last executing test programs: 2.638038954s ago: executing program 3 (id=1818): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x740b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xd, 0x0, &(0x7f0000000040)="40d174b2a3f781c274386d1785", 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.38406192s ago: executing program 0 (id=1820): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000384f7355895276c44291313cdbfe3a48b22ac60e3ec9fdb76d44d5472cceafa3f9"], 0x50) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{0x0}, {&(0x7f00000017c0)="ea0189", 0x3}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r0}) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={0x0, &(0x7f0000000240)=""/129, &(0x7f0000000500)="65517995ef6f18f41594f5635bba7254707d6e2ab1eab4b2550c13fae867e3199a0fd2cd7f7d", 0x0, 0xd, 0x1}, 0x38) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xf}, 0xa2a, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000001"], 0x48) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x1c2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYBLOB="3ee901"], 0x9a) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000140)=""/58}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 2.329047112s ago: executing program 3 (id=1821): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x4}, 0x7603, 0x5, 0xfffffffd, 0x0, 0xfffffffffffffffd, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) ioctl$TUNGETVNETLE(r0, 0x8955, &(0x7f0000000040)) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670007e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0xfdc2, &(0x7f0000000300)=[{&(0x7f0000000140)='i-', 0xffe3}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010102}}}], 0x20}, 0x600000a0) 2.296376683s ago: executing program 1 (id=1822): r0 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x2, &(0x7f0000000200)=r3, 0x4) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x80fe, @local, 0x3, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41) 2.201570385s ago: executing program 2 (id=1823): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f000000000000000800030018000a000d0013009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x14000000) 2.027767049s ago: executing program 3 (id=1824): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x2}]}, {0x0, [0x3e, 0x5f, 0xee6e8b3c8826711]}}, 0x0, 0x29, 0x0, 0x1, 0x2}, 0x28) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6007f03000000000000040014000d000a000f0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb4a00f6985b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="1400000033000b0fd25a806cb0a07eeb0d8f6a8a", 0x14}], 0x1}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 2.027248169s ago: executing program 2 (id=1825): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x1}], 0x10, 0x30}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0xfffffffffffffeab, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r4, &(0x7f00000001c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) 2.026755669s ago: executing program 0 (id=1826): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002980)={0xffffffffffffffff, &(0x7f0000001980)="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"}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001040)={r0, 0x0, 0x0}, 0x20) socket$kcm(0x10, 0x4, 0x0) close(0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xb, 0x0, 0x0, 0x95, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9365, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x4, 0x3, 0x0, 0xf, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5d31, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb9d315d760d7e9dfcd937", 0x12}], 0x2, 0x0, 0x0, 0x900}, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317"], 0xfe1b) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB="400000ff00000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000bfffffffd00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 1.879615493s ago: executing program 1 (id=1827): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1061c1, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2062) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1, 0x0, 0x0, 0x2000000}, 0x80d1) 1.779951196s ago: executing program 0 (id=1828): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0xa, 0x2, 0x3a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000040c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000380)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r2) r8 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r8, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r8, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) r9 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x6008, r8}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[], 0xfdef) close(r8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, r1, 0xa, 0x2028}, 0x20) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.697777218s ago: executing program 2 (id=1829): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x740b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xd, 0x0, &(0x7f0000000040)="40d174b2a3f781c274386d1785", 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.655612568s ago: executing program 3 (id=1830): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x1}], 0x10, 0x30}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0xfffffffffffffeab, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) 1.60315602s ago: executing program 1 (id=1831): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x8}, {0x90010022, 0x4}], 0x10, 0x80}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce00030e00080ff008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 1.467630964s ago: executing program 2 (id=1832): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x18, 0x110, 0xc, "aa"}], 0x30}, 0xfc40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="080000001811000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000de9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x4}, 0x94) sendmsg$inet(r5, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000040)='\a', 0x1}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @rand_addr=0x64010100}}}], 0x20}, 0xe900) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000010006bcc9e3be3206e17aa31076b876c1d0000007ea60864160af36504001a00040002000c0002009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb9864f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x900000000000000) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x854) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b9ffe4306844ebe99b554e0fe9ad", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.146852081s ago: executing program 1 (id=1833): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000100)="f25af45c839a54d9eb9fd9ca7964dc3c1004402241595804aeeb9cf071c05e356cd3edbba4cac7d7bc11c16ecaf5efe5d94fd39f2bbbe12eb4115d308ef506a5e9eb02f3dcdf7322eae36f99d9c73d3da021da7e6ae0b47ce8520ca17e366956ffc5bac60589d623eed2ed9b15da", &(0x7f00000001c0)=""/99, &(0x7f0000000240)="1f9f61b9e8f8a5831d721c16ea5d85ece219f781179549cf9dbf1176e75fab09edbf11a6adc977fffda8dc04d77e4f3a3ef254f41d1bb6b427d5834cd4c468cbb572c87ec4cda2ecd5ab8778c0218353267b700857348036c95690e2d9005cc49b3a0a0f4ba52c17fa8981f5940d485f19a92f5e", &(0x7f00000002c0)="5a968bfacb51b01db905e4219e9dcba09ac0b43d88fe99eda1b9079b", 0x80000000, r0, 0x4}, 0x38) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00700142603600e1208000f0000000401a80016001100014003000300036010fab94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x15, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.125118182s ago: executing program 0 (id=1834): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r0, 0x12) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, r4, 0x0, 0x7, &(0x7f0000000040)=':&+^/:\x00'}, 0x30) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r5, r4}, 0xc) r6 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89ef, &(0x7f0000000000)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x60042, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000480)={0x4, &(0x7f00000004c0)=[{0x2d, 0x0, 0x2}, {0x15}, {}, {0x6}]}) 1.086864183s ago: executing program 2 (id=1835): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0001000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="00000300"/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff0f000020000080) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x21, &(0x7f0000000200), 0x10) r8 = socket$kcm(0x2, 0x3, 0x106) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r11, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f0891", 0xd}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87", 0x19}], 0x2}, 0x0) r12 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r6) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r1, r0, 0x4, r6}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x1c000, 0x20000003, 0x43a1bd76, 0x7, 0x9, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) 645.984584ms ago: executing program 1 (id=1836): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002980)={0xffffffffffffffff, &(0x7f0000001980)="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"}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001040)={r0, 0x0, 0x0}, 0x20) socket$kcm(0x10, 0x4, 0x0) close(0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xb, 0x0, 0x0, 0x95, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9365, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x4, 0x3, 0x0, 0xf, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5d31, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb9d315d760d7e9dfcd937", 0x12}], 0x2, 0x0, 0x0, 0x900}, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317"], 0xfe1b) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB="400000ff00000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000bfffffffd00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 509.887877ms ago: executing program 3 (id=1837): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x1}], 0x10, 0x30}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0xfffffffffffffeab, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r4, &(0x7f00000001c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) 284.393293ms ago: executing program 1 (id=1838): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000384f7355895276c44291313cdbfe3a48b22ac60e3ec9fdb76d44d5472cceafa3f9"], 0x50) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{0x0}, {&(0x7f00000017c0)="ea0189", 0x3}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r0}) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={0x0, &(0x7f0000000240)=""/129, &(0x7f0000000500)="65517995ef6f18f41594f5635bba7254707d6e2ab1eab4b2550c13fae867e3199a0fd2cd7f7d", 0x0, 0xd, 0x1}, 0x38) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xf}, 0xa2a, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000001"], 0x48) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x1c2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYBLOB="3ee901"], 0x9a) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000140)=""/58}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 280.077823ms ago: executing program 0 (id=1846): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002980)={0xffffffffffffffff, &(0x7f0000001980)="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"}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001040)={r0, 0x0, 0x0}, 0x20) socket$kcm(0x10, 0x4, 0x0) close(0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xb, 0x0, 0x0, 0x95, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9365, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x4, 0x3, 0x0, 0xf, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5d31, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb9d315d760d7e9dfcd937", 0x12}], 0x2, 0x0, 0x0, 0x900}, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317"], 0xfe1b) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB="400000ff00000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000bfffffffd00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 82.225428ms ago: executing program 3 (id=1839): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x2, 0x232}, 0x28, 0x0, 0x0, 0x5, 0x7, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0xaf, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.78916ms ago: executing program 2 (id=1840): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000400)='cpu.pressure\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x122) r3 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=@framed={{0xad, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x15}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', r6, r5, 0x1, 0x5, 0x1}, 0x50) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1802002002000000000000000000000018010000756c"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r7 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000100730109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006301040000000000950000000000000084a9b9088a599e7a8a71c6684745c320253362fff3ddadfecce9d812a2b1e4ebb90fa19136de91933a7f76f25c2d53bba45fb5488ad925f7d533915889912653168becba09adf0e441f22b1fcb4a0fe7749469f6735b60b062c432f1602d0c6034e5d47d1e7f9249a85b172b30003301a6174b24c3a864cff2c8fe15df43f0aba1e7f354cb6d47734fe08683a0e1760242bd3f48f85638278058aa3e7608f506a37f3f4cdf7e842a4f2d73fc5f6f8444b4619f1cbc4ba06927c89616d096fb9add3eb3fd99f212aca09d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) socket$kcm(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=1841): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x8}, {0x90010022, 0x4}], 0x10, 0x80}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce00030e00080ff008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) kernel console output (not intermixed with test programs): f5c3ce26038 R14: 00007f5c3ce25fa0 R15: 00007ffe6d0820f8 [ 212.391867][ T7757] [ 212.842087][ T7765] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 213.732822][ T7787] netlink: 'syz.0.683': attribute type 1 has an invalid length. [ 213.741463][ T7787] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.683'. [ 214.618776][ T7808] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 217.182995][ T7847] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.708'. [ 217.361185][ T5782] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10 [ 218.022149][ T7866] netlink: 'syz.1.715': attribute type 3 has an invalid length. [ 218.075647][ T7866] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.715'. [ 219.450125][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 219.723386][ T7876] netlink: 'syz.2.719': attribute type 10 has an invalid length. [ 219.749448][ T7876] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.719'. [ 220.518612][ T7888] FAULT_INJECTION: forcing a failure. [ 220.518612][ T7888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.547741][ T7888] CPU: 0 PID: 7888 Comm: syz.0.723 Not tainted syzkaller #0 [ 220.555131][ T7888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.565267][ T7888] Call Trace: [ 220.568626][ T7888] [ 220.571604][ T7888] dump_stack_lvl+0x18c/0x250 [ 220.576340][ T7888] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 220.582549][ T7888] ? show_regs_print_info+0x20/0x20 [ 220.587889][ T7888] ? load_image+0x420/0x420 [ 220.592473][ T7888] should_fail_ex+0x394/0x4c0 [ 220.597211][ T7888] _copy_from_iter+0x1cd/0x1290 [ 220.602120][ T7888] ? rcu_is_watching+0x15/0xb0 [ 220.606955][ T7888] ? copyout_mc+0x70/0x70 [ 220.611349][ T7888] ? __virt_addr_valid+0x10c/0x380 [ 220.616513][ T7888] ? __virt_addr_valid+0x10c/0x380 [ 220.621705][ T7888] ? __virt_addr_valid+0x10c/0x380 [ 220.626968][ T7888] ? __check_object_size+0x4fc/0xa40 [ 220.632320][ T7888] netlink_sendmsg+0x76b/0xbf0 [ 220.637153][ T7888] ? netlink_getsockopt+0x590/0x590 [ 220.642406][ T7888] ? netlink_getsockopt+0x590/0x590 [ 220.647682][ T7888] ____sys_sendmsg+0x61b/0x980 [ 220.652605][ T7888] ? __import_iovec+0x626/0x850 [ 220.657510][ T7888] ? __sys_sendmsg_sock+0x30/0x30 [ 220.662600][ T7888] ? import_iovec+0x73/0xa0 [ 220.667733][ T7888] ___sys_sendmsg+0x2a6/0x360 [ 220.672553][ T7888] ? __sys_sendmsg+0x2b0/0x2b0 [ 220.677376][ T7888] ? perf_trace_preemptirq_template+0x269/0x330 [ 220.683725][ T7888] __se_sys_sendmsg+0x1d0/0x2c0 [ 220.688642][ T7888] ? __x64_sys_sendmsg+0x80/0x80 [ 220.693653][ T7888] ? syscall_enter_from_user_mode+0x2e/0x80 [ 220.699729][ T7888] do_syscall_64+0x55/0xb0 [ 220.704275][ T7888] ? clear_bhb_loop+0x40/0x90 [ 220.709103][ T7888] ? clear_bhb_loop+0x40/0x90 [ 220.714014][ T7888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.719956][ T7888] RIP: 0033:0x7f5c3cb9e0d9 [ 220.724429][ T7888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.744341][ T7888] RSP: 002b:00007f5c3adf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.753246][ T7888] RAX: ffffffffffffffda RBX: 00007f5c3ce26090 RCX: 00007f5c3cb9e0d9 [ 220.761370][ T7888] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 220.769476][ T7888] RBP: 00007f5c3adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 220.777616][ T7888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.785637][ T7888] R13: 00007f5c3ce26128 R14: 00007f5c3ce26090 R15: 00007ffe6d0820f8 [ 220.793758][ T7888] [ 222.215936][ T7926] netlink: 'syz.1.736': attribute type 58 has an invalid length. [ 222.249138][ T7926] netlink: 144 bytes leftover after parsing attributes in process `syz.1.736'. [ 222.283436][ T7926] netlink: 48 bytes leftover after parsing attributes in process `syz.1.736'. [ 223.590286][ T7937] ip_vti0: entered allmulticast mode [ 223.612989][ T7938] sit0: entered promiscuous mode [ 223.626402][ T7938] sit0: entered allmulticast mode [ 223.791683][ T7941] FAULT_INJECTION: forcing a failure. [ 223.791683][ T7941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.838251][ T7941] CPU: 0 PID: 7941 Comm: syz.1.740 Not tainted syzkaller #0 [ 223.845766][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.855918][ T7941] Call Trace: [ 223.859249][ T7941] [ 223.862226][ T7941] dump_stack_lvl+0x18c/0x250 [ 223.866961][ T7941] ? show_regs_print_info+0x20/0x20 [ 223.872214][ T7941] ? load_image+0x420/0x420 [ 223.876804][ T7941] ? __might_fault+0xaa/0x120 [ 223.881541][ T7941] ? __lock_acquire+0x7d80/0x7d80 [ 223.886635][ T7941] should_fail_ex+0x394/0x4c0 [ 223.891560][ T7941] _copy_from_user+0x2f/0xe0 [ 223.896215][ T7941] vti6_siocdevprivate+0x1fe/0xb80 [ 223.901444][ T7941] ? lock_chain_count+0x20/0x20 [ 223.906499][ T7941] ? vti6_tnl_xmit+0x19c0/0x19c0 [ 223.911614][ T7941] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 223.917850][ T7941] ? dev_ifsioc+0x957/0xc40 [ 223.922527][ T7941] dev_ioctl+0x84c/0x1140 [ 223.926975][ T7941] sock_ioctl+0x74c/0x7e0 [ 223.931397][ T7941] ? sock_poll+0x3e0/0x3e0 [ 223.935896][ T7941] ? bpf_lsm_file_ioctl+0x9/0x10 [ 223.941158][ T7941] ? security_file_ioctl+0x80/0xa0 [ 223.946506][ T7941] ? sock_poll+0x3e0/0x3e0 [ 223.951337][ T7941] __se_sys_ioctl+0xfd/0x170 [ 223.956131][ T7941] do_syscall_64+0x55/0xb0 [ 223.960613][ T7941] ? clear_bhb_loop+0x40/0x90 [ 223.965365][ T7941] ? clear_bhb_loop+0x40/0x90 [ 223.970108][ T7941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.976073][ T7941] RIP: 0033:0x7f38cf99e0d9 [ 223.980527][ T7941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.000193][ T7941] RSP: 002b:00007f38d0920028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.008684][ T7941] RAX: ffffffffffffffda RBX: 00007f38cfc25fa0 RCX: 00007f38cf99e0d9 [ 224.016723][ T7941] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 000000000000000a [ 224.024770][ T7941] RBP: 00007f38d0920090 R08: 0000000000000000 R09: 0000000000000000 [ 224.032808][ T7941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.040841][ T7941] R13: 00007f38cfc26038 R14: 00007f38cfc25fa0 R15: 00007ffc7dd27438 [ 224.048936][ T7941] [ 224.189089][ T7951] netlink: 'syz.2.743': attribute type 10 has an invalid length. [ 224.216423][ T7951] netlink: 40 bytes leftover after parsing attributes in process `syz.2.743'. [ 224.225631][ T7951] team0: entered promiscuous mode [ 224.247474][ T7951] team_slave_1: entered promiscuous mode [ 224.253685][ T7951] team0: entered allmulticast mode [ 224.260405][ T7951] team_slave_1: entered allmulticast mode [ 224.274615][ T7951] bridge0: port 3(team0) entered blocking state [ 224.282102][ T7951] bridge0: port 3(team0) entered disabled state [ 224.300562][ T7951] bridge0: port 3(team0) entered blocking state [ 224.307118][ T7951] bridge0: port 3(team0) entered forwarding state [ 224.559324][ T7960] netlink: 'syz.0.746': attribute type 3 has an invalid length. [ 224.573113][ T7960] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.746'. [ 224.857210][ T7967] FAULT_INJECTION: forcing a failure. [ 224.857210][ T7967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.946661][ T7967] CPU: 0 PID: 7967 Comm: syz.2.750 Not tainted syzkaller #0 [ 224.954095][ T7967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.964207][ T7967] Call Trace: [ 224.967544][ T7967] [ 224.970533][ T7967] dump_stack_lvl+0x18c/0x250 [ 224.975380][ T7967] ? show_regs_print_info+0x20/0x20 [ 224.980643][ T7967] ? load_image+0x420/0x420 [ 224.985374][ T7967] ? __lock_acquire+0x7d80/0x7d80 [ 224.990486][ T7967] ? snprintf+0xe9/0x140 [ 224.994954][ T7967] should_fail_ex+0x394/0x4c0 [ 224.999755][ T7967] _copy_to_user+0x2f/0xa0 [ 225.004239][ T7967] simple_read_from_buffer+0xe7/0x150 [ 225.009687][ T7967] proc_fail_nth_read+0x1e8/0x260 [ 225.014959][ T7967] ? proc_fault_inject_write+0x360/0x360 [ 225.020677][ T7967] ? fsnotify_perm+0x271/0x5e0 [ 225.025525][ T7967] ? proc_fault_inject_write+0x360/0x360 [ 225.031245][ T7967] vfs_read+0x298/0x990 [ 225.035487][ T7967] ? kernel_read+0x1e0/0x1e0 [ 225.042117][ T7967] ? __fget_files+0x28/0x460 [ 225.046906][ T7967] ? __fget_files+0x3fc/0x460 [ 225.051690][ T7967] ? __fdget_pos+0x2a3/0x330 [ 225.056787][ T7967] ? ksys_read+0x74/0x260 [ 225.061196][ T7967] ksys_read+0x151/0x260 [ 225.065524][ T7967] ? vfs_write+0x9a0/0x9a0 [ 225.071160][ T7967] ? lockdep_hardirqs_on+0x98/0x150 [ 225.076434][ T7967] do_syscall_64+0x55/0xb0 [ 225.080918][ T7967] ? clear_bhb_loop+0x40/0x90 [ 225.085662][ T7967] ? clear_bhb_loop+0x40/0x90 [ 225.090415][ T7967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.096373][ T7967] RIP: 0033:0x7fae0395e90e [ 225.100844][ T7967] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 225.120699][ T7967] RSP: 002b:00007fae04854fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 225.129436][ T7967] RAX: ffffffffffffffda RBX: 00007fae048556c0 RCX: 00007fae0395e90e [ 225.137494][ T7967] RDX: 000000000000000f RSI: 00007fae048550a0 RDI: 0000000000000006 [ 225.145629][ T7967] RBP: 00007fae04855090 R08: 0000000000000000 R09: 0000000000000000 [ 225.153677][ T7967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.161983][ T7967] R13: 00007fae03c26128 R14: 00007fae03c26090 R15: 00007ffefb12b888 [ 225.170213][ T7967] [ 226.943018][ T7990] netlink: 'syz.2.760': attribute type 10 has an invalid length. [ 226.964658][ T7990] netlink: 55 bytes leftover after parsing attributes in process `syz.2.760'. [ 230.016553][ T8024] FAULT_INJECTION: forcing a failure. [ 230.016553][ T8024] name failslab, interval 1, probability 0, space 0, times 0 [ 230.060384][ T8024] CPU: 0 PID: 8024 Comm: syz.2.773 Not tainted syzkaller #0 [ 230.067817][ T8024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.077959][ T8024] Call Trace: [ 230.081325][ T8024] [ 230.084342][ T8024] dump_stack_lvl+0x18c/0x250 [ 230.089119][ T8024] ? show_regs_print_info+0x20/0x20 [ 230.094402][ T8024] ? load_image+0x420/0x420 [ 230.098985][ T8024] ? __lock_acquire+0x7d80/0x7d80 [ 230.104097][ T8024] should_fail_ex+0x394/0x4c0 [ 230.108878][ T8024] should_failslab+0x9/0x20 [ 230.113438][ T8024] slab_pre_alloc_hook+0x59/0x300 [ 230.118538][ T8024] ? bpf_test_init+0x9f/0x140 [ 230.123270][ T8024] ? bpf_test_init+0x9f/0x140 [ 230.128019][ T8024] __kmem_cache_alloc_node+0x53/0x250 [ 230.133466][ T8024] ? bpf_test_init+0x9f/0x140 [ 230.138207][ T8024] __kmalloc+0xa7/0x240 [ 230.142487][ T8024] bpf_test_init+0x9f/0x140 [ 230.147058][ T8024] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 230.152489][ T8024] ? __lock_acquire+0x7d80/0x7d80 [ 230.157607][ T8024] ? dev_put+0x80/0x80 [ 230.161767][ T8024] ? dev_put+0x80/0x80 [ 230.166007][ T8024] bpf_prog_test_run+0x31f/0x390 [ 230.171036][ T8024] __sys_bpf+0x49d/0x890 [ 230.175359][ T8024] ? bpf_link_show_fdinfo+0x390/0x390 [ 230.180839][ T8024] ? lock_chain_count+0x20/0x20 [ 230.185865][ T8024] __x64_sys_bpf+0x7c/0x90 [ 230.190516][ T8024] do_syscall_64+0x55/0xb0 [ 230.195015][ T8024] ? clear_bhb_loop+0x40/0x90 [ 230.199862][ T8024] ? clear_bhb_loop+0x40/0x90 [ 230.204618][ T8024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.210575][ T8024] RIP: 0033:0x7fae0399e0d9 [ 230.215043][ T8024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.234704][ T8024] RSP: 002b:00007fae04876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.243207][ T8024] RAX: ffffffffffffffda RBX: 00007fae03c25fa0 RCX: 00007fae0399e0d9 [ 230.251366][ T8024] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 230.259484][ T8024] RBP: 00007fae04876090 R08: 0000000000000000 R09: 0000000000000000 [ 230.267874][ T8024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.275989][ T8024] R13: 00007fae03c26038 R14: 00007fae03c25fa0 R15: 00007ffefb12b888 [ 230.284072][ T8024] [ 234.357044][ T8075] netlink: 'syz.2.791': attribute type 8 has an invalid length. [ 234.364818][ T8075] netlink: 'syz.2.791': attribute type 6 has an invalid length. [ 234.388828][ T8075] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.791'. [ 234.768608][ T8039] netlink: 'syz.1.778': attribute type 10 has an invalid length. [ 234.777771][ T8039] netlink: 40 bytes leftover after parsing attributes in process `syz.1.778'. [ 235.602597][ T8101] netlink: 'syz.0.800': attribute type 10 has an invalid length. [ 235.614858][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.0.800'. [ 235.625645][ T8101] team0: entered promiscuous mode [ 235.631422][ T8101] team_slave_1: entered promiscuous mode [ 235.638085][ T8101] team0: entered allmulticast mode [ 235.643361][ T8101] team_slave_1: entered allmulticast mode [ 235.652362][ T8101] bridge0: port 3(team0) entered blocking state [ 235.665453][ T8101] bridge0: port 3(team0) entered disabled state [ 235.676193][ T8101] bridge0: port 3(team0) entered blocking state [ 235.682805][ T8101] bridge0: port 3(team0) entered forwarding state [ 235.815346][ T8105] netlink: 60 bytes leftover after parsing attributes in process `syz.0.802'. [ 235.825263][ T8105] netlink: 60 bytes leftover after parsing attributes in process `syz.0.802'. [ 235.836065][ T8105] netlink: 60 bytes leftover after parsing attributes in process `syz.0.802'. [ 235.848606][ T8105] netlink: 60 bytes leftover after parsing attributes in process `syz.0.802'. [ 236.448727][ T8124] netlink: 'syz.2.811': attribute type 10 has an invalid length. [ 236.457552][ T8124] netlink: 40 bytes leftover after parsing attributes in process `syz.2.811'. [ 237.613371][ T8149] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.821'. [ 237.766462][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 238.319511][ T8160] tap0: tun_chr_ioctl cmd 1074025677 [ 238.362671][ T8160] tap0: linktype set to 270 [ 239.077517][ T8171] netlink: 14 bytes leftover after parsing attributes in process `syz.2.827'. [ 239.099953][ T8171] hsr_slave_0: left promiscuous mode [ 239.112220][ T8171] hsr_slave_1: left promiscuous mode [ 239.753437][ T8190] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.834'. [ 240.075480][ T8196] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.836'. [ 240.124842][ T8196] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.836'. [ 240.152320][ T8193] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.836'. [ 240.176829][ T8196] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.836'. [ 240.249705][ T8193] netlink: 'syz.1.836': attribute type 10 has an invalid length. [ 240.269065][ T8193] netlink: 40 bytes leftover after parsing attributes in process `syz.1.836'. [ 240.291427][ T8193] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 240.299071][ T8193] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.336096][ T8193] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 240.537439][ T8201] delete_channel: no stack [ 240.735216][ T8213] FAULT_INJECTION: forcing a failure. [ 240.735216][ T8213] name failslab, interval 1, probability 0, space 0, times 0 [ 240.748035][ T8213] CPU: 1 PID: 8213 Comm: syz.2.843 Not tainted syzkaller #0 [ 240.755417][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.765561][ T8213] Call Trace: [ 240.768964][ T8213] [ 240.771931][ T8213] dump_stack_lvl+0x18c/0x250 [ 240.776649][ T8213] ? __sys_bpf+0x49d/0x890 [ 240.781095][ T8213] ? do_syscall_64+0x55/0xb0 [ 240.785723][ T8213] ? show_regs_print_info+0x20/0x20 [ 240.791129][ T8213] ? load_image+0x420/0x420 [ 240.795766][ T8213] should_fail_ex+0x394/0x4c0 [ 240.800487][ T8213] should_failslab+0x9/0x20 [ 240.805056][ T8213] slab_pre_alloc_hook+0x59/0x300 [ 240.810124][ T8213] ? lockdep_init_map_type+0x9c/0x8e0 [ 240.815530][ T8213] ? nf_ct_ext_add+0x1ab/0x3e0 [ 240.820338][ T8213] ? nf_ct_ext_add+0x1ab/0x3e0 [ 240.825136][ T8213] __kmem_cache_alloc_node+0x53/0x250 [ 240.830732][ T8213] ? nf_ct_ext_add+0x1ab/0x3e0 [ 240.835530][ T8213] __kmalloc_node_track_caller+0xa4/0x230 [ 240.841305][ T8213] krealloc+0x86/0x120 [ 240.845426][ T8213] nf_ct_ext_add+0x1ab/0x3e0 [ 240.850141][ T8213] init_conntrack+0x561/0xe20 [ 240.854884][ T8213] ? early_drop+0x7f0/0x7f0 [ 240.859428][ T8213] ? nf_conntrack_find_get+0x670/0x670 [ 240.865090][ T8213] ? __local_bh_enable_ip+0x13a/0x1c0 [ 240.870519][ T8213] ? __siphash_unaligned+0x25c/0x3d0 [ 240.875854][ T8213] nf_conntrack_in+0xc29/0x15b0 [ 240.880763][ T8213] ? nf_ct_pernet+0x270/0x270 [ 240.885483][ T8213] ? ipt_do_table+0x2c5/0x15c0 [ 240.890402][ T8213] ? read_lock_is_recursive+0x20/0x20 [ 240.895821][ T8213] ? get_random_u32+0x4d5/0x930 [ 240.900710][ T8213] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 240.906369][ T8213] ? ipv4_conntrack_local+0x123/0x200 [ 240.911792][ T8213] ? ipv4_conntrack_in+0x20/0x20 [ 240.916773][ T8213] nf_hook_slow+0xbd/0x200 [ 240.921258][ T8213] ? nf_hook+0x390/0x390 [ 240.925533][ T8213] nf_hook+0x228/0x390 [ 240.929734][ T8213] ? nf_hook+0xa2/0x390 [ 240.933928][ T8213] ? __ip_local_out+0x5f0/0x5f0 [ 240.938815][ T8213] ? nf_hook+0x390/0x390 [ 240.943177][ T8213] ? dst_release+0x1a0/0x1a0 [ 240.947807][ T8213] ? ip_fast_csum+0x1ee/0x2b0 [ 240.952550][ T8213] __ip_local_out+0x4db/0x5f0 [ 240.957278][ T8213] ? nf_hook+0x390/0x390 [ 240.961645][ T8213] ip_local_out+0x2a/0x130 [ 240.966104][ T8213] iptunnel_xmit+0x4d0/0x910 [ 240.970743][ T8213] ip_tunnel_xmit+0x1d18/0x25b0 [ 240.975643][ T8213] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 240.980696][ T8213] ? validate_xmit_xfrm+0xbb/0x1340 [ 240.985936][ T8213] ? skb_push+0x8e/0xe0 [ 240.990137][ T8213] ipgre_xmit+0x7eb/0xb70 [ 240.994505][ T8213] dev_hard_start_xmit+0x269/0x790 [ 240.999688][ T8213] ? __dev_queue_xmit+0x275/0x3630 [ 241.004842][ T8213] __dev_queue_xmit+0x198c/0x3630 [ 241.009910][ T8213] ? __dev_queue_xmit+0x275/0x3630 [ 241.015077][ T8213] ? netdev_core_pick_tx+0x370/0x370 [ 241.020409][ T8213] ? pskb_expand_head+0x17a/0x1150 [ 241.025587][ T8213] ? pskb_expand_head+0x17a/0x1150 [ 241.030776][ T8213] ? skb_release_data+0x1de/0x7f0 [ 241.035868][ T8213] ? __bpf_redirect+0x4d1/0xdf0 [ 241.040762][ T8213] __bpf_tx_skb+0x181/0x260 [ 241.045482][ T8213] bpf_clone_redirect+0x315/0x4a0 [ 241.050751][ T8213] bpf_prog_208b094576c80b22+0x5e/0x63 [ 241.056338][ T8213] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 241.062534][ T8213] ? __lock_acquire+0x7d80/0x7d80 [ 241.067691][ T8213] ? lock_chain_count+0x20/0x20 [ 241.072589][ T8213] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 241.078874][ T8213] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 241.084223][ T8213] ? ktime_get+0x7f/0x280 [ 241.088586][ T8213] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 241.094863][ T8213] ? ktime_get_real_ts64+0x440/0x440 [ 241.100181][ T8213] ? __x64_sys_bpf+0x7c/0x90 [ 241.104825][ T8213] ? __local_bh_disable_ip+0x108/0x1a0 [ 241.110376][ T8213] ? __cant_sleep+0x220/0x220 [ 241.115141][ T8213] ? read_tsc+0x9/0x20 [ 241.119263][ T8213] ? ktime_get+0x24b/0x280 [ 241.123732][ T8213] ? bpf_test_run+0x174/0x870 [ 241.128558][ T8213] bpf_test_run+0x2df/0x870 [ 241.133135][ T8213] ? bpf_test_run+0x174/0x870 [ 241.137864][ T8213] ? dst_hold+0x70/0x70 [ 241.142189][ T8213] ? eth_get_headlen+0x210/0x210 [ 241.147166][ T8213] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 241.152619][ T8213] ? cpu_online+0x60/0x60 [ 241.156990][ T8213] bpf_prog_test_run+0x31f/0x390 [ 241.161971][ T8213] __sys_bpf+0x49d/0x890 [ 241.166248][ T8213] ? bpf_link_show_fdinfo+0x390/0x390 [ 241.171680][ T8213] ? lock_chain_count+0x20/0x20 [ 241.176573][ T8213] __x64_sys_bpf+0x7c/0x90 [ 241.181024][ T8213] do_syscall_64+0x55/0xb0 [ 241.185472][ T8213] ? clear_bhb_loop+0x40/0x90 [ 241.190253][ T8213] ? clear_bhb_loop+0x40/0x90 [ 241.194967][ T8213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.200894][ T8213] RIP: 0033:0x7fae0399e0d9 [ 241.205342][ T8213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.224986][ T8213] RSP: 002b:00007fae04876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 241.233441][ T8213] RAX: ffffffffffffffda RBX: 00007fae03c25fa0 RCX: 00007fae0399e0d9 [ 241.241473][ T8213] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 241.249485][ T8213] RBP: 00007fae04876090 R08: 0000000000000000 R09: 0000000000000000 [ 241.257493][ T8213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.265545][ T8213] R13: 00007fae03c26038 R14: 00007fae03c25fa0 R15: 00007ffefb12b888 [ 241.273651][ T8213] [ 241.459201][ T8217] netlink: 60 bytes leftover after parsing attributes in process `syz.3.845'. [ 241.484035][ T8217] netlink: 60 bytes leftover after parsing attributes in process `syz.3.845'. [ 241.552061][ T8218] netlink: 60 bytes leftover after parsing attributes in process `syz.3.845'. [ 241.619081][ T8217] netlink: 60 bytes leftover after parsing attributes in process `syz.3.845'. [ 241.643402][ T8222] FAULT_INJECTION: forcing a failure. [ 241.643402][ T8222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.671594][ T8222] CPU: 0 PID: 8222 Comm: syz.0.848 Not tainted syzkaller #0 [ 241.678983][ T8222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.689089][ T8222] Call Trace: [ 241.692419][ T8222] [ 241.695495][ T8222] dump_stack_lvl+0x18c/0x250 [ 241.700347][ T8222] ? show_regs_print_info+0x20/0x20 [ 241.705872][ T8222] ? load_image+0x420/0x420 [ 241.710541][ T8222] ? __might_fault+0xaa/0x120 [ 241.715448][ T8222] ? __lock_acquire+0x7d80/0x7d80 [ 241.720538][ T8222] should_fail_ex+0x394/0x4c0 [ 241.725279][ T8222] _copy_from_user+0x2f/0xe0 [ 241.729961][ T8222] ___sys_recvmsg+0x174/0x590 [ 241.734706][ T8222] ? __sys_recvmsg+0x2a0/0x2a0 [ 241.739542][ T8222] ? ksys_write+0x1d2/0x260 [ 241.744122][ T8222] ? __fget_files+0x3fc/0x460 [ 241.748918][ T8222] __x64_sys_recvmsg+0x21e/0x2f0 [ 241.753921][ T8222] ? ___sys_recvmsg+0x590/0x590 [ 241.758844][ T8222] ? lockdep_hardirqs_on+0x98/0x150 [ 241.764101][ T8222] do_syscall_64+0x55/0xb0 [ 241.768574][ T8222] ? clear_bhb_loop+0x40/0x90 [ 241.773318][ T8222] ? clear_bhb_loop+0x40/0x90 [ 241.779284][ T8222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.785528][ T8222] RIP: 0033:0x7f5c3cb9e0d9 [ 241.790002][ T8222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.809756][ T8222] RSP: 002b:00007f5c3d99e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 241.818505][ T8222] RAX: ffffffffffffffda RBX: 00007f5c3ce25fa0 RCX: 00007f5c3cb9e0d9 [ 241.826700][ T8222] RDX: 0000000000000080 RSI: 0000200000000900 RDI: 0000000000000003 [ 241.834982][ T8222] RBP: 00007f5c3d99e090 R08: 0000000000000000 R09: 0000000000000000 [ 241.843012][ T8222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.851131][ T8222] R13: 00007f5c3ce26038 R14: 00007f5c3ce25fa0 R15: 00007ffe6d0820f8 [ 241.859180][ T8222] [ 242.458857][ T8237] netlink: 'syz.3.854': attribute type 8 has an invalid length. [ 242.507909][ T8230] netlink: 'syz.2.851': attribute type 10 has an invalid length. [ 242.515838][ T8237] netlink: 'syz.3.854': attribute type 6 has an invalid length. [ 242.536268][ T8230] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 242.546160][ T8230] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.612346][ T8230] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 243.360037][ T8256] netlink: 'syz.1.861': attribute type 21 has an invalid length. [ 243.386695][ T8256] netlink: 'syz.1.861': attribute type 4 has an invalid length. [ 243.395563][ T8256] netlink: 'syz.1.861': attribute type 23 has an invalid length. [ 243.837011][ T8271] FAULT_INJECTION: forcing a failure. [ 243.837011][ T8271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.881925][ T8271] CPU: 0 PID: 8271 Comm: syz.1.868 Not tainted syzkaller #0 [ 243.889332][ T8271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.899627][ T8271] Call Trace: [ 243.902947][ T8271] [ 243.905926][ T8271] dump_stack_lvl+0x18c/0x250 [ 243.910670][ T8271] ? show_regs_print_info+0x20/0x20 [ 243.915933][ T8271] ? load_image+0x420/0x420 [ 243.920508][ T8271] ? __might_fault+0xaa/0x120 [ 243.925276][ T8271] ? __lock_acquire+0x7d80/0x7d80 [ 243.930440][ T8271] ? __virt_addr_valid+0x10c/0x380 [ 243.935594][ T8271] should_fail_ex+0x394/0x4c0 [ 243.940314][ T8271] _copy_from_user+0x2f/0xe0 [ 243.944948][ T8271] vmemdup_user+0xac/0x1e0 [ 243.949405][ T8271] map_lookup_elem+0x28a/0x7f0 [ 243.954200][ T8271] ? __might_fault+0xaa/0x120 [ 243.958917][ T8271] ? bpf_lsm_bpf+0x9/0x10 [ 243.963373][ T8271] __sys_bpf+0x438/0x890 [ 243.967657][ T8271] ? bpf_link_show_fdinfo+0x390/0x390 [ 243.973258][ T8271] ? lock_chain_count+0x20/0x20 [ 243.978154][ T8271] __x64_sys_bpf+0x7c/0x90 [ 243.982628][ T8271] do_syscall_64+0x55/0xb0 [ 243.987086][ T8271] ? clear_bhb_loop+0x40/0x90 [ 243.991797][ T8271] ? clear_bhb_loop+0x40/0x90 [ 243.996530][ T8271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.002556][ T8271] RIP: 0033:0x7f38cf99e0d9 [ 244.007097][ T8271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.026740][ T8271] RSP: 002b:00007f38d0920028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 244.035210][ T8271] RAX: ffffffffffffffda RBX: 00007f38cfc25fa0 RCX: 00007f38cf99e0d9 [ 244.043643][ T8271] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000001 [ 244.051727][ T8271] RBP: 00007f38d0920090 R08: 0000000000000000 R09: 0000000000000000 [ 244.059728][ T8271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.067815][ T8271] R13: 00007f38cfc26038 R14: 00007f38cfc25fa0 R15: 00007ffc7dd27438 [ 244.075833][ T8271] [ 244.905555][ T8265] hsr_slave_0: left promiscuous mode [ 244.921437][ T8265] hsr_slave_1: left promiscuous mode [ 245.270509][ T8284] netlink: 'syz.2.873': attribute type 21 has an invalid length. [ 246.367026][ T8300] syzkaller0: entered promiscuous mode [ 246.374090][ T8300] syzkaller0: entered allmulticast mode [ 246.451193][ T8308] netlink: 'syz.1.882': attribute type 10 has an invalid length. [ 246.528236][ T8308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.550621][ T8308] batadv0: entered promiscuous mode [ 246.557394][ T8308] batadv0: entered allmulticast mode [ 246.563906][ T8308] team0: Port device batadv0 added [ 246.676249][ T42] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 246.686061][ T42] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 249.312242][ T8319] netlink: 'syz.2.887': attribute type 15 has an invalid length. [ 249.320711][ T8319] netlink: 'syz.2.887': attribute type 7 has an invalid length. [ 249.328506][ T8319] __nla_validate_parse: 7 callbacks suppressed [ 249.328522][ T8319] netlink: 52 bytes leftover after parsing attributes in process `syz.2.887'. [ 249.486706][ T8327] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.888'. [ 249.913707][ T8345] netlink: 168 bytes leftover after parsing attributes in process `syz.1.893'. [ 250.445033][ T8360] FAULT_INJECTION: forcing a failure. [ 250.445033][ T8360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.458460][ T8360] CPU: 0 PID: 8360 Comm: syz.3.899 Not tainted syzkaller #0 [ 250.465816][ T8360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.476017][ T8360] Call Trace: [ 250.479515][ T8360] [ 250.482489][ T8360] dump_stack_lvl+0x18c/0x250 [ 250.487230][ T8360] ? show_regs_print_info+0x20/0x20 [ 250.492484][ T8360] ? load_image+0x420/0x420 [ 250.497055][ T8360] ? __might_fault+0xaa/0x120 [ 250.501882][ T8360] ? __lock_acquire+0x7d80/0x7d80 [ 250.507027][ T8360] should_fail_ex+0x394/0x4c0 [ 250.511773][ T8360] _copy_from_user+0x2f/0xe0 [ 250.516411][ T8360] ___sys_recvmsg+0x174/0x590 [ 250.521149][ T8360] ? __sys_recvmsg+0x2a0/0x2a0 [ 250.525973][ T8360] ? trace_call_bpf+0xc3/0x6c0 [ 250.530779][ T8360] ? trace_call_bpf+0x5e9/0x6c0 [ 250.535670][ T8360] ? __fget_files+0x3fc/0x460 [ 250.540403][ T8360] __x64_sys_recvmsg+0x21e/0x2f0 [ 250.545382][ T8360] ? perf_trace_preemptirq_template+0x269/0x330 [ 250.551669][ T8360] ? ___sys_recvmsg+0x590/0x590 [ 250.556662][ T8360] ? lockdep_hardirqs_on+0x98/0x150 [ 250.561934][ T8360] do_syscall_64+0x55/0xb0 [ 250.566434][ T8360] ? clear_bhb_loop+0x40/0x90 [ 250.571173][ T8360] ? clear_bhb_loop+0x40/0x90 [ 250.575885][ T8360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.581857][ T8360] RIP: 0033:0x7f58fef9e0d9 [ 250.586312][ T8360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.605988][ T8360] RSP: 002b:00007f58fff42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 250.614464][ T8360] RAX: ffffffffffffffda RBX: 00007f58ff225fa0 RCX: 00007f58fef9e0d9 [ 250.622625][ T8360] RDX: 0000000000002000 RSI: 0000200000000980 RDI: 0000000000000003 [ 250.630740][ T8360] RBP: 00007f58fff42090 R08: 0000000000000000 R09: 0000000000000000 [ 250.638761][ T8360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.646766][ T8360] R13: 00007f58ff226038 R14: 00007f58ff225fa0 R15: 00007ffc5980a1b8 [ 250.654879][ T8360] [ 250.991387][ T8372] netlink: 'syz.1.905': attribute type 29 has an invalid length. [ 251.011864][ T8372] netlink: 'syz.1.905': attribute type 29 has an invalid length. [ 251.029094][ T8372] netlink: 'syz.1.905': attribute type 29 has an invalid length. [ 251.038883][ T8372] netlink: 'syz.1.905': attribute type 29 has an invalid length. [ 251.056307][ T8372] netlink: 'syz.1.905': attribute type 29 has an invalid length. [ 252.110348][ T8396] netlink: 'syz.0.913': attribute type 29 has an invalid length. [ 252.122218][ T8396] netlink: 'syz.0.913': attribute type 29 has an invalid length. [ 252.131388][ T8396] netlink: 'syz.0.913': attribute type 29 has an invalid length. [ 252.148321][ T8396] netlink: 'syz.0.913': attribute type 29 has an invalid length. [ 252.161147][ T8396] netlink: 'syz.0.913': attribute type 29 has an invalid length. [ 255.337611][ T8430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.397681][ T8430] team0: Port device batadv0 added [ 256.192377][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.198960][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.199525][ T8447] validate_nla: 6 callbacks suppressed [ 258.199547][ T8447] netlink: 'syz.2.931': attribute type 29 has an invalid length. [ 258.455710][ T8447] netlink: 'syz.2.931': attribute type 29 has an invalid length. [ 258.481216][ T8450] netlink: 'syz.2.931': attribute type 29 has an invalid length. [ 258.496863][ T8452] netlink: 'syz.2.931': attribute type 29 has an invalid length. [ 258.511653][ T8454] netlink: 'syz.2.931': attribute type 29 has an invalid length. [ 258.668316][ T8458] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.933'. [ 258.706370][ T8458] openvswitch: netlink: IP tunnel dst address not specified [ 258.731057][ T8458] netlink: 'syz.0.933': attribute type 10 has an invalid length. [ 258.746361][ T8458] netlink: 40 bytes leftover after parsing attributes in process `syz.0.933'. [ 258.783132][ T8458] dummy0: entered promiscuous mode [ 258.792872][ T8458] dummy0: entered allmulticast mode [ 258.804630][ T8458] bridge0: port 4(dummy0) entered blocking state [ 258.818747][ T8458] bridge0: port 4(dummy0) entered disabled state [ 258.828790][ T8458] bridge0: port 4(dummy0) entered blocking state [ 258.835414][ T8458] bridge0: port 4(dummy0) entered forwarding state [ 259.184819][ T8471] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.940'. [ 262.253286][ T8488] netlink: 'syz.0.944': attribute type 29 has an invalid length. [ 262.341718][ T8488] netlink: 'syz.0.944': attribute type 29 has an invalid length. [ 262.370956][ T8491] netlink: 'syz.0.944': attribute type 29 has an invalid length. [ 262.379379][ T8494] netlink: 'syz.0.944': attribute type 29 has an invalid length. [ 262.472318][ T8496] FAULT_INJECTION: forcing a failure. [ 262.472318][ T8496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.500351][ T8496] CPU: 0 PID: 8496 Comm: syz.3.948 Not tainted syzkaller #0 [ 262.507797][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.518705][ T8496] Call Trace: [ 262.522036][ T8496] [ 262.525019][ T8496] dump_stack_lvl+0x18c/0x250 [ 262.529847][ T8496] ? show_regs_print_info+0x20/0x20 [ 262.535107][ T8496] ? load_image+0x420/0x420 [ 262.539681][ T8496] ? __might_fault+0xaa/0x120 [ 262.544463][ T8496] should_fail_ex+0x394/0x4c0 [ 262.549213][ T8496] copyin+0x1a/0x90 [ 262.553138][ T8496] _copy_from_iter+0x3ec/0x1290 [ 262.558113][ T8496] ? copyout_mc+0x70/0x70 [ 262.562509][ T8496] ? __virt_addr_valid+0x10c/0x380 [ 262.567821][ T8496] ? __virt_addr_valid+0x10c/0x380 [ 262.573563][ T8496] ? __virt_addr_valid+0x10c/0x380 [ 262.579012][ T8496] ? __check_object_size+0x4fc/0xa40 [ 262.584346][ T8496] netlink_sendmsg+0x76b/0xbf0 [ 262.589181][ T8496] ? netlink_getsockopt+0x590/0x590 [ 262.594414][ T8496] ? apparmor_socket_sendmsg+0x8e/0x330 [ 262.600079][ T8496] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 262.605577][ T8496] ? security_socket_sendmsg+0x80/0xa0 [ 262.611078][ T8496] ? netlink_getsockopt+0x590/0x590 [ 262.616319][ T8496] ____sys_sendmsg+0x61b/0x980 [ 262.621165][ T8496] ? __asan_memset+0x22/0x40 [ 262.625819][ T8496] ? __sys_sendmsg_sock+0x30/0x30 [ 262.630879][ T8496] ? __import_iovec+0x3fa/0x850 [ 262.635777][ T8496] ? import_iovec+0x73/0xa0 [ 262.640322][ T8496] ___sys_sendmsg+0x2a6/0x360 [ 262.645040][ T8496] ? get_pid_task+0x20/0x1e0 [ 262.649718][ T8496] ? __sys_sendmsg+0x2b0/0x2b0 [ 262.654530][ T8496] ? __lock_acquire+0x7d80/0x7d80 [ 262.659612][ T8496] __se_sys_sendmsg+0x1d0/0x2c0 [ 262.664504][ T8496] ? __x64_sys_sendmsg+0x80/0x80 [ 262.669489][ T8496] ? lockdep_hardirqs_on+0x98/0x150 [ 262.674733][ T8496] do_syscall_64+0x55/0xb0 [ 262.679182][ T8496] ? clear_bhb_loop+0x40/0x90 [ 262.683891][ T8496] ? clear_bhb_loop+0x40/0x90 [ 262.688609][ T8496] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.694646][ T8496] RIP: 0033:0x7f58fef9e0d9 [ 262.699096][ T8496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.718837][ T8496] RSP: 002b:00007f58fff42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.727376][ T8496] RAX: ffffffffffffffda RBX: 00007f58ff225fa0 RCX: 00007f58fef9e0d9 [ 262.735381][ T8496] RDX: 0000000000040050 RSI: 0000200000000000 RDI: 0000000000000003 [ 262.743392][ T8496] RBP: 00007f58fff42090 R08: 0000000000000000 R09: 0000000000000000 [ 262.751401][ T8496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.759401][ T8496] R13: 00007f58ff226038 R14: 00007f58ff225fa0 R15: 00007ffc5980a1b8 [ 262.767416][ T8496] [ 262.985033][ T8505] macvlan0: entered promiscuous mode [ 263.046036][ T8505] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 263.367727][ T8507] syzkaller0: entered promiscuous mode [ 263.396001][ T8507] syzkaller0: entered allmulticast mode [ 263.670353][ T8521] validate_nla: 2 callbacks suppressed [ 263.670375][ T8521] netlink: 'syz.0.959': attribute type 29 has an invalid length. [ 263.692409][ T8521] netlink: 'syz.0.959': attribute type 29 has an invalid length. [ 263.704138][ T8521] netlink: 'syz.0.959': attribute type 29 has an invalid length. [ 263.718891][ T8521] netlink: 'syz.0.959': attribute type 29 has an invalid length. [ 266.054566][ T8531] netlink: 128 bytes leftover after parsing attributes in process `syz.0.962'. [ 266.105291][ T8531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.375065][ T8543] netlink: 'syz.2.966': attribute type 10 has an invalid length. [ 266.458763][ T8543] macvlan0: entered promiscuous mode [ 266.526641][ T8543] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 268.002408][ T8562] syzkaller0: entered promiscuous mode [ 268.034804][ T8562] syzkaller0: entered allmulticast mode [ 268.236815][ T8577] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.980'. [ 268.782871][ T8583] netlink: 'syz.0.982': attribute type 29 has an invalid length. [ 268.797827][ T8583] netlink: 'syz.0.982': attribute type 29 has an invalid length. [ 268.813229][ T8583] netlink: 'syz.0.982': attribute type 29 has an invalid length. [ 268.827152][ T8583] netlink: 'syz.0.982': attribute type 29 has an invalid length. [ 271.043094][ T8600] FAULT_INJECTION: forcing a failure. [ 271.043094][ T8600] name failslab, interval 1, probability 0, space 0, times 0 [ 271.056035][ T8600] CPU: 1 PID: 8600 Comm: syz.0.990 Not tainted syzkaller #0 [ 271.063376][ T8600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.073513][ T8600] Call Trace: [ 271.076844][ T8600] [ 271.079826][ T8600] dump_stack_lvl+0x18c/0x250 [ 271.084572][ T8600] ? show_regs_print_info+0x20/0x20 [ 271.089920][ T8600] ? load_image+0x420/0x420 [ 271.094671][ T8600] ? netdev_core_pick_tx+0x370/0x370 [ 271.100375][ T8600] should_fail_ex+0x394/0x4c0 [ 271.105131][ T8600] should_failslab+0x9/0x20 [ 271.109964][ T8600] slab_pre_alloc_hook+0x59/0x300 [ 271.115107][ T8600] kmem_cache_alloc+0x5a/0x2c0 [ 271.119980][ T8600] ? skb_clone+0x1eb/0x370 [ 271.124464][ T8600] skb_clone+0x1eb/0x370 [ 271.128808][ T8600] bpf_clone_redirect+0x16d/0x4a0 [ 271.133909][ T8600] bpf_prog_c6f54bbad6dab1ee+0x5e/0x63 [ 271.139433][ T8600] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 271.145567][ T8600] ? preempt_schedule+0xc0/0xd0 [ 271.150542][ T8600] ? perf_trace_preemptirq_template+0xac/0x330 [ 271.156775][ T8600] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 271.162999][ T8600] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 271.168431][ T8600] ? lock_chain_count+0x20/0x20 [ 271.173344][ T8600] ? __local_bh_disable_ip+0x108/0x1a0 [ 271.178876][ T8600] ? __cant_sleep+0x220/0x220 [ 271.183715][ T8600] ? __local_bh_enable_ip+0x13a/0x1c0 [ 271.189415][ T8600] ? _local_bh_enable+0xa0/0xa0 [ 271.194678][ T8600] ? bpf_test_timer_continue+0x135/0x380 [ 271.200477][ T8600] ? bpf_test_run+0x174/0x870 [ 271.205423][ T8600] bpf_test_run+0x2df/0x870 [ 271.210021][ T8600] ? bpf_test_run+0x174/0x870 [ 271.214804][ T8600] ? dst_hold+0x70/0x70 [ 271.219040][ T8600] ? eth_get_headlen+0x210/0x210 [ 271.224043][ T8600] ? slab_build_skb+0x25a/0x3e0 [ 271.228962][ T8600] ? convert___skb_to_skb+0x3d/0x590 [ 271.234319][ T8600] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 271.239792][ T8600] ? cpu_online+0x60/0x60 [ 271.244200][ T8600] bpf_prog_test_run+0x31f/0x390 [ 271.249453][ T8600] __sys_bpf+0x49d/0x890 [ 271.254030][ T8600] ? bpf_link_show_fdinfo+0x390/0x390 [ 271.259494][ T8600] ? lock_chain_count+0x20/0x20 [ 271.264536][ T8600] __x64_sys_bpf+0x7c/0x90 [ 271.269012][ T8600] do_syscall_64+0x55/0xb0 [ 271.273527][ T8600] ? clear_bhb_loop+0x40/0x90 [ 271.278366][ T8600] ? clear_bhb_loop+0x40/0x90 [ 271.283105][ T8600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.289234][ T8600] RIP: 0033:0x7f5c3cb9e0d9 [ 271.293702][ T8600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.313351][ T8600] RSP: 002b:00007f5c3d99e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 271.321834][ T8600] RAX: ffffffffffffffda RBX: 00007f5c3ce25fa0 RCX: 00007f5c3cb9e0d9 [ 271.329882][ T8600] RDX: 0000000000000050 RSI: 0000200000001580 RDI: 000000000000000a [ 271.337889][ T8600] RBP: 00007f5c3d99e090 R08: 0000000000000000 R09: 0000000000000000 [ 271.345909][ T8600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 271.353938][ T8600] R13: 00007f5c3ce26038 R14: 00007f5c3ce25fa0 R15: 00007ffe6d0820f8 [ 271.362044][ T8600] [ 271.997925][ T8614] netlink: 'syz.3.996': attribute type 10 has an invalid length. [ 272.054015][ T8614] macvlan0: entered promiscuous mode [ 272.142871][ T8614] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 272.595175][ T8623] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1000'. [ 273.039092][ T8635] netlink: 'syz.0.1004': attribute type 3 has an invalid length. [ 273.057304][ T8635] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1004'. [ 273.861462][ T8649] netlink: 'syz.0.1010': attribute type 10 has an invalid length. [ 273.873140][ T8649] macvlan0: entered promiscuous mode [ 273.907372][ T8649] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 274.319307][ T8662] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1016'. [ 274.328982][ T8662] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1016'. [ 274.339617][ T8662] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1016'. [ 274.349654][ T8662] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1016'. [ 276.105207][ T8676] netlink: 'syz.0.1022': attribute type 10 has an invalid length. [ 278.044462][ T8700] netlink: 'syz.1.1031': attribute type 3 has an invalid length. [ 278.066343][ T8700] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1031'. [ 278.277428][ T8702] netlink: 'syz.1.1032': attribute type 10 has an invalid length. [ 278.469876][ T8706] netlink: 'syz.1.1034': attribute type 21 has an invalid length. [ 278.482579][ T8706] netlink: 'syz.1.1034': attribute type 6 has an invalid length. [ 278.490691][ T8706] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1034'. [ 280.534814][ T8726] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1040'. [ 280.933775][ T8728] netlink: 'syz.3.1041': attribute type 3 has an invalid length. [ 280.952497][ T8728] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1041'. [ 281.150729][ T8735] netlink: 'syz.1.1043': attribute type 10 has an invalid length. [ 281.172288][ T8734] netlink: 'syz.2.1051': attribute type 10 has an invalid length. [ 281.343316][ T8736] syzkaller0: entered promiscuous mode [ 281.370442][ T8736] syzkaller0: entered allmulticast mode [ 282.197987][ T8753] netlink: 'syz.2.1052': attribute type 3 has an invalid length. [ 282.223411][ T8753] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1052'. [ 282.346569][ T8758] netlink: 'syz.1.1054': attribute type 10 has an invalid length. [ 282.354478][ T8758] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1054'. [ 282.475085][ T8762] netlink: 'syz.0.1057': attribute type 19 has an invalid length. [ 282.483892][ T8762] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1057'. [ 282.649846][ T8762] veth1_macvtap: left promiscuous mode [ 283.428450][ T8781] netlink: 'syz.2.1065': attribute type 21 has an invalid length. [ 283.460915][ T8781] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1065'. [ 283.735044][ T8785] netlink: 'syz.1.1067': attribute type 11 has an invalid length. [ 283.756387][ T8785] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1067'. [ 283.874005][ T8786] netlink: 'syz.3.1066': attribute type 10 has an invalid length. [ 283.906725][ T8786] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1066'. [ 283.926603][ T8786] hsr0: entered promiscuous mode [ 283.939701][ T8786] bridge0: port 3(hsr0) entered blocking state [ 283.968037][ T8786] bridge0: port 3(hsr0) entered disabled state [ 283.974577][ T8786] hsr0: entered allmulticast mode [ 283.980423][ T8786] hsr_slave_0: entered allmulticast mode [ 283.987022][ T8786] hsr_slave_1: entered allmulticast mode [ 283.995897][ T8786] bridge0: port 3(hsr0) entered blocking state [ 284.002454][ T8786] bridge0: port 3(hsr0) entered forwarding state [ 284.018764][ T8792] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1069'. [ 284.317152][ T8794] FAULT_INJECTION: forcing a failure. [ 284.317152][ T8794] name failslab, interval 1, probability 0, space 0, times 0 [ 284.356308][ T8794] CPU: 1 PID: 8794 Comm: syz.2.1070 Not tainted syzkaller #0 [ 284.363782][ T8794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.373992][ T8794] Call Trace: [ 284.377329][ T8794] [ 284.380318][ T8794] dump_stack_lvl+0x18c/0x250 [ 284.385060][ T8794] ? show_regs_print_info+0x20/0x20 [ 284.390329][ T8794] ? load_image+0x420/0x420 [ 284.394913][ T8794] ? __might_sleep+0xe0/0xe0 [ 284.399584][ T8794] ? __lock_acquire+0x7d80/0x7d80 [ 284.404759][ T8794] should_fail_ex+0x394/0x4c0 [ 284.409502][ T8794] should_failslab+0x9/0x20 [ 284.414202][ T8794] slab_pre_alloc_hook+0x59/0x300 [ 284.419304][ T8794] kmem_cache_alloc+0x5a/0x2c0 [ 284.424138][ T8794] ? __kernfs_new_node+0xe5/0x7f0 [ 284.429237][ T8794] __kernfs_new_node+0xe5/0x7f0 [ 284.434154][ T8794] ? kernfs_new_node+0x260/0x260 [ 284.439482][ T8794] ? kernfs_create_dir_ns+0x112/0x120 [ 284.444940][ T8794] ? sysfs_create_dir_ns+0x130/0x2a0 [ 284.450305][ T8794] kernfs_new_node+0x14c/0x260 [ 284.455109][ T8794] __kernfs_create_file+0x4b/0x2e0 [ 284.460275][ T8794] sysfs_add_file_mode_ns+0x237/0x2f0 [ 284.465689][ T8794] sysfs_create_file_ns+0x12c/0x1b0 [ 284.470933][ T8794] ? sysfs_add_bin_file_mode_ns+0x200/0x200 [ 284.476908][ T8794] device_add+0x4d8/0xc40 [ 284.481281][ T8794] netdev_register_kobject+0x188/0x320 [ 284.486782][ T8794] register_netdevice+0x12aa/0x1ba0 [ 284.492020][ T8794] ? kvmalloc_node+0x70/0x180 [ 284.496736][ T8794] ? netif_stacked_transfer_operstate+0x210/0x210 [ 284.503201][ T8794] ? __asan_memset+0x22/0x40 [ 284.507876][ T8794] ? alloc_netdev_mqs+0xba3/0x1040 [ 284.513035][ T8794] ? __asan_memcpy+0x40/0x70 [ 284.517666][ T8794] ? __ip_tunnel_create+0x386/0x4d0 [ 284.523122][ T8794] __ip_tunnel_create+0x3bc/0x4d0 [ 284.528202][ T8794] ? ip_tunnel_init_net+0x7c0/0x7c0 [ 284.533462][ T8794] ? security_capable+0x89/0xb0 [ 284.538373][ T8794] ip_tunnel_ctl+0xc36/0x1910 [ 284.543107][ T8794] vti_tunnel_ctl+0x1f9/0x390 [ 284.547836][ T8794] ip_tunnel_siocdevprivate+0x138/0x1f0 [ 284.553506][ T8794] ? dev_ioctl+0x83c/0x1140 [ 284.558093][ T8794] ? ip_tunnel_update+0xae0/0xae0 [ 284.563162][ T8794] ? dev_ifsioc+0x957/0xc40 [ 284.568063][ T8794] dev_ioctl+0x84c/0x1140 [ 284.572590][ T8794] sock_ioctl+0x74c/0x7e0 [ 284.576977][ T8794] ? sock_poll+0x3e0/0x3e0 [ 284.581438][ T8794] ? bpf_lsm_file_ioctl+0x9/0x10 [ 284.586411][ T8794] ? security_file_ioctl+0x80/0xa0 [ 284.591591][ T8794] ? sock_poll+0x3e0/0x3e0 [ 284.596221][ T8794] __se_sys_ioctl+0xfd/0x170 [ 284.600852][ T8794] do_syscall_64+0x55/0xb0 [ 284.605421][ T8794] ? clear_bhb_loop+0x40/0x90 [ 284.610169][ T8794] ? clear_bhb_loop+0x40/0x90 [ 284.614898][ T8794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.620836][ T8794] RIP: 0033:0x7fae0399e0d9 [ 284.625822][ T8794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.645681][ T8794] RSP: 002b:00007fae04876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.654227][ T8794] RAX: ffffffffffffffda RBX: 00007fae03c25fa0 RCX: 00007fae0399e0d9 [ 284.662323][ T8794] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006 [ 284.670332][ T8794] RBP: 00007fae04876090 R08: 0000000000000000 R09: 0000000000000000 [ 284.678449][ T8794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 284.686721][ T8794] R13: 00007fae03c26038 R14: 00007fae03c25fa0 R15: 00007ffefb12b888 [ 284.694860][ T8794] [ 284.716275][ T5782] Bluetooth: hci1: unexpected event 0x36 length: 15 > 7 [ 285.692256][ T8821] netlink: 'syz.1.1082': attribute type 10 has an invalid length. [ 285.732919][ T8821] team0: Device hsr_slave_0 failed to register rx_handler [ 286.231526][ T8834] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1087'. [ 288.762405][ T8873] netlink: 'syz.0.1099': attribute type 10 has an invalid length. [ 288.917886][ T8873] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.960192][ T8873] bridge_slave_1: left allmulticast mode [ 288.968323][ T8873] bridge_slave_1: left promiscuous mode [ 288.976364][ T8873] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.095224][ T8873] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 289.681920][ T8887] netlink: 'syz.3.1102': attribute type 10 has an invalid length. [ 292.100963][ T8917] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1114'. [ 292.122031][ T8917] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 292.167547][ T3510] bridge0: port 3(team0) entered disabled state [ 292.217483][ T8919] netlink: 'syz.3.1115': attribute type 10 has an invalid length. [ 292.971843][ T8937] FAULT_INJECTION: forcing a failure. [ 292.971843][ T8937] name failslab, interval 1, probability 0, space 0, times 0 [ 293.005669][ T8937] CPU: 0 PID: 8937 Comm: syz.0.1123 Not tainted syzkaller #0 [ 293.013340][ T8937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 293.023484][ T8937] Call Trace: [ 293.026832][ T8937] [ 293.029842][ T8937] dump_stack_lvl+0x18c/0x250 [ 293.034606][ T8937] ? show_regs_print_info+0x20/0x20 [ 293.039887][ T8937] ? load_image+0x420/0x420 [ 293.044480][ T8937] ? __might_sleep+0xe0/0xe0 [ 293.049142][ T8937] ? __lock_acquire+0x7d80/0x7d80 [ 293.054301][ T8937] should_fail_ex+0x394/0x4c0 [ 293.059053][ T8937] should_failslab+0x9/0x20 [ 293.063634][ T8937] slab_pre_alloc_hook+0x59/0x300 [ 293.068738][ T8937] ? __lock_acquire+0x7d80/0x7d80 [ 293.073832][ T8937] kmem_cache_alloc_node+0x5e/0x310 [ 293.079110][ T8937] ? __alloc_skb+0x103/0x2c0 [ 293.083818][ T8937] __alloc_skb+0x103/0x2c0 [ 293.088306][ T8937] netlink_sendmsg+0x66a/0xbf0 [ 293.093234][ T8937] ? netlink_getsockopt+0x590/0x590 [ 293.098546][ T8937] ? apparmor_socket_sendmsg+0x8e/0x330 [ 293.104161][ T8937] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 293.110050][ T8937] ? security_socket_sendmsg+0x80/0xa0 [ 293.115707][ T8937] ? netlink_getsockopt+0x590/0x590 [ 293.120975][ T8937] ____sys_sendmsg+0x61b/0x980 [ 293.125837][ T8937] ? __asan_memset+0x22/0x40 [ 293.130590][ T8937] ? __sys_sendmsg_sock+0x30/0x30 [ 293.135683][ T8937] ? __import_iovec+0x5f2/0x850 [ 293.140614][ T8937] ? import_iovec+0x73/0xa0 [ 293.145192][ T8937] ___sys_sendmsg+0x2a6/0x360 [ 293.149940][ T8937] ? get_pid_task+0x20/0x1e0 [ 293.154689][ T8937] ? __sys_sendmsg+0x2b0/0x2b0 [ 293.159538][ T8937] ? __lock_acquire+0x7d80/0x7d80 [ 293.164747][ T8937] __se_sys_sendmsg+0x1d0/0x2c0 [ 293.169753][ T8937] ? __x64_sys_sendmsg+0x80/0x80 [ 293.174770][ T8937] ? lockdep_hardirqs_on+0x98/0x150 [ 293.180047][ T8937] do_syscall_64+0x55/0xb0 [ 293.184533][ T8937] ? clear_bhb_loop+0x40/0x90 [ 293.189335][ T8937] ? clear_bhb_loop+0x40/0x90 [ 293.194123][ T8937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.200179][ T8937] RIP: 0033:0x7f5c3cb9e0d9 [ 293.204742][ T8937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.224593][ T8937] RSP: 002b:00007f5c3d99e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.233172][ T8937] RAX: ffffffffffffffda RBX: 00007f5c3ce25fa0 RCX: 00007f5c3cb9e0d9 [ 293.241253][ T8937] RDX: 0000000000000004 RSI: 0000200000000940 RDI: 0000000000000003 [ 293.249392][ T8937] RBP: 00007f5c3d99e090 R08: 0000000000000000 R09: 0000000000000000 [ 293.257415][ T8937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.265528][ T8937] R13: 00007f5c3ce26038 R14: 00007f5c3ce25fa0 R15: 00007ffe6d0820f8 [ 293.273578][ T8937] [ 294.157684][ T8950] netlink: 'syz.2.1128': attribute type 10 has an invalid length. [ 294.165930][ T8950] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1128'. [ 294.824882][ T8967] netlink: 'syz.0.1134': attribute type 10 has an invalid length. [ 298.278081][ T9017] netlink: 'syz.1.1160': attribute type 10 has an invalid length. [ 298.709386][ T9017] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 298.874350][ T9025] netlink: 'syz.2.1154': attribute type 10 has an invalid length. [ 300.898570][ T9050] netlink: 'syz.2.1165': attribute type 10 has an invalid length. [ 301.059417][ T9050] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 301.479699][ T9055] netlink: 'syz.1.1166': attribute type 10 has an invalid length. [ 303.238700][ T9073] netlink: 'syz.3.1173': attribute type 10 has an invalid length. [ 303.299985][ T9073] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 304.037189][ T9091] netlink: 'syz.2.1178': attribute type 10 has an invalid length. [ 304.051723][ T9089] netlink: 'syz.1.1180': attribute type 10 has an invalid length. [ 304.224698][ T9089] geneve1: entered promiscuous mode [ 304.234286][ T9089] geneve1: entered allmulticast mode [ 304.250994][ T9089] team0: Port device geneve1 added [ 305.357572][ T9116] netlink: 'syz.0.1186': attribute type 10 has an invalid length. [ 305.653139][ T9116] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 306.401565][ T9132] netlink: 'syz.0.1190': attribute type 10 has an invalid length. [ 306.816091][ T9136] netlink: 'syz.3.1191': attribute type 10 has an invalid length. [ 306.881403][ T9136] team0: Port device geneve1 added [ 307.979928][ T9168] netlink: 'syz.3.1203': attribute type 10 has an invalid length. [ 308.189058][ T9172] netlink: 'syz.2.1212': attribute type 10 has an invalid length. [ 308.531151][ T9178] FAULT_INJECTION: forcing a failure. [ 308.531151][ T9178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.566689][ T9178] CPU: 1 PID: 9178 Comm: syz.0.1206 Not tainted syzkaller #0 [ 308.574165][ T9178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 308.584303][ T9178] Call Trace: [ 308.587627][ T9178] [ 308.590624][ T9178] dump_stack_lvl+0x18c/0x250 [ 308.595428][ T9178] ? show_regs_print_info+0x20/0x20 [ 308.600692][ T9178] ? load_image+0x420/0x420 [ 308.605263][ T9178] ? __might_fault+0xaa/0x120 [ 308.610019][ T9178] ? __lock_acquire+0x7d80/0x7d80 [ 308.615193][ T9178] should_fail_ex+0x394/0x4c0 [ 308.619933][ T9178] _copy_from_user+0x2f/0xe0 [ 308.624583][ T9178] smc_setsockopt+0x3bb/0xb00 [ 308.629307][ T9178] ? smc_shutdown+0x9a0/0x9a0 [ 308.634022][ T9178] ? __fget_files+0x28/0x460 [ 308.638657][ T9178] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 308.644330][ T9178] ? security_socket_setsockopt+0x7e/0xa0 [ 308.650080][ T9178] ? smc_shutdown+0x9a0/0x9a0 [ 308.654816][ T9178] do_sock_setsockopt+0x175/0x1a0 [ 308.659880][ T9178] ? __fdget+0x180/0x210 [ 308.664187][ T9178] __x64_sys_setsockopt+0x182/0x200 [ 308.669459][ T9178] do_syscall_64+0x55/0xb0 [ 308.673918][ T9178] ? clear_bhb_loop+0x40/0x90 [ 308.678637][ T9178] ? clear_bhb_loop+0x40/0x90 [ 308.683528][ T9178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.689540][ T9178] RIP: 0033:0x7f5c3cb9e0d9 [ 308.693984][ T9178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.714662][ T9178] RSP: 002b:00007f5c3d99e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 308.723758][ T9178] RAX: ffffffffffffffda RBX: 00007f5c3ce25fa0 RCX: 00007f5c3cb9e0d9 [ 308.731765][ T9178] RDX: 0000000000000009 RSI: 0000000000000006 RDI: 0000000000000003 [ 308.739859][ T9178] RBP: 00007f5c3d99e090 R08: 0000000000000004 R09: 0000000000000000 [ 308.747855][ T9178] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 308.755857][ T9178] R13: 00007f5c3ce26038 R14: 00007f5c3ce25fa0 R15: 00007ffe6d0820f8 [ 308.764063][ T9178] [ 310.412123][ T9201] netlink: 'syz.0.1214': attribute type 10 has an invalid length. [ 311.352302][ T9218] FAULT_INJECTION: forcing a failure. [ 311.352302][ T9218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.368699][ T9218] CPU: 1 PID: 9218 Comm: syz.2.1219 Not tainted syzkaller #0 [ 311.376184][ T9218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.386316][ T9218] Call Trace: [ 311.389656][ T9218] [ 311.392992][ T9218] dump_stack_lvl+0x18c/0x250 [ 311.397768][ T9218] ? show_regs_print_info+0x20/0x20 [ 311.403035][ T9218] ? load_image+0x420/0x420 [ 311.407613][ T9218] ? __might_fault+0xaa/0x120 [ 311.412340][ T9218] ? __lock_acquire+0x7d80/0x7d80 [ 311.417411][ T9218] should_fail_ex+0x394/0x4c0 [ 311.422173][ T9218] _copy_from_user+0x2f/0xe0 [ 311.426813][ T9218] ___sys_sendmsg+0x1c7/0x360 [ 311.431549][ T9218] ? __sys_sendmsg+0x2b0/0x2b0 [ 311.436424][ T9218] ? trace_call_bpf+0xc3/0x6c0 [ 311.441717][ T9218] __se_sys_sendmsg+0x1d0/0x2c0 [ 311.446639][ T9218] ? perf_trace_preemptirq_template+0x269/0x330 [ 311.453026][ T9218] ? __x64_sys_sendmsg+0x80/0x80 [ 311.458034][ T9218] ? lockdep_hardirqs_on+0x98/0x150 [ 311.463293][ T9218] do_syscall_64+0x55/0xb0 [ 311.467757][ T9218] ? clear_bhb_loop+0x40/0x90 [ 311.472476][ T9218] ? clear_bhb_loop+0x40/0x90 [ 311.477215][ T9218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.483170][ T9218] RIP: 0033:0x7fae0399e0d9 [ 311.487633][ T9218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.507294][ T9218] RSP: 002b:00007fae04876028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.515758][ T9218] RAX: ffffffffffffffda RBX: 00007fae03c25fa0 RCX: 00007fae0399e0d9 [ 311.523773][ T9218] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000008 [ 311.531789][ T9218] RBP: 00007fae04876090 R08: 0000000000000000 R09: 0000000000000000 [ 311.539800][ T9218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.547809][ T9218] R13: 00007fae03c26038 R14: 00007fae03c25fa0 R15: 00007ffefb12b888 [ 311.555848][ T9218] [ 312.443651][ T9231] netlink: 'syz.0.1225': attribute type 10 has an invalid length. [ 312.772109][ T9243] netlink: 'syz.1.1230': attribute type 12 has an invalid length. [ 312.785750][ T9243] netlink: 'syz.1.1230': attribute type 15 has an invalid length. [ 313.300512][ T9255] netlink: 'syz.3.1234': attribute type 1 has an invalid length. [ 313.311032][ T9255] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1234'. [ 313.756792][ T9264] netlink: 'syz.2.1237': attribute type 10 has an invalid length. [ 313.809392][ T9266] netlink: 2895 bytes leftover after parsing attributes in process `syz.1.1236'. [ 314.081857][ T9274] netlink: 'syz.2.1240': attribute type 10 has an invalid length. [ 314.115624][ T9274] hsr_slave_0: entered promiscuous mode [ 314.137870][ T9274] hsr_slave_0: entered allmulticast mode [ 314.186362][ T9274] team0: Port device hsr_slave_0 added [ 314.519826][ T9284] netlink: 'syz.0.1246': attribute type 10 has an invalid length. [ 314.538173][ T9284] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1246'. [ 314.566445][ T9290] netlink: 'syz.1.1248': attribute type 10 has an invalid length. [ 314.634325][ T9293] FAULT_INJECTION: forcing a failure. [ 314.634325][ T9293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.649116][ T9293] CPU: 0 PID: 9293 Comm: syz.3.1249 Not tainted syzkaller #0 [ 314.656576][ T9293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 314.666688][ T9293] Call Trace: [ 314.670020][ T9293] [ 314.672994][ T9293] dump_stack_lvl+0x18c/0x250 [ 314.677730][ T9293] ? show_regs_print_info+0x20/0x20 [ 314.682995][ T9293] ? load_image+0x420/0x420 [ 314.687578][ T9293] ? __might_fault+0xaa/0x120 [ 314.692322][ T9293] should_fail_ex+0x394/0x4c0 [ 314.697245][ T9293] copyin+0x1a/0x90 [ 314.701289][ T9293] _copy_from_iter+0x532/0x1290 [ 314.706215][ T9293] ? copyout_mc+0x70/0x70 [ 314.710615][ T9293] ? __virt_addr_valid+0x10c/0x380 [ 314.715793][ T9293] ? __virt_addr_valid+0x10c/0x380 [ 314.720969][ T9293] ? __virt_addr_valid+0x10c/0x380 [ 314.726321][ T9293] ? __check_object_size+0x4fc/0xa40 [ 314.731879][ T9293] netlink_sendmsg+0x76b/0xbf0 [ 314.736750][ T9293] ? netlink_getsockopt+0x590/0x590 [ 314.742021][ T9293] ? apparmor_socket_sendmsg+0x8e/0x330 [ 314.747641][ T9293] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 314.752991][ T9293] ? security_socket_sendmsg+0x80/0xa0 [ 314.758503][ T9293] ? netlink_getsockopt+0x590/0x590 [ 314.763873][ T9293] ____sys_sendmsg+0x61b/0x980 [ 314.768687][ T9293] ? __asan_memset+0x22/0x40 [ 314.773492][ T9293] ? __sys_sendmsg_sock+0x30/0x30 [ 314.778575][ T9293] ? __import_iovec+0x3fa/0x850 [ 314.783579][ T9293] ? import_iovec+0x73/0xa0 [ 314.788154][ T9293] ___sys_sendmsg+0x2a6/0x360 [ 314.792884][ T9293] ? get_pid_task+0x20/0x1e0 [ 314.797519][ T9293] ? __sys_sendmsg+0x2b0/0x2b0 [ 314.802343][ T9293] ? __lock_acquire+0x7d80/0x7d80 [ 314.807422][ T9293] __se_sys_sendmsg+0x1d0/0x2c0 [ 314.812311][ T9293] ? __x64_sys_sendmsg+0x80/0x80 [ 314.817322][ T9293] ? lockdep_hardirqs_on+0x98/0x150 [ 314.822565][ T9293] do_syscall_64+0x55/0xb0 [ 314.827030][ T9293] ? clear_bhb_loop+0x40/0x90 [ 314.831745][ T9293] ? clear_bhb_loop+0x40/0x90 [ 314.836548][ T9293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.842493][ T9293] RIP: 0033:0x7f58fef9e0d9 [ 314.846940][ T9293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.866682][ T9293] RSP: 002b:00007f58fff42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.875140][ T9293] RAX: ffffffffffffffda RBX: 00007f58ff225fa0 RCX: 00007f58fef9e0d9 [ 314.883149][ T9293] RDX: 0000000000004100 RSI: 0000200000000600 RDI: 0000000000000005 [ 314.891239][ T9293] RBP: 00007f58fff42090 R08: 0000000000000000 R09: 0000000000000000 [ 314.899245][ T9293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.907250][ T9293] R13: 00007f58ff226038 R14: 00007f58ff225fa0 R15: 00007ffc5980a1b8 [ 314.915363][ T9293] [ 315.168713][ T9300] netlink: 'syz.1.1252': attribute type 10 has an invalid length. [ 315.195331][ T9300] team0: Device hsr_slave_0 failed to register rx_handler [ 315.940747][ T9328] netlink: 'syz.3.1263': attribute type 10 has an invalid length. [ 317.144801][ T9359] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.1275'. [ 317.634754][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.641655][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.679721][ T9404] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.1289'. [ 323.235847][ T9421] validate_nla: 1 callbacks suppressed [ 323.235867][ T9421] netlink: 'syz.3.1295': attribute type 10 has an invalid length. [ 323.803549][ T9426] netlink: 'syz.3.1297': attribute type 1 has an invalid length. [ 323.811717][ T9426] netlink: 'syz.3.1297': attribute type 2 has an invalid length. [ 323.825851][ T9426] netlink: 'syz.3.1297': attribute type 2 has an invalid length. [ 323.834258][ T9426] netlink: 'syz.3.1297': attribute type 3 has an invalid length. [ 323.845024][ T9426] netlink: 'syz.3.1297': attribute type 4 has an invalid length. [ 323.855900][ T9426] netlink: 'syz.3.1297': attribute type 5 has an invalid length. [ 323.869283][ T9426] netlink: 'syz.3.1297': attribute type 6 has an invalid length. [ 323.877766][ T9426] netlink: 'syz.3.1297': attribute type 7 has an invalid length. [ 323.885737][ T9426] netlink: 'syz.3.1297': attribute type 9 has an invalid length. [ 323.907589][ T9426] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.1297'. [ 325.920776][ T9482] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1317'. [ 325.962998][ T9486] FAULT_INJECTION: forcing a failure. [ 325.962998][ T9486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.990698][ T9486] CPU: 0 PID: 9486 Comm: syz.2.1320 Not tainted syzkaller #0 [ 325.998183][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.008326][ T9486] Call Trace: [ 326.011652][ T9486] [ 326.014632][ T9486] dump_stack_lvl+0x18c/0x250 [ 326.019384][ T9486] ? show_regs_print_info+0x20/0x20 [ 326.024686][ T9486] ? load_image+0x420/0x420 [ 326.029260][ T9486] ? __might_fault+0xaa/0x120 [ 326.034042][ T9486] ? __lock_acquire+0x7d80/0x7d80 [ 326.039143][ T9486] should_fail_ex+0x394/0x4c0 [ 326.043918][ T9486] _copy_from_iter+0x1cd/0x1290 [ 326.048829][ T9486] ? __might_fault+0xaa/0x120 [ 326.053618][ T9486] ? copyout_mc+0x70/0x70 [ 326.058029][ T9486] ? copyout_mc+0x70/0x70 [ 326.062424][ T9486] ? __virt_addr_valid+0x10c/0x380 [ 326.067638][ T9486] ? page_copy_sane+0x16a/0x270 [ 326.072552][ T9486] copy_page_from_iter+0x7b/0x100 [ 326.077639][ T9486] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 326.083529][ T9486] tun_get_user+0xc84/0x3d70 [ 326.088245][ T9486] ? aa_file_perm+0x3e3/0xee0 [ 326.092995][ T9486] ? rcu_read_unlock+0xa0/0xa0 [ 326.097839][ T9486] ? tun_get+0x1c/0x2e0 [ 326.102078][ T9486] ? __lock_acquire+0x7d80/0x7d80 [ 326.107192][ T9486] ? tun_get+0x1c/0x2e0 [ 326.111431][ T9486] tun_chr_write_iter+0x119/0x200 [ 326.116537][ T9486] vfs_write+0x474/0x9a0 [ 326.120942][ T9486] ? file_end_write+0x250/0x250 [ 326.125877][ T9486] ? __fget_files+0x3fc/0x460 [ 326.130644][ T9486] ? __fdget_pos+0x1d8/0x330 [ 326.135303][ T9486] ? ksys_write+0x74/0x260 [ 326.139779][ T9486] ksys_write+0x151/0x260 [ 326.144175][ T9486] ? __ia32_sys_read+0x90/0x90 [ 326.148993][ T9486] ? lockdep_hardirqs_on+0x98/0x150 [ 326.154237][ T9486] do_syscall_64+0x55/0xb0 [ 326.158716][ T9486] ? clear_bhb_loop+0x40/0x90 [ 326.163450][ T9486] ? clear_bhb_loop+0x40/0x90 [ 326.168182][ T9486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.174134][ T9486] RIP: 0033:0x7fae0399e0d9 [ 326.178613][ T9486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.198341][ T9486] RSP: 002b:00007fae04876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 326.206786][ T9486] RAX: ffffffffffffffda RBX: 00007fae03c25fa0 RCX: 00007fae0399e0d9 [ 326.214791][ T9486] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 326.222804][ T9486] RBP: 00007fae04876090 R08: 0000000000000000 R09: 0000000000000000 [ 326.230894][ T9486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 326.239066][ T9486] R13: 00007fae03c26038 R14: 00007fae03c25fa0 R15: 00007ffefb12b888 [ 326.247083][ T9486] [ 327.924220][ T9512] FAULT_INJECTION: forcing a failure. [ 327.924220][ T9512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.958297][ T9512] CPU: 0 PID: 9512 Comm: syz.0.1329 Not tainted syzkaller #0 [ 327.965952][ T9512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 327.976150][ T9512] Call Trace: [ 327.979474][ T9512] [ 327.982468][ T9512] dump_stack_lvl+0x18c/0x250 [ 327.987190][ T9512] ? show_regs_print_info+0x20/0x20 [ 327.992433][ T9512] ? load_image+0x420/0x420 [ 327.996979][ T9512] ? __might_fault+0xaa/0x120 [ 328.001779][ T9512] ? __lock_acquire+0x7d80/0x7d80 [ 328.006847][ T9512] should_fail_ex+0x394/0x4c0 [ 328.011569][ T9512] _copy_from_user+0x2f/0xe0 [ 328.016193][ T9512] __sys_bpf+0x23e/0x890 [ 328.020479][ T9512] ? bpf_link_show_fdinfo+0x390/0x390 [ 328.025991][ T9512] ? lock_chain_count+0x20/0x20 [ 328.030892][ T9512] __x64_sys_bpf+0x7c/0x90 [ 328.035526][ T9512] do_syscall_64+0x55/0xb0 [ 328.039979][ T9512] ? clear_bhb_loop+0x40/0x90 [ 328.044696][ T9512] ? clear_bhb_loop+0x40/0x90 [ 328.049413][ T9512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.055339][ T9512] RIP: 0033:0x7f5c3cb9e0d9 [ 328.059788][ T9512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.079622][ T9512] RSP: 002b:00007f5c3d99e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 328.088187][ T9512] RAX: ffffffffffffffda RBX: 00007f5c3ce25fa0 RCX: 00007f5c3cb9e0d9 [ 328.096364][ T9512] RDX: 0000000000000050 RSI: 00002000000011c0 RDI: 000000000000000a [ 328.104358][ T9512] RBP: 00007f5c3d99e090 R08: 0000000000000000 R09: 0000000000000000 [ 328.112358][ T9512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.120381][ T9512] R13: 00007f5c3ce26038 R14: 00007f5c3ce25fa0 R15: 00007ffe6d0820f8 [ 328.128416][ T9512] [ 329.302869][ T9542] validate_nla: 6 callbacks suppressed [ 329.302892][ T9542] netlink: 'syz.0.1341': attribute type 2 has an invalid length. [ 329.321595][ T9542] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.1341'. [ 329.458522][ T9540] netlink: 'syz.3.1340': attribute type 21 has an invalid length. [ 329.463164][ T9547] FAULT_INJECTION: forcing a failure. [ 329.463164][ T9547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.497100][ T9547] CPU: 1 PID: 9547 Comm: syz.0.1343 Not tainted syzkaller #0 [ 329.504654][ T9547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 329.515019][ T9547] Call Trace: [ 329.518332][ T9547] [ 329.521315][ T9547] dump_stack_lvl+0x18c/0x250 [ 329.526122][ T9547] ? show_regs_print_info+0x20/0x20 [ 329.531375][ T9547] ? load_image+0x420/0x420 [ 329.535923][ T9547] ? __might_fault+0xaa/0x120 [ 329.540637][ T9547] ? __lock_acquire+0x7d80/0x7d80 [ 329.545701][ T9547] should_fail_ex+0x394/0x4c0 [ 329.550421][ T9547] _copy_from_user+0x2f/0xe0 [ 329.555057][ T9547] ___sys_sendmsg+0x1c7/0x360 [ 329.559777][ T9547] ? get_pid_task+0x20/0x1e0 [ 329.564406][ T9547] ? __sys_sendmsg+0x2b0/0x2b0 [ 329.569223][ T9547] ? __lock_acquire+0x7d80/0x7d80 [ 329.574480][ T9547] __se_sys_sendmsg+0x1d0/0x2c0 [ 329.579370][ T9547] ? __x64_sys_sendmsg+0x80/0x80 [ 329.584357][ T9547] ? lockdep_hardirqs_on+0x98/0x150 [ 329.589599][ T9547] do_syscall_64+0x55/0xb0 [ 329.594058][ T9547] ? clear_bhb_loop+0x40/0x90 [ 329.598887][ T9547] ? clear_bhb_loop+0x40/0x90 [ 329.603612][ T9547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.609543][ T9547] RIP: 0033:0x7f5c3cb9e0d9 [ 329.613992][ T9547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.633637][ T9547] RSP: 002b:00007f5c3d99e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.642085][ T9547] RAX: ffffffffffffffda RBX: 00007f5c3ce25fa0 RCX: 00007f5c3cb9e0d9 [ 329.650086][ T9547] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 329.658171][ T9547] RBP: 00007f5c3d99e090 R08: 0000000000000000 R09: 0000000000000000 [ 329.666184][ T9547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.674193][ T9547] R13: 00007f5c3ce26038 R14: 00007f5c3ce25fa0 R15: 00007ffe6d0820f8 [ 329.682220][ T9547] [ 330.841682][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1348'. [ 330.895785][ T9569] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1351'. [ 331.043588][ T9573] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1353'. [ 331.195665][ T9573] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.1353'. [ 331.966856][ T9596] netlink: 'syz.1.1361': attribute type 10 has an invalid length. [ 331.981585][ T9596] hsr0: left allmulticast mode [ 331.987246][ T9596] hsr_slave_0: left allmulticast mode [ 331.992933][ T9596] hsr_slave_1: left allmulticast mode [ 332.001897][ T9596] bridge0: port 4(hsr0) entered disabled state [ 332.150569][ T9596] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 332.299440][ T9598] netlink: 'syz.3.1363': attribute type 3 has an invalid length. [ 332.318181][ T9598] netlink: 'syz.3.1363': attribute type 1 has an invalid length. [ 332.327485][ T9598] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1363'. [ 332.369079][ T9603] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1365'. [ 332.479645][ T9603] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.1365'. [ 335.556776][ T9654] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1381'. [ 335.702643][ T9654] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.1381'. [ 336.725374][ T9688] netlink: 'syz.2.1396': attribute type 10 has an invalid length. [ 336.735496][ T9692] FAULT_INJECTION: forcing a failure. [ 336.735496][ T9692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.758897][ T9692] CPU: 0 PID: 9692 Comm: syz.3.1398 Not tainted syzkaller #0 [ 336.766374][ T9692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 336.776485][ T9692] Call Trace: [ 336.779986][ T9692] [ 336.782957][ T9692] dump_stack_lvl+0x18c/0x250 [ 336.787695][ T9692] ? show_regs_print_info+0x20/0x20 [ 336.792993][ T9692] ? load_image+0x420/0x420 [ 336.797564][ T9692] ? __might_fault+0xaa/0x120 [ 336.802309][ T9692] ? __lock_acquire+0x7d80/0x7d80 [ 336.807386][ T9692] ? udp_sendmsg+0x1ae1/0x23d0 [ 336.812215][ T9692] ? __virt_addr_valid+0x10c/0x380 [ 336.817404][ T9692] should_fail_ex+0x394/0x4c0 [ 336.822253][ T9692] _copy_from_user+0x2f/0xe0 [ 336.826999][ T9692] csum_and_copy_from_iter+0x1f3/0x1480 [ 336.832629][ T9692] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 336.838348][ T9692] ? __kmem_cache_alloc_node+0x194/0x250 [ 336.844137][ T9692] ? __alloc_skb+0x138/0x2c0 [ 336.848790][ T9692] ? rcu_is_watching+0x15/0xb0 [ 336.853835][ T9692] ip_generic_getfrag+0x163/0x2f0 [ 336.858929][ T9692] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 336.863847][ T9692] ? __build_skb_around+0x245/0x3c0 [ 336.869104][ T9692] ? __alloc_skb+0x1b2/0x2c0 [ 336.873760][ T9692] ? skb_put+0x112/0x210 [ 336.878069][ T9692] __ip_append_data+0x2f3b/0x3bf0 [ 336.883283][ T9692] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 336.888205][ T9692] ? ip_setup_cork+0x840/0x840 [ 336.893023][ T9692] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 336.898027][ T9692] ? ip_make_skb+0x163/0x440 [ 336.902686][ T9692] ip_make_skb+0x22b/0x440 [ 336.907155][ T9692] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 336.912214][ T9692] ? ip_flush_pending_frames+0x250/0x250 [ 336.917910][ T9692] udp_sendmsg+0x1ae1/0x23d0 [ 336.923107][ T9692] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 336.928011][ T9692] ? udp_cmsg_send+0x350/0x350 [ 336.932830][ T9692] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 336.938849][ T9692] ? lock_chain_count+0x20/0x20 [ 336.943734][ T9692] ? __local_bh_enable_ip+0x13a/0x1c0 [ 336.949137][ T9692] ? _local_bh_enable+0xa0/0xa0 [ 336.954030][ T9692] ? inet_sendmsg+0x10d/0x2a0 [ 336.958747][ T9692] ? inet_sendmsg+0x10d/0x2a0 [ 336.963463][ T9692] ? inet_send_prepare+0x250/0x250 [ 336.968642][ T9692] ____sys_sendmsg+0x61b/0x980 [ 336.973476][ T9692] ? __sys_sendmsg_sock+0x30/0x30 [ 336.978551][ T9692] ? __import_iovec+0x5f2/0x850 [ 336.983464][ T9692] ? import_iovec+0x73/0xa0 [ 336.988013][ T9692] ___sys_sendmsg+0x2a6/0x360 [ 336.992727][ T9692] ? __sys_sendmsg+0x2b0/0x2b0 [ 336.997551][ T9692] __se_sys_sendmsg+0x1d0/0x2c0 [ 337.002424][ T9692] ? perf_trace_preemptirq_template+0x269/0x330 [ 337.008731][ T9692] ? __x64_sys_sendmsg+0x80/0x80 [ 337.013705][ T9692] ? lockdep_hardirqs_on+0x98/0x150 [ 337.018935][ T9692] do_syscall_64+0x55/0xb0 [ 337.023434][ T9692] ? clear_bhb_loop+0x40/0x90 [ 337.028429][ T9692] ? clear_bhb_loop+0x40/0x90 [ 337.033157][ T9692] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.039083][ T9692] RIP: 0033:0x7f58fef9e0d9 [ 337.043535][ T9692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.063174][ T9692] RSP: 002b:00007f58fff42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.071630][ T9692] RAX: ffffffffffffffda RBX: 00007f58ff225fa0 RCX: 00007f58fef9e0d9 [ 337.079645][ T9692] RDX: 00000000600000a0 RSI: 0000200000001a40 RDI: 0000000000000005 [ 337.087645][ T9692] RBP: 00007f58fff42090 R08: 0000000000000000 R09: 0000000000000000 [ 337.095647][ T9692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 337.103728][ T9692] R13: 00007f58ff226038 R14: 00007f58ff225fa0 R15: 00007ffc5980a1b8 [ 337.111744][ T9692] [ 337.240963][ T9696] netlink: 'syz.1.1400': attribute type 10 has an invalid length. [ 337.533789][ T9707] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.1402'. [ 338.428357][ T9728] netlink: 'syz.1.1412': attribute type 10 has an invalid length. [ 338.772802][ T9735] netlink: 'syz.1.1415': attribute type 153 has an invalid length. [ 338.822405][ T9735] netlink: 'syz.1.1415': attribute type 1 has an invalid length. [ 338.866266][ T9735] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.1415'. [ 339.323928][ T9743] FAULT_INJECTION: forcing a failure. [ 339.323928][ T9743] name failslab, interval 1, probability 0, space 0, times 0 [ 339.339791][ T9743] CPU: 1 PID: 9743 Comm: syz.2.1419 Not tainted syzkaller #0 [ 339.347248][ T9743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 339.357439][ T9743] Call Trace: [ 339.360758][ T9743] [ 339.363743][ T9743] dump_stack_lvl+0x18c/0x250 [ 339.368591][ T9743] ? show_regs_print_info+0x20/0x20 [ 339.373859][ T9743] ? load_image+0x420/0x420 [ 339.378484][ T9743] ? __might_sleep+0xe0/0xe0 [ 339.383229][ T9743] ? __lock_acquire+0x7d80/0x7d80 [ 339.388411][ T9743] should_fail_ex+0x394/0x4c0 [ 339.393175][ T9743] should_failslab+0x9/0x20 [ 339.397844][ T9743] slab_pre_alloc_hook+0x59/0x300 [ 339.403011][ T9743] ? __lock_acquire+0x7d80/0x7d80 [ 339.408130][ T9743] kmem_cache_alloc_node+0x5e/0x310 [ 339.413570][ T9743] ? __alloc_skb+0x103/0x2c0 [ 339.418221][ T9743] __alloc_skb+0x103/0x2c0 [ 339.422694][ T9743] netlink_sendmsg+0x66a/0xbf0 [ 339.427528][ T9743] ? netlink_getsockopt+0x590/0x590 [ 339.432876][ T9743] ? apparmor_socket_sendmsg+0x8e/0x330 [ 339.438481][ T9743] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 339.443834][ T9743] ? security_socket_sendmsg+0x80/0xa0 [ 339.449354][ T9743] ? netlink_getsockopt+0x590/0x590 [ 339.454605][ T9743] ____sys_sendmsg+0x61b/0x980 [ 339.459439][ T9743] ? __asan_memset+0x22/0x40 [ 339.464086][ T9743] ? __sys_sendmsg_sock+0x30/0x30 [ 339.469155][ T9743] ? __import_iovec+0x5f2/0x850 [ 339.474063][ T9743] ? import_iovec+0x73/0xa0 [ 339.478628][ T9743] ___sys_sendmsg+0x2a6/0x360 [ 339.483364][ T9743] ? __sys_sendmsg+0x2b0/0x2b0 [ 339.488253][ T9743] __se_sys_sendmsg+0x1d0/0x2c0 [ 339.493158][ T9743] ? __x64_sys_sendmsg+0x80/0x80 [ 339.498182][ T9743] do_syscall_64+0x55/0xb0 [ 339.502661][ T9743] ? clear_bhb_loop+0x40/0x90 [ 339.507388][ T9743] ? clear_bhb_loop+0x40/0x90 [ 339.512136][ T9743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.518074][ T9743] RIP: 0033:0x7fae0399e0d9 [ 339.522537][ T9743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.542292][ T9743] RSP: 002b:00007fae04876028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.550764][ T9743] RAX: ffffffffffffffda RBX: 00007fae03c25fa0 RCX: 00007fae0399e0d9 [ 339.558780][ T9743] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 339.566887][ T9743] RBP: 00007fae04876090 R08: 0000000000000000 R09: 0000000000000000 [ 339.574939][ T9743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.582955][ T9743] R13: 00007fae03c26038 R14: 00007fae03c25fa0 R15: 00007ffefb12b888 [ 339.590997][ T9743] [ 340.199228][ T9759] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1424'. [ 341.039243][ T9771] netlink: 'syz.2.1429': attribute type 10 has an invalid length. [ 341.055275][ T9771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1429'. [ 341.413032][ T9771] bridge0: port 4(ipvlan1) entered blocking state [ 341.471002][ T9771] bridge0: port 4(ipvlan1) entered disabled state [ 341.634850][ T9778] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1431'. [ 341.799878][ T9771] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 341.849405][ T9778] netlink: 'syz.3.1431': attribute type 10 has an invalid length. [ 341.869892][ T9778] bridge0: port 3(hsr0) entered disabled state [ 341.878123][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.889999][ T9778] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.000684][ T9778] bridge0: port 3(hsr0) entered blocking state [ 342.008185][ T9778] bridge0: port 3(hsr0) entered forwarding state [ 342.018611][ T9778] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.027476][ T9778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.036921][ T9778] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.045785][ T9778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.133330][ T9778] team0: Port device bridge0 added [ 342.701520][ T9794] netlink: 'syz.1.1436': attribute type 10 has an invalid length. [ 344.143718][ T9816] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1440'. [ 346.848878][ T9829] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1445'. [ 347.018260][ T9821] netlink: 'syz.3.1443': attribute type 10 has an invalid length. [ 347.028397][ T9821] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1443'. [ 347.038374][ T9821] ipvlan1: entered promiscuous mode [ 347.043782][ T9821] ipvlan1: entered allmulticast mode [ 347.062063][ T9821] bridge0: port 4(ipvlan1) entered blocking state [ 347.072186][ T9821] bridge0: port 4(ipvlan1) entered disabled state [ 347.084491][ T9821] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 347.375350][ T9842] FAULT_INJECTION: forcing a failure. [ 347.375350][ T9842] name failslab, interval 1, probability 0, space 0, times 0 [ 347.392992][ T9842] CPU: 1 PID: 9842 Comm: syz.1.1449 Not tainted syzkaller #0 [ 347.400471][ T9842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.410652][ T9842] Call Trace: [ 347.413966][ T9842] [ 347.416929][ T9842] dump_stack_lvl+0x18c/0x250 [ 347.421736][ T9842] ? show_regs_print_info+0x20/0x20 [ 347.426995][ T9842] ? load_image+0x420/0x420 [ 347.431565][ T9842] ? __might_sleep+0xe0/0xe0 [ 347.436252][ T9842] ? __lock_acquire+0x7d80/0x7d80 [ 347.441378][ T9842] should_fail_ex+0x394/0x4c0 [ 347.446121][ T9842] should_failslab+0x9/0x20 [ 347.450674][ T9842] slab_pre_alloc_hook+0x59/0x300 [ 347.455745][ T9842] ? kernfs_add_one+0x149/0x6b0 [ 347.460644][ T9842] kmem_cache_alloc+0x5a/0x2c0 [ 347.465445][ T9842] ? __kernfs_new_node+0xe5/0x7f0 [ 347.470513][ T9842] __kernfs_new_node+0xe5/0x7f0 [ 347.475404][ T9842] ? mark_lock+0x94/0x320 [ 347.479803][ T9842] ? kernfs_new_node+0x260/0x260 [ 347.484812][ T9842] ? sysfs_do_create_link_sd+0x75/0x110 [ 347.490404][ T9842] kernfs_new_node+0x14c/0x260 [ 347.495264][ T9842] kernfs_create_link+0xa7/0x200 [ 347.500255][ T9842] sysfs_do_create_link_sd+0x83/0x110 [ 347.505675][ T9842] device_add_class_symlinks+0xb6/0x240 [ 347.511263][ T9842] device_add+0x4f9/0xc40 [ 347.515660][ T9842] netdev_register_kobject+0x188/0x320 [ 347.521178][ T9842] register_netdevice+0x12aa/0x1ba0 [ 347.526448][ T9842] ? kvmalloc_node+0x70/0x180 [ 347.531195][ T9842] ? netif_stacked_transfer_operstate+0x210/0x210 [ 347.537653][ T9842] ? __asan_memset+0x22/0x40 [ 347.542381][ T9842] ? alloc_netdev_mqs+0xba3/0x1040 [ 347.547570][ T9842] ? __asan_memcpy+0x40/0x70 [ 347.552234][ T9842] ? __ip_tunnel_create+0x386/0x4d0 [ 347.557477][ T9842] __ip_tunnel_create+0x3bc/0x4d0 [ 347.562540][ T9842] ? ip_tunnel_init_net+0x7c0/0x7c0 [ 347.567771][ T9842] ? security_capable+0x89/0xb0 [ 347.572664][ T9842] ip_tunnel_ctl+0xc36/0x1910 [ 347.577381][ T9842] vti_tunnel_ctl+0x1f9/0x390 [ 347.582102][ T9842] ip_tunnel_siocdevprivate+0x138/0x1f0 [ 347.587682][ T9842] ? dev_ioctl+0x83c/0x1140 [ 347.592339][ T9842] ? ip_tunnel_update+0xae0/0xae0 [ 347.597406][ T9842] ? dev_ifsioc+0x957/0xc40 [ 347.601956][ T9842] dev_ioctl+0x84c/0x1140 [ 347.606339][ T9842] sock_ioctl+0x74c/0x7e0 [ 347.610799][ T9842] ? sock_poll+0x3e0/0x3e0 [ 347.615284][ T9842] ? bpf_lsm_file_ioctl+0x9/0x10 [ 347.620296][ T9842] ? security_file_ioctl+0x80/0xa0 [ 347.625488][ T9842] ? sock_poll+0x3e0/0x3e0 [ 347.629955][ T9842] __se_sys_ioctl+0xfd/0x170 [ 347.634586][ T9842] do_syscall_64+0x55/0xb0 [ 347.639049][ T9842] ? clear_bhb_loop+0x40/0x90 [ 347.643772][ T9842] ? clear_bhb_loop+0x40/0x90 [ 347.648489][ T9842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.654418][ T9842] RIP: 0033:0x7f38cf99e0d9 [ 347.658879][ T9842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.678529][ T9842] RSP: 002b:00007f38d0920028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.686997][ T9842] RAX: ffffffffffffffda RBX: 00007f38cfc25fa0 RCX: 00007f38cf99e0d9 [ 347.695033][ T9842] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000005 [ 347.703047][ T9842] RBP: 00007f38d0920090 R08: 0000000000000000 R09: 0000000000000000 [ 347.711072][ T9842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 347.719100][ T9842] R13: 00007f38cfc26038 R14: 00007f38cfc25fa0 R15: 00007ffc7dd27438 [ 347.727126][ T9842] [ 348.158912][ T9854] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1452'. [ 348.528901][ T9857] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1454'. [ 348.578628][ T9859] netlink: 'syz.3.1455': attribute type 10 has an invalid length. [ 348.714266][ T9857] netlink: 'syz.2.1454': attribute type 10 has an invalid length. [ 348.742706][ T9857] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.754330][ T9857] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.925131][ T9857] team0: Device bridge0 is already an upper device of the team interface [ 349.225793][ T9872] netlink: 'syz.2.1458': attribute type 17 has an invalid length. [ 349.252173][ T9872] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1458'. [ 349.579062][ T3510] tipc: Subscription rejected, illegal request [ 350.546633][ T9904] sctp: [Deprecated]: syz.2.1473 (pid 9904) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.546633][ T9904] Use struct sctp_sack_info instead [ 352.085015][ T9902] netlink: 'syz.1.1472': attribute type 17 has an invalid length. [ 352.099252][ T9902] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1472'. [ 352.338466][ T9915] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1476'. [ 353.060799][ T9936] netlink: 'syz.0.1485': attribute type 17 has an invalid length. [ 353.071109][ T9936] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1485'. [ 353.081180][ T9938] netlink: 'syz.1.1486': attribute type 10 has an invalid length. [ 353.091390][ T9938] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1486'. [ 353.102439][ T9929] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 353.112019][ T9929] syzkaller1: linktype set to 6 [ 353.271908][ T9940] netlink: 'syz.1.1489': attribute type 10 has an invalid length. [ 353.284195][ T9940] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1489'. [ 357.577514][ T9990] syz.0.1507[9990] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.577681][ T9990] syz.0.1507[9990] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.171148][T10003] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.263359][T10005] netlink: 'syz.2.1515': attribute type 10 has an invalid length. [ 358.288483][T10005] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1515'. [ 358.310154][T10005] bridge0: port 4(ipvlan1) entered blocking state [ 358.339465][T10005] bridge0: port 4(ipvlan1) entered disabled state [ 358.383804][T10005] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 358.842521][T10024] netlink: 'syz.3.1521': attribute type 19 has an invalid length. [ 358.862941][T10024] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1521'. [ 359.127997][T10032] sctp: [Deprecated]: syz.1.1525 (pid 10032) Use of int in max_burst socket option deprecated. [ 359.127997][T10032] Use struct sctp_assoc_value instead [ 359.409364][T10038] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.426457][T10040] netlink: 'syz.1.1530': attribute type 9 has an invalid length. [ 359.441824][T10040] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1530'. [ 360.095190][T10063] FAULT_INJECTION: forcing a failure. [ 360.095190][T10063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.109057][T10063] CPU: 0 PID: 10063 Comm: syz.3.1539 Not tainted syzkaller #0 [ 360.116589][T10063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.126793][T10063] Call Trace: [ 360.130392][T10063] [ 360.133757][T10063] dump_stack_lvl+0x18c/0x250 [ 360.138794][T10063] ? show_regs_print_info+0x20/0x20 [ 360.144191][T10063] ? load_image+0x420/0x420 [ 360.148842][T10063] ? __lock_acquire+0x7d80/0x7d80 [ 360.154042][T10063] should_fail_ex+0x394/0x4c0 [ 360.158929][T10063] _copy_from_user+0x2f/0xe0 [ 360.163579][T10063] __copy_msghdr+0x388/0x560 [ 360.168346][T10063] ___sys_sendmsg+0x214/0x360 [ 360.173170][T10063] ? __sys_sendmsg+0x2b0/0x2b0 [ 360.178013][T10063] ? __lock_acquire+0x7d80/0x7d80 [ 360.183123][T10063] __se_sys_sendmsg+0x1d0/0x2c0 [ 360.188025][T10063] ? __x64_sys_sendmsg+0x80/0x80 [ 360.193034][T10063] ? lockdep_hardirqs_on+0x98/0x150 [ 360.198442][T10063] do_syscall_64+0x55/0xb0 [ 360.202940][T10063] ? clear_bhb_loop+0x40/0x90 [ 360.207784][T10063] ? clear_bhb_loop+0x40/0x90 [ 360.212521][T10063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.218472][T10063] RIP: 0033:0x7f58fef9e0d9 [ 360.223528][T10063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.243434][T10063] RSP: 002b:00007f58fff42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.252091][T10063] RAX: ffffffffffffffda RBX: 00007f58ff225fa0 RCX: 00007f58fef9e0d9 [ 360.260115][T10063] RDX: 0000000000040800 RSI: 0000200000001200 RDI: 0000000000000003 [ 360.268312][T10063] RBP: 00007f58fff42090 R08: 0000000000000000 R09: 0000000000000000 [ 360.276324][T10063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.284338][T10063] R13: 00007f58ff226038 R14: 00007f58ff225fa0 R15: 00007ffc5980a1b8 [ 360.292559][T10063] [ 360.692376][T10074] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.690229][T10106] FAULT_INJECTION: forcing a failure. [ 361.690229][T10106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.703601][T10106] CPU: 1 PID: 10106 Comm: syz.1.1556 Not tainted syzkaller #0 [ 361.711212][T10106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.721303][T10106] Call Trace: [ 361.724659][T10106] [ 361.727624][T10106] dump_stack_lvl+0x18c/0x250 [ 361.732340][T10106] ? show_regs_print_info+0x20/0x20 [ 361.737569][T10106] ? load_image+0x420/0x420 [ 361.742141][T10106] ? __might_fault+0xaa/0x120 [ 361.747024][T10106] ? __lock_acquire+0x7d80/0x7d80 [ 361.752096][T10106] should_fail_ex+0x394/0x4c0 [ 361.756821][T10106] _copy_from_user+0x2f/0xe0 [ 361.761442][T10106] __sys_bpf+0x23e/0x890 [ 361.765754][T10106] ? bpf_link_show_fdinfo+0x390/0x390 [ 361.771170][T10106] ? lock_chain_count+0x20/0x20 [ 361.776422][T10106] __x64_sys_bpf+0x7c/0x90 [ 361.780923][T10106] do_syscall_64+0x55/0xb0 [ 361.785463][T10106] ? clear_bhb_loop+0x40/0x90 [ 361.790361][T10106] ? clear_bhb_loop+0x40/0x90 [ 361.795093][T10106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.801039][T10106] RIP: 0033:0x7f38cf99e0d9 [ 361.805503][T10106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.825151][T10106] RSP: 002b:00007f38d0920028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 361.833601][T10106] RAX: ffffffffffffffda RBX: 00007f38cfc25fa0 RCX: 00007f38cf99e0d9 [ 361.842148][T10106] RDX: 0000000000000050 RSI: 00002000000022c0 RDI: 000000000000000a [ 361.850251][T10106] RBP: 00007f38d0920090 R08: 0000000000000000 R09: 0000000000000000 [ 361.858443][T10106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.866644][T10106] R13: 00007f38cfc26038 R14: 00007f38cfc25fa0 R15: 00007ffc7dd27438 [ 361.874838][T10106] [ 362.054139][T10108] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1554'. [ 363.134034][T10133] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1565'. [ 363.512038][T10143] netlink: 'syz.0.1568': attribute type 19 has an invalid length. [ 363.533096][T10143] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1568'. [ 363.553910][T10143] FAULT_INJECTION: forcing a failure. [ 363.553910][T10143] name failslab, interval 1, probability 0, space 0, times 0 [ 363.573877][T10143] CPU: 1 PID: 10143 Comm: syz.0.1568 Not tainted syzkaller #0 [ 363.581437][T10143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 363.591909][T10143] Call Trace: [ 363.595268][T10143] [ 363.598247][T10143] dump_stack_lvl+0x18c/0x250 [ 363.602991][T10143] ? show_regs_print_info+0x20/0x20 [ 363.608250][T10143] ? load_image+0x420/0x420 [ 363.612828][T10143] ? __might_sleep+0xe0/0xe0 [ 363.617614][T10143] ? __lock_acquire+0x7d80/0x7d80 [ 363.622699][T10143] should_fail_ex+0x394/0x4c0 [ 363.627444][T10143] should_failslab+0x9/0x20 [ 363.632012][T10143] slab_pre_alloc_hook+0x59/0x300 [ 363.637155][T10143] kmem_cache_alloc_node+0x5e/0x310 [ 363.642419][T10143] ? verify_lock_unused+0x140/0x140 [ 363.647671][T10143] ? __alloc_skb+0x103/0x2c0 [ 363.652320][T10143] __alloc_skb+0x103/0x2c0 [ 363.656802][T10143] alloc_skb_with_frags+0xcd/0x7a0 [ 363.662000][T10143] ? perf_trace_lock+0xfc/0x3b0 [ 363.667071][T10143] sock_alloc_send_pskb+0x883/0x9a0 [ 363.672360][T10143] ? sock_kzfree_s+0x50/0x50 [ 363.677018][T10143] ? __lock_acquire+0x7d80/0x7d80 [ 363.682111][T10143] ? __receive_sock+0x90/0x90 [ 363.686955][T10143] ? sk_psock_verdict_data_ready+0x7aa/0x930 [ 363.693209][T10143] ? sk_psock_verdict_data_ready+0xae/0x930 [ 363.699179][T10143] unix_stream_sendmsg+0x48b/0xbf0 [ 363.704457][T10143] ? unix_show_fdinfo+0x280/0x280 [ 363.709539][T10143] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 363.716160][T10143] ? apparmor_socket_sendmsg+0x8e/0x330 [ 363.722029][T10143] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 363.727380][T10143] ? security_socket_sendmsg+0x80/0xa0 [ 363.733095][T10143] ? unix_show_fdinfo+0x280/0x280 [ 363.738213][T10143] ____sys_sendmsg+0x61b/0x980 [ 363.743058][T10143] ? __asan_memset+0x22/0x40 [ 363.747839][T10143] ? __sys_sendmsg_sock+0x30/0x30 [ 363.753310][T10143] ? __import_iovec+0x5f2/0x850 [ 363.758243][T10143] ? import_iovec+0x73/0xa0 [ 363.762824][T10143] ___sys_sendmsg+0x2a6/0x360 [ 363.767677][T10143] ? __sys_sendmsg+0x2b0/0x2b0 [ 363.772617][T10143] ? __lock_acquire+0x7d80/0x7d80 [ 363.777739][T10143] __se_sys_sendmsg+0x1d0/0x2c0 [ 363.779072][T10137] netlink: 'syz.1.1566': attribute type 9 has an invalid length. [ 363.782643][T10143] ? __x64_sys_sendmsg+0x80/0x80 [ 363.795580][T10143] ? lockdep_hardirqs_on+0x98/0x150 [ 363.800852][T10143] do_syscall_64+0x55/0xb0 [ 363.805325][T10143] ? clear_bhb_loop+0x40/0x90 [ 363.810054][T10143] ? clear_bhb_loop+0x40/0x90 [ 363.810963][T10137] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1566'. [ 363.814773][T10143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.830077][T10143] RIP: 0033:0x7f5c3cb9e0d9 [ 363.834546][T10143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.854314][T10143] RSP: 002b:00007f5c3d99e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.862890][T10143] RAX: ffffffffffffffda RBX: 00007f5c3ce25fa0 RCX: 00007f5c3cb9e0d9 [ 363.870924][T10143] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 363.878931][T10143] RBP: 00007f5c3d99e090 R08: 0000000000000000 R09: 0000000000000000 [ 363.878952][T10143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 363.878965][T10143] R13: 00007f5c3ce26038 R14: 00007f5c3ce25fa0 R15: 00007ffe6d0820f8 [ 363.878996][T10143] [ 364.057807][T10135] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1565'. [ 366.015643][T10193] FAULT_INJECTION: forcing a failure. [ 366.015643][T10193] name failslab, interval 1, probability 0, space 0, times 0 [ 366.029714][T10193] CPU: 0 PID: 10193 Comm: syz.3.1592 Not tainted syzkaller #0 [ 366.037375][T10193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.047618][T10193] Call Trace: [ 366.050984][T10193] [ 366.054006][T10193] dump_stack_lvl+0x18c/0x250 [ 366.058909][T10193] ? show_regs_print_info+0x20/0x20 [ 366.064208][T10193] ? load_image+0x420/0x420 [ 366.068834][T10193] ? __might_sleep+0xe0/0xe0 [ 366.073539][T10193] ? __lock_acquire+0x7d80/0x7d80 [ 366.078687][T10193] should_fail_ex+0x394/0x4c0 [ 366.083490][T10193] should_failslab+0x9/0x20 [ 366.088163][T10193] slab_pre_alloc_hook+0x59/0x300 [ 366.093285][T10193] ? trace_call_bpf+0x5e9/0x6c0 [ 366.098683][T10193] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 366.104511][T10193] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 366.110317][T10193] __kmem_cache_alloc_node+0x53/0x250 [ 366.115788][T10193] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 366.121579][T10193] __kmalloc+0xa7/0x240 [ 366.125826][T10193] tomoyo_realpath_from_path+0xe6/0x5c0 [ 366.131455][T10193] ? tomoyo_domain+0xd6/0x120 [ 366.136351][T10193] tomoyo_path_number_perm+0x248/0x5e0 [ 366.141911][T10193] ? tomoyo_path_number_perm+0x217/0x5e0 [ 366.147624][T10193] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 366.153155][T10193] ? ksys_write+0x1d2/0x260 [ 366.157849][T10193] ? __fget_files+0x28/0x460 [ 366.162599][T10193] security_file_ioctl+0x70/0xa0 [ 366.167624][T10193] __se_sys_ioctl+0x48/0x170 [ 366.172291][T10193] do_syscall_64+0x55/0xb0 [ 366.176768][T10193] ? clear_bhb_loop+0x40/0x90 [ 366.181510][T10193] ? clear_bhb_loop+0x40/0x90 [ 366.186268][T10193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.192254][T10193] RIP: 0033:0x7f58fef9e0d9 [ 366.197029][T10193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.216860][T10193] RSP: 002b:00007f58fff42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.225505][T10193] RAX: ffffffffffffffda RBX: 00007f58ff225fa0 RCX: 00007f58fef9e0d9 [ 366.234103][T10193] RDX: 0001000000000000 RSI: 0000000000008903 RDI: 0000000000000005 [ 366.242145][T10193] RBP: 00007f58fff42090 R08: 0000000000000000 R09: 0000000000000000 [ 366.250528][T10193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.258634][T10193] R13: 00007f58ff226038 R14: 00007f58ff225fa0 R15: 00007ffc5980a1b8 [ 366.266764][T10193] [ 366.366242][T10193] ERROR: Out of memory at tomoyo_realpath_from_path. [ 366.412427][T10194] FAULT_INJECTION: forcing a failure. [ 366.412427][T10194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.427092][T10194] CPU: 0 PID: 10194 Comm: syz.2.1583 Not tainted syzkaller #0 [ 366.434799][T10194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.445140][T10194] Call Trace: [ 366.448635][T10194] [ 366.451660][T10194] dump_stack_lvl+0x18c/0x250 [ 366.456393][T10194] ? show_regs_print_info+0x20/0x20 [ 366.461667][T10194] ? load_image+0x420/0x420 [ 366.466289][T10194] ? __lock_acquire+0x7d80/0x7d80 [ 366.471394][T10194] ? snprintf+0xe9/0x140 [ 366.475745][T10194] should_fail_ex+0x394/0x4c0 [ 366.480506][T10194] _copy_to_user+0x2f/0xa0 [ 366.484966][T10194] simple_read_from_buffer+0xe7/0x150 [ 366.490382][T10194] proc_fail_nth_read+0x1e8/0x260 [ 366.495587][T10194] ? proc_fault_inject_write+0x360/0x360 [ 366.501365][T10194] ? fsnotify_perm+0x271/0x5e0 [ 366.506180][T10194] ? proc_fault_inject_write+0x360/0x360 [ 366.511946][T10194] vfs_read+0x298/0x990 [ 366.516151][T10194] ? kernel_read+0x1e0/0x1e0 [ 366.520790][T10194] ? __fget_files+0x28/0x460 [ 366.525432][T10194] ? __fget_files+0x3fc/0x460 [ 366.530305][T10194] ? __fdget_pos+0x2a3/0x330 [ 366.535043][T10194] ? ksys_read+0x74/0x260 [ 366.539603][T10194] ksys_read+0x151/0x260 [ 366.543930][T10194] ? vfs_write+0x9a0/0x9a0 [ 366.548393][T10194] ? lockdep_hardirqs_on+0x98/0x150 [ 366.553837][T10194] do_syscall_64+0x55/0xb0 [ 366.558314][T10194] ? clear_bhb_loop+0x40/0x90 [ 366.563049][T10194] ? clear_bhb_loop+0x40/0x90 [ 366.567772][T10194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.573703][T10194] RIP: 0033:0x7fae0395e90e [ 366.578175][T10194] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 366.598098][T10194] RSP: 002b:00007fae04875fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 366.606641][T10194] RAX: ffffffffffffffda RBX: 00007fae048766c0 RCX: 00007fae0395e90e [ 366.614742][T10194] RDX: 000000000000000f RSI: 00007fae048760a0 RDI: 000000000000000c [ 366.622747][T10194] RBP: 00007fae04876090 R08: 0000000000000000 R09: 0000000000000000 [ 366.630841][T10194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.638851][T10194] R13: 00007fae03c26038 R14: 00007fae03c25fa0 R15: 00007ffefb12b888 [ 366.647051][T10194] [ 370.864337][T10237] netlink: 'syz.1.1600': attribute type 19 has an invalid length. [ 370.872816][T10237] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.1600'. [ 370.955682][T10237] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1600'. [ 371.225666][T10248] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1605'. [ 371.250529][T10249] netlink: 'syz.2.1604': attribute type 10 has an invalid length. [ 371.267845][T10249] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1604'. [ 371.306215][T10250] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1605'. [ 371.357058][T10248] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1605'. [ 371.373779][T10251] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1605'. [ 371.393962][T10248] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1605'. [ 371.609934][T10259] FAULT_INJECTION: forcing a failure. [ 371.609934][T10259] name failslab, interval 1, probability 0, space 0, times 0 [ 371.623356][T10259] CPU: 0 PID: 10259 Comm: syz.3.1609 Not tainted syzkaller #0 [ 371.630925][T10259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 371.641048][T10259] Call Trace: [ 371.644378][T10259] [ 371.647364][T10259] dump_stack_lvl+0x18c/0x250 [ 371.652370][T10259] ? show_regs_print_info+0x20/0x20 [ 371.657646][T10259] ? load_image+0x420/0x420 [ 371.662243][T10259] ? verify_lock_unused+0x140/0x140 [ 371.667528][T10259] should_fail_ex+0x394/0x4c0 [ 371.672293][T10259] should_failslab+0x9/0x20 [ 371.676892][T10259] slab_pre_alloc_hook+0x59/0x300 [ 371.682067][T10259] kmem_cache_alloc+0x5a/0x2c0 [ 371.686909][T10259] ? skb_clone+0x1eb/0x370 [ 371.691414][T10259] skb_clone+0x1eb/0x370 [ 371.695745][T10259] __netlink_deliver_tap+0x411/0x7f0 [ 371.701272][T10259] ? netlink_deliver_tap+0x2e/0x1b0 [ 371.706551][T10259] netlink_deliver_tap+0x19c/0x1b0 [ 371.711753][T10259] netlink_unicast+0x77b/0x930 [ 371.716876][T10259] netlink_sendmsg+0x8d0/0xbf0 [ 371.721819][T10259] ? netlink_getsockopt+0x590/0x590 [ 371.727189][T10259] ? apparmor_socket_sendmsg+0x8e/0x330 [ 371.732918][T10259] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 371.738291][T10259] ? security_socket_sendmsg+0x80/0xa0 [ 371.744342][T10259] ? netlink_getsockopt+0x590/0x590 [ 371.749617][T10259] ____sys_sendmsg+0x61b/0x980 [ 371.754546][T10259] ? __asan_memset+0x22/0x40 [ 371.759343][T10259] ? __sys_sendmsg_sock+0x30/0x30 [ 371.764421][T10259] ? __import_iovec+0x5f2/0x850 [ 371.769356][T10259] ? import_iovec+0x73/0xa0 [ 371.773979][T10259] ___sys_sendmsg+0x2a6/0x360 [ 371.778740][T10259] ? get_pid_task+0x20/0x1e0 [ 371.783456][T10259] ? __sys_sendmsg+0x2b0/0x2b0 [ 371.788322][T10259] ? __lock_acquire+0x7d80/0x7d80 [ 371.793464][T10259] __se_sys_sendmsg+0x1d0/0x2c0 [ 371.798404][T10259] ? __x64_sys_sendmsg+0x80/0x80 [ 371.803425][T10259] ? lockdep_hardirqs_on+0x98/0x150 [ 371.808703][T10259] do_syscall_64+0x55/0xb0 [ 371.813167][T10259] ? clear_bhb_loop+0x40/0x90 [ 371.817887][T10259] ? clear_bhb_loop+0x40/0x90 [ 371.822639][T10259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.828748][T10259] RIP: 0033:0x7f58fef9e0d9 [ 371.833214][T10259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.853002][T10259] RSP: 002b:00007f58fff42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.861475][T10259] RAX: ffffffffffffffda RBX: 00007f58ff225fa0 RCX: 00007f58fef9e0d9 [ 371.869512][T10259] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 371.877618][T10259] RBP: 00007f58fff42090 R08: 0000000000000000 R09: 0000000000000000 [ 371.885804][T10259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.893825][T10259] R13: 00007f58ff226038 R14: 00007f58ff225fa0 R15: 00007ffc5980a1b8 [ 371.901859][T10259] [ 371.911572][T10259] netlink: 'syz.3.1609': attribute type 10 has an invalid length. [ 372.048823][T10259] team0: Device wg1 is of different type [ 372.238836][T10263] netlink: 'syz.0.1610': attribute type 10 has an invalid length. [ 372.542048][T10263] wg1: entered promiscuous mode [ 372.571877][T10263] wg1: entered allmulticast mode [ 372.586465][T10263] team0: Device wg1 is of different type [ 372.714023][T10262] delete_channel: no stack [ 373.048632][T10260] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1608'. [ 373.090898][T10260] bridge_slave_1: default FDB implementation only supports local addresses [ 374.152194][T10301] netlink: 'syz.2.1621': attribute type 1 has an invalid length. [ 374.178011][T10301] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1621'. [ 374.616664][T10322] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 375.642943][T10345] netlink: 'syz.1.1635': attribute type 6 has an invalid length. [ 377.078295][T10338] __nla_validate_parse: 4 callbacks suppressed [ 377.078353][T10338] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1633'. [ 377.101611][T10338] bridge_slave_1: default FDB implementation only supports local addresses [ 377.367746][ T2977] wlan1: Trigger new scan to find an IBSS to join [ 377.678394][T10369] FAULT_INJECTION: forcing a failure. [ 377.678394][T10369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.699906][T10369] CPU: 1 PID: 10369 Comm: syz.3.1644 Not tainted syzkaller #0 [ 377.707462][T10369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 377.717570][T10369] Call Trace: [ 377.720897][T10369] [ 377.723869][T10369] dump_stack_lvl+0x18c/0x250 [ 377.728713][T10369] ? show_regs_print_info+0x20/0x20 [ 377.733983][T10369] ? load_image+0x420/0x420 [ 377.738642][T10369] ? __might_fault+0xaa/0x120 [ 377.743377][T10369] ? __lock_acquire+0x7d80/0x7d80 [ 377.748467][T10369] should_fail_ex+0x394/0x4c0 [ 377.753204][T10369] _copy_from_user+0x2f/0xe0 [ 377.757903][T10369] __sys_bpf+0x23e/0x890 [ 377.762234][T10369] ? bpf_link_show_fdinfo+0x390/0x390 [ 377.767746][T10369] ? lock_chain_count+0x20/0x20 [ 377.772685][T10369] __x64_sys_bpf+0x7c/0x90 [ 377.777157][T10369] do_syscall_64+0x55/0xb0 [ 377.781650][T10369] ? clear_bhb_loop+0x40/0x90 [ 377.786384][T10369] ? clear_bhb_loop+0x40/0x90 [ 377.791127][T10369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.797088][T10369] RIP: 0033:0x7f58fef9e0d9 [ 377.801572][T10369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.821549][T10369] RSP: 002b:00007f58fff42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.830150][T10369] RAX: ffffffffffffffda RBX: 00007f58ff225fa0 RCX: 00007f58fef9e0d9 [ 377.838222][T10369] RDX: 0000000000000050 RSI: 00002000000022c0 RDI: 000000000000000a [ 377.846253][T10369] RBP: 00007f58fff42090 R08: 0000000000000000 R09: 0000000000000000 [ 377.854632][T10369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.862666][T10369] R13: 00007f58ff226038 R14: 00007f58ff225fa0 R15: 00007ffc5980a1b8 [ 377.870716][T10369] [ 378.308350][T10379] syzkaller0: entered promiscuous mode [ 378.314368][T10379] syzkaller0: entered allmulticast mode [ 379.053016][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.061382][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.259583][T10398] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1654'. [ 381.287741][ T49] wlan1: Trigger new scan to find an IBSS to join [ 383.576429][ T3510] wlan1: Creating new IBSS network, BSSID 7a:31:c4:f0:d6:36 [ 384.573724][T10395] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1654'. [ 384.583622][T10395] bridge_slave_1: default FDB implementation only supports local addresses [ 385.467114][T10436] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 387.302119][T10473] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1676'. [ 387.372506][T10473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.408181][T10474] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1677'. [ 387.434287][T10474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.764979][T10484] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1679'. [ 387.784168][T10484] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1679'. [ 387.794424][T10484] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1679'. [ 387.821423][T10484] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1679'. [ 388.103138][T10495] netlink: 'syz.1.1684': attribute type 29 has an invalid length. [ 388.112517][T10495] netlink: 'syz.1.1684': attribute type 29 has an invalid length. [ 388.123503][T10495] netlink: 'syz.1.1684': attribute type 29 has an invalid length. [ 388.133676][T10495] netlink: 'syz.1.1684': attribute type 29 has an invalid length. [ 388.142429][T10495] netlink: 'syz.1.1684': attribute type 29 has an invalid length. [ 389.112328][ T5782] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 389.234818][T10520] netlink: 'syz.2.1694': attribute type 29 has an invalid length. [ 389.257555][T10520] netlink: 'syz.2.1694': attribute type 29 has an invalid length. [ 389.284440][T10520] netlink: 'syz.2.1694': attribute type 29 has an invalid length. [ 389.316039][T10520] netlink: 'syz.2.1694': attribute type 29 has an invalid length. [ 389.367041][T10520] netlink: 'syz.2.1694': attribute type 29 has an invalid length. [ 390.208616][T10538] team0: Device wg1 is of different type [ 390.504204][T10546] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1703'. [ 390.673963][T10551] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.1707'. [ 390.702161][T10551] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 390.745590][T10554] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1707'. [ 390.901701][T10554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.934307][T10554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.955160][T10554] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 390.966978][T10554] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 390.997447][T10554] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 391.032426][T10554] bond0 (unregistering): Released all slaves [ 393.132704][ T5782] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 393.142002][ T5782] Bluetooth: hci0: Injecting HCI hardware error event [ 393.151866][ T5788] Bluetooth: hci0: hardware error 0x00 [ 393.477547][T10622] validate_nla: 17 callbacks suppressed [ 393.477629][T10622] netlink: 'syz.0.1736': attribute type 39 has an invalid length. [ 393.511585][T10629] netlink: 'syz.3.1739': attribute type 29 has an invalid length. [ 393.929429][T10629] netlink: 'syz.3.1739': attribute type 29 has an invalid length. [ 393.938875][T10630] netlink: 'syz.3.1739': attribute type 29 has an invalid length. [ 394.015437][T10633] netlink: 'syz.3.1739': attribute type 29 has an invalid length. [ 394.034810][T10636] netlink: 'syz.3.1739': attribute type 29 has an invalid length. [ 395.366294][ T5788] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 397.962183][T10665] netlink: 'syz.2.1752': attribute type 29 has an invalid length. [ 397.977029][T10665] netlink: 'syz.2.1752': attribute type 29 has an invalid length. [ 398.025137][T10665] netlink: 'syz.2.1752': attribute type 29 has an invalid length. [ 398.037174][T10665] netlink: 'syz.2.1752': attribute type 29 has an invalid length. [ 398.171037][T10668] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1753'. [ 399.055954][T10692] validate_nla: 2 callbacks suppressed [ 399.055974][T10692] netlink: 'syz.0.1764': attribute type 29 has an invalid length. [ 399.072175][T10692] netlink: 'syz.0.1764': attribute type 29 has an invalid length. [ 399.083801][T10692] netlink: 'syz.0.1764': attribute type 29 has an invalid length. [ 399.092837][T10692] netlink: 'syz.0.1764': attribute type 29 has an invalid length. [ 399.101962][T10692] netlink: 'syz.0.1764': attribute type 29 has an invalid length. [ 399.669566][T10707] netlink: 'syz.3.1771': attribute type 21 has an invalid length. [ 399.690461][T10707] IPv6: NLM_F_CREATE should be specified when creating new route [ 399.726985][T10707] IPv6: Can't replace route, no match found [ 399.984721][T10716] netlink: 'syz.0.1775': attribute type 29 has an invalid length. [ 400.018246][T10716] netlink: 'syz.0.1775': attribute type 29 has an invalid length. [ 400.055215][T10718] netlink: 'syz.0.1775': attribute type 29 has an invalid length. [ 400.089988][T10716] netlink: 'syz.0.1775': attribute type 29 has an invalid length. [ 400.424824][T10731] FAULT_INJECTION: forcing a failure. [ 400.424824][T10731] name failslab, interval 1, probability 0, space 0, times 0 [ 400.437680][T10731] CPU: 1 PID: 10731 Comm: syz.2.1782 Not tainted syzkaller #0 [ 400.445212][T10731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 400.455355][T10731] Call Trace: [ 400.458686][T10731] [ 400.461674][T10731] dump_stack_lvl+0x18c/0x250 [ 400.466449][T10731] ? show_regs_print_info+0x20/0x20 [ 400.471720][T10731] ? load_image+0x420/0x420 [ 400.476302][T10731] ? skb_network_protocol+0x533/0x790 [ 400.481859][T10731] should_fail_ex+0x394/0x4c0 [ 400.486624][T10731] should_failslab+0x9/0x20 [ 400.491203][T10731] slab_pre_alloc_hook+0x59/0x300 [ 400.496325][T10731] kmem_cache_alloc+0x5a/0x2c0 [ 400.501177][T10731] ? skb_clone+0x1eb/0x370 [ 400.505675][T10731] skb_clone+0x1eb/0x370 [ 400.509972][T10731] ? dev_queue_xmit_nit+0x204/0xba0 [ 400.515279][T10731] dev_queue_xmit_nit+0x23f/0xba0 [ 400.520362][T10731] ? dev_queue_xmit_nit+0x2d/0xba0 [ 400.525627][T10731] dev_hard_start_xmit+0x150/0x790 [ 400.530829][T10731] ? __dev_queue_xmit+0x275/0x3630 [ 400.536013][T10731] __dev_queue_xmit+0x198c/0x3630 [ 400.541124][T10731] ? __dev_queue_xmit+0x275/0x3630 [ 400.546354][T10731] ? netdev_core_pick_tx+0x370/0x370 [ 400.551737][T10731] ? pskb_expand_head+0x17a/0x1150 [ 400.556915][T10731] ? pskb_expand_head+0x17a/0x1150 [ 400.562078][T10731] ? skb_release_data+0x1de/0x7f0 [ 400.567194][T10731] ? __bpf_redirect+0x4d1/0xdf0 [ 400.572210][T10731] __bpf_tx_skb+0x181/0x260 [ 400.576842][T10731] bpf_clone_redirect+0x315/0x4a0 [ 400.581957][T10731] bpf_prog_bf17f61a12bc632f+0x5e/0x63 [ 400.587469][T10731] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 400.593343][T10731] ? perf_trace_preemptirq_template+0x269/0x330 [ 400.599692][T10731] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 400.605761][T10731] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 400.611119][T10731] ? lock_chain_count+0x20/0x20 [ 400.616023][T10731] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 400.622324][T10731] ? __local_bh_disable_ip+0x108/0x1a0 [ 400.627841][T10731] ? __cant_sleep+0x220/0x220 [ 400.632573][T10731] ? __local_bh_enable_ip+0x13a/0x1c0 [ 400.638003][T10731] ? _local_bh_enable+0xa0/0xa0 [ 400.642927][T10731] ? bpf_test_timer_continue+0x135/0x380 [ 400.648610][T10731] ? bpf_test_run+0x174/0x870 [ 400.653347][T10731] bpf_test_run+0x2df/0x870 [ 400.657941][T10731] ? bpf_test_run+0x174/0x870 [ 400.662823][T10731] ? dst_hold+0x70/0x70 [ 400.667048][T10731] ? eth_get_headlen+0x210/0x210 [ 400.672135][T10731] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 400.677620][T10731] ? cpu_online+0x60/0x60 [ 400.682059][T10731] bpf_prog_test_run+0x31f/0x390 [ 400.687070][T10731] __sys_bpf+0x49d/0x890 [ 400.691381][T10731] ? bpf_link_show_fdinfo+0x390/0x390 [ 400.696924][T10731] ? lock_chain_count+0x20/0x20 [ 400.701839][T10731] __x64_sys_bpf+0x7c/0x90 [ 400.706306][T10731] do_syscall_64+0x55/0xb0 [ 400.710779][T10731] ? clear_bhb_loop+0x40/0x90 [ 400.715546][T10731] ? clear_bhb_loop+0x40/0x90 [ 400.720292][T10731] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.726250][T10731] RIP: 0033:0x7fae0399e0d9 [ 400.730720][T10731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.750555][T10731] RSP: 002b:00007fae04876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 400.759033][T10731] RAX: ffffffffffffffda RBX: 00007fae03c25fa0 RCX: 00007fae0399e0d9 [ 400.767052][T10731] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 400.775079][T10731] RBP: 00007fae04876090 R08: 0000000000000000 R09: 0000000000000000 [ 400.783191][T10731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.791298][T10731] R13: 00007fae03c26038 R14: 00007fae03c25fa0 R15: 00007ffefb12b888 [ 400.799351][T10731] [ 400.979686][T10736] IPv6: NLM_F_CREATE should be specified when creating new route [ 400.995151][T10736] IPv6: Can't replace route, no match found [ 402.379780][T10757] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.1792'. [ 402.397678][T10757] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 402.963502][T10769] IPv6: NLM_F_CREATE should be specified when creating new route [ 403.108723][T10769] IPv6: Can't replace route, no match found [ 404.106873][T10788] validate_nla: 13 callbacks suppressed [ 404.106926][T10788] netlink: 'syz.0.1806': attribute type 3 has an invalid length. [ 404.136265][T10788] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1806'. [ 404.171400][T10793] netlink: 'syz.2.1808': attribute type 29 has an invalid length. [ 404.188761][T10793] netlink: 'syz.2.1808': attribute type 29 has an invalid length. [ 404.216344][T10793] netlink: 'syz.2.1808': attribute type 29 has an invalid length. [ 404.235180][T10793] netlink: 'syz.2.1808': attribute type 29 has an invalid length. [ 404.256373][T10793] netlink: 'syz.2.1808': attribute type 29 has an invalid length. [ 404.394491][T10801] FAULT_INJECTION: forcing a failure. [ 404.394491][T10801] name failslab, interval 1, probability 0, space 0, times 0 [ 404.427981][T10801] CPU: 0 PID: 10801 Comm: syz.0.1811 Not tainted syzkaller #0 [ 404.435530][T10801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.445719][T10801] Call Trace: [ 404.449027][T10801] [ 404.452001][T10801] dump_stack_lvl+0x18c/0x250 [ 404.456732][T10801] ? show_regs_print_info+0x20/0x20 [ 404.461985][T10801] ? load_image+0x420/0x420 [ 404.466531][T10801] ? __might_sleep+0xe0/0xe0 [ 404.471177][T10801] ? __lock_acquire+0x7d80/0x7d80 [ 404.476265][T10801] should_fail_ex+0x394/0x4c0 [ 404.480986][T10801] should_failslab+0x9/0x20 [ 404.485529][T10801] slab_pre_alloc_hook+0x59/0x300 [ 404.490609][T10801] ? tomoyo_encode+0x2ad/0x570 [ 404.495506][T10801] ? tomoyo_encode+0x2ad/0x570 [ 404.500314][T10801] __kmem_cache_alloc_node+0x53/0x250 [ 404.505745][T10801] ? tomoyo_encode+0x2ad/0x570 [ 404.510550][T10801] __kmalloc+0xa7/0x240 [ 404.514754][T10801] tomoyo_encode+0x2ad/0x570 [ 404.519392][T10801] tomoyo_realpath_from_path+0x57c/0x5c0 [ 404.525069][T10801] ? tomoyo_domain+0xd6/0x120 [ 404.529795][T10801] tomoyo_path_number_perm+0x248/0x5e0 [ 404.535335][T10801] ? tomoyo_path_number_perm+0x217/0x5e0 [ 404.541035][T10801] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 404.546563][T10801] ? __fget_files+0x28/0x460 [ 404.551288][T10801] security_file_ioctl+0x70/0xa0 [ 404.556277][T10801] __se_sys_ioctl+0x48/0x170 [ 404.560940][T10801] do_syscall_64+0x55/0xb0 [ 404.565392][T10801] ? clear_bhb_loop+0x40/0x90 [ 404.570111][T10801] ? clear_bhb_loop+0x40/0x90 [ 404.574831][T10801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.580796][T10801] RIP: 0033:0x7f5c3cb9e0d9 [ 404.585254][T10801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.605010][T10801] RSP: 002b:00007f5c3d99e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.613482][T10801] RAX: ffffffffffffffda RBX: 00007f5c3ce25fa0 RCX: 00007f5c3cb9e0d9 [ 404.621658][T10801] RDX: 0000200000000040 RSI: 0000000000008955 RDI: 0000000000000005 [ 404.629667][T10801] RBP: 00007f5c3d99e090 R08: 0000000000000000 R09: 0000000000000000 [ 404.637669][T10801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.645692][T10801] R13: 00007f5c3ce26038 R14: 00007f5c3ce25fa0 R15: 00007ffe6d0820f8 [ 404.653715][T10801] [ 404.720886][T10801] ERROR: Out of memory at tomoyo_realpath_from_path. [ 406.031733][T10833] netlink: 'syz.2.1823': attribute type 19 has an invalid length. [ 406.042660][T10833] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1823'. [ 406.266206][T10840] netlink: 'syz.3.1824': attribute type 10 has an invalid length. [ 406.281864][T10839] netlink: 'syz.0.1826': attribute type 10 has an invalid length. [ 406.292661][T10840] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1824'. [ 406.305755][T10840] netlink: 'syz.3.1824': attribute type 10 has an invalid length. [ 406.315720][T10840] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1824'. [ 406.327170][T10835] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1824'. [ 406.924877][T10853] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1832'. [ 407.399918][T10856] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1834'. [ 407.421079][T10856] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1834'. [ 408.252683][ C0] ================================================================== [ 408.261012][ C0] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 408.268988][ C0] Write of size 32 at addr ffff88805de0be60 by task syz.3.1839/10874 [ 408.277196][ C0] [ 408.279665][ C0] CPU: 0 PID: 10874 Comm: syz.3.1839 Not tainted syzkaller #0 [ 408.287247][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.297531][ C0] Call Trace: [ 408.300864][ C0] [ 408.303841][ C0] dump_stack_lvl+0x18c/0x250 [ 408.308579][ C0] ? read_lock_is_recursive+0x20/0x20 [ 408.314011][ C0] ? show_regs_print_info+0x20/0x20 [ 408.319261][ C0] ? load_image+0x420/0x420 [ 408.323826][ C0] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 408.329455][ C0] ? __virt_addr_valid+0x10c/0x380 [ 408.334662][ C0] ? __virt_addr_valid+0x10c/0x380 [ 408.339839][ C0] ? __virt_addr_valid+0x10c/0x380 [ 408.345017][ C0] print_report+0xa8/0x210 [ 408.349486][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 408.354654][ C0] kasan_report+0x117/0x150 [ 408.359223][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 408.364379][ C0] kasan_check_range+0x241/0x290 [ 408.369367][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 408.374513][ C0] __asan_memcpy+0x40/0x70 [ 408.378969][ C0] __bpf_get_stackid+0x6c7/0x900 [ 408.383945][ C0] bpf_get_stackid_pe+0x2f0/0x410 [ 408.389000][ C0] bpf_prog_d499e7ac612d6085+0x2c/0x44 [ 408.394484][ C0] bpf_overflow_handler+0x1fc/0x510 [ 408.399807][ C0] ? bpf_overflow_handler+0xde/0x510 [ 408.405127][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 408.410702][ C0] ? perf_trace_lock_acquire+0x105/0x400 [ 408.416364][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 408.422635][ C0] __perf_event_overflow+0x461/0x660 [ 408.427980][ C0] perf_swevent_hrtimer+0x437/0x610 [ 408.433208][ C0] ? cpu_clock_event_read+0x40/0x40 [ 408.438704][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 408.443931][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 408.449971][ C0] ? _raw_spin_unlock+0x40/0x40 [ 408.454864][ C0] ? cpu_clock_event_read+0x40/0x40 [ 408.460351][ C0] __hrtimer_run_queues+0x4e8/0xc10 [ 408.465583][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 408.471599][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 408.477628][ C0] ? hrtimer_interrupt+0x980/0x980 [ 408.482787][ C0] ? read_tsc+0x9/0x20 [ 408.486885][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 408.492997][ C0] hrtimer_interrupt+0x39d/0x980 [ 408.497980][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 408.503910][ C0] sysvec_apic_timer_interrupt+0x51/0xc0 [ 408.509579][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 408.515606][ C0] RIP: 0033:0x7ffc5991aa25 [ 408.520046][ C0] Code: a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea 48 89 55 c0 <31> c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36 65 c4 48 89 [ 408.539796][ C0] RSP: 002b:00007f58fff41ff0 EFLAGS: 00000207 [ 408.545902][ C0] RAX: 000be61f362e0b6a RBX: 00007ffc599160b0 RCX: 0000000000000018 [ 408.553903][ C0] RDX: 000000000c504ffa RSI: 00007f58fff42080 RDI: 7fffffffffffffff [ 408.561903][ C0] RBP: 00007f58fff42030 R08: 0000000000000198 R09: 0000000000745d1e [ 408.569901][ C0] R10: 000000d50df2d9de R11: 000000000001360a R12: 0000000000000010 [ 408.577900][ C0] R13: 00007f58ff226038 R14: 00007ffc59916080 R15: 000000000001360a [ 408.585997][ C0] [ 408.589055][ C0] [ 408.591393][ C0] Allocated by task 10874: [ 408.595912][ C0] kasan_set_track+0x4e/0x70 [ 408.600532][ C0] __kasan_kmalloc+0x8f/0xa0 [ 408.605148][ C0] __kmalloc_node+0xb6/0x240 [ 408.609772][ C0] bpf_map_area_alloc+0x5e/0x110 [ 408.614830][ C0] prealloc_elems_and_freelist+0x86/0x1c0 [ 408.620586][ C0] stack_map_alloc+0x32b/0x4b0 [ 408.625398][ C0] map_create+0x877/0x12f0 [ 408.629853][ C0] __sys_bpf+0x651/0x890 [ 408.634121][ C0] __x64_sys_bpf+0x7c/0x90 [ 408.638556][ C0] do_syscall_64+0x55/0xb0 [ 408.643019][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.648963][ C0] [ 408.651313][ C0] Last potentially related work creation: [ 408.657046][ C0] kasan_save_stack+0x3e/0x60 [ 408.661769][ C0] __kasan_record_aux_stack+0xaf/0xc0 [ 408.667172][ C0] kvfree_call_rcu+0xee/0x780 [ 408.671882][ C0] drop_sysctl_table+0x394/0x540 [ 408.676934][ C0] unregister_sysctl_table+0x41/0x60 [ 408.682346][ C0] mpls_dev_sysctl_unregister+0x8b/0xc0 [ 408.688133][ C0] mpls_dev_notify+0x533/0x7a0 [ 408.692929][ C0] notifier_call_chain+0x18f/0x380 [ 408.698066][ C0] unregister_netdevice_many_notify+0x1037/0x1910 [ 408.704511][ C0] ip6_tnl_exit_batch_net+0x5da/0x630 [ 408.710006][ C0] cleanup_net+0x792/0xbb0 [ 408.714447][ C0] process_scheduled_works+0xa60/0x1600 [ 408.720281][ C0] worker_thread+0xa5e/0xfe0 [ 408.724991][ C0] kthread+0x2fa/0x390 [ 408.729192][ C0] ret_from_fork+0x48/0x80 [ 408.733651][ C0] ret_from_fork_asm+0x11/0x20 [ 408.738522][ C0] [ 408.740891][ C0] Second to last potentially related work creation: [ 408.747658][ C0] kasan_save_stack+0x3e/0x60 [ 408.752376][ C0] __kasan_record_aux_stack+0xaf/0xc0 [ 408.757776][ C0] kvfree_call_rcu+0xee/0x780 [ 408.762520][ C0] drop_sysctl_table+0x394/0x540 [ 408.767485][ C0] unregister_sysctl_table+0x41/0x60 [ 408.772791][ C0] mpls_dev_sysctl_unregister+0x8b/0xc0 [ 408.778369][ C0] mpls_dev_notify+0x533/0x7a0 [ 408.783159][ C0] notifier_call_chain+0x18f/0x380 [ 408.788310][ C0] unregister_netdevice_many_notify+0x1037/0x1910 [ 408.794777][ C0] ip_tunnel_delete_nets+0x32a/0x380 [ 408.800180][ C0] cleanup_net+0x792/0xbb0 [ 408.804630][ C0] process_scheduled_works+0xa60/0x1600 [ 408.810207][ C0] worker_thread+0xa5e/0xfe0 [ 408.814845][ C0] kthread+0x2fa/0x390 [ 408.818943][ C0] ret_from_fork+0x48/0x80 [ 408.823409][ C0] ret_from_fork_asm+0x11/0x20 [ 408.828217][ C0] [ 408.830570][ C0] The buggy address belongs to the object at ffff88805de0be00 [ 408.830570][ C0] which belongs to the cache kmalloc-cg-128 of size 128 [ 408.845021][ C0] The buggy address is located 96 bytes inside of [ 408.845021][ C0] allocated 120-byte region [ffff88805de0be00, ffff88805de0be78) [ 408.859205][ C0] [ 408.861564][ C0] The buggy address belongs to the physical page: [ 408.868117][ C0] page:ffffea00017782c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5de0b [ 408.878293][ C0] memcg:ffff88805bf60a01 [ 408.882550][ C0] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 408.890132][ C0] page_type: 0xffffffff() [ 408.894508][ C0] raw: 00fff00000000800 ffff888017c4dc80 ffffea0001780140 dead000000000002 [ 408.903219][ C0] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff88805bf60a01 [ 408.911833][ C0] page dumped because: kasan: bad access detected [ 408.918368][ C0] page_owner tracks the page as allocated [ 408.924106][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 5779, tgid 5779 (syz-executor), ts 89964300791, free_ts 30478681604 [ 408.942459][ C0] post_alloc_hook+0x1c1/0x200 [ 408.947265][ C0] get_page_from_freelist+0x2181/0x22a0 [ 408.952840][ C0] __alloc_pages+0x1f0/0x460 [ 408.957451][ C0] alloc_slab_page+0x5d/0x180 [ 408.962165][ C0] new_slab+0x87/0x2d0 [ 408.966529][ C0] ___slab_alloc+0xc5c/0x12f0 [ 408.971257][ C0] __kmem_cache_alloc_node+0x11f/0x250 [ 408.976744][ C0] __kmalloc+0xa7/0x240 [ 408.980947][ C0] __register_sysctl_table+0x71/0x1210 [ 408.986431][ C0] mpls_dev_sysctl_register+0x207/0x2f0 [ 408.992003][ C0] mpls_dev_notify+0x357/0x7a0 [ 408.996802][ C0] notifier_call_chain+0x18f/0x380 [ 409.001939][ C0] register_netdevice+0x1670/0x1ba0 [ 409.007262][ C0] veth_newlink+0x5cb/0xc70 [ 409.011861][ C0] rtnl_newlink+0x15a0/0x2170 [ 409.016669][ C0] rtnetlink_rcv_msg+0x843/0xf90 [ 409.021654][ C0] page last free stack trace: [ 409.026362][ C0] free_unref_page_prepare+0x7d7/0x8f0 [ 409.031882][ C0] free_unref_page+0x32/0x2e0 [ 409.036592][ C0] free_contig_range+0xa1/0x150 [ 409.041473][ C0] destroy_args+0x7d/0x840 [ 409.045989][ C0] debug_vm_pgtable+0x411/0x440 [ 409.050881][ C0] do_one_initcall+0x242/0x790 [ 409.055682][ C0] do_initcall_level+0x13d/0x1f0 [ 409.060735][ C0] do_initcalls+0x69/0xd0 [ 409.065101][ C0] kernel_init_freeable+0x3d9/0x560 [ 409.070334][ C0] kernel_init+0x1d/0x1c0 [ 409.074704][ C0] ret_from_fork+0x48/0x80 [ 409.079155][ C0] ret_from_fork_asm+0x11/0x20 [ 409.083961][ C0] [ 409.086305][ C0] Memory state around the buggy address: [ 409.091955][ C0] ffff88805de0bd00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 409.100126][ C0] ffff88805de0bd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 409.108305][ C0] >ffff88805de0be00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 409.116397][ C0] ^ [ 409.124397][ C0] ffff88805de0be80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 409.132499][ C0] ffff88805de0bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 409.140582][ C0] ================================================================== [ 409.148691][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 409.155908][ C0] CPU: 0 PID: 10874 Comm: syz.3.1839 Not tainted syzkaller #0 [ 409.163423][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.173528][ C0] Call Trace: [ 409.176835][ C0] [ 409.179877][ C0] dump_stack_lvl+0x18c/0x250 [ 409.184586][ C0] ? show_regs_print_info+0x20/0x20 [ 409.189910][ C0] ? load_image+0x420/0x420 [ 409.194456][ C0] panic+0x2ca/0x720 [ 409.198395][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 409.203448][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 409.208010][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 409.213966][ C0] ? _raw_spin_unlock+0x40/0x40 [ 409.218883][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 409.224029][ C0] check_panic_on_warn+0x84/0xa0 [ 409.228997][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 409.234140][ C0] end_report+0x6f/0x130 [ 409.238411][ C0] kasan_report+0x128/0x150 [ 409.242960][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 409.248110][ C0] kasan_check_range+0x241/0x290 [ 409.253232][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 409.258377][ C0] __asan_memcpy+0x40/0x70 [ 409.262823][ C0] __bpf_get_stackid+0x6c7/0x900 [ 409.267800][ C0] bpf_get_stackid_pe+0x2f0/0x410 [ 409.272883][ C0] bpf_prog_d499e7ac612d6085+0x2c/0x44 [ 409.278553][ C0] bpf_overflow_handler+0x1fc/0x510 [ 409.283959][ C0] ? bpf_overflow_handler+0xde/0x510 [ 409.289296][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 409.294639][ C0] ? perf_trace_lock_acquire+0x105/0x400 [ 409.300339][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 409.306624][ C0] __perf_event_overflow+0x461/0x660 [ 409.311943][ C0] perf_swevent_hrtimer+0x437/0x610 [ 409.317173][ C0] ? cpu_clock_event_read+0x40/0x40 [ 409.322421][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 409.327654][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 409.333665][ C0] ? _raw_spin_unlock+0x40/0x40 [ 409.338546][ C0] ? cpu_clock_event_read+0x40/0x40 [ 409.343766][ C0] __hrtimer_run_queues+0x4e8/0xc10 [ 409.349005][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 409.355105][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 409.361125][ C0] ? hrtimer_interrupt+0x980/0x980 [ 409.366266][ C0] ? read_tsc+0x9/0x20 [ 409.370368][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 409.376488][ C0] hrtimer_interrupt+0x39d/0x980 [ 409.381475][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 409.387403][ C0] sysvec_apic_timer_interrupt+0x51/0xc0 [ 409.393069][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 409.399078][ C0] RIP: 0033:0x7ffc5991aa25 [ 409.403521][ C0] Code: a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea 48 89 55 c0 <31> c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36 65 c4 48 89 [ 409.423169][ C0] RSP: 002b:00007f58fff41ff0 EFLAGS: 00000207 [ 409.429257][ C0] RAX: 000be61f362e0b6a RBX: 00007ffc599160b0 RCX: 0000000000000018 [ 409.437275][ C0] RDX: 000000000c504ffa RSI: 00007f58fff42080 RDI: 7fffffffffffffff [ 409.445266][ C0] RBP: 00007f58fff42030 R08: 0000000000000198 R09: 0000000000745d1e [ 409.453264][ C0] R10: 000000d50df2d9de R11: 000000000001360a R12: 0000000000000010 [ 409.461264][ C0] R13: 00007f58ff226038 R14: 00007ffc59916080 R15: 000000000001360a [ 409.469265][ C0] [ 409.472482][ C0] Kernel Offset: disabled [ 409.476812][ C0] Rebooting in 86400 seconds..