not tainted syzkaller #0 [ 913.110727][T20420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 913.110740][T20420] Call Trace: [ 913.110749][T20420] [ 913.110758][T20420] dump_stack_lvl+0x18c/0x250 [ 913.110798][T20420] ? show_regs_print_info+0x20/0x20 [ 913.110828][T20420] ? load_image+0x400/0x400 [ 913.110856][T20420] ? __might_fault+0xaa/0x120 [ 913.110878][T20420] ? __lock_acquire+0x7d40/0x7d40 [ 913.120371][T20406] lowmem_reserve[]: [ 913.128504][T20420] should_fail_ex+0x39d/0x4d0 [ 913.128548][T20420] _copy_from_user+0x2f/0xe0 [ 913.128575][T20420] ___sys_sendmsg+0x1c7/0x360 [ 913.128594][T20420] ? get_pid_task+0x20/0x1e0 [ 913.128633][T20420] ? __sys_sendmsg+0x2a0/0x2a0 [ 913.128676][T20420] ? __lock_acquire+0x7d40/0x7d40 [ 913.128726][T20420] __se_sys_sendmsg+0x1c2/0x2b0 [ 913.128750][T20420] ? __x64_sys_sendmsg+0x80/0x80 [ 913.128787][T20420] ? lockdep_hardirqs_on+0x98/0x150 [ 913.128816][T20420] do_syscall_64+0x55/0xa0 [ 913.128843][T20420] ? clear_bhb_loop+0x40/0x90 [ 913.128865][T20420] ? clear_bhb_loop+0x40/0x90 [ 913.128889][T20420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 913.133105][T20406] 0 [ 913.135144][T20420] RIP: 0033:0x7f083dd9c799 [ 913.135173][T20420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.135190][T20420] RSP: 002b:00007f083ec16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.142780][T20406] 0 [ 913.145073][T20420] RAX: ffffffffffffffda RBX: 00007f083e015fa0 RCX: 00007f083dd9c799 [ 913.145094][T20420] RDX: 06d9691b79e2cf90 RSI: 0000200000000080 RDI: 0000000000000003 [ 913.145108][T20420] RBP: 00007f083ec16090 R08: 0000000000000000 R09: 0000000000000000 [ 913.150621][T20406] 0 [ 913.154295][T20420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.154314][T20420] R13: 00007f083e016038 R14: 00007f083e015fa0 R15: 00007ffd9f0d9948 [ 913.154347][T20420] [ 913.316307][T20406] 0 0 [ 913.319187][T20406] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 913.358330][T20406] Node 0 DMA32: 708*4kB (UME) 1371*8kB (UME) 762*16kB (UME) 787*32kB (UME) 327*64kB (UME) 224*128kB (UME) 122*256kB (UM) 37*512kB (UME) 20*1024kB (UME) 10*2048kB (UM) 312*4096kB (UM) = 1469864kB [ 913.393725][T20406] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 913.405936][T20424] bridge0: port 3(team0) entered disabled state [ 913.412523][T20406] Node 1 Normal: 162*4kB (UME) 49*8kB (UME) 37*16kB (UME) 36*32kB (UME) 13*64kB (UE) [ 913.412658][T20424] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.424563][T20406] 8*128kB [ 913.429764][T20424] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.431355][T20424] bridge0: entered allmulticast mode [ 913.437986][T20406] (UME) 2*256kB (UE) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3893792kB [ 913.459879][T20406] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 913.479900][T20406] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 913.495418][T20406] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 913.508281][T20406] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 913.508629][T20424] bridge0: port 3(team0) entered blocking state [ 913.524154][T20424] bridge0: port 3(team0) entered forwarding state [ 913.526009][T20406] 58520 total pagecache pages [ 913.530986][T20424] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.531115][T20424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.550210][T20406] 0 pages in swap cache [ 913.550422][T20424] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.554570][T20406] Free swap = 124996kB [ 913.561729][T20424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.574257][T20406] Total swap = 124996kB [ 913.578797][T20406] 2097051 pages RAM [ 913.582428][T20424] bridge0: entered promiscuous mode [ 913.582632][T20406] 0 pages HighMem/MovableOnly [ 913.592972][T20406] 416924 pages reserved [ 913.597401][T20406] 0 pages cma reserved [ 913.798671][T20436] netlink: set zone limit has 8 unknown bytes [ 913.970198][T20440] FAULT_INJECTION: forcing a failure. [ 913.970198][T20440] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 913.984070][T20440] CPU: 0 PID: 20440 Comm: syz.2.4008 Not tainted syzkaller #0 [ 913.991602][T20440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 914.001713][T20440] Call Trace: [ 914.005040][T20440] [ 914.008021][T20440] dump_stack_lvl+0x18c/0x250 [ 914.012721][T20440] ? verify_lock_unused+0x140/0x140 [ 914.017958][T20440] ? show_regs_print_info+0x20/0x20 [ 914.023154][T20440] ? load_image+0x400/0x400 [ 914.027646][T20440] ? mark_lock+0x94/0x320 [ 914.032009][T20440] should_fail_ex+0x39d/0x4d0 [ 914.036732][T20440] prepare_alloc_pages+0x1e2/0x5f0 [ 914.041962][T20440] __alloc_pages+0x134/0x460 [ 914.046548][T20440] ? zone_statistics+0x170/0x170 [ 914.051479][T20440] ? rcu_is_watching+0x15/0xb0 [ 914.056255][T20440] ? __mutex_lock+0x315/0xcc0 [ 914.060952][T20440] alloc_pages_node+0x10e/0x170 [ 914.065810][T20440] ? skb_splice_from_iter+0xc10/0xc10 [ 914.071206][T20440] ? __local_bh_disable_ip+0x108/0x1a0 [ 914.076701][T20440] __napi_alloc_skb+0x381/0x560 [ 914.081637][T20440] napi_get_frags+0x6c/0x150 [ 914.086265][T20440] ? tun_get_user+0xa51/0x3ca0 [ 914.091055][T20440] tun_get_user+0xa6a/0x3ca0 [ 914.095685][T20440] ? aa_file_perm+0x11b/0xee0 [ 914.100394][T20440] ? rcu_read_unlock+0xa0/0xa0 [ 914.105188][T20440] ? tun_get+0x1c/0x2e0 [ 914.109368][T20440] ? __lock_acquire+0x7d40/0x7d40 [ 914.114420][T20440] ? tun_get+0x1c/0x2e0 [ 914.118597][T20440] tun_chr_write_iter+0x119/0x200 [ 914.123634][T20440] vfs_write+0x46c/0x990 [ 914.127903][T20440] ? file_end_write+0x250/0x250 [ 914.132779][T20440] ? __fget_files+0x43d/0x4b0 [ 914.137673][T20440] ? __fdget_pos+0x1d8/0x330 [ 914.142298][T20440] ? ksys_write+0x75/0x260 [ 914.146759][T20440] ksys_write+0x150/0x260 [ 914.151129][T20440] ? __ia32_sys_read+0x90/0x90 [ 914.155915][T20440] ? lockdep_hardirqs_on+0x98/0x150 [ 914.161133][T20440] do_syscall_64+0x55/0xa0 [ 914.165566][T20440] ? clear_bhb_loop+0x40/0x90 [ 914.170252][T20440] ? clear_bhb_loop+0x40/0x90 [ 914.174940][T20440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 914.180848][T20440] RIP: 0033:0x7fa06699c799 [ 914.185272][T20440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.204925][T20440] RSP: 002b:00007fa067894028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 914.213364][T20440] RAX: ffffffffffffffda RBX: 00007fa066c16090 RCX: 00007fa06699c799 [ 914.221349][T20440] RDX: 0000000000000036 RSI: 0000200000000580 RDI: 0000000000000003 [ 914.229332][T20440] RBP: 00007fa067894090 R08: 0000000000000000 R09: 0000000000000000 [ 914.237312][T20440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.245299][T20440] R13: 00007fa066c16128 R14: 00007fa066c16090 R15: 00007ffe40f85a08 [ 914.253296][T20440] [ 915.918472][T20442] netlink: 'syz.1.4009': attribute type 10 has an invalid length. [ 915.928308][T20442] team0: Device vxcan1 is of different type [ 917.665745][T20452] netlink: 'syz.3.4012': attribute type 10 has an invalid length. [ 917.674860][T20452] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4012'. [ 917.691214][T20452] dummy0: entered promiscuous mode [ 917.697774][T20453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4011'. [ 917.833938][T20460] netlink: 'syz.3.4015': attribute type 10 has an invalid length. [ 917.847326][T20460] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4015'. [ 918.322243][T20471] netlink: set zone limit has 8 unknown bytes [ 918.368875][T20474] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.376646][T20474] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.415132][T20474] bridge0: entered allmulticast mode [ 918.465432][T20475] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.472598][T20475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.480092][T20475] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.487322][T20475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.497354][T20475] bridge0: entered promiscuous mode [ 918.580530][T20479] FAULT_INJECTION: forcing a failure. [ 918.580530][T20479] name failslab, interval 1, probability 0, space 0, times 0 [ 918.594838][T20479] CPU: 1 PID: 20479 Comm: syz.0.4021 Not tainted syzkaller #0 [ 918.602361][T20479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 918.612445][T20479] Call Trace: [ 918.615721][T20479] [ 918.618642][T20479] dump_stack_lvl+0x18c/0x250 [ 918.623348][T20479] ? show_regs_print_info+0x20/0x20 [ 918.628535][T20479] ? load_image+0x400/0x400 [ 918.633029][T20479] ? __might_sleep+0xe0/0xe0 [ 918.637610][T20479] ? __lock_acquire+0x7d40/0x7d40 [ 918.642621][T20479] should_fail_ex+0x39d/0x4d0 [ 918.647317][T20479] should_failslab+0x9/0x20 [ 918.651856][T20479] slab_pre_alloc_hook+0x59/0x310 [ 918.656926][T20479] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 918.662670][T20479] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 918.668421][T20479] __kmem_cache_alloc_node+0x53/0x250 [ 918.673837][T20479] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 918.679601][T20479] __kmalloc+0xa4/0x230 [ 918.684070][T20479] tomoyo_realpath_from_path+0xe3/0x5d0 [ 918.689668][T20479] tomoyo_path_number_perm+0x248/0x620 [ 918.695185][T20479] ? tomoyo_path_number_perm+0x217/0x620 [ 918.700875][T20479] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 918.706372][T20479] ? ksys_write+0x1c4/0x260 [ 918.710919][T20479] ? __fget_files+0x28/0x4b0 [ 918.715524][T20479] ? __fget_files+0x28/0x4b0 [ 918.720150][T20479] security_file_ioctl+0x70/0xa0 [ 918.725107][T20479] __se_sys_ioctl+0x48/0x170 [ 918.729802][T20479] do_syscall_64+0x55/0xa0 [ 918.734231][T20479] ? clear_bhb_loop+0x40/0x90 [ 918.738937][T20479] ? clear_bhb_loop+0x40/0x90 [ 918.743623][T20479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 918.749612][T20479] RIP: 0033:0x7f083dd9c799 [ 918.754039][T20479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.773770][T20479] RSP: 002b:00007f083ec16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 918.782229][T20479] RAX: ffffffffffffffda RBX: 00007f083e015fa0 RCX: 00007f083dd9c799 [ 918.790232][T20479] RDX: 00002000000000c0 RSI: 0000000000008b04 RDI: 0000000000000004 [ 918.798220][T20479] RBP: 00007f083ec16090 R08: 0000000000000000 R09: 0000000000000000 [ 918.806202][T20479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.814305][T20479] R13: 00007f083e016038 R14: 00007f083e015fa0 R15: 00007ffd9f0d9948 [ 918.822386][T20479] [ 918.855078][T20479] ERROR: Out of memory at tomoyo_realpath_from_path. [ 919.003462][T20491] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4024'. [ 919.006392][T20488] netlink: 'syz.3.4025': attribute type 33 has an invalid length. [ 919.031174][T20488] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4025'. [ 919.045861][T20491] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4024'. [ 919.054965][T20496] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4027'. [ 919.068522][T20496] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4027'. [ 919.079279][T20496] FAULT_INJECTION: forcing a failure. [ 919.079279][T20496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 919.081301][T20497] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4024'. [ 919.092644][T20496] CPU: 1 PID: 20496 Comm: syz.1.4027 Not tainted syzkaller #0 [ 919.109128][T20496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 919.119202][T20496] Call Trace: [ 919.122490][T20496] [ 919.125433][T20496] dump_stack_lvl+0x18c/0x250 [ 919.130420][T20496] ? show_regs_print_info+0x20/0x20 [ 919.135652][T20496] ? load_image+0x400/0x400 [ 919.140203][T20496] ? __might_fault+0xaa/0x120 [ 919.144899][T20496] ? __lock_acquire+0x7d40/0x7d40 [ 919.149954][T20496] should_fail_ex+0x39d/0x4d0 [ 919.154655][T20496] _copy_from_user+0x2f/0xe0 [ 919.159261][T20496] ___sys_recvmsg+0x176/0x590 [ 919.163953][T20496] ? __sys_recvmsg+0x2a0/0x2a0 [ 919.168815][T20496] ? ksys_write+0x1c4/0x260 [ 919.173360][T20496] ? __fget_files+0x43d/0x4b0 [ 919.178063][T20496] __x64_sys_recvmsg+0x20c/0x2e0 [ 919.183099][T20496] ? ___sys_recvmsg+0x590/0x590 [ 919.187972][T20496] ? lockdep_hardirqs_on+0x98/0x150 [ 919.193196][T20496] do_syscall_64+0x55/0xa0 [ 919.197724][T20496] ? clear_bhb_loop+0x40/0x90 [ 919.202411][T20496] ? clear_bhb_loop+0x40/0x90 [ 919.207101][T20496] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 919.213001][T20496] RIP: 0033:0x7efe0f59c799 [ 919.217436][T20496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.237050][T20496] RSP: 002b:00007efe0d7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 919.245475][T20496] RAX: ffffffffffffffda RBX: 00007efe0f815fa0 RCX: 00007efe0f59c799 [ 919.253461][T20496] RDX: 0000000000000102 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 919.261444][T20496] RBP: 00007efe0d7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 919.269513][T20496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.277491][T20496] R13: 00007efe0f816038 R14: 00007efe0f815fa0 R15: 00007fff19327ff8 [ 919.285480][T20496] [ 919.390305][T20500] netlink: 'syz.0.4028': attribute type 9 has an invalid length. [ 919.408253][T20500] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4028'. [ 920.279221][T20523] bridge0: port 3(batadv0) entered disabled state [ 920.286206][T20523] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.294326][T20523] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.346028][T20523] bridge0: entered allmulticast mode [ 920.383866][T20526] FAULT_INJECTION: forcing a failure. [ 920.383866][T20526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.387418][T20523] bridge0: port 3(batadv0) entered blocking state [ 920.403685][T20523] bridge0: port 3(batadv0) entered forwarding state [ 920.411364][T20523] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.418585][T20523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 920.426329][T20523] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.433543][T20523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 920.468994][T20526] CPU: 0 PID: 20526 Comm: syz.2.4033 Not tainted syzkaller #0 [ 920.476529][T20526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 920.486617][T20526] Call Trace: [ 920.489925][T20526] [ 920.492881][T20526] dump_stack_lvl+0x18c/0x250 [ 920.497788][T20526] ? show_regs_print_info+0x20/0x20 [ 920.503115][T20526] ? load_image+0x400/0x400 [ 920.507652][T20526] ? __might_fault+0xaa/0x120 [ 920.512357][T20526] ? __lock_acquire+0x7d40/0x7d40 [ 920.517420][T20526] should_fail_ex+0x39d/0x4d0 [ 920.522151][T20526] _copy_from_user+0x2f/0xe0 [ 920.526790][T20526] ___sys_sendmsg+0x1c7/0x360 [ 920.531491][T20526] ? get_pid_task+0x20/0x1e0 [ 920.532839][T20523] bridge0: entered promiscuous mode [ 920.536076][T20526] ? __sys_sendmsg+0x2a0/0x2a0 [ 920.536122][T20526] ? __lock_acquire+0x7d40/0x7d40 [ 920.536170][T20526] __se_sys_sendmsg+0x1c2/0x2b0 [ 920.536193][T20526] ? __x64_sys_sendmsg+0x80/0x80 [ 920.561094][T20526] ? lockdep_hardirqs_on+0x98/0x150 [ 920.566422][T20526] do_syscall_64+0x55/0xa0 [ 920.570859][T20526] ? clear_bhb_loop+0x40/0x90 [ 920.575557][T20526] ? clear_bhb_loop+0x40/0x90 [ 920.580257][T20526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 920.586160][T20526] RIP: 0033:0x7fa06699c799 [ 920.590588][T20526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.610205][T20526] RSP: 002b:00007fa0678b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.618631][T20526] RAX: ffffffffffffffda RBX: 00007fa066c15fa0 RCX: 00007fa06699c799 [ 920.626627][T20526] RDX: 000000000404f444 RSI: 0000200000000080 RDI: 0000000000000003 [ 920.634645][T20526] RBP: 00007fa0678b5090 R08: 0000000000000000 R09: 0000000000000000 [ 920.642649][T20526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.650648][T20526] R13: 00007fa066c16038 R14: 00007fa066c15fa0 R15: 00007ffe40f85a08 [ 920.658659][T20526] [ 921.471452][T20556] netlink: set zone limit has 8 unknown bytes [ 922.430190][T20575] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 922.451324][T20575] openvswitch: netlink: Message has 4 unknown bytes. [ 923.508323][ T41] tipc: Subscription rejected, illegal request [ 923.770981][T20600] FAULT_INJECTION: forcing a failure. [ 923.770981][T20600] name failslab, interval 1, probability 0, space 0, times 0 [ 923.797348][T20600] CPU: 1 PID: 20600 Comm: syz.3.4057 Not tainted syzkaller #0 [ 923.804891][T20600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 923.814985][T20600] Call Trace: [ 923.818380][T20600] [ 923.821334][T20600] dump_stack_lvl+0x18c/0x250 [ 923.826057][T20600] ? show_regs_print_info+0x20/0x20 [ 923.831292][T20600] ? load_image+0x400/0x400 [ 923.835830][T20600] ? __might_sleep+0xe0/0xe0 [ 923.840453][T20600] ? __lock_acquire+0x7d40/0x7d40 [ 923.845512][T20600] ? _copy_from_iter+0x201/0x12e0 [ 923.850575][T20600] should_fail_ex+0x39d/0x4d0 [ 923.855301][T20600] should_failslab+0x9/0x20 [ 923.859852][T20600] slab_pre_alloc_hook+0x59/0x310 [ 923.865210][T20600] kmem_cache_alloc_node+0x60/0x320 [ 923.870462][T20600] ? __alloc_skb+0x103/0x2c0 [ 923.875147][T20600] __alloc_skb+0x103/0x2c0 [ 923.879614][T20600] tipc_buf_acquire+0x2b/0xe0 [ 923.884328][T20600] tipc_msg_build+0x8c3/0xee0 [ 923.889050][T20600] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 923.895348][T20600] ? tipc_group_bc_cong+0x15c/0x210 [ 923.900582][T20600] tipc_send_group_bcast+0x7d8/0xad0 [ 923.905929][T20600] ? tipc_wait_for_connect+0x650/0x650 [ 923.911426][T20600] ? perf_trace_lock_acquire+0x104/0x410 [ 923.917105][T20600] ? perf_trace_lock_acquire+0x104/0x410 [ 923.922852][T20600] ? wait_woken+0x180/0x180 [ 923.927401][T20600] __tipc_sendmsg+0x33c/0x2bb0 [ 923.932218][T20600] ? rht_unlock+0x1d0/0x1d0 [ 923.936754][T20600] ? perf_trace_lock_acquire+0x104/0x410 [ 923.942424][T20600] ? verify_lock_unused+0x140/0x140 [ 923.947652][T20600] ? perf_trace_lock_acquire+0x104/0x410 [ 923.953326][T20600] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 923.960037][T20600] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 923.966672][T20600] ? __might_sleep+0xe0/0xe0 [ 923.971473][T20600] ? mark_lock+0x94/0x320 [ 923.975835][T20600] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 923.981926][T20600] ? __local_bh_enable_ip+0x13a/0x1c0 [ 923.987424][T20600] ? lockdep_hardirqs_on+0x98/0x150 [ 923.992651][T20600] ? __local_bh_enable_ip+0x13a/0x1c0 [ 923.998052][T20600] ? _local_bh_enable+0xa0/0xa0 [ 924.002944][T20600] tipc_sendmsg+0x55/0x70 [ 924.007583][T20600] sock_write_iter+0x2df/0x420 [ 924.012468][T20600] ? sock_read_iter+0x3e0/0x3e0 [ 924.017387][T20600] ? common_file_perm+0x198/0x1f0 [ 924.022471][T20600] vfs_write+0x46c/0x990 [ 924.026775][T20600] ? file_end_write+0x250/0x250 [ 924.031675][T20600] ? __fget_files+0x43d/0x4b0 [ 924.036403][T20600] ? __fdget_pos+0x1d8/0x330 [ 924.041018][T20600] ? ksys_write+0x75/0x260 [ 924.045467][T20600] ksys_write+0x150/0x260 [ 924.049838][T20600] ? __ia32_sys_read+0x90/0x90 [ 924.054636][T20600] ? lockdep_hardirqs_on+0x98/0x150 [ 924.059868][T20600] do_syscall_64+0x55/0xa0 [ 924.064318][T20600] ? clear_bhb_loop+0x40/0x90 [ 924.069110][T20600] ? clear_bhb_loop+0x40/0x90 [ 924.073820][T20600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 924.079741][T20600] RIP: 0033:0x7fc7a999c799 [ 924.084187][T20600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.103823][T20600] RSP: 002b:00007fc7a7bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 924.112278][T20600] RAX: ffffffffffffffda RBX: 00007fc7a9c15fa0 RCX: 00007fc7a999c799 [ 924.120388][T20600] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000005 [ 924.128500][T20600] RBP: 00007fc7a7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 924.136506][T20600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.144505][T20600] R13: 00007fc7a9c16038 R14: 00007fc7a9c15fa0 R15: 00007fff197353b8 [ 924.152565][T20600] [ 925.568907][T20624] veth0_vlan: entered allmulticast mode [ 931.385143][T20681] __nla_validate_parse: 5 callbacks suppressed [ 931.385166][T20681] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4077'. [ 931.552519][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.559401][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.925093][T20688] netlink: 'syz.2.4079': attribute type 2 has an invalid length. [ 931.948692][T20688] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4079'. [ 932.077389][T20691] netlink: 'syz.3.4080': attribute type 10 has an invalid length. [ 932.224512][T20691] team0: Device vxcan1 is of different type [ 932.532962][T20696] A link change request failed with some changes committed already. Interface bˆ¡cÊRݘOC‰ÿæ may have been left with an inconsistent configuration, please check. [ 933.933263][T20709] netlink: 'syz.0.4087': attribute type 1 has an invalid length. [ 934.034521][T20709] netlink: 'syz.0.4087': attribute type 2 has an invalid length. [ 934.084782][T20709] netlink: 'syz.0.4087': attribute type 2 has an invalid length. [ 934.238294][T20709] netlink: 'syz.0.4087': attribute type 3 has an invalid length. [ 934.266437][T20709] netlink: 'syz.0.4087': attribute type 4 has an invalid length. [ 934.281124][T20709] netlink: 'syz.0.4087': attribute type 5 has an invalid length. [ 934.291227][T20709] netlink: 'syz.0.4087': attribute type 6 has an invalid length. [ 934.292525][T20713] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4086'. [ 934.308289][T20709] netlink: 'syz.0.4087': attribute type 7 has an invalid length. [ 934.308319][T20709] netlink: 98376 bytes leftover after parsing attributes in process `syz.0.4087'. [ 934.579278][T20717] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4088'. [ 934.625774][T20717] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4088'. [ 934.696986][T20728] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4088'. [ 934.895257][T20735] team0: Device vxcan1 is of different type [ 934.953761][T20719] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.4089'. [ 935.330519][T20752] FAULT_INJECTION: forcing a failure. [ 935.330519][T20752] name failslab, interval 1, probability 0, space 0, times 0 [ 935.405992][T20752] CPU: 1 PID: 20752 Comm: syz.0.4097 Not tainted syzkaller #0 [ 935.413530][T20752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 935.423730][T20752] Call Trace: [ 935.427126][T20752] [ 935.430089][T20752] dump_stack_lvl+0x18c/0x250 [ 935.434986][T20752] ? show_regs_print_info+0x20/0x20 [ 935.440226][T20752] ? load_image+0x400/0x400 [ 935.444941][T20752] ? __lock_acquire+0x7d40/0x7d40 [ 935.450005][T20752] ? mark_lock+0x94/0x320 [ 935.454374][T20752] should_fail_ex+0x39d/0x4d0 [ 935.459115][T20752] should_failslab+0x9/0x20 [ 935.463745][T20752] slab_pre_alloc_hook+0x59/0x310 [ 935.468850][T20752] ? irqentry_enter+0x37/0x50 [ 935.473566][T20752] ? iovec_from_user+0x87/0x240 [ 935.478460][T20752] ? iovec_from_user+0x87/0x240 [ 935.483328][T20752] __kmem_cache_alloc_node+0x53/0x250 [ 935.488863][T20752] ? iovec_from_user+0x87/0x240 [ 935.493695][T20752] __kmalloc+0xa4/0x230 [ 935.497836][T20752] iovec_from_user+0x87/0x240 [ 935.502492][T20752] ? lockdep_hardirqs_on+0x98/0x150 [ 935.507674][T20752] __import_iovec+0x13d/0x850 [ 935.512335][T20752] import_iovec+0x73/0xa0 [ 935.516683][T20752] ___sys_sendmsg+0x256/0x360 [ 935.521408][T20752] ? __sys_sendmsg+0x2a0/0x2a0 [ 935.526212][T20752] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 935.532498][T20752] __se_sys_sendmsg+0x1c2/0x2b0 [ 935.537381][T20752] ? __x64_sys_sendmsg+0x80/0x80 [ 935.542340][T20752] ? syscall_enter_from_user_mode+0x2e/0x80 [ 935.548433][T20752] do_syscall_64+0x55/0xa0 [ 935.552882][T20752] ? clear_bhb_loop+0x40/0x90 [ 935.557590][T20752] ? clear_bhb_loop+0x40/0x90 [ 935.562299][T20752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 935.568243][T20752] RIP: 0033:0x7f083dd9c799 [ 935.572854][T20752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.592568][T20752] RSP: 002b:00007f083ec16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 935.600995][T20752] RAX: ffffffffffffffda RBX: 00007f083e015fa0 RCX: 00007f083dd9c799 [ 935.608975][T20752] RDX: 00000000000400c0 RSI: 0000200000000580 RDI: 000000000000000b [ 935.616971][T20752] RBP: 00007f083ec16090 R08: 0000000000000000 R09: 0000000000000000 [ 935.624961][T20752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.633031][T20752] R13: 00007f083e016038 R14: 00007f083e015fa0 R15: 00007ffd9f0d9948 [ 935.641029][T20752] [ 935.665445][T20751] FAULT_INJECTION: forcing a failure. [ 935.665445][T20751] name failslab, interval 1, probability 0, space 0, times 0 [ 935.678956][T20751] CPU: 1 PID: 20751 Comm: syz.3.4098 Not tainted syzkaller #0 [ 935.684467][T20756] syzkaller0: entered promiscuous mode [ 935.686443][T20751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 935.686460][T20751] Call Trace: [ 935.686468][T20751] [ 935.686478][T20751] dump_stack_lvl+0x18c/0x250 [ 935.692139][T20756] syzkaller0: entered allmulticast mode [ 935.702020][T20751] ? show_regs_print_info+0x20/0x20 [ 935.702053][T20751] ? load_image+0x400/0x400 [ 935.728308][T20751] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 935.734335][T20751] ? lock_chain_count+0x20/0x20 [ 935.739240][T20751] should_fail_ex+0x39d/0x4d0 [ 935.743977][T20751] should_failslab+0x9/0x20 [ 935.748539][T20751] slab_pre_alloc_hook+0x59/0x310 [ 935.753635][T20751] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 935.759848][T20751] kmem_cache_alloc+0x5a/0x2d0 [ 935.764645][T20751] ? skb_clone+0x1eb/0x370 [ 935.769102][T20751] skb_clone+0x1eb/0x370 [ 935.773379][T20751] bpf_clone_redirect+0x167/0x4a0 [ 935.778439][T20751] bpf_prog_b960c4b57b3b3b2a+0x5e/0x63 [ 935.784007][T20751] ? perf_trace_preemptirq_template+0xac/0x330 [ 935.790272][T20751] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 935.796268][T20751] ? lock_chain_count+0x20/0x20 [ 935.801130][T20751] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 935.807296][T20751] ? lockdep_hardirqs_on+0x98/0x150 [ 935.812502][T20751] ? __cant_sleep+0x220/0x220 [ 935.817200][T20751] ? bpf_test_run+0x174/0x870 [ 935.821892][T20751] ? bpf_test_run+0x174/0x870 [ 935.826575][T20751] bpf_test_run+0x2df/0x870 [ 935.831101][T20751] ? bpf_test_run+0x174/0x870 [ 935.835958][T20751] ? convert___skb_to_skb+0x590/0x590 [ 935.841345][T20751] ? eth_get_headlen+0x210/0x210 [ 935.846300][T20751] ? slab_build_skb+0x25f/0x3f0 [ 935.851172][T20751] ? convert___skb_to_skb+0x3d/0x590 [ 935.856466][T20751] bpf_prog_test_run_skb+0xad2/0x12b0 [ 935.861870][T20751] ? cpu_online+0x60/0x60 [ 935.866384][T20751] bpf_prog_test_run+0x321/0x390 [ 935.871335][T20751] __sys_bpf+0x49d/0x890 [ 935.875587][T20751] ? bpf_link_show_fdinfo+0x390/0x390 [ 935.880983][T20751] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 935.887347][T20751] __x64_sys_bpf+0x7c/0x90 [ 935.891772][T20751] do_syscall_64+0x55/0xa0 [ 935.896200][T20751] ? clear_bhb_loop+0x40/0x90 [ 935.900976][T20751] ? clear_bhb_loop+0x40/0x90 [ 935.905665][T20751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 935.911564][T20751] RIP: 0033:0x7fc7a999c799 [ 935.915986][T20751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.935611][T20751] RSP: 002b:00007fc7a7bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 935.944152][T20751] RAX: ffffffffffffffda RBX: 00007fc7a9c15fa0 RCX: 00007fc7a999c799 [ 935.952136][T20751] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 935.960305][T20751] RBP: 00007fc7a7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 935.968299][T20751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.976299][T20751] R13: 00007fc7a9c16038 R14: 00007fc7a9c15fa0 R15: 00007fff197353b8 [ 935.984309][T20751] [ 936.062577][T20761] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4100'. [ 938.279756][T20761] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4100'. [ 938.718763][T20772] A link change request failed with some changes committed already. Interface bˆ¡cÊRݘOC‰ÿæ may have been left with an inconsistent configuration, please check. [ 938.800268][T20779] validate_nla: 5 callbacks suppressed [ 938.800287][T20779] netlink: 'syz.3.4106': attribute type 21 has an invalid length. [ 938.842862][T20779] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4106'. [ 938.896197][T20776] netlink: 'syz.1.4105': attribute type 10 has an invalid length. [ 939.023181][T20776] team0: Device vxcan1 is of different type [ 939.774827][T20793] netlink: 'syz.3.4110': attribute type 10 has an invalid length. [ 941.244538][T20814] A link change request failed with some changes committed already. Interface bˆ¡cÊRݘOC‰ÿæ may have been left with an inconsistent configuration, please check. [ 941.399873][T20819] netlink: 'syz.2.4119': attribute type 17 has an invalid length. [ 941.455694][T20819] netlink: 'syz.2.4119': attribute type 21 has an invalid length. [ 941.463708][T20819] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4119'. [ 943.165991][T20832] netlink: 'syz.3.4123': attribute type 10 has an invalid length. [ 945.442738][T20847] FAULT_INJECTION: forcing a failure. [ 945.442738][T20847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 945.480802][T20847] CPU: 1 PID: 20847 Comm: syz.2.4127 Not tainted syzkaller #0 [ 945.488402][T20847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 945.498596][T20847] Call Trace: [ 945.501883][T20847] [ 945.504826][T20847] dump_stack_lvl+0x18c/0x250 [ 945.509546][T20847] ? show_regs_print_info+0x20/0x20 [ 945.514756][T20847] ? load_image+0x400/0x400 [ 945.519267][T20847] ? __might_fault+0xaa/0x120 [ 945.523947][T20847] ? __lock_acquire+0x7d40/0x7d40 [ 945.529015][T20847] should_fail_ex+0x39d/0x4d0 [ 945.533721][T20847] _copy_from_user+0x2f/0xe0 [ 945.538349][T20847] __sys_bpf+0x23e/0x890 [ 945.542732][T20847] ? bpf_link_show_fdinfo+0x390/0x390 [ 945.548193][T20847] ? lock_chain_count+0x20/0x20 [ 945.553117][T20847] __x64_sys_bpf+0x7c/0x90 [ 945.557573][T20847] do_syscall_64+0x55/0xa0 [ 945.562043][T20847] ? clear_bhb_loop+0x40/0x90 [ 945.566752][T20847] ? clear_bhb_loop+0x40/0x90 [ 945.571486][T20847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 945.577411][T20847] RIP: 0033:0x7fa06699c799 [ 945.581877][T20847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.601541][T20847] RSP: 002b:00007fa067894028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 945.610036][T20847] RAX: ffffffffffffffda RBX: 00007fa066c16090 RCX: 00007fa06699c799 [ 945.618036][T20847] RDX: 0000000000000018 RSI: 0000200000000040 RDI: 0000000000000009 [ 945.626038][T20847] RBP: 00007fa067894090 R08: 0000000000000000 R09: 0000000000000000 [ 945.634090][T20847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.642147][T20847] R13: 00007fa066c16128 R14: 00007fa066c16090 R15: 00007ffe40f85a08 [ 945.650241][T20847] [ 946.435482][T20849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 946.717356][T20860] netlink: 'syz.2.4131': attribute type 6 has an invalid length. [ 946.750510][T20860] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4131'. [ 946.900679][T20860] netlink: 'syz.2.4131': attribute type 10 has an invalid length. [ 946.912171][T20860] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4131'. [ 948.866762][T20864] Bluetooth: hci3: command 0x0406 tx timeout [ 950.550636][T20887] netlink: 'syz.2.4140': attribute type 10 has an invalid length. [ 950.560651][T20887] team0: Device vxcan1 is of different type [ 950.930896][T20898] FAULT_INJECTION: forcing a failure. [ 950.930896][T20898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.974847][T20898] CPU: 1 PID: 20898 Comm: syz.3.4144 Not tainted syzkaller #0 [ 950.982508][T20898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 950.992824][T20898] Call Trace: [ 950.996147][T20898] [ 950.999212][T20898] dump_stack_lvl+0x18c/0x250 [ 951.003951][T20898] ? show_regs_print_info+0x20/0x20 [ 951.009309][T20898] ? load_image+0x400/0x400 [ 951.013874][T20898] ? __lock_acquire+0x7d40/0x7d40 [ 951.018954][T20898] should_fail_ex+0x39d/0x4d0 [ 951.023684][T20898] _copy_from_user+0x2f/0xe0 [ 951.028331][T20898] __copy_msghdr+0x3bb/0x580 [ 951.032979][T20898] ___sys_sendmsg+0x214/0x360 [ 951.037703][T20898] ? __sys_sendmsg+0x2a0/0x2a0 [ 951.042644][T20898] ? __lock_acquire+0x7d40/0x7d40 [ 951.047780][T20898] __se_sys_sendmsg+0x1c2/0x2b0 [ 951.052672][T20898] ? __x64_sys_sendmsg+0x80/0x80 [ 951.057689][T20898] ? lockdep_hardirqs_on+0x98/0x150 [ 951.062985][T20898] do_syscall_64+0x55/0xa0 [ 951.067454][T20898] ? clear_bhb_loop+0x40/0x90 [ 951.072160][T20898] ? clear_bhb_loop+0x40/0x90 [ 951.076956][T20898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 951.082888][T20898] RIP: 0033:0x7fc7a999c799 [ 951.087360][T20898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.107001][T20898] RSP: 002b:00007fc7a7bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 951.115452][T20898] RAX: ffffffffffffffda RBX: 00007fc7a9c15fa0 RCX: 00007fc7a999c799 [ 951.123637][T20898] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 951.131642][T20898] RBP: 00007fc7a7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 951.139638][T20898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.147642][T20898] R13: 00007fc7a9c16038 R14: 00007fc7a9c15fa0 R15: 00007fff197353b8 [ 951.155692][T20898] [ 952.605088][T20916] netlink: 'syz.2.4148': attribute type 10 has an invalid length. [ 952.617235][T20916] team0: Device vxcan1 is of different type [ 954.525036][T20955] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.4162'. [ 956.078043][T20987] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 956.485029][T20995] netlink: 'syz.3.4175': attribute type 10 has an invalid length. [ 956.556761][T20995] team0: Device vxcan1 is of different type [ 956.900855][T21008] netlink: 204476 bytes leftover after parsing attributes in process `syz.1.4180'. [ 957.208706][T21014] netlink: 'syz.3.4183': attribute type 10 has an invalid length. [ 958.676062][T21028] tap0: tun_chr_ioctl cmd 1074025680 [ 958.764987][T21030] netlink: 'syz.0.4187': attribute type 10 has an invalid length. [ 958.773016][T21030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4187'. [ 958.917243][T21035] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4197'. [ 958.928972][T21035] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4197'. [ 958.991914][T21039] netlink: 'syz.0.4190': attribute type 1 has an invalid length. [ 959.011750][T21039] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.068278][T21041] delete_channel: no stack [ 959.073013][T21041] delete_channel: no stack [ 959.167905][T21046] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 959.225242][T21045] netlink: 'syz.3.4192': attribute type 10 has an invalid length. [ 959.269537][T21045] team0: Device vxcan1 is of different type [ 959.559630][T21056] netlink: 'syz.2.4195': attribute type 10 has an invalid length. [ 959.625021][T21056] team0: Device vxcan1 is of different type [ 959.689506][T21059] netlink: 'syz.3.4196': attribute type 10 has an invalid length. [ 960.387197][T21080] netlink: 'syz.1.4205': attribute type 10 has an invalid length. [ 960.714723][T21080] wg1: entered promiscuous mode [ 960.732035][T21080] wg1: entered allmulticast mode [ 960.769404][T21080] team0: Device wg1 is of different type [ 960.903093][T21079] netlink: 'syz.2.4214': attribute type 21 has an invalid length. [ 960.934902][T21079] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4214'. [ 960.956577][T21085] netlink: 'syz.2.4214': attribute type 39 has an invalid length. [ 960.967337][T21084] netlink: 'syz.3.4207': attribute type 10 has an invalid length. [ 961.013722][T21084] team0: Device vxcan1 is of different type [ 961.066328][T21087] netlink: 'syz.0.4208': attribute type 10 has an invalid length. [ 961.202948][T21094] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4209'. [ 962.424049][T21123] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4219'. [ 962.441111][T21123] vcan0: entered promiscuous mode [ 962.447947][T21123] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 962.780525][T21127] team0: Device vxcan1 is of different type [ 963.091612][T21140] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4225'. [ 964.221551][T21169] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4230'. [ 964.681811][T21175] validate_nla: 3 callbacks suppressed [ 964.681837][T21175] netlink: 'syz.1.4233': attribute type 10 has an invalid length. [ 964.893117][T21178] netlink: 'syz.3.4234': attribute type 10 has an invalid length. [ 965.020355][T21178] team0: Device vxcan1 is of different type [ 965.174648][T21183] netlink: 'syz.2.4235': attribute type 10 has an invalid length. [ 965.271563][T21183] team0: Device vxcan1 is of different type [ 965.337866][T21185] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4236'. [ 965.370739][T21185] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4236'. [ 965.555975][T21195] netlink: 'syz.1.4248': attribute type 10 has an invalid length. [ 965.610046][T21195] team0: Device vxcan1 is of different type [ 965.665417][T21197] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4241'. [ 965.688654][T21198] netlink: 'syz.2.4240': attribute type 10 has an invalid length. [ 966.191076][T21198] team0: Device wg1 is of different type [ 966.303478][T21200] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.4242'. [ 966.508127][T21214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4254'. [ 967.162344][T21224] netlink: 'syz.2.4247': attribute type 10 has an invalid length. [ 967.381316][T21230] netlink: 'syz.1.4249': attribute type 10 has an invalid length. [ 967.472853][T21230] team0: Device vxcan1 is of different type [ 967.711920][T21236] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4251'. [ 967.736744][T21236] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4251'. [ 967.838743][T21246] netlink: 'syz.1.4253': attribute type 10 has an invalid length. [ 967.934419][T21246] team0: Device vxcan1 is of different type [ 968.410192][T21263] netlink: 'syz.1.4259': attribute type 10 has an invalid length. [ 968.593090][T21265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4261'. [ 969.095139][T21273] netlink: 'syz.3.4264': attribute type 10 has an invalid length. [ 969.310026][T21273] team0: Device vxcan1 is of different type [ 969.580704][T21282] team0: Device vxcan1 is of different type [ 969.756324][T21286] validate_nla: 2 callbacks suppressed [ 969.756343][T21286] netlink: 'syz.1.4268': attribute type 10 has an invalid length. [ 969.807079][T21288] netlink: 'syz.3.4267': attribute type 10 has an invalid length. [ 969.974475][T21290] netlink: 763 bytes leftover after parsing attributes in process `syz.2.4269'. [ 971.098893][T21306] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4275'. [ 971.157489][T21311] netlink: 'syz.1.4277': attribute type 10 has an invalid length. [ 971.217156][T21309] netlink: 'syz.0.4276': attribute type 1 has an invalid length. [ 971.254260][T21309] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4276'. [ 971.458541][T21315] netlink: 'syz.2.4278': attribute type 10 has an invalid length. [ 971.505333][T21315] team0: Device vxcan1 is of different type [ 971.782422][T21323] FAULT_INJECTION: forcing a failure. [ 971.782422][T21323] name failslab, interval 1, probability 0, space 0, times 0 [ 971.824937][T21323] CPU: 1 PID: 21323 Comm: syz.1.4280 Not tainted syzkaller #0 [ 971.832490][T21323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 971.842681][T21323] Call Trace: [ 971.846005][T21323] [ 971.849064][T21323] dump_stack_lvl+0x18c/0x250 [ 971.853889][T21323] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 971.860094][T21323] ? show_regs_print_info+0x20/0x20 [ 971.865346][T21323] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 971.871562][T21323] should_fail_ex+0x39d/0x4d0 [ 971.876292][T21323] should_failslab+0x9/0x20 [ 971.880883][T21323] slab_pre_alloc_hook+0x59/0x310 [ 971.885960][T21323] ? apparmor_sk_alloc_security+0x77/0x100 [ 971.891867][T21323] __kmem_cache_alloc_node+0x53/0x250 [ 971.897305][T21323] ? apparmor_sk_alloc_security+0x77/0x100 [ 971.903175][T21323] kmalloc_trace+0x2a/0xe0 [ 971.907651][T21323] apparmor_sk_alloc_security+0x77/0x100 [ 971.913429][T21323] security_sk_alloc+0x6e/0xa0 [ 971.918241][T21323] sk_prot_alloc+0x101/0x210 [ 971.922900][T21323] ? sk_alloc+0x24/0x360 [ 971.927283][T21323] sk_alloc+0x3a/0x360 [ 971.931401][T21323] can_create+0x1cc/0x4d0 [ 971.935787][T21323] __sock_create+0x4a6/0x940 [ 971.940521][T21323] __sys_socketpair+0x1c1/0x550 [ 971.945423][T21323] __x64_sys_socketpair+0x9b/0xb0 [ 971.950491][T21323] do_syscall_64+0x55/0xa0 [ 971.954952][T21323] ? clear_bhb_loop+0x40/0x90 [ 971.959676][T21323] ? clear_bhb_loop+0x40/0x90 [ 971.964412][T21323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 971.970537][T21323] RIP: 0033:0x7efe0f59c799 [ 971.975087][T21323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.994754][T21323] RSP: 002b:00007efe0d7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 972.003240][T21323] RAX: ffffffffffffffda RBX: 00007efe0f815fa0 RCX: 00007efe0f59c799 [ 972.011265][T21323] RDX: 0000000000000007 RSI: 0000000000000002 RDI: 000000000000001d [ 972.019288][T21323] RBP: 00007efe0d7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 972.027302][T21323] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 972.035407][T21323] R13: 00007efe0f816038 R14: 00007efe0f815fa0 R15: 00007fff19327ff8 [ 972.043440][T21323] [ 972.163199][T21336] netlink: 'syz.3.4285': attribute type 8 has an invalid length. [ 972.222897][T21337] netlink: 'syz.3.4285': attribute type 10 has an invalid length. [ 972.231052][T21336] netlink: 'syz.3.4285': attribute type 6 has an invalid length. [ 972.255671][T21336] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.4285'. [ 972.275635][T21337] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4285'. [ 972.284753][T21337] .`: entered promiscuous mode [ 972.293640][T21337] bond_slave_0: entered promiscuous mode [ 972.300815][T21337] bond_slave_1: entered promiscuous mode [ 972.307173][T21337] batadv_slave_0: entered promiscuous mode [ 972.327466][T21337] 8021q: adding VLAN 0 to HW filter on device .` [ 972.334572][T21337] bridge0: port 4(.`) entered blocking state [ 972.354977][T21337] bridge0: port 4(.`) entered disabled state [ 972.369440][T21337] .`: entered allmulticast mode [ 972.374932][T21337] bond_slave_0: entered allmulticast mode [ 972.408750][T21337] bond_slave_1: entered allmulticast mode [ 972.414991][T21337] dummy0: entered allmulticast mode [ 972.551825][T21337] batadv_slave_0: entered allmulticast mode [ 972.579037][T21337] bridge0: port 4(.`) entered blocking state [ 972.585355][T21337] bridge0: port 4(.`) entered forwarding state [ 972.638635][T21345] netlink: 'syz.1.4288': attribute type 10 has an invalid length. [ 973.084315][T21348] netlink: 'syz.2.4289': attribute type 16 has an invalid length. [ 973.103453][T21348] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4289'. [ 973.128032][T21348] veth1_macvtap: entered allmulticast mode [ 973.693893][ T5083] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 975.246922][T21374] netlink: zone id is out of range [ 975.275669][T21374] netlink: set zone limit has 8 unknown bytes [ 975.292251][T21374] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4294'. [ 978.176176][T21448] netlink: 'syz.1.4316': attribute type 10 has an invalid length. [ 978.207295][T21448] team0: Device vxcan1 is of different type [ 978.257038][T21446] netlink: 'syz.2.4317': attribute type 10 has an invalid length. [ 978.297715][T21446] team0: Device vxcan1 is of different type [ 978.400739][T21453] netlink: 'syz.0.4318': attribute type 10 has an invalid length. [ 979.525934][T21469] netlink: 'syz.2.4324': attribute type 10 has an invalid length. [ 980.546130][T21483] netlink: 'syz.0.4328': attribute type 10 has an invalid length. [ 980.576726][T21483] team0: Device vxcan1 is of different type [ 980.811606][T21490] netlink: 'syz.1.4330': attribute type 10 has an invalid length. [ 980.820095][T21490] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4330'. [ 980.843489][T21492] netlink: 'syz.0.4329': attribute type 10 has an invalid length. [ 980.863249][T21492] team0: Device vxcan1 is of different type [ 981.072146][T21496] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.4332'. [ 981.158233][T21496] : renamed from veth0_to_bond (while UP) [ 981.347129][T21505] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.4334'. [ 981.395121][T21504] netlink: 'syz.3.4333': attribute type 10 has an invalid length. [ 982.122837][T21517] netlink: 'syz.0.4339': attribute type 10 has an invalid length. [ 982.500941][T21517] team0: Device vxcan1 is of different type [ 982.613778][T21513] FAULT_INJECTION: forcing a failure. [ 982.613778][T21513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 982.683021][T21513] CPU: 0 PID: 21513 Comm: syz.2.4337 Not tainted syzkaller #0 [ 982.690568][T21513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 982.700663][T21513] Call Trace: [ 982.703981][T21513] [ 982.706946][T21513] dump_stack_lvl+0x18c/0x250 [ 982.711689][T21513] ? show_regs_print_info+0x20/0x20 [ 982.716943][T21513] ? load_image+0x400/0x400 [ 982.721501][T21513] ? __might_fault+0xaa/0x120 [ 982.726226][T21513] ? __lock_acquire+0x7d40/0x7d40 [ 982.731305][T21513] should_fail_ex+0x39d/0x4d0 [ 982.736045][T21513] _copy_from_user+0x2f/0xe0 [ 982.740678][T21513] kstrtouint_from_user+0xde/0x170 [ 982.745846][T21513] ? kstrtol_from_user+0x190/0x190 [ 982.751120][T21513] proc_fail_nth_write+0x8f/0x250 [ 982.756205][T21513] ? proc_fail_nth_read+0x260/0x260 [ 982.761480][T21513] ? proc_fail_nth_read+0x260/0x260 [ 982.766740][T21513] vfs_write+0x296/0x990 [ 982.771042][T21513] ? file_end_write+0x250/0x250 [ 982.775940][T21513] ? __fget_files+0x28/0x4b0 [ 982.780578][T21513] ? __fget_files+0x28/0x4b0 [ 982.785224][T21513] ? __fget_files+0x43d/0x4b0 [ 982.789026][T21522] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.4340'. [ 982.790027][T21513] ? __fdget_pos+0x2a3/0x330 [ 982.790058][T21513] ? ksys_write+0x75/0x260 [ 982.790092][T21513] ksys_write+0x150/0x260 [ 982.812974][T21513] ? __ia32_sys_read+0x90/0x90 [ 982.817779][T21513] ? lockdep_hardirqs_on+0x98/0x150 [ 982.823055][T21513] do_syscall_64+0x55/0xa0 [ 982.827523][T21513] ? clear_bhb_loop+0x40/0x90 [ 982.832256][T21513] ? clear_bhb_loop+0x40/0x90 [ 982.836986][T21513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 982.842926][T21513] RIP: 0033:0x7fa06695cfce [ 982.847363][T21513] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 982.867027][T21513] RSP: 002b:00007fa0678b4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 982.875460][T21513] RAX: ffffffffffffffda RBX: 00007fa0678b56c0 RCX: 00007fa06695cfce [ 982.883451][T21513] RDX: 0000000000000001 RSI: 00007fa0678b50a0 RDI: 0000000000000009 [ 982.891435][T21513] RBP: 00007fa0678b5090 R08: 0000000000000000 R09: 0000000000000000 [ 982.899420][T21513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 982.907540][T21513] R13: 00007fa066c16038 R14: 00007fa066c15fa0 R15: 00007ffe40f85a08 [ 982.915566][T21513] [ 982.954108][T21522] netlink: 8446 bytes leftover after parsing attributes in process `syz.1.4340'. [ 982.980084][T21525] netlink: 'syz.0.4349': attribute type 10 has an invalid length. [ 983.572518][T21525] team0: Device vxcan1 is of different type [ 983.616501][T21527] netlink: 'syz.3.4341': attribute type 10 has an invalid length. [ 983.627480][T21527] team0: Device vxcan1 is of different type [ 983.712117][T21531] netlink: 'syz.2.4342': attribute type 10 has an invalid length. [ 983.989333][T21531] 8021q: adding VLAN 0 to HW filter on device team0 [ 984.055723][T21531] .`: (slave team0): Enslaving as an active interface with an up link [ 984.275853][T21538] netlink: 'syz.1.4344': attribute type 10 has an invalid length. [ 984.379752][T21531] syz.2.4342 (21531) used greatest stack depth: 18184 bytes left [ 984.956629][T21567] netlink: 'syz.1.4352': attribute type 39 has an invalid length. [ 985.133694][T21569] netlink: 'syz.0.4353': attribute type 10 has an invalid length. [ 985.242377][T21569] team0: Device vxcan1 is of different type [ 986.067223][T21582] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4358'. [ 986.254974][T21588] FAULT_INJECTION: forcing a failure. [ 986.254974][T21588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 986.375830][T21588] CPU: 1 PID: 21588 Comm: syz.3.4360 Not tainted syzkaller #0 [ 986.383398][T21588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 986.393539][T21588] Call Trace: [ 986.396861][T21588] [ 986.399845][T21588] dump_stack_lvl+0x18c/0x250 [ 986.404681][T21588] ? show_regs_print_info+0x20/0x20 [ 986.409938][T21588] ? load_image+0x400/0x400 [ 986.414527][T21588] ? __might_fault+0xaa/0x120 [ 986.419253][T21588] ? __lock_acquire+0x7d40/0x7d40 [ 986.424420][T21588] should_fail_ex+0x39d/0x4d0 [ 986.429178][T21588] _copy_from_user+0x2f/0xe0 [ 986.433851][T21588] ___sys_sendmsg+0x1c7/0x360 [ 986.438601][T21588] ? __sys_sendmsg+0x2a0/0x2a0 [ 986.443488][T21588] ? __lock_acquire+0x7d40/0x7d40 [ 986.448633][T21588] __se_sys_sendmsg+0x1c2/0x2b0 [ 986.453543][T21588] ? __x64_sys_sendmsg+0x80/0x80 [ 986.458562][T21588] ? lockdep_hardirqs_on+0x98/0x150 [ 986.463807][T21588] do_syscall_64+0x55/0xa0 [ 986.468379][T21588] ? clear_bhb_loop+0x40/0x90 [ 986.473108][T21588] ? clear_bhb_loop+0x40/0x90 [ 986.477836][T21588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 986.483769][T21588] RIP: 0033:0x7fc7a999c799 [ 986.488263][T21588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.508036][T21588] RSP: 002b:00007fc7a7bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 986.516497][T21588] RAX: ffffffffffffffda RBX: 00007fc7a9c15fa0 RCX: 00007fc7a999c799 [ 986.524509][T21588] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 986.532534][T21588] RBP: 00007fc7a7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 986.540539][T21588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.548552][T21588] R13: 00007fc7a9c16038 R14: 00007fc7a9c15fa0 R15: 00007fff197353b8 [ 986.556592][T21588] [ 987.369363][T21608] FAULT_INJECTION: forcing a failure. [ 987.369363][T21608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 987.382672][T21608] CPU: 1 PID: 21608 Comm: syz.3.4365 Not tainted syzkaller #0 [ 987.390188][T21608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 987.400541][T21608] Call Trace: [ 987.403844][T21608] [ 987.406823][T21608] dump_stack_lvl+0x18c/0x250 [ 987.411649][T21608] ? show_regs_print_info+0x20/0x20 [ 987.416914][T21608] ? load_image+0x400/0x400 [ 987.421496][T21608] ? __lock_acquire+0x7d40/0x7d40 [ 987.426594][T21608] ? snprintf+0xe9/0x140 [ 987.430896][T21608] should_fail_ex+0x39d/0x4d0 [ 987.435642][T21608] _copy_to_user+0x2f/0xa0 [ 987.440103][T21608] simple_read_from_buffer+0xe7/0x150 [ 987.445524][T21608] proc_fail_nth_read+0x1e8/0x260 [ 987.450597][T21608] ? proc_fault_inject_write+0x360/0x360 [ 987.456291][T21608] ? fsnotify_perm+0x271/0x5e0 [ 987.461083][T21608] ? proc_fault_inject_write+0x360/0x360 [ 987.466764][T21608] vfs_read+0x28b/0x970 [ 987.470986][T21608] ? kernel_read+0x1e0/0x1e0 [ 987.475810][T21608] ? __fget_files+0x28/0x4b0 [ 987.480448][T21608] ? __fget_files+0x28/0x4b0 [ 987.485103][T21608] ? __fget_files+0x43d/0x4b0 [ 987.489847][T21608] ? __fdget_pos+0x2a3/0x330 [ 987.494489][T21608] ? ksys_read+0x75/0x260 [ 987.498865][T21608] ksys_read+0x150/0x260 [ 987.503177][T21608] ? vfs_write+0x990/0x990 [ 987.507680][T21608] ? lockdep_hardirqs_on+0x98/0x150 [ 987.512942][T21608] do_syscall_64+0x55/0xa0 [ 987.517416][T21608] ? clear_bhb_loop+0x40/0x90 [ 987.522136][T21608] ? clear_bhb_loop+0x40/0x90 [ 987.526843][T21608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 987.532764][T21608] RIP: 0033:0x7fc7a995cfce [ 987.537206][T21608] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 987.557197][T21608] RSP: 002b:00007fc7a7bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 987.565736][T21608] RAX: ffffffffffffffda RBX: 00007fc7a7bf66c0 RCX: 00007fc7a995cfce [ 987.573821][T21608] RDX: 000000000000000f RSI: 00007fc7a7bf60a0 RDI: 0000000000000004 [ 987.581908][T21608] RBP: 00007fc7a7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 987.589910][T21608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 987.597993][T21608] R13: 00007fc7a9c16038 R14: 00007fc7a9c15fa0 R15: 00007fff197353b8 [ 987.606184][T21608] [ 987.803443][T21613] netlink: 'syz.3.4366': attribute type 10 has an invalid length. [ 988.510667][T21613] team0: Device vxcan1 is of different type [ 989.189392][T21635] FAULT_INJECTION: forcing a failure. [ 989.189392][T21635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 989.233629][T21635] CPU: 1 PID: 21635 Comm: syz.3.4374 Not tainted syzkaller #0 [ 989.241195][T21635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 989.251416][T21635] Call Trace: [ 989.254736][T21635] [ 989.257795][T21635] dump_stack_lvl+0x18c/0x250 [ 989.262563][T21635] ? show_regs_print_info+0x20/0x20 [ 989.267821][T21635] ? load_image+0x400/0x400 [ 989.272379][T21635] ? __might_fault+0xaa/0x120 [ 989.277106][T21635] ? __lock_acquire+0x7d40/0x7d40 [ 989.282188][T21635] should_fail_ex+0x39d/0x4d0 [ 989.286942][T21635] _copy_from_user+0x2f/0xe0 [ 989.291679][T21635] __sys_bpf+0x23e/0x890 [ 989.295984][T21635] ? bpf_link_show_fdinfo+0x390/0x390 [ 989.301446][T21635] ? lock_chain_count+0x20/0x20 [ 989.306367][T21635] __x64_sys_bpf+0x7c/0x90 [ 989.310920][T21635] do_syscall_64+0x55/0xa0 [ 989.315385][T21635] ? clear_bhb_loop+0x40/0x90 [ 989.320133][T21635] ? clear_bhb_loop+0x40/0x90 [ 989.324893][T21635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 989.330961][T21635] RIP: 0033:0x7fc7a999c799 [ 989.335551][T21635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.355227][T21635] RSP: 002b:00007fc7a7bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 989.363709][T21635] RAX: ffffffffffffffda RBX: 00007fc7a9c15fa0 RCX: 00007fc7a999c799 [ 989.371920][T21635] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 000000000000000a [ 989.380055][T21635] RBP: 00007fc7a7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 989.388137][T21635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 989.396131][T21635] R13: 00007fc7a9c16038 R14: 00007fc7a9c15fa0 R15: 00007fff197353b8 [ 989.404870][T21635] [ 989.465702][T21632] netlink: 'syz.0.4372': attribute type 10 has an invalid length. [ 989.567156][T21632] bridge0: port 3(team0) entered disabled state [ 989.608277][T21632] team0: left allmulticast mode [ 989.613248][T21632] team_slave_0: left allmulticast mode [ 989.635109][T21632] team_slave_1: left allmulticast mode [ 989.652400][T21632] geneve1: left allmulticast mode [ 989.670987][T21632] team0: left promiscuous mode [ 989.701262][T21632] team_slave_0: left promiscuous mode [ 989.723889][T21648] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.4377'. [ 989.726555][T21632] team_slave_1: left promiscuous mode [ 989.744606][T21632] geneve1: left promiscuous mode [ 989.753159][T21632] bridge0: port 3(team0) entered disabled state [ 989.860857][T21632] 8021q: adding VLAN 0 to HW filter on device team0 [ 989.925056][T21632] bond0: (slave team0): Enslaving as an active interface with an up link [ 991.338744][T21664] netlink: 'syz.3.4382': attribute type 10 has an invalid length. [ 991.366998][T21664] FAULT_INJECTION: forcing a failure. [ 991.366998][T21664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 991.402077][T21664] CPU: 0 PID: 21664 Comm: syz.3.4382 Not tainted syzkaller #0 [ 991.409655][T21664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 991.419769][T21664] Call Trace: [ 991.423105][T21664] [ 991.426084][T21664] dump_stack_lvl+0x18c/0x250 [ 991.430834][T21664] ? show_regs_print_info+0x20/0x20 [ 991.436093][T21664] ? load_image+0x400/0x400 [ 991.440658][T21664] ? __lock_acquire+0x7d40/0x7d40 [ 991.445735][T21664] ? snprintf+0xe9/0x140 [ 991.450038][T21664] should_fail_ex+0x39d/0x4d0 [ 991.454792][T21664] _copy_to_user+0x2f/0xa0 [ 991.459266][T21664] simple_read_from_buffer+0xe7/0x150 [ 991.464716][T21664] proc_fail_nth_read+0x1e8/0x260 [ 991.469809][T21664] ? proc_fault_inject_write+0x360/0x360 [ 991.475506][T21664] ? fsnotify_perm+0x271/0x5e0 [ 991.480344][T21664] ? proc_fault_inject_write+0x360/0x360 [ 991.486050][T21664] vfs_read+0x28b/0x970 [ 991.490480][T21664] ? kernel_read+0x1e0/0x1e0 [ 991.495097][T21664] ? __fget_files+0x28/0x4b0 [ 991.499804][T21664] ? __fget_files+0x28/0x4b0 [ 991.504409][T21664] ? __fget_files+0x43d/0x4b0 [ 991.509113][T21664] ? __fdget_pos+0x2a3/0x330 [ 991.513725][T21664] ? ksys_read+0x75/0x260 [ 991.518170][T21664] ksys_read+0x150/0x260 [ 991.523045][T21664] ? vfs_write+0x990/0x990 [ 991.527482][T21664] ? lockdep_hardirqs_on+0x98/0x150 [ 991.532792][T21664] do_syscall_64+0x55/0xa0 [ 991.537229][T21664] ? clear_bhb_loop+0x40/0x90 [ 991.541920][T21664] ? clear_bhb_loop+0x40/0x90 [ 991.546629][T21664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 991.552535][T21664] RIP: 0033:0x7fc7a995cfce [ 991.557066][T21664] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 991.576859][T21664] RSP: 002b:00007fc7a7bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 991.585292][T21664] RAX: ffffffffffffffda RBX: 00007fc7a7bf66c0 RCX: 00007fc7a995cfce [ 991.593275][T21664] RDX: 000000000000000f RSI: 00007fc7a7bf60a0 RDI: 0000000000000004 [ 991.601259][T21664] RBP: 00007fc7a7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 991.609329][T21664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 991.617334][T21664] R13: 00007fc7a9c16038 R14: 00007fc7a9c15fa0 R15: 00007fff197353b8 [ 991.625392][T21664] [ 991.921292][T21671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4386'. [ 992.153072][T21684] netlink: 'syz.2.4389': attribute type 10 has an invalid length. [ 992.290509][T21684] team0: Device vxcan1 is of different type [ 992.872249][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.879192][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.964546][T21724] netlink: 'syz.2.4400': attribute type 10 has an invalid length. [ 994.480347][T21724] team0: Device vxcan1 is of different type [ 994.636950][T21726] netlink: 'syz.1.4399': attribute type 23 has an invalid length. [ 995.195113][T21741] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4406'. [ 995.469279][T21749] netlink: 'syz.3.4408': attribute type 10 has an invalid length. [ 995.888072][T21757] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4412'. [ 996.712067][T21784] syzkaller0: entered promiscuous mode [ 996.718718][T21784] syzkaller0: entered allmulticast mode [ 1014.689767][T22017] syzkaller0: entered promiscuous mode [ 1014.701512][T22017] syzkaller0: entered allmulticast mode [ 1017.193033][T22029] GPL: port 1(veth1_to_bond) entered blocking state [ 1017.200204][T22029] GPL: port 1(veth1_to_bond) entered disabled state [ 1017.207180][T22029] veth1_to_bond: entered allmulticast mode [ 1017.214963][T22029] veth1_to_bond: entered promiscuous mode [ 1017.466323][T22052] [ 1017.469121][T22052] ============================= [ 1017.474002][T22052] WARNING: suspicious RCU usage [ 1017.479129][T22052] syzkaller #0 Not tainted [ 1017.483567][T22052] ----------------------------- [ 1017.488516][T22052] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 1017.497269][T22052] [ 1017.497269][T22052] other info that might help us debug this: [ 1017.497269][T22052] [ 1017.507625][T22052] [ 1017.507625][T22052] rcu_scheduler_active = 2, debug_locks = 1 [ 1017.515804][T22052] 1 lock held by syz.0.4513/22052: [ 1017.521163][T22052] #0: ffffffff8d132240 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 1017.531492][T22052] [ 1017.531492][T22052] stack backtrace: [ 1017.537553][T22052] CPU: 1 PID: 22052 Comm: syz.0.4513 Not tainted syzkaller #0 [ 1017.545050][T22052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1017.555121][T22052] Call Trace: [ 1017.558504][T22052] [ 1017.561444][T22052] dump_stack_lvl+0x18c/0x250 [ 1017.566148][T22052] ? show_regs_print_info+0x20/0x20 [ 1017.571368][T22052] ? load_image+0x400/0x400 [ 1017.575898][T22052] lockdep_rcu_suspicious+0x1e1/0x300 [ 1017.581290][T22052] get_callchain_entry+0x2a9/0x3c0 [ 1017.586502][T22052] get_perf_callchain+0xc6/0x510 [ 1017.591454][T22052] ? put_callchain_entry+0xb0/0xb0 [ 1017.596581][T22052] ? preempt_schedule_common+0x82/0xc0 [ 1017.602060][T22052] ? preempt_schedule+0xc0/0xd0 [ 1017.606927][T22052] ? schedule_preempt_disabled+0x20/0x20 [ 1017.612578][T22052] __bpf_get_stack+0x2e4/0x540 [ 1017.617363][T22052] ? stack_map_get_build_id_offset+0x720/0x720 [ 1017.623798][T22052] ? __cant_sleep+0x220/0x220 [ 1017.628580][T22052] ? bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 1017.634233][T22052] bpf_get_stack_raw_tp+0x1a9/0x210 [ 1017.639543][T22052] bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 1017.645024][T22052] bpf_prog_run_pin_on_cpu+0xaa/0x150 [ 1017.650416][T22052] bpf_prog_test_run_syscall+0x317/0x4a0 [ 1017.656099][T22052] ? sock_gen_cookie+0x60/0x60 [ 1017.660914][T22052] ? sock_gen_cookie+0x60/0x60 [ 1017.665796][T22052] bpf_prog_test_run+0x321/0x390 [ 1017.670859][T22052] __sys_bpf+0x49d/0x890 [ 1017.675390][T22052] ? bpf_link_show_fdinfo+0x390/0x390 [ 1017.680807][T22052] ? lock_chain_count+0x20/0x20 [ 1017.685683][T22052] __x64_sys_bpf+0x7c/0x90 [ 1017.690117][T22052] do_syscall_64+0x55/0xa0 [ 1017.694547][T22052] ? clear_bhb_loop+0x40/0x90 [ 1017.699243][T22052] ? clear_bhb_loop+0x40/0x90 [ 1017.704023][T22052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1017.709937][T22052] RIP: 0033:0x7f083dd9c799 [ 1017.714372][T22052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.734109][T22052] RSP: 002b:00007f083ec16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1017.742644][T22052] RAX: ffffffffffffffda RBX: 00007f083e015fa0 RCX: 00007f083dd9c799 [ 1017.750718][T22052] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1017.758707][T22052] RBP: 00007f083de32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1017.766691][T22052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.774762][T22052] R13: 00007f083e016038 R14: 00007f083e015fa0 R15: 00007ffd9f0d9948 [ 1017.782849][T22052]