last executing test programs: 4m17.71184767s ago: executing program 0 (id=23): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80102, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x18944, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc001) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@map=r0, r2, 0x5, 0x2018, 0xffffffffffffffff, @value=r0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfd, 0xff, 0xf, 0xfd, 0x0, 0x58a, 0x10047, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x5}, 0x8400, 0x3, 0x6, 0x1, 0x3, 0xffffffff, 0x10, 0x0, 0x10003, 0x0, 0xde}, 0x0, 0x9, 0xffffffffffffffff, 0x2) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x27, 0xe, 0x0, &(0x7f00000005c0)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m16.994533877s ago: executing program 0 (id=28): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001300)=""/4057, 0xfd9}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000100)=""/43, 0x2b}], 0x3}, 0x12140) 4m16.683902532s ago: executing program 0 (id=32): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18) 4m16.400067615s ago: executing program 0 (id=37): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m16.20443835s ago: executing program 0 (id=40): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x5}]}]}}, 0x0, 0x2e, 0x0, 0x1, 0x6}, 0x28) 4m15.990010878s ago: executing program 0 (id=45): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 4m0.920602474s ago: executing program 32 (id=45): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 6.044497736s ago: executing program 2 (id=2272): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x729, 0x0, @perf_config_ext, 0x914, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa31086b876c0c0000007ea60264160af3653c001c000d0000008bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f00000000c0)=r2}, 0x20) 5.714100623s ago: executing program 2 (id=2278): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x899a, 0x10}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', r1, 0x4000, r0}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000380)="bfe30c9a9a0afb3b5fdf5bab3194ad1b30f450f08623e83e70b477f2089d6c8249f9c46d0803cff8bf77bf3c44f84fea8d57611d06f603d8a2284355252b77ec56a082de9ce9d60a1a59ef28666624500a0d0412d1c4ffc2fa0a32d8cbc3923f79ba7e278aa46f0077012b8546941f16ee31018710041cfc33d3fc6b5ff02fd3f2add2e18135f98145a3cbf5c0a99b4d0ace866dee62ceda45", &(0x7f0000001fc0)=""/4096}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0x1, &(0x7f0000000440)="3a6107ce05dc35c982bb75d4635674d3ff033048eb0194337b1693f770806ca7f9a6831ea80c501011c0850332bfabfb1b26f27b5f26bd91da76523cd1088335efe5a6d426dc2d159c300517071d5b7d2dfc2c356238eea3c6a89e21ae587c02a5ae427f7dad3b0113d70403e0705f590fcaf38f352bff31679396efcd672f8596998aa92606d907fed83b90f2a6418fd9ac99988a3123eccb9305a7b76d8c1647"}, 0x20) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d50a0000010000006311140000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xd, 0x3}]}, @func_proto, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x4, 0x5}]}, {0x0, [0x61, 0x0, 0x61, 0x30, 0x5f]}}, 0x0, 0x4f, 0x0, 0x1, 0x5}, 0x28) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000001a40)={r4}, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0xfffffffb}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x18) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc851, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x8, 0x7f}, 0x4000, 0x0, 0xea0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xc, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x22, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x0, 0x8, 0x6, 0x8, 0x18, 0xfffffffffffffffc}, @func, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x10}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x100}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x10b}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) 5.023253378s ago: executing program 2 (id=2287): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.910549187s ago: executing program 2 (id=2289): r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000100)={r1}) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0xe0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 4.602963522s ago: executing program 2 (id=2295): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0040002020800020003000100040005a1eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 5) 4.177086406s ago: executing program 2 (id=2298): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.74780091s ago: executing program 4 (id=2303): socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000001c0)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x21, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x17, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a1080009000140cde8dfe90e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a705000000000000009100005ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e603a6a8a9826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e971ad9d3ac052f6dfe4f36bcf903ece981e8df37df7f8af2f28f", 0xfcc0}], 0x1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x0, 0x2f, 0x0, &(0x7f0000000600)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r3}, &(0x7f00000017c0), &(0x7f0000001800)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r7 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x11b, 0x2, &(0x7f0000000900)=r6, 0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0x1, 0x58, &(0x7f0000000640)}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, 0x0}, 0x20) r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open$cgroup(0x0, r9, 0x5, 0xffffffffffffffff, 0x6) 2.523898358s ago: executing program 4 (id=2310): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1f, 0x9, 0x3d95, 0x2, 0x2000, 0x1, 0x8ea, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000380)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x3, &(0x7f0000000140)=@framed={{}, [], {0x95, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000040400000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000000000d"], 0x0, 0x5a}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f00000015c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020200f21000000000000bfa100000000000007010000f8ffffffb702000000000000b70300000000002a850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0xe}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) close(0x3) close(0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 2.299542166s ago: executing program 4 (id=2313): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x729, 0x0, @perf_config_ext, 0x914, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa31086b876c0c0000007ea60264160af3653c001c000d0000008bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f00000000c0)=r2}, 0x20) 2.288168227s ago: executing program 1 (id=2315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) (fail_nth: 9) 1.852012302s ago: executing program 1 (id=2316): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010100850000004300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) 1.815686195s ago: executing program 1 (id=2317): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x241, &(0x7f0000000180)=[{&(0x7f0000000cc0)="2206b49bbd253c5028678f113393db4525511468432c99c1b198fa9bdd61a7b491c5f0725de0d501807a75fd350a40403d86d5514323ee373192744a9105ce01f2deee3ace168a695b14456b9954fee7db534c05bca620d6c5251184daca824886f99dca7d579a7d6b", 0xfd7d}], 0x1}, 0xc008910) 1.660402428s ago: executing program 4 (id=2319): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r4, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x0, 0x0, @local, 0x5}, 0x80, 0x0}, 0x4c810) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000740)=[{&(0x7f0000000540)=""/248, 0xf8}, {&(0x7f0000000340)=""/216, 0xd8}, {&(0x7f0000000180)}, {&(0x7f0000000640)=""/125, 0x7d}, {&(0x7f00000006c0)=""/96, 0x60}], 0x5}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000440)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)="27031c00160014000000002f01ee0b80558ddbba9b3786dd37a518fc9c5be50eaf07c365059600"/53, 0x35}], 0x1}, 0x4000004) setsockopt$sock_attach_bpf(r0, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) 1.170015006s ago: executing program 3 (id=2324): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x24, &(0x7f0000000200), 0x4) 1.052456426s ago: executing program 3 (id=2325): socket$kcm(0x2, 0x922000000001, 0x106) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x0, 0x20, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x4a, &(0x7f00000002c0), 0x4) 824.019054ms ago: executing program 1 (id=2326): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x729, 0x0, @perf_config_ext, 0x914, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x4, 0x0, &(0x7f0000000100)="e0b9547e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa31086b876c0c0000007ea60264160af3653c001c000d0000008bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f00000000c0)=r2}, 0x20) 808.050506ms ago: executing program 3 (id=2327): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, 0x0) 685.479005ms ago: executing program 3 (id=2328): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x4, 0xa00, &(0x7f0000000380)) 615.768761ms ago: executing program 1 (id=2329): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8b32, &(0x7f0000000000)={'gretap0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 518.677909ms ago: executing program 3 (id=2330): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d00000003000000040000000100000000000000", @ANYRES32=r2], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r3, &(0x7f0000000d40), 0x0}, 0x20) 517.664869ms ago: executing program 4 (id=2331): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) (async) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) (async) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000080), 0x0}, 0x20) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="9b282600"/31], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) (async) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000000)={r7}) 165.593397ms ago: executing program 3 (id=2332): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x24, &(0x7f0000000200), 0x4) 119.271571ms ago: executing program 1 (id=2333): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002f80)="02db60dafc000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xcc, 0x0, &(0x7f0000000000)='<', 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) socketpair(0x1d, 0x4, 0x0, &(0x7f0000000380)) 0s ago: executing program 4 (id=2334): socket$kcm(0x2, 0x922000000001, 0x106) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x0, 0x20, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x4a, &(0x7f00000002c0), 0x4) kernel console output (not intermixed with test programs): __sys_sendmsg+0x270/0x270 [ 607.713644][ T9810] ? __lock_acquire+0x7c80/0x7c80 [ 607.718738][ T9810] __se_sys_sendmsg+0x1a5/0x270 [ 607.723647][ T9810] ? __x64_sys_sendmsg+0x80/0x80 [ 607.728649][ T9810] ? lockdep_hardirqs_on+0x98/0x150 [ 607.733898][ T9810] do_syscall_64+0x55/0xb0 [ 607.738354][ T9810] ? clear_bhb_loop+0x40/0x90 [ 607.743062][ T9810] ? clear_bhb_loop+0x40/0x90 [ 607.747777][ T9810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 607.750532][ T9809] can: request_module (can-proto-0) failed. [ 607.753711][ T9810] RIP: 0033:0x7f6d5938ebe9 [ 607.753734][ T9810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.753751][ T9810] RSP: 002b:00007f6d5a2e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.753775][ T9810] RAX: ffffffffffffffda RBX: 00007f6d595b5fa0 RCX: 00007f6d5938ebe9 [ 607.753791][ T9810] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 607.753812][ T9810] RBP: 00007f6d5a2e6090 R08: 0000000000000000 R09: 0000000000000000 [ 607.753825][ T9810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.824178][ T9810] R13: 00007f6d595b6038 R14: 00007f6d595b5fa0 R15: 00007ffd2f3ba428 [ 607.832197][ T9810] [ 608.338096][ T9831] FAULT_INJECTION: forcing a failure. [ 608.338096][ T9831] name failslab, interval 1, probability 0, space 0, times 0 [ 608.355637][ T9831] CPU: 0 PID: 9831 Comm: syz.4.1472 Not tainted 6.6.102-syzkaller #0 [ 608.363765][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 608.373842][ T9831] Call Trace: [ 608.377136][ T9831] [ 608.380080][ T9831] dump_stack_lvl+0x16c/0x230 [ 608.384780][ T9831] ? show_regs_print_info+0x20/0x20 [ 608.389992][ T9831] ? load_image+0x3b0/0x3b0 [ 608.394520][ T9831] ? __might_sleep+0xe0/0xe0 [ 608.399125][ T9831] ? __lock_acquire+0x7c80/0x7c80 [ 608.404171][ T9831] should_fail_ex+0x39d/0x4d0 [ 608.408897][ T9831] should_failslab+0x9/0x20 [ 608.413460][ T9831] slab_pre_alloc_hook+0x59/0x310 [ 608.418521][ T9831] ? mutex_lock_nested+0x20/0x20 [ 608.423487][ T9831] ? bpf_xdp_link_attach+0x175/0x6d0 [ 608.428901][ T9831] __kmem_cache_alloc_node+0x53/0x260 [ 608.434312][ T9831] ? bpf_xdp_link_attach+0x175/0x6d0 [ 608.439625][ T9831] kmalloc_trace+0x2a/0xe0 [ 608.444162][ T9831] bpf_xdp_link_attach+0x175/0x6d0 [ 608.449302][ T9831] ? dev_xdp_prog+0x100/0x100 [ 608.454004][ T9831] ? __lock_acquire+0x7c80/0x7c80 [ 608.459059][ T9831] ? __fget_files+0x44a/0x4d0 [ 608.463763][ T9831] ? attach_type_to_prog_type+0x330/0x3a0 [ 608.469497][ T9831] ? bpf_prog_attach_check_attach_type+0x2d8/0x440 [ 608.476022][ T9831] link_create+0x3ff/0x720 [ 608.480458][ T9831] __sys_bpf+0x479/0x800 [ 608.484752][ T9831] ? bpf_link_show_fdinfo+0x350/0x350 [ 608.490173][ T9831] ? lock_chain_count+0x20/0x20 [ 608.495058][ T9831] __x64_sys_bpf+0x7c/0x90 [ 608.499492][ T9831] do_syscall_64+0x55/0xb0 [ 608.503945][ T9831] ? clear_bhb_loop+0x40/0x90 [ 608.508637][ T9831] ? clear_bhb_loop+0x40/0x90 [ 608.513326][ T9831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 608.519244][ T9831] RIP: 0033:0x7f6dcc58ebe9 [ 608.523677][ T9831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.543315][ T9831] RSP: 002b:00007f6dcd473038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 608.551755][ T9831] RAX: ffffffffffffffda RBX: 00007f6dcc7b5fa0 RCX: 00007f6dcc58ebe9 [ 608.559766][ T9831] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c [ 608.567774][ T9831] RBP: 00007f6dcd473090 R08: 0000000000000000 R09: 0000000000000000 [ 608.575772][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.583846][ T9831] R13: 00007f6dcc7b6038 R14: 00007f6dcc7b5fa0 R15: 00007ffd89467298 [ 608.591851][ T9831] [ 608.784590][ T9834] can: request_module (can-proto-0) failed. [ 609.096307][ T9846] syzkaller0: entered promiscuous mode [ 609.109970][ T9846] syzkaller0: entered allmulticast mode [ 609.176047][ T9854] FAULT_INJECTION: forcing a failure. [ 609.176047][ T9854] name failslab, interval 1, probability 0, space 0, times 0 [ 609.209968][ T9854] CPU: 1 PID: 9854 Comm: syz.3.1480 Not tainted 6.6.102-syzkaller #0 [ 609.218108][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 609.228181][ T9854] Call Trace: [ 609.231485][ T9854] [ 609.234464][ T9854] dump_stack_lvl+0x16c/0x230 [ 609.239172][ T9854] ? show_regs_print_info+0x20/0x20 [ 609.244389][ T9854] ? load_image+0x3b0/0x3b0 [ 609.248917][ T9854] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 609.254920][ T9854] ? __asan_memset+0x22/0x40 [ 609.259529][ T9854] should_fail_ex+0x39d/0x4d0 [ 609.264231][ T9854] should_failslab+0x9/0x20 [ 609.268763][ T9854] slab_pre_alloc_hook+0x59/0x310 [ 609.273807][ T9854] ? __debug_object_init+0xe8/0x430 [ 609.279025][ T9854] kmem_cache_alloc+0x5a/0x2e0 [ 609.283807][ T9854] ? slab_build_skb+0x2b/0x3f0 [ 609.288620][ T9854] slab_build_skb+0x2b/0x3f0 [ 609.293243][ T9854] bpf_prog_test_run_skb+0x3ba/0x11c0 [ 609.298720][ T9854] ? __fget_files+0x28/0x4d0 [ 609.303370][ T9854] ? cpu_online+0x60/0x60 [ 609.307745][ T9854] bpf_prog_test_run+0x321/0x390 [ 609.312712][ T9854] __sys_bpf+0x440/0x800 [ 609.316976][ T9854] ? bpf_link_show_fdinfo+0x350/0x350 [ 609.322417][ T9854] ? lock_chain_count+0x20/0x20 [ 609.327294][ T9854] __x64_sys_bpf+0x7c/0x90 [ 609.331726][ T9854] do_syscall_64+0x55/0xb0 [ 609.336161][ T9854] ? clear_bhb_loop+0x40/0x90 [ 609.340858][ T9854] ? clear_bhb_loop+0x40/0x90 [ 609.345550][ T9854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.351461][ T9854] RIP: 0033:0x7f6d5938ebe9 [ 609.355901][ T9854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.375552][ T9854] RSP: 002b:00007f6d5a2e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 609.384008][ T9854] RAX: ffffffffffffffda RBX: 00007f6d595b5fa0 RCX: 00007f6d5938ebe9 [ 609.392033][ T9854] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 609.400040][ T9854] RBP: 00007f6d5a2e6090 R08: 0000000000000000 R09: 0000000000000000 [ 609.408061][ T9854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.416050][ T9854] R13: 00007f6d595b6038 R14: 00007f6d595b5fa0 R15: 00007ffd2f3ba428 [ 609.424057][ T9854] [ 611.070051][ T1142] wlan1: Trigger new scan to find an IBSS to join [ 611.971672][ T6012] wlan1: Creating new IBSS network, BSSID 3a:78:14:da:14:50 [ 612.656700][ T9866] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 612.836613][ T9898] netlink: 'syz.1.1498': attribute type 10 has an invalid length. [ 612.864888][ T9898] macvlan0: entered allmulticast mode [ 612.888806][ T9898] veth1_vlan: entered allmulticast mode [ 612.936536][ T9898] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 613.028857][ T9907] FAULT_INJECTION: forcing a failure. [ 613.028857][ T9907] name failslab, interval 1, probability 0, space 0, times 0 [ 613.041698][ T9907] CPU: 1 PID: 9907 Comm: syz.4.1500 Not tainted 6.6.102-syzkaller #0 [ 613.049819][ T9907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 613.059912][ T9907] Call Trace: [ 613.063230][ T9907] [ 613.066202][ T9907] dump_stack_lvl+0x16c/0x230 [ 613.070934][ T9907] ? show_regs_print_info+0x20/0x20 [ 613.076189][ T9907] ? load_image+0x3b0/0x3b0 [ 613.080777][ T9907] should_fail_ex+0x39d/0x4d0 [ 613.085516][ T9907] should_failslab+0x9/0x20 [ 613.090072][ T9907] slab_pre_alloc_hook+0x59/0x310 [ 613.095154][ T9907] ? skb_network_protocol+0x4ff/0x760 [ 613.100578][ T9907] kmem_cache_alloc+0x5a/0x2e0 [ 613.105399][ T9907] ? skb_clone+0x1eb/0x370 [ 613.109876][ T9907] skb_clone+0x1eb/0x370 [ 613.114170][ T9907] ? dev_queue_xmit_nit+0x212/0xbb0 [ 613.119425][ T9907] dev_queue_xmit_nit+0x24d/0xbb0 [ 613.124518][ T9907] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 613.129691][ T9907] ? validate_xmit_skb+0x953/0xf50 [ 613.134856][ T9907] dev_hard_start_xmit+0x148/0x740 [ 613.140033][ T9907] __dev_queue_xmit+0x1a64/0x35a0 [ 613.145128][ T9907] ? __dev_queue_xmit+0x245/0x35a0 [ 613.150298][ T9907] ? netdev_core_pick_tx+0x340/0x340 [ 613.155639][ T9907] ? __copy_skb_header+0xa7/0x550 [ 613.160724][ T9907] ? __asan_memcpy+0x40/0x70 [ 613.165370][ T9907] ? __skb_clone+0x63/0x790 [ 613.169934][ T9907] ? __skb_clone+0x480/0x790 [ 613.174588][ T9907] ? skb_clone+0x21f/0x370 [ 613.179065][ T9907] __netlink_deliver_tap+0x5ab/0x830 [ 613.184431][ T9907] ? netlink_deliver_tap+0x2e/0x1b0 [ 613.189802][ T9907] netlink_deliver_tap+0x19c/0x1b0 [ 613.194978][ T9907] netlink_unicast+0x72c/0x8d0 [ 613.197085][ T9913] tun0: tun_chr_ioctl cmd 1074025694 [ 613.199821][ T9907] netlink_sendmsg+0x8c1/0xbe0 [ 613.199881][ T9907] ? netlink_getsockopt+0x580/0x580 [ 613.199911][ T9907] ? aa_sock_msg_perm+0x94/0x150 [ 613.199939][ T9907] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 613.199965][ T9907] ? security_socket_sendmsg+0x80/0xa0 [ 613.199987][ T9907] ? netlink_getsockopt+0x580/0x580 [ 613.236293][ T9907] ____sys_sendmsg+0x5bf/0x950 [ 613.241102][ T9907] ? __asan_memset+0x22/0x40 [ 613.245719][ T9907] ? __sys_sendmsg_sock+0x30/0x30 [ 613.250796][ T9907] ? __import_iovec+0x5f2/0x860 [ 613.255683][ T9907] ? import_iovec+0x73/0xa0 [ 613.260219][ T9907] ___sys_sendmsg+0x220/0x290 [ 613.264927][ T9907] ? __sys_sendmsg+0x270/0x270 [ 613.269733][ T9907] ? __lock_acquire+0x7c80/0x7c80 [ 613.274810][ T9907] __se_sys_sendmsg+0x1a5/0x270 [ 613.279686][ T9907] ? __x64_sys_sendmsg+0x80/0x80 [ 613.284756][ T9907] ? lockdep_hardirqs_on+0x98/0x150 [ 613.289984][ T9907] do_syscall_64+0x55/0xb0 [ 613.294425][ T9907] ? clear_bhb_loop+0x40/0x90 [ 613.299114][ T9907] ? clear_bhb_loop+0x40/0x90 [ 613.303805][ T9907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 613.309742][ T9907] RIP: 0033:0x7f6dcc58ebe9 [ 613.314188][ T9907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.333954][ T9907] RSP: 002b:00007f6dcd473038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 613.342410][ T9907] RAX: ffffffffffffffda RBX: 00007f6dcc7b5fa0 RCX: 00007f6dcc58ebe9 [ 613.350402][ T9907] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 613.358403][ T9907] RBP: 00007f6dcd473090 R08: 0000000000000000 R09: 0000000000000000 [ 613.366420][ T9907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.374438][ T9907] R13: 00007f6dcc7b6038 R14: 00007f6dcc7b5fa0 R15: 00007ffd89467298 [ 613.382454][ T9907] [ 613.548982][ T9913] netlink: 'syz.1.1502': attribute type 10 has an invalid length. [ 613.561888][ T9913] veth1_vlan: left allmulticast mode [ 614.226386][ T9934] FAULT_INJECTION: forcing a failure. [ 614.226386][ T9934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.260572][ T9934] CPU: 1 PID: 9934 Comm: syz.4.1510 Not tainted 6.6.102-syzkaller #0 [ 614.268739][ T9934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 614.278949][ T9934] Call Trace: [ 614.282295][ T9934] [ 614.285289][ T9934] dump_stack_lvl+0x16c/0x230 [ 614.290094][ T9934] ? show_regs_print_info+0x20/0x20 [ 614.295480][ T9934] ? load_image+0x3b0/0x3b0 [ 614.300256][ T9934] ? __might_fault+0xaa/0x120 [ 614.305028][ T9934] ? __lock_acquire+0x7c80/0x7c80 [ 614.310194][ T9934] should_fail_ex+0x39d/0x4d0 [ 614.314975][ T9934] _copy_from_user+0x2f/0xe0 [ 614.319646][ T9934] inet6_ioctl+0x181/0x280 [ 614.324147][ T9934] ? inet6_getname+0x650/0x650 [ 614.329020][ T9934] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 614.334603][ T9934] sock_do_ioctl+0xd7/0x2f0 [ 614.339203][ T9934] ? sock_show_fdinfo+0xb0/0xb0 [ 614.344290][ T9934] sock_ioctl+0x623/0x7a0 [ 614.348717][ T9934] ? sock_poll+0x3d0/0x3d0 [ 614.353259][ T9934] ? bpf_lsm_file_ioctl+0x9/0x10 [ 614.358285][ T9934] ? security_file_ioctl+0x80/0xa0 [ 614.363493][ T9934] ? sock_poll+0x3d0/0x3d0 [ 614.368082][ T9934] __se_sys_ioctl+0xfd/0x170 [ 614.372766][ T9934] do_syscall_64+0x55/0xb0 [ 614.377257][ T9934] ? clear_bhb_loop+0x40/0x90 [ 614.382030][ T9934] ? clear_bhb_loop+0x40/0x90 [ 614.386797][ T9934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 614.392774][ T9934] RIP: 0033:0x7f6dcc58ebe9 [ 614.397264][ T9934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.416999][ T9934] RSP: 002b:00007f6dcd473038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 614.425509][ T9934] RAX: ffffffffffffffda RBX: 00007f6dcc7b5fa0 RCX: 00007f6dcc58ebe9 [ 614.433552][ T9934] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000008 [ 614.441595][ T9934] RBP: 00007f6dcd473090 R08: 0000000000000000 R09: 0000000000000000 [ 614.449647][ T9934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.457691][ T9934] R13: 00007f6dcc7b6038 R14: 00007f6dcc7b5fa0 R15: 00007ffd89467298 [ 614.465798][ T9934] [ 614.826744][ T9941] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1513'. [ 615.025193][ T9950] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1513'. [ 615.080477][ T1142] wlan1: Trigger new scan to find an IBSS to join [ 616.611568][ T9980] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1525'. [ 617.068128][ T9997] netlink: 'syz.4.1530': attribute type 28 has an invalid length. [ 617.079418][ T9998] FAULT_INJECTION: forcing a failure. [ 617.079418][ T9998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.123479][ T9998] CPU: 0 PID: 9998 Comm: syz.3.1531 Not tainted 6.6.102-syzkaller #0 [ 617.131636][ T9998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 617.141707][ T9998] Call Trace: [ 617.145003][ T9998] [ 617.147950][ T9998] dump_stack_lvl+0x16c/0x230 [ 617.152655][ T9998] ? show_regs_print_info+0x20/0x20 [ 617.157896][ T9998] ? load_image+0x3b0/0x3b0 [ 617.162438][ T9998] ? __might_fault+0xaa/0x120 [ 617.167126][ T9998] ? __lock_acquire+0x7c80/0x7c80 [ 617.172190][ T9998] should_fail_ex+0x39d/0x4d0 [ 617.176921][ T9998] _copy_from_user+0x2f/0xe0 [ 617.181543][ T9998] inet6_ioctl+0x181/0x280 [ 617.185990][ T9998] ? inet6_getname+0x650/0x650 [ 617.190804][ T9998] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 617.196313][ T9998] sock_do_ioctl+0xd7/0x2f0 [ 617.200849][ T9998] ? sock_show_fdinfo+0xb0/0xb0 [ 617.205748][ T9998] sock_ioctl+0x623/0x7a0 [ 617.210111][ T9998] ? sock_poll+0x3d0/0x3d0 [ 617.214565][ T9998] ? bpf_lsm_file_ioctl+0x9/0x10 [ 617.219513][ T9998] ? security_file_ioctl+0x80/0xa0 [ 617.224655][ T9998] ? sock_poll+0x3d0/0x3d0 [ 617.229152][ T9998] __se_sys_ioctl+0xfd/0x170 [ 617.233773][ T9998] do_syscall_64+0x55/0xb0 [ 617.238209][ T9998] ? clear_bhb_loop+0x40/0x90 [ 617.242907][ T9998] ? clear_bhb_loop+0x40/0x90 [ 617.247602][ T9998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 617.253545][ T9998] RIP: 0033:0x7f6d5938ebe9 [ 617.257997][ T9998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.277646][ T9998] RSP: 002b:00007f6d5a2e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.286096][ T9998] RAX: ffffffffffffffda RBX: 00007f6d595b5fa0 RCX: 00007f6d5938ebe9 [ 617.294097][ T9998] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 617.302108][ T9998] RBP: 00007f6d5a2e6090 R08: 0000000000000000 R09: 0000000000000000 [ 617.310102][ T9998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.318093][ T9998] R13: 00007f6d595b6038 R14: 00007f6d595b5fa0 R15: 00007ffd2f3ba428 [ 617.326100][ T9998] [ 617.407683][T10000] tun0: tun_chr_ioctl cmd 1074025694 [ 617.520243][T10000] netlink: 'syz.2.1533': attribute type 10 has an invalid length. [ 617.599730][T10000] macvlan0: entered allmulticast mode [ 617.701383][T10000] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 618.120169][ T5923] wlan1: Trigger new scan to find an IBSS to join [ 618.411592][T10022] FAULT_INJECTION: forcing a failure. [ 618.411592][T10022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.453307][T10022] CPU: 0 PID: 10022 Comm: syz.4.1537 Not tainted 6.6.102-syzkaller #0 [ 618.461539][T10022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 618.471643][T10022] Call Trace: [ 618.474959][T10022] [ 618.478105][T10022] dump_stack_lvl+0x16c/0x230 [ 618.482829][T10022] ? show_regs_print_info+0x20/0x20 [ 618.488075][T10022] ? load_image+0x3b0/0x3b0 [ 618.492613][T10022] ? __might_fault+0xaa/0x120 [ 618.497318][T10022] ? __lock_acquire+0x7c80/0x7c80 [ 618.502392][T10022] should_fail_ex+0x39d/0x4d0 [ 618.507117][T10022] _copy_from_user+0x2f/0xe0 [ 618.511742][T10022] ___sys_recvmsg+0x12f/0x510 [ 618.516457][T10022] ? __sys_recvmsg+0x270/0x270 [ 618.521343][T10022] ? ksys_write+0x1c1/0x250 [ 618.525893][T10022] ? __fget_files+0x44a/0x4d0 [ 618.530602][T10022] __x64_sys_recvmsg+0x1f2/0x2c0 [ 618.535572][T10022] ? ___sys_recvmsg+0x510/0x510 [ 618.540474][T10022] ? lockdep_hardirqs_on+0x98/0x150 [ 618.545732][T10022] do_syscall_64+0x55/0xb0 [ 618.550195][T10022] ? clear_bhb_loop+0x40/0x90 [ 618.554916][T10022] ? clear_bhb_loop+0x40/0x90 [ 618.559639][T10022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.565573][T10022] RIP: 0033:0x7f6dcc58ebe9 [ 618.570022][T10022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.589677][T10022] RSP: 002b:00007f6dcd431038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 618.598113][T10022] RAX: ffffffffffffffda RBX: 00007f6dcc7b6180 RCX: 00007f6dcc58ebe9 [ 618.606097][T10022] RDX: 0000000000010000 RSI: 0000200000002f80 RDI: 0000000000000004 [ 618.614092][T10022] RBP: 00007f6dcd431090 R08: 0000000000000000 R09: 0000000000000000 [ 618.622091][T10022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.630081][T10022] R13: 00007f6dcc7b6218 R14: 00007f6dcc7b6180 R15: 00007ffd89467298 [ 618.638091][T10022] [ 618.798594][T10029] FAULT_INJECTION: forcing a failure. [ 618.798594][T10029] name failslab, interval 1, probability 0, space 0, times 0 [ 618.866422][T10029] CPU: 1 PID: 10029 Comm: syz.3.1540 Not tainted 6.6.102-syzkaller #0 [ 618.874674][T10029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 618.884771][T10029] Call Trace: [ 618.888090][T10029] [ 618.891145][T10029] dump_stack_lvl+0x16c/0x230 [ 618.895881][T10029] ? show_regs_print_info+0x20/0x20 [ 618.901123][T10029] ? load_image+0x3b0/0x3b0 [ 618.905687][T10029] ? __might_sleep+0xe0/0xe0 [ 618.910335][T10029] ? __lock_acquire+0x7c80/0x7c80 [ 618.915420][T10029] should_fail_ex+0x39d/0x4d0 [ 618.920164][T10029] should_failslab+0x9/0x20 [ 618.924803][T10029] slab_pre_alloc_hook+0x59/0x310 [ 618.929910][T10029] ? __d_alloc+0xb7/0x730 [ 618.934304][T10029] ? __d_alloc+0xb7/0x730 [ 618.938674][T10029] __kmem_cache_alloc_node+0x53/0x260 [ 618.944160][T10029] ? __d_alloc+0xb7/0x730 [ 618.948545][T10029] __kmalloc+0xa4/0x240 [ 618.952768][T10029] __d_alloc+0xb7/0x730 [ 618.957025][T10029] d_alloc_parallel+0xdd/0x1480 [ 618.962031][T10029] ? __d_lookup+0x8f/0x7c0 [ 618.966527][T10029] ? __lock_acquire+0x7c80/0x7c80 [ 618.971633][T10029] ? __d_lookup+0x8f/0x7c0 [ 618.976112][T10029] ? d_hash_and_lookup+0x1b0/0x1b0 [ 618.981335][T10029] path_openat+0x907/0x3190 [ 618.985980][T10029] ? do_filp_open+0x3d0/0x3d0 [ 618.990794][T10029] do_filp_open+0x1c5/0x3d0 [ 618.995401][T10029] ? vfs_tmpfile+0x490/0x490 [ 619.000119][T10029] ? _raw_spin_unlock+0x28/0x40 [ 619.005023][T10029] ? alloc_fd+0x58f/0x630 [ 619.009436][T10029] do_sys_openat2+0x12c/0x1c0 [ 619.014180][T10029] ? do_sys_open+0xe0/0xe0 [ 619.018637][T10029] ? bpf_trace_run2+0x26f/0x3c0 [ 619.023537][T10029] ? bpf_trace_run1+0x3b0/0x3b0 [ 619.028453][T10029] ? lock_chain_count+0x20/0x20 [ 619.033401][T10029] __x64_sys_openat+0x139/0x160 [ 619.038329][T10029] do_syscall_64+0x55/0xb0 [ 619.042799][T10029] ? clear_bhb_loop+0x40/0x90 [ 619.047695][T10029] ? clear_bhb_loop+0x40/0x90 [ 619.052423][T10029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 619.058475][T10029] RIP: 0033:0x7f6d5938ebe9 [ 619.062934][T10029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.082608][T10029] RSP: 002b:00007f6d5a2e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 619.091086][T10029] RAX: ffffffffffffffda RBX: 00007f6d595b5fa0 RCX: 00007f6d5938ebe9 [ 619.099111][T10029] RDX: 00000000000026e1 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 619.107151][T10029] RBP: 00007f6d5a2e6090 R08: 0000000000000000 R09: 0000000000000000 [ 619.115161][T10029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.123171][T10029] R13: 00007f6d595b6038 R14: 00007f6d595b5fa0 R15: 00007ffd2f3ba428 [ 619.131347][T10029] [ 619.254671][T10032] FAULT_INJECTION: forcing a failure. [ 619.254671][T10032] name failslab, interval 1, probability 0, space 0, times 0 [ 619.290054][T10032] CPU: 0 PID: 10032 Comm: syz.1.1541 Not tainted 6.6.102-syzkaller #0 [ 619.298300][T10032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 619.308415][T10032] Call Trace: [ 619.311741][T10032] [ 619.314716][T10032] dump_stack_lvl+0x16c/0x230 [ 619.319529][T10032] ? show_regs_print_info+0x20/0x20 [ 619.324822][T10032] ? load_image+0x3b0/0x3b0 [ 619.329389][T10032] ? __might_sleep+0xe0/0xe0 [ 619.334117][T10032] ? __lock_acquire+0x7c80/0x7c80 [ 619.339198][T10032] should_fail_ex+0x39d/0x4d0 [ 619.343931][T10032] should_failslab+0x9/0x20 [ 619.348475][T10032] slab_pre_alloc_hook+0x59/0x310 [ 619.353538][T10032] ? __d_alloc+0xb7/0x730 [ 619.357906][T10032] ? __d_alloc+0xb7/0x730 [ 619.362279][T10032] __kmem_cache_alloc_node+0x53/0x260 [ 619.367704][T10032] ? __d_alloc+0xb7/0x730 [ 619.372076][T10032] __kmalloc+0xa4/0x240 [ 619.376275][T10032] __d_alloc+0xb7/0x730 [ 619.380467][T10032] d_alloc_parallel+0xdd/0x1480 [ 619.385360][T10032] ? __d_lookup+0x8f/0x7c0 [ 619.389812][T10032] ? __lock_acquire+0x7c80/0x7c80 [ 619.394869][T10032] ? __d_lookup+0x8f/0x7c0 [ 619.399316][T10032] ? d_hash_and_lookup+0x1b0/0x1b0 [ 619.404503][T10032] path_openat+0x907/0x3190 [ 619.409118][T10032] ? do_filp_open+0x3d0/0x3d0 [ 619.413843][T10032] do_filp_open+0x1c5/0x3d0 [ 619.418383][T10032] ? vfs_tmpfile+0x490/0x490 [ 619.423021][T10032] ? _raw_spin_unlock+0x28/0x40 [ 619.427900][T10032] ? alloc_fd+0x58f/0x630 [ 619.432260][T10032] do_sys_openat2+0x12c/0x1c0 [ 619.436961][T10032] ? do_sys_open+0xe0/0xe0 [ 619.441399][T10032] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 619.447398][T10032] ? lock_chain_count+0x20/0x20 [ 619.452271][T10032] __x64_sys_openat+0x139/0x160 [ 619.457149][T10032] do_syscall_64+0x55/0xb0 [ 619.461608][T10032] ? clear_bhb_loop+0x40/0x90 [ 619.466299][T10032] ? clear_bhb_loop+0x40/0x90 [ 619.470998][T10032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 619.476928][T10032] RIP: 0033:0x7f183d18ebe9 [ 619.481366][T10032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.501004][T10032] RSP: 002b:00007f183b3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 619.509437][T10032] RAX: ffffffffffffffda RBX: 00007f183d3b5fa0 RCX: 00007f183d18ebe9 [ 619.517426][T10032] RDX: 00000000000026e1 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 619.525414][T10032] RBP: 00007f183b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 619.533403][T10032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.541400][T10032] R13: 00007f183d3b6038 R14: 00007f183d3b5fa0 R15: 00007ffd8a43b8c8 [ 619.549402][T10032] [ 619.806394][T10043] netlink: 'syz.2.1552': attribute type 28 has an invalid length. [ 619.824112][ T3488] wlan1: Creating new IBSS network, BSSID 76:b2:fe:34:5b:b1 [ 619.998656][T10048] tun0: tun_chr_ioctl cmd 1074025694 [ 620.231337][T10048] netlink: 'syz.3.1545': attribute type 10 has an invalid length. [ 620.329456][T10048] macvlan0: entered allmulticast mode [ 620.448443][T10048] veth1_vlan: entered allmulticast mode [ 620.488298][T10048] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 620.541523][T10057] netlink: 'syz.1.1550': attribute type 10 has an invalid length. [ 620.556971][T10057] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1550'. [ 620.959329][T10068] FAULT_INJECTION: forcing a failure. [ 620.959329][T10068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.975424][T10068] CPU: 1 PID: 10068 Comm: syz.2.1555 Not tainted 6.6.102-syzkaller #0 [ 620.983672][T10068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 620.993818][T10068] Call Trace: [ 620.997180][T10068] [ 621.000230][T10068] dump_stack_lvl+0x16c/0x230 [ 621.005003][T10068] ? show_regs_print_info+0x20/0x20 [ 621.010285][T10068] ? load_image+0x3b0/0x3b0 [ 621.014902][T10068] ? __lock_acquire+0x7c80/0x7c80 [ 621.020012][T10068] ? snprintf+0xdb/0x120 [ 621.024360][T10068] should_fail_ex+0x39d/0x4d0 [ 621.029235][T10068] _copy_to_user+0x2f/0xa0 [ 621.033745][T10068] simple_read_from_buffer+0xe7/0x150 [ 621.039231][T10068] proc_fail_nth_read+0x1e3/0x250 [ 621.044354][T10068] ? proc_fault_inject_write+0x340/0x340 [ 621.050193][T10068] ? fsnotify_perm+0x271/0x5e0 [ 621.055053][T10068] ? proc_fault_inject_write+0x340/0x340 [ 621.060773][T10068] vfs_read+0x27e/0x920 [ 621.065013][T10068] ? kernel_read+0x1e0/0x1e0 [ 621.069677][T10068] ? __fget_files+0x28/0x4d0 [ 621.074337][T10068] ? __fget_files+0x44a/0x4d0 [ 621.079087][T10068] ? __fdget_pos+0x2a3/0x330 [ 621.083742][T10068] ? ksys_read+0x75/0x250 [ 621.088138][T10068] ksys_read+0x147/0x250 [ 621.092447][T10068] ? vfs_write+0x940/0x940 [ 621.096933][T10068] ? lockdep_hardirqs_on+0x98/0x150 [ 621.102203][T10068] do_syscall_64+0x55/0xb0 [ 621.106664][T10068] ? clear_bhb_loop+0x40/0x90 [ 621.111400][T10068] ? clear_bhb_loop+0x40/0x90 [ 621.116137][T10068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 621.122090][T10068] RIP: 0033:0x7fdac818d5fc [ 621.126554][T10068] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 621.146216][T10068] RSP: 002b:00007fdac8f68030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 621.154681][T10068] RAX: ffffffffffffffda RBX: 00007fdac83b5fa0 RCX: 00007fdac818d5fc [ 621.162693][T10068] RDX: 000000000000000f RSI: 00007fdac8f680a0 RDI: 0000000000000006 [ 621.170722][T10068] RBP: 00007fdac8f68090 R08: 0000000000000000 R09: 0000000000000000 [ 621.178759][T10068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.186797][T10068] R13: 00007fdac83b6038 R14: 00007fdac83b5fa0 R15: 00007ffc55d04128 [ 621.194859][T10068] [ 621.480752][T10057] bond0: (slave macvlan0): Releasing backup interface [ 621.573667][T10060] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1550'. [ 622.683103][T10098] netlink: 'syz.2.1566': attribute type 21 has an invalid length. [ 622.691542][T10098] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1566'. [ 622.709237][T10098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1566'. [ 622.822266][T10101] FAULT_INJECTION: forcing a failure. [ 622.822266][T10101] name failslab, interval 1, probability 0, space 0, times 0 [ 622.849098][T10101] CPU: 0 PID: 10101 Comm: syz.4.1567 Not tainted 6.6.102-syzkaller #0 [ 622.857511][T10101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 622.867611][T10101] Call Trace: [ 622.871010][T10101] [ 622.873983][T10101] dump_stack_lvl+0x16c/0x230 [ 622.878765][T10101] ? show_regs_print_info+0x20/0x20 [ 622.884012][T10101] ? load_image+0x3b0/0x3b0 [ 622.888563][T10101] ? __might_sleep+0xe0/0xe0 [ 622.893192][T10101] ? __lock_acquire+0x7c80/0x7c80 [ 622.898253][T10101] should_fail_ex+0x39d/0x4d0 [ 622.902987][T10101] should_failslab+0x9/0x20 [ 622.907538][T10101] slab_pre_alloc_hook+0x59/0x310 [ 622.912656][T10101] ? __lock_acquire+0x7c80/0x7c80 [ 622.917733][T10101] kmem_cache_alloc_node+0x60/0x330 [ 622.922971][T10101] ? __alloc_skb+0x108/0x2c0 [ 622.927601][T10101] __alloc_skb+0x108/0x2c0 [ 622.932055][T10101] netlink_sendmsg+0x65b/0xbe0 [ 622.936866][T10101] ? netlink_getsockopt+0x580/0x580 [ 622.942099][T10101] ? aa_sock_msg_perm+0x94/0x150 [ 622.947072][T10101] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 622.952386][T10101] ? security_socket_sendmsg+0x80/0xa0 [ 622.957873][T10101] ? netlink_getsockopt+0x580/0x580 [ 622.963104][T10101] ____sys_sendmsg+0x5bf/0x950 [ 622.967910][T10101] ? __asan_memset+0x22/0x40 [ 622.972535][T10101] ? __sys_sendmsg_sock+0x30/0x30 [ 622.977585][T10101] ? __import_iovec+0x5f2/0x860 [ 622.982481][T10101] ? import_iovec+0x73/0xa0 [ 622.987022][T10101] ___sys_sendmsg+0x220/0x290 [ 622.991735][T10101] ? __sys_sendmsg+0x270/0x270 [ 622.996574][T10101] ? __lock_acquire+0x7c80/0x7c80 [ 623.001676][T10101] __se_sys_sendmsg+0x1a5/0x270 [ 623.006566][T10101] ? __x64_sys_sendmsg+0x80/0x80 [ 623.011565][T10101] ? lockdep_hardirqs_on+0x98/0x150 [ 623.016803][T10101] do_syscall_64+0x55/0xb0 [ 623.021251][T10101] ? clear_bhb_loop+0x40/0x90 [ 623.025959][T10101] ? clear_bhb_loop+0x40/0x90 [ 623.030690][T10101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 623.036670][T10101] RIP: 0033:0x7f6dcc58ebe9 [ 623.041114][T10101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.060748][T10101] RSP: 002b:00007f6dcd473038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 623.069190][T10101] RAX: ffffffffffffffda RBX: 00007f6dcc7b5fa0 RCX: 00007f6dcc58ebe9 [ 623.077184][T10101] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 623.085262][T10101] RBP: 00007f6dcd473090 R08: 0000000000000000 R09: 0000000000000000 [ 623.093256][T10101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.101253][T10101] R13: 00007f6dcc7b6038 R14: 00007f6dcc7b5fa0 R15: 00007ffd89467298 [ 623.109283][T10101] [ 624.603745][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.610295][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.627434][T10137] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1580'. [ 626.826794][T10183] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1597'. [ 627.329090][ T1142] hsr_slave_0: left promiscuous mode [ 627.353717][ T1142] hsr_slave_1: left promiscuous mode [ 627.383087][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.409893][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.429271][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.438596][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.469466][ T1142] bridge_slave_1: left allmulticast mode [ 627.487105][ T1142] bridge_slave_1: left promiscuous mode [ 627.510333][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.562014][ T1142] bridge_slave_0: left allmulticast mode [ 627.578180][ T1142] bridge_slave_0: left promiscuous mode [ 627.584566][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.676894][ T1142] veth0_macvtap: left promiscuous mode [ 627.687439][ T1142] veth1_vlan: left promiscuous mode [ 629.736952][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 629.886530][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 630.028442][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.167077][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.875186][ T1142] bond0 (unregistering): Released all slaves [ 631.010848][T10237] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1618'. [ 631.588443][T10253] netlink: 'syz.1.1623': attribute type 28 has an invalid length. [ 633.111899][T10285] netlink: 'syz.2.1635': attribute type 28 has an invalid length. [ 633.147420][T10287] tun0: tun_chr_ioctl cmd 1074025694 [ 633.469836][T10295] bond_slave_1: mtu greater than device maximum [ 633.487250][T10295] netlink: 'syz.4.1638': attribute type 21 has an invalid length. [ 634.413897][T10314] netlink: 'syz.3.1646': attribute type 29 has an invalid length. [ 634.460208][T10314] netlink: 'syz.3.1646': attribute type 29 has an invalid length. [ 634.524019][T10317] netlink: 'syz.2.1647': attribute type 28 has an invalid length. [ 634.607454][T10320] tun0: tun_chr_ioctl cmd 1074025694 [ 635.155178][T10336] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1654'. [ 635.797583][T10351] netlink: 'syz.2.1659': attribute type 28 has an invalid length. [ 636.128696][T10361] tun0: tun_chr_ioctl cmd 1074025694 [ 637.069544][T10382] netlink: 'syz.4.1671': attribute type 28 has an invalid length. [ 637.533799][T10399] FAULT_INJECTION: forcing a failure. [ 637.533799][T10399] name failslab, interval 1, probability 0, space 0, times 0 [ 637.546804][T10399] CPU: 0 PID: 10399 Comm: syz.2.1678 Not tainted 6.6.102-syzkaller #0 [ 637.555026][T10399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 637.565129][T10399] Call Trace: [ 637.568435][T10399] [ 637.571389][T10399] dump_stack_lvl+0x16c/0x230 [ 637.576126][T10399] ? show_regs_print_info+0x20/0x20 [ 637.581378][T10399] ? load_image+0x3b0/0x3b0 [ 637.585927][T10399] ? __might_sleep+0xe0/0xe0 [ 637.590552][T10399] ? __lock_acquire+0x7c80/0x7c80 [ 637.595620][T10399] should_fail_ex+0x39d/0x4d0 [ 637.600343][T10399] should_failslab+0x9/0x20 [ 637.604879][T10399] slab_pre_alloc_hook+0x59/0x310 [ 637.609936][T10399] ? d_instantiate+0x6f/0x90 [ 637.614592][T10399] kmem_cache_alloc+0x5a/0x2e0 [ 637.619406][T10399] ? alloc_empty_file+0x9e/0x1d0 [ 637.624389][T10399] alloc_empty_file+0x9e/0x1d0 [ 637.629218][T10399] alloc_file+0x5c/0x600 [ 637.633591][T10399] alloc_file_pseudo+0x17e/0x200 [ 637.638581][T10399] ? alloc_empty_backing_file+0xe0/0xe0 [ 637.644170][T10399] ? init_peercred+0x263/0x2c0 [ 637.648974][T10399] sock_alloc_file+0xb7/0x280 [ 637.653686][T10399] __sys_socketpair+0x376/0x550 [ 637.658580][T10399] __x64_sys_socketpair+0x9b/0xb0 [ 637.663641][T10399] do_syscall_64+0x55/0xb0 [ 637.668079][T10399] ? clear_bhb_loop+0x40/0x90 [ 637.672781][T10399] ? clear_bhb_loop+0x40/0x90 [ 637.677487][T10399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 637.683443][T10399] RIP: 0033:0x7fdac818ebe9 [ 637.687886][T10399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.707520][T10399] RSP: 002b:00007fdac8f68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 637.715963][T10399] RAX: ffffffffffffffda RBX: 00007fdac83b5fa0 RCX: 00007fdac818ebe9 [ 637.723964][T10399] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 637.731960][T10399] RBP: 00007fdac8f68090 R08: 0000000000000000 R09: 0000000000000000 [ 637.739953][T10399] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000002 [ 637.747964][T10399] R13: 00007fdac83b6038 R14: 00007fdac83b5fa0 R15: 00007ffc55d04128 [ 637.755992][T10399] [ 638.030257][T10408] lo: left promiscuous mode [ 638.034876][T10408] lo: entered allmulticast mode [ 638.382690][T10416] netlink: 'syz.3.1684': attribute type 28 has an invalid length. [ 639.946056][T10462] netlink: 'syz.1.1698': attribute type 28 has an invalid length. [ 641.327594][T10493] tun0: tun_chr_ioctl cmd 1074025694 [ 641.867926][T10511] tun0: tun_chr_ioctl cmd 1074025694 [ 642.587832][T10535] tun0: tun_chr_ioctl cmd 1074025694 [ 643.093931][T10552] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1732'. [ 643.248422][T10555] tun0: tun_chr_ioctl cmd 1074025694 [ 643.908931][T10559] syzkaller0: entered promiscuous mode [ 643.915555][T10559] syzkaller0: entered allmulticast mode [ 644.105563][T10570] FAULT_INJECTION: forcing a failure. [ 644.105563][T10570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.168476][T10570] CPU: 1 PID: 10570 Comm: syz.1.1738 Not tainted 6.6.102-syzkaller #0 [ 644.176727][T10570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 644.186835][T10570] Call Trace: [ 644.190145][T10570] [ 644.193098][T10570] dump_stack_lvl+0x16c/0x230 [ 644.197815][T10570] ? show_regs_print_info+0x20/0x20 [ 644.203058][T10570] ? load_image+0x3b0/0x3b0 [ 644.207598][T10570] ? __might_fault+0xaa/0x120 [ 644.212307][T10570] ? __lock_acquire+0x7c80/0x7c80 [ 644.217362][T10570] should_fail_ex+0x39d/0x4d0 [ 644.222064][T10570] _copy_from_user+0x2f/0xe0 [ 644.226668][T10570] memdup_user+0x64/0xc0 [ 644.230932][T10570] ppp_get_filter+0x13d/0x1b0 [ 644.235630][T10570] ? ppp_set_compress+0x720/0x720 [ 644.240682][T10570] ? ppp_poll+0x250/0x250 [ 644.245032][T10570] ppp_ioctl+0xf1b/0x1980 [ 644.249385][T10570] ? ppp_poll+0x250/0x250 [ 644.253740][T10570] ? __fget_files+0x28/0x4d0 [ 644.258357][T10570] ? bpf_lsm_file_ioctl+0x9/0x10 [ 644.263306][T10570] ? security_file_ioctl+0x80/0xa0 [ 644.268442][T10570] ? ppp_poll+0x250/0x250 [ 644.272788][T10570] __se_sys_ioctl+0xfd/0x170 [ 644.277401][T10570] do_syscall_64+0x55/0xb0 [ 644.281835][T10570] ? clear_bhb_loop+0x40/0x90 [ 644.286522][T10570] ? clear_bhb_loop+0x40/0x90 [ 644.291210][T10570] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 644.297140][T10570] RIP: 0033:0x7f183d18ebe9 [ 644.301567][T10570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.321200][T10570] RSP: 002b:00007f183b3b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 644.329637][T10570] RAX: ffffffffffffffda RBX: 00007f183d3b6180 RCX: 00007f183d18ebe9 [ 644.337627][T10570] RDX: 00002000000000c0 RSI: 0000000040107446 RDI: 0000000000000003 [ 644.345620][T10570] RBP: 00007f183b3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 644.353601][T10570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.361582][T10570] R13: 00007f183d3b6218 R14: 00007f183d3b6180 R15: 00007ffd8a43b8c8 [ 644.369585][T10570] [ 645.983420][T10607] FAULT_INJECTION: forcing a failure. [ 645.983420][T10607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.011855][T10607] CPU: 0 PID: 10607 Comm: syz.3.1751 Not tainted 6.6.102-syzkaller #0 [ 646.020085][T10607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 646.030273][T10607] Call Trace: [ 646.033575][T10607] [ 646.036517][T10607] dump_stack_lvl+0x16c/0x230 [ 646.041237][T10607] ? show_regs_print_info+0x20/0x20 [ 646.046453][T10607] ? load_image+0x3b0/0x3b0 [ 646.050991][T10607] ? __might_fault+0xaa/0x120 [ 646.055718][T10607] ? __lock_acquire+0x7c80/0x7c80 [ 646.060810][T10607] should_fail_ex+0x39d/0x4d0 [ 646.065547][T10607] _copy_from_iter+0x1d3/0x1290 [ 646.070448][T10607] ? rep_movs_alternative+0x4a/0x90 [ 646.075684][T10607] ? _copy_from_iter+0x248/0x1290 [ 646.080724][T10607] ? __virt_addr_valid+0x18c/0x540 [ 646.085889][T10607] ? __lock_acquire+0x7c80/0x7c80 [ 646.090932][T10607] ? copyout_mc+0x70/0x70 [ 646.095284][T10607] ? copyout_mc+0x70/0x70 [ 646.099627][T10607] ? __virt_addr_valid+0x18c/0x540 [ 646.104756][T10607] ? page_copy_sane+0x16a/0x270 [ 646.109626][T10607] copy_page_from_iter+0x7b/0x100 [ 646.114684][T10607] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 646.120563][T10607] tun_get_user+0x1583/0x3bf0 [ 646.125283][T10607] ? trace_event_raw_event_lock+0x230/0x230 [ 646.131212][T10607] ? aa_file_perm+0x120/0xec0 [ 646.135904][T10607] ? aa_file_perm+0x3e8/0xec0 [ 646.140608][T10607] ? rcu_read_unlock+0xa0/0xa0 [ 646.145394][T10607] ? tun_get+0x1c/0x2e0 [ 646.149570][T10607] ? __lock_acquire+0x7c80/0x7c80 [ 646.154634][T10607] ? tun_get+0x1c/0x2e0 [ 646.158831][T10607] tun_chr_write_iter+0x119/0x200 [ 646.163891][T10607] vfs_write+0x43b/0x940 [ 646.168185][T10607] ? file_end_write+0x250/0x250 [ 646.173076][T10607] ? __fget_files+0x44a/0x4d0 [ 646.177775][T10607] ? __fdget_pos+0x1d8/0x330 [ 646.182393][T10607] ? ksys_write+0x75/0x250 [ 646.186836][T10607] ksys_write+0x147/0x250 [ 646.191199][T10607] ? __ia32_sys_read+0x90/0x90 [ 646.195996][T10607] ? lockdep_hardirqs_on+0x98/0x150 [ 646.201230][T10607] do_syscall_64+0x55/0xb0 [ 646.205656][T10607] ? clear_bhb_loop+0x40/0x90 [ 646.210365][T10607] ? clear_bhb_loop+0x40/0x90 [ 646.215081][T10607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 646.221036][T10607] RIP: 0033:0x7f6d5938ebe9 [ 646.225494][T10607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.245134][T10607] RSP: 002b:00007f6d5a2e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 646.253565][T10607] RAX: ffffffffffffffda RBX: 00007f6d595b5fa0 RCX: 00007f6d5938ebe9 [ 646.261922][T10607] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 646.269924][T10607] RBP: 00007f6d5a2e6090 R08: 0000000000000000 R09: 0000000000000000 [ 646.277910][T10607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 646.285910][T10607] R13: 00007f6d595b6038 R14: 00007f6d595b5fa0 R15: 00007ffd2f3ba428 [ 646.293919][T10607] [ 647.169338][T10603] tun0: tun_chr_ioctl cmd 1074025694 [ 647.184049][T10614] C: renamed from team_slave_0 (while UP) [ 647.195910][T10614] FAULT_INJECTION: forcing a failure. [ 647.195910][T10614] name failslab, interval 1, probability 0, space 0, times 0 [ 647.227383][T10614] CPU: 0 PID: 10614 Comm: syz.3.1754 Not tainted 6.6.102-syzkaller #0 [ 647.235726][T10614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 647.245818][T10614] Call Trace: [ 647.249123][T10614] [ 647.252098][T10614] dump_stack_lvl+0x16c/0x230 [ 647.256816][T10614] ? show_regs_print_info+0x20/0x20 [ 647.262050][T10614] ? load_image+0x3b0/0x3b0 [ 647.266608][T10614] ? __might_sleep+0xe0/0xe0 [ 647.271243][T10614] ? __lock_acquire+0x7c80/0x7c80 [ 647.276313][T10614] should_fail_ex+0x39d/0x4d0 [ 647.281040][T10614] should_failslab+0x9/0x20 [ 647.285593][T10614] slab_pre_alloc_hook+0x59/0x310 [ 647.290645][T10614] ? kernfs_rename_ns+0x3b1/0x810 [ 647.295779][T10614] ? kernfs_rename_ns+0x3b1/0x810 [ 647.300823][T10614] __kmem_cache_alloc_node+0x53/0x260 [ 647.306225][T10614] ? kernfs_rename_ns+0x3b1/0x810 [ 647.311273][T10614] __kmalloc_node_track_caller+0xa2/0x230 [ 647.317071][T10614] kstrdup+0x3b/0x80 [ 647.320997][T10614] kernfs_rename_ns+0x3b1/0x810 [ 647.325878][T10614] sysfs_rename_dir_ns+0x6d/0x90 [ 647.330842][T10614] kobject_rename+0x3aa/0x500 [ 647.335564][T10614] ? kobject_init_and_add+0x190/0x190 [ 647.340968][T10614] ? sysfs_rename_link_ns+0x17f/0x1b0 [ 647.346360][T10614] device_rename+0x15d/0x1e0 [ 647.350983][T10614] dev_change_name+0x2ee/0x8a0 [ 647.355777][T10614] ? __lock_acquire+0x7c80/0x7c80 [ 647.360830][T10614] ? dev_alloc_name+0x1c0/0x1c0 [ 647.365731][T10614] ? nla_strscpy+0x109/0x160 [ 647.370356][T10614] do_setlink+0xa15/0x3fb0 [ 647.374798][T10614] ? arch_stack_walk+0x160/0x190 [ 647.379771][T10614] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 647.385959][T10614] ? stack_trace_save+0x9c/0xe0 [ 647.390827][T10614] ? stack_trace_snprint+0xf0/0xf0 [ 647.395960][T10614] ? __stack_depot_save+0x1f/0x630 [ 647.401083][T10614] ? __perf_event_task_sched_in+0xf1/0x1460 [ 647.407003][T10614] ? __nla_validate_parse+0x22dc/0x2cd0 [ 647.412568][T10614] ? netlink_rcv_skb+0x216/0x480 [ 647.417517][T10614] ? netlink_unicast+0x751/0x8d0 [ 647.422465][T10614] ? netlink_sendmsg+0x8c1/0xbe0 [ 647.427436][T10614] ? __nla_validate+0x50/0x50 [ 647.432166][T10614] ? validate_linkmsg+0x719/0x910 [ 647.437215][T10614] rtnl_newlink+0x175b/0x2020 [ 647.441936][T10614] ? rtnl_setlink+0x4b0/0x4b0 [ 647.446648][T10614] ? __rwlock_init+0x150/0x150 [ 647.451448][T10614] ? do_raw_spin_unlock+0x121/0x230 [ 647.456677][T10614] ? __mutex_lock+0x95d/0xcc0 [ 647.461384][T10614] ? __mutex_lock+0x4e8/0xcc0 [ 647.466109][T10614] ? rtnl_setlink+0x4b0/0x4b0 [ 647.470807][T10614] rtnetlink_rcv_msg+0x7c7/0xf10 [ 647.475767][T10614] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 647.480900][T10614] ? lockdep_hardirqs_on+0x98/0x150 [ 647.486124][T10614] ? rtnetlink_bind+0x80/0x80 [ 647.490839][T10614] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 647.496939][T10614] ? __dev_queue_xmit+0x245/0x35a0 [ 647.502073][T10614] ? lock_chain_count+0x20/0x20 [ 647.506946][T10614] ? __local_bh_enable_ip+0x12e/0x1c0 [ 647.512338][T10614] ? lockdep_hardirqs_on+0x98/0x150 [ 647.517556][T10614] ? __local_bh_enable_ip+0x12e/0x1c0 [ 647.522958][T10614] ? _local_bh_enable+0xa0/0xa0 [ 647.527843][T10614] ? __dev_queue_xmit+0x245/0x35a0 [ 647.532973][T10614] ? __dev_queue_xmit+0x1449/0x35a0 [ 647.538290][T10614] ? __dev_queue_xmit+0x245/0x35a0 [ 647.543425][T10614] ? ref_tracker_free+0x634/0x7d0 [ 647.548465][T10614] ? __copy_skb_header+0xa7/0x550 [ 647.553520][T10614] netlink_rcv_skb+0x216/0x480 [ 647.558301][T10614] ? rtnetlink_bind+0x80/0x80 [ 647.562999][T10614] ? netlink_ack+0x1110/0x1110 [ 647.567789][T10614] ? __lock_acquire+0x7c80/0x7c80 [ 647.572854][T10614] ? netlink_deliver_tap+0x2e/0x1b0 [ 647.578075][T10614] netlink_unicast+0x751/0x8d0 [ 647.582881][T10614] netlink_sendmsg+0x8c1/0xbe0 [ 647.587669][T10614] ? netlink_getsockopt+0x580/0x580 [ 647.592889][T10614] ? aa_sock_msg_perm+0x94/0x150 [ 647.597851][T10614] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 647.603151][T10614] ? security_socket_sendmsg+0x80/0xa0 [ 647.608623][T10614] ? netlink_getsockopt+0x580/0x580 [ 647.613836][T10614] ____sys_sendmsg+0x5bf/0x950 [ 647.618621][T10614] ? __asan_memset+0x22/0x40 [ 647.623224][T10614] ? __sys_sendmsg_sock+0x30/0x30 [ 647.628272][T10614] ? __import_iovec+0x5f2/0x860 [ 647.633153][T10614] ? import_iovec+0x73/0xa0 [ 647.637694][T10614] ___sys_sendmsg+0x220/0x290 [ 647.642404][T10614] ? __sys_sendmsg+0x270/0x270 [ 647.647208][T10614] ? __lock_acquire+0x7c80/0x7c80 [ 647.652294][T10614] __se_sys_sendmsg+0x1a5/0x270 [ 647.657188][T10614] ? __x64_sys_sendmsg+0x80/0x80 [ 647.662159][T10614] ? lockdep_hardirqs_on+0x98/0x150 [ 647.667382][T10614] do_syscall_64+0x55/0xb0 [ 647.671814][T10614] ? clear_bhb_loop+0x40/0x90 [ 647.676501][T10614] ? clear_bhb_loop+0x40/0x90 [ 647.681198][T10614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.687121][T10614] RIP: 0033:0x7f6d5938ebe9 [ 647.691555][T10614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.711177][T10614] RSP: 002b:00007f6d5a2e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.719607][T10614] RAX: ffffffffffffffda RBX: 00007f6d595b5fa0 RCX: 00007f6d5938ebe9 [ 647.727591][T10614] RDX: 0000000020000080 RSI: 0000200000000940 RDI: 0000000000000003 [ 647.735576][T10614] RBP: 00007f6d5a2e6090 R08: 0000000000000000 R09: 0000000000000000 [ 647.743571][T10614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 647.751555][T10614] R13: 00007f6d595b6038 R14: 00007f6d595b5fa0 R15: 00007ffd2f3ba428 [ 647.759556][T10614] [ 647.883291][T10616] netlink: 'syz.1.1755': attribute type 1 has an invalid length. [ 647.908147][T10616] netlink: 'syz.1.1755': attribute type 4 has an invalid length. [ 647.916863][T10616] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1755'. [ 648.072924][T10625] netlink: 'syz.2.1759': attribute type 39 has an invalid length. [ 648.194392][T10630] netlink: 'syz.3.1760': attribute type 28 has an invalid length. [ 648.737440][T10654] tun0: tun_chr_ioctl cmd 1074025694 [ 648.833009][T10657] syzkaller0: entered promiscuous mode [ 648.838684][T10657] syzkaller0: entered allmulticast mode [ 648.847916][T10658] netlink: 'syz.4.1773': attribute type 28 has an invalid length. [ 648.867441][ T5890] syzkaller0: tun_net_xmit 48 [ 649.844980][ T5891] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 650.653780][T10665] tun0: tun_chr_ioctl cmd 1074025694 [ 650.666762][T10666] tun0: tun_chr_ioctl cmd 1074025694 [ 650.873438][T10677] C: renamed from team_slave_0 (while UP) [ 650.889583][T10677] netlink: 'syz.3.1778': attribute type 3 has an invalid length. [ 650.907480][T10677] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1778'. [ 650.929611][T10677] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 651.186193][T10685] netlink: 'syz.4.1783': attribute type 28 has an invalid length. [ 651.377374][T10698] tun0: tun_chr_ioctl cmd 1074025694 [ 651.436428][T10703] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1790'. [ 651.460258][T10703] bond_slave_0: entered promiscuous mode [ 651.466349][T10703] bond_slave_1: entered promiscuous mode [ 651.869477][T10711] netlink: 'syz.2.1793': attribute type 29 has an invalid length. [ 651.879352][T10711] netlink: 'syz.2.1793': attribute type 29 has an invalid length. [ 651.919843][T10707] netlink: 'syz.2.1793': attribute type 29 has an invalid length. [ 652.726200][T10729] tun0: tun_chr_ioctl cmd 1074025694 [ 652.734911][T10732] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1803'. [ 652.761275][T10732] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1803'. [ 653.210949][T10746] validate_nla: 4 callbacks suppressed [ 653.210966][T10746] netlink: 'syz.3.1809': attribute type 3 has an invalid length. [ 653.227417][T10746] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1809'. [ 653.641240][T10759] tun0: tun_chr_ioctl cmd 1074025694 [ 653.777643][T10766] netlink: 'syz.1.1819': attribute type 3 has an invalid length. [ 653.789638][T10766] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1819'. [ 653.851146][T10770] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1820'. [ 653.880553][T10770] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1820'. [ 653.890946][T10770] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1820'. [ 653.915636][T10773] FAULT_INJECTION: forcing a failure. [ 653.915636][T10773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.929900][T10773] CPU: 0 PID: 10773 Comm: syz.2.1822 Not tainted 6.6.102-syzkaller #0 [ 653.938114][T10773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 653.948191][T10773] Call Trace: [ 653.951489][T10773] [ 653.954434][T10773] dump_stack_lvl+0x16c/0x230 [ 653.959139][T10773] ? show_regs_print_info+0x20/0x20 [ 653.964352][T10773] ? load_image+0x3b0/0x3b0 [ 653.968879][T10773] ? __might_fault+0xaa/0x120 [ 653.973572][T10773] ? __lock_acquire+0x7c80/0x7c80 [ 653.978630][T10773] should_fail_ex+0x39d/0x4d0 [ 653.983344][T10773] _copy_from_user+0x2f/0xe0 [ 653.987978][T10773] csum_and_copy_from_iter+0x1ed/0x1450 [ 653.993556][T10773] ? __next_zones_zonelist+0x9d/0x130 [ 653.998982][T10773] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 654.004657][T10773] ? __alloc_pages+0x271/0x460 [ 654.009448][T10773] ? zone_statistics+0x170/0x170 [ 654.014409][T10773] ? rcu_is_watching+0x15/0xb0 [ 654.019196][T10773] ip_generic_getfrag+0x145/0x2d0 [ 654.024254][T10773] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 654.029121][T10773] ? skb_page_frag_refill+0x199/0x310 [ 654.034516][T10773] __ip_append_data+0x1e05/0x3bd0 [ 654.039582][T10773] ? raw_send_hdrinc+0x1240/0x1240 [ 654.044715][T10773] ? ip_setup_cork+0x860/0x860 [ 654.049508][T10773] ? ip_setup_cork+0x530/0x860 [ 654.054298][T10773] ip_append_data+0x10d/0x180 [ 654.058996][T10773] ? raw_send_hdrinc+0x1240/0x1240 [ 654.064121][T10773] raw_sendmsg+0x1420/0x1950 [ 654.068746][T10773] ? compat_raw_ioctl+0x70/0x70 [ 654.073633][T10773] ? aa_sk_perm+0x7fc/0x930 [ 654.078158][T10773] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 654.084592][T10773] ? sock_rps_record_flow+0x19/0x400 [ 654.089901][T10773] ? inet_send_prepare+0x260/0x260 [ 654.095025][T10773] ? inet_sendmsg+0x7c/0x2f0 [ 654.099643][T10773] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 654.104947][T10773] ? security_socket_sendmsg+0x80/0xa0 [ 654.110418][T10773] ? inet_send_prepare+0x260/0x260 [ 654.115541][T10773] ____sys_sendmsg+0x5bf/0x950 [ 654.120331][T10773] ? __asan_memset+0x22/0x40 [ 654.124935][T10773] ? __sys_sendmsg_sock+0x30/0x30 [ 654.129974][T10773] ? __import_iovec+0x5f2/0x860 [ 654.134848][T10773] ? import_iovec+0x73/0xa0 [ 654.139377][T10773] ___sys_sendmsg+0x220/0x290 [ 654.144076][T10773] ? __sys_sendmsg+0x270/0x270 [ 654.148884][T10773] ? __lock_acquire+0x7c80/0x7c80 [ 654.153945][T10773] __se_sys_sendmsg+0x1a5/0x270 [ 654.158817][T10773] ? __x64_sys_sendmsg+0x80/0x80 [ 654.163810][T10773] ? lockdep_hardirqs_on+0x98/0x150 [ 654.169142][T10773] do_syscall_64+0x55/0xb0 [ 654.173596][T10773] ? clear_bhb_loop+0x40/0x90 [ 654.178307][T10773] ? clear_bhb_loop+0x40/0x90 [ 654.183007][T10773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 654.188931][T10773] RIP: 0033:0x7fdac818ebe9 [ 654.193366][T10773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.212984][T10773] RSP: 002b:00007fdac8f68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.221413][T10773] RAX: ffffffffffffffda RBX: 00007fdac83b5fa0 RCX: 00007fdac818ebe9 [ 654.229396][T10773] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 0000000000000003 [ 654.237549][T10773] RBP: 00007fdac8f68090 R08: 0000000000000000 R09: 0000000000000000 [ 654.245525][T10773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 654.253514][T10773] R13: 00007fdac83b6038 R14: 00007fdac83b5fa0 R15: 00007ffc55d04128 [ 654.261507][T10773] [ 654.523498][ T50] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 654.798895][T10795] tun0: tun_chr_ioctl cmd 1074025694 [ 654.904320][T10797] netlink: 'syz.4.1831': attribute type 3 has an invalid length. [ 654.916769][T10797] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1831'. [ 655.459635][T10824] tun0: tun_chr_ioctl cmd 1074025694 [ 655.515812][T10826] netlink: 'syz.4.1845': attribute type 3 has an invalid length. [ 656.005183][T10848] netlink: 'syz.2.1851': attribute type 28 has an invalid length. [ 656.262308][T10856] FAULT_INJECTION: forcing a failure. [ 656.262308][T10856] name failslab, interval 1, probability 0, space 0, times 0 [ 656.291930][T10856] CPU: 1 PID: 10856 Comm: syz.2.1857 Not tainted 6.6.102-syzkaller #0 [ 656.300212][T10856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 656.310335][T10856] Call Trace: [ 656.313642][T10856] [ 656.316603][T10856] dump_stack_lvl+0x16c/0x230 [ 656.321327][T10856] ? show_regs_print_info+0x20/0x20 [ 656.326564][T10856] ? load_image+0x3b0/0x3b0 [ 656.331156][T10856] ? __might_sleep+0xe0/0xe0 [ 656.335805][T10856] ? __lock_acquire+0x7c80/0x7c80 [ 656.340904][T10856] should_fail_ex+0x39d/0x4d0 [ 656.345647][T10856] should_failslab+0x9/0x20 [ 656.350217][T10856] slab_pre_alloc_hook+0x59/0x310 [ 656.355324][T10856] ? __lock_acquire+0x7c80/0x7c80 [ 656.360402][T10856] kmem_cache_alloc_node+0x60/0x330 [ 656.365650][T10856] ? __alloc_skb+0x108/0x2c0 [ 656.370346][T10856] __alloc_skb+0x108/0x2c0 [ 656.374814][T10856] netlink_sendmsg+0x65b/0xbe0 [ 656.379665][T10856] ? netlink_getsockopt+0x580/0x580 [ 656.384913][T10856] ? aa_sock_msg_perm+0x94/0x150 [ 656.389893][T10856] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 656.395213][T10856] ? security_socket_sendmsg+0x80/0xa0 [ 656.400731][T10856] ? netlink_getsockopt+0x580/0x580 [ 656.406004][T10856] ____sys_sendmsg+0x5bf/0x950 [ 656.411034][T10856] ? __asan_memset+0x22/0x40 [ 656.415706][T10856] ? __sys_sendmsg_sock+0x30/0x30 [ 656.420779][T10856] ? __import_iovec+0x5f2/0x860 [ 656.425740][T10856] ? import_iovec+0x73/0xa0 [ 656.430318][T10856] ___sys_sendmsg+0x220/0x290 [ 656.435054][T10856] ? __sys_sendmsg+0x270/0x270 [ 656.439975][T10856] ? __lock_acquire+0x7c80/0x7c80 [ 656.445113][T10856] __se_sys_sendmsg+0x1a5/0x270 [ 656.450032][T10856] ? __x64_sys_sendmsg+0x80/0x80 [ 656.455057][T10856] ? lockdep_hardirqs_on+0x98/0x150 [ 656.460403][T10856] do_syscall_64+0x55/0xb0 [ 656.464886][T10856] ? clear_bhb_loop+0x40/0x90 [ 656.469613][T10856] ? clear_bhb_loop+0x40/0x90 [ 656.474350][T10856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 656.480337][T10856] RIP: 0033:0x7fdac818ebe9 [ 656.484805][T10856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.504460][T10856] RSP: 002b:00007fdac8f68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.512935][T10856] RAX: ffffffffffffffda RBX: 00007fdac83b5fa0 RCX: 00007fdac818ebe9 [ 656.520943][T10856] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005 [ 656.528968][T10856] RBP: 00007fdac8f68090 R08: 0000000000000000 R09: 0000000000000000 [ 656.536979][T10856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.544985][T10856] R13: 00007fdac83b6038 R14: 00007fdac83b5fa0 R15: 00007ffc55d04128 [ 656.553031][T10856] [ 656.661471][T10858] netlink: 'syz.1.1858': attribute type 21 has an invalid length. [ 656.669647][T10858] __nla_validate_parse: 1 callbacks suppressed [ 656.669665][T10858] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1858'. [ 656.711864][T10858] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1858'. [ 656.870000][T10866] tun0: tun_chr_ioctl cmd 1074025694 [ 657.112927][T10883] C: renamed from team_slave_0 (while UP) [ 657.136864][T10883] netlink: 'syz.4.1868': attribute type 4 has an invalid length. [ 657.147971][T10883] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1868'. [ 657.165497][T10883] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 657.198547][T10883] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1868'. [ 657.458125][T10902] tun0: tun_chr_ioctl cmd 1074025694 [ 657.780091][T10909] netlink: 'syz.4.1879': attribute type 3 has an invalid length. [ 657.785653][T10910] netlink: 'syz.2.1880': attribute type 3 has an invalid length. [ 657.805663][T10909] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1879'. [ 657.829829][T10910] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.1880'. [ 659.327510][T10926] netlink: 'syz.4.1883': attribute type 29 has an invalid length. [ 659.400498][T10926] netlink: 'syz.4.1883': attribute type 29 has an invalid length. [ 659.934540][T10926] netlink: 'syz.4.1883': attribute type 29 has an invalid length. [ 660.038468][T10928] netlink: 'syz.4.1883': attribute type 29 has an invalid length. [ 661.019535][T10945] netlink: 'syz.2.1891': attribute type 39 has an invalid length. [ 661.257799][T10958] FAULT_INJECTION: forcing a failure. [ 661.257799][T10958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.281012][T10958] CPU: 0 PID: 10958 Comm: syz.2.1895 Not tainted 6.6.102-syzkaller #0 [ 661.289349][T10958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 661.299465][T10958] Call Trace: [ 661.302795][T10958] [ 661.305774][T10958] dump_stack_lvl+0x16c/0x230 [ 661.310526][T10958] ? show_regs_print_info+0x20/0x20 [ 661.315779][T10958] ? load_image+0x3b0/0x3b0 [ 661.320351][T10958] ? __lock_acquire+0x7c80/0x7c80 [ 661.325450][T10958] should_fail_ex+0x39d/0x4d0 [ 661.330209][T10958] _copy_from_user+0x2f/0xe0 [ 661.334870][T10958] __copy_msghdr+0x3bb/0x580 [ 661.339542][T10958] ___sys_sendmsg+0x1a6/0x290 [ 661.344287][T10958] ? __sys_sendmsg+0x270/0x270 [ 661.349112][T10958] ? __lock_acquire+0x7c80/0x7c80 [ 661.354319][T10958] __se_sys_sendmsg+0x1a5/0x270 [ 661.359201][T10958] ? __x64_sys_sendmsg+0x80/0x80 [ 661.364211][T10958] ? lockdep_hardirqs_on+0x98/0x150 [ 661.369444][T10958] do_syscall_64+0x55/0xb0 [ 661.373898][T10958] ? clear_bhb_loop+0x40/0x90 [ 661.378618][T10958] ? clear_bhb_loop+0x40/0x90 [ 661.383337][T10958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 661.389282][T10958] RIP: 0033:0x7fdac818ebe9 [ 661.393723][T10958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.413361][T10958] RSP: 002b:00007fdac8f68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.421813][T10958] RAX: ffffffffffffffda RBX: 00007fdac83b5fa0 RCX: 00007fdac818ebe9 [ 661.429844][T10958] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 661.437836][T10958] RBP: 00007fdac8f68090 R08: 0000000000000000 R09: 0000000000000000 [ 661.445829][T10958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.453825][T10958] R13: 00007fdac83b6038 R14: 00007fdac83b5fa0 R15: 00007ffc55d04128 [ 661.461842][T10958] [ 661.903177][T10975] netlink: 'syz.2.1902': attribute type 3 has an invalid length. [ 661.917640][T10975] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1902'. [ 663.425990][T10987] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1905'. [ 664.164296][T11012] netlink: 'syz.1.1914': attribute type 10 has an invalid length. [ 664.541338][T11017] netlink: 'syz.3.1916': attribute type 3 has an invalid length. [ 664.560912][T11017] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1916'. [ 664.788206][T11026] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1920'. [ 665.661067][T11046] netlink: 'syz.1.1929': attribute type 3 has an invalid length. [ 665.668885][T11046] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1929'. [ 667.356057][T11104] netlink: 'syz.1.1954': attribute type 7 has an invalid length. [ 667.386264][T11104] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1954'. [ 667.581137][T11109] tun0: tun_chr_ioctl cmd 1074025694 [ 668.134375][T11126] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1964'. [ 668.179386][T11129] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1966'. [ 668.234945][T11123] bond0: entered promiscuous mode [ 668.241375][T11123] bond_slave_0: entered promiscuous mode [ 668.247380][T11123] bond_slave_1: entered promiscuous mode [ 668.271532][T11123] macvlan0: entered promiscuous mode [ 668.385174][T11133] tun0: tun_chr_ioctl cmd 1074025694 [ 668.836562][T11142] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1971'. [ 668.928726][T11149] netlink: 'syz.3.1972': attribute type 21 has an invalid length. [ 668.971585][T11151] netlink: 'syz.4.1974': attribute type 10 has an invalid length. [ 668.994451][T11151] batman_adv: batadv0: Adding interface: wlan0 [ 669.010344][T11151] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.037355][T11151] batman_adv: batadv0: Interface activated: wlan0 [ 669.178719][T11151] netlink: 'syz.4.1974': attribute type 29 has an invalid length. [ 669.197746][T11151] netlink: 'syz.4.1974': attribute type 29 has an invalid length. [ 670.416806][T11193] netlink: 'syz.4.1987': attribute type 21 has an invalid length. [ 670.439950][T11193] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1987'. [ 670.506531][T11193] netlink: 'syz.4.1987': attribute type 5 has an invalid length. [ 670.529452][T11193] netlink: 'syz.4.1987': attribute type 6 has an invalid length. [ 670.537359][T11193] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1987'. [ 670.561224][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1987'. [ 670.579897][T11196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1987'. [ 670.588812][T11196] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1987'. [ 670.611785][T11196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1987'. [ 672.320567][T11242] netlink: 'syz.3.2005': attribute type 2 has an invalid length. [ 672.350304][T11245] netlink: 'syz.1.2002': attribute type 33 has an invalid length. [ 672.404983][T11242] __nla_validate_parse: 1 callbacks suppressed [ 672.405002][T11242] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2005'. [ 673.147747][T11259] netlink: 'syz.1.2011': attribute type 21 has an invalid length. [ 673.166752][T11259] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2011'. [ 673.200511][T11259] netlink: 'syz.1.2011': attribute type 5 has an invalid length. [ 673.220733][T11259] netlink: 'syz.1.2011': attribute type 6 has an invalid length. [ 673.270711][T11259] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2011'. [ 673.386893][T11263] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2012'. [ 676.934781][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2011'. [ 676.944144][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2011'. [ 676.953225][T11261] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2011'. [ 676.963871][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2011'. [ 676.973137][T11261] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2011'. [ 676.990152][T11274] tun0: tun_chr_ioctl cmd 1074025694 [ 677.028796][T11278] bond0: entered promiscuous mode [ 677.036106][T11278] bond_slave_0: entered promiscuous mode [ 677.047690][T11278] bond_slave_1: entered promiscuous mode [ 677.053641][T11278] macvlan0: entered promiscuous mode [ 677.272914][T11283] netlink: 'syz.2.2019': attribute type 21 has an invalid length. [ 677.573481][T11301] netlink: 'syz.3.2027': attribute type 21 has an invalid length. [ 677.589110][T11301] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2027'. [ 677.614646][T11301] netlink: 'syz.3.2027': attribute type 5 has an invalid length. [ 677.623730][T11301] netlink: 'syz.3.2027': attribute type 6 has an invalid length. [ 677.632961][T11301] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2027'. [ 677.648566][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2027'. [ 677.658734][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2027'. [ 677.668647][T11305] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2027'. [ 677.679403][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2027'. [ 677.688743][T11305] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2027'. [ 677.716356][T11306] tun0: tun_chr_ioctl cmd 1074025694 [ 677.769454][ T50] Bluetooth: hci4: unexpected event 0x14 length: 15 > 6 [ 678.298404][T11329] tun0: tun_chr_ioctl cmd 1074025694 [ 678.520279][T11339] netlink: 'syz.1.2042': attribute type 4 has an invalid length. [ 678.799869][T11349] netlink: 'syz.2.2046': attribute type 21 has an invalid length. [ 678.829969][T11349] netlink: 'syz.2.2046': attribute type 4 has an invalid length. [ 678.840509][T11349] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2046'. [ 679.045642][T11357] tun0: tun_chr_ioctl cmd 1074025694 [ 679.595225][T11372] netlink: 'syz.1.2057': attribute type 4 has an invalid length. [ 679.610351][T11372] FAULT_INJECTION: forcing a failure. [ 679.610351][T11372] name failslab, interval 1, probability 0, space 0, times 0 [ 679.642254][T11372] CPU: 1 PID: 11372 Comm: syz.1.2057 Not tainted 6.6.102-syzkaller #0 [ 679.650515][T11372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 679.660608][T11372] Call Trace: [ 679.663916][T11372] [ 679.666921][T11372] dump_stack_lvl+0x16c/0x230 [ 679.671647][T11372] ? show_regs_print_info+0x20/0x20 [ 679.676921][T11372] ? load_image+0x3b0/0x3b0 [ 679.681477][T11372] ? __lock_acquire+0x7c80/0x7c80 [ 679.686547][T11372] ? load_image+0x3b0/0x3b0 [ 679.691102][T11372] should_fail_ex+0x39d/0x4d0 [ 679.695842][T11372] should_failslab+0x9/0x20 [ 679.700397][T11372] slab_pre_alloc_hook+0x59/0x310 [ 679.705458][T11372] ? __nla_validate_parse+0x22dc/0x2cd0 [ 679.711138][T11372] ? fib_create_info+0xa61/0x2460 [ 679.716203][T11372] ? fib_create_info+0xa61/0x2460 [ 679.721274][T11372] __kmem_cache_alloc_node+0x53/0x260 [ 679.726713][T11372] ? fib_create_info+0xa61/0x2460 [ 679.731787][T11372] __kmalloc+0xa4/0x240 [ 679.735984][T11372] fib_create_info+0xa61/0x2460 [ 679.740900][T11372] fib_table_insert+0xc7/0x1b50 [ 679.745785][T11372] ? lwtunnel_valid_encap_type_attr+0x220/0x290 [ 679.752061][T11372] ? rtm_to_fib_config+0x1074/0x13b0 [ 679.757394][T11372] inet_rtm_newroute+0x127/0x200 [ 679.762353][T11372] ? rcu_read_unlock+0xa0/0xa0 [ 679.767148][T11372] ? rcu_read_unlock+0xa0/0xa0 [ 679.771928][T11372] rtnetlink_rcv_msg+0x7c7/0xf10 [ 679.776887][T11372] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 679.782020][T11372] ? rtnetlink_bind+0x80/0x80 [ 679.786718][T11372] ? mark_lock+0x94/0x320 [ 679.791096][T11372] ? __lock_acquire+0x1260/0x7c80 [ 679.796131][T11372] ? __kernel_text_address+0xd/0x30 [ 679.801349][T11372] ? mark_lock+0x94/0x320 [ 679.805693][T11372] ? mark_lock+0x94/0x320 [ 679.810041][T11372] ? __lock_acquire+0x1260/0x7c80 [ 679.815093][T11372] ? kmalloc_reserve+0x95/0x260 [ 679.819978][T11372] ? verify_lock_unused+0x140/0x140 [ 679.825201][T11372] netlink_rcv_skb+0x216/0x480 [ 679.830005][T11372] ? rtnetlink_bind+0x80/0x80 [ 679.834707][T11372] ? netlink_ack+0x1110/0x1110 [ 679.839496][T11372] ? __lock_acquire+0x7c80/0x7c80 [ 679.844533][T11372] ? net_generic+0x1e/0x240 [ 679.849147][T11372] ? netlink_deliver_tap+0x2e/0x1b0 [ 679.854370][T11372] netlink_unicast+0x751/0x8d0 [ 679.859161][T11372] netlink_sendmsg+0x8c1/0xbe0 [ 679.863954][T11372] ? netlink_getsockopt+0x580/0x580 [ 679.869173][T11372] ? aa_sock_msg_perm+0x94/0x150 [ 679.874125][T11372] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 679.879444][T11372] ? security_socket_sendmsg+0x80/0xa0 [ 679.884937][T11372] ? netlink_getsockopt+0x580/0x580 [ 679.890152][T11372] ____sys_sendmsg+0x5bf/0x950 [ 679.894946][T11372] ? __asan_memset+0x22/0x40 [ 679.899552][T11372] ? __sys_sendmsg_sock+0x30/0x30 [ 679.904593][T11372] ? __import_iovec+0x5f2/0x860 [ 679.909470][T11372] ? import_iovec+0x73/0xa0 [ 679.913997][T11372] ___sys_sendmsg+0x220/0x290 [ 679.918700][T11372] ? __sys_sendmsg+0x270/0x270 [ 679.923508][T11372] ? __lock_acquire+0x7c80/0x7c80 [ 679.928601][T11372] __se_sys_sendmsg+0x1a5/0x270 [ 679.933478][T11372] ? __x64_sys_sendmsg+0x80/0x80 [ 679.938447][T11372] ? lockdep_hardirqs_on+0x98/0x150 [ 679.943676][T11372] do_syscall_64+0x55/0xb0 [ 679.948112][T11372] ? clear_bhb_loop+0x40/0x90 [ 679.952801][T11372] ? clear_bhb_loop+0x40/0x90 [ 679.957495][T11372] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 679.963413][T11372] RIP: 0033:0x7f183d18ebe9 [ 679.967847][T11372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.987505][T11372] RSP: 002b:00007f183b3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.995950][T11372] RAX: ffffffffffffffda RBX: 00007f183d3b5fa0 RCX: 00007f183d18ebe9 [ 680.003944][T11372] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 680.011930][T11372] RBP: 00007f183b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 680.019912][T11372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.027895][T11372] R13: 00007f183d3b6038 R14: 00007f183d3b5fa0 R15: 00007ffd8a43b8c8 [ 680.035911][T11372] [ 680.102685][T11378] tun0: tun_chr_ioctl cmd 1074025694 [ 680.185826][T11382] netlink: 'syz.1.2060': attribute type 2 has an invalid length. [ 680.197957][T11382] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2060'. [ 680.346203][T11387] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.2062'. [ 680.770131][ T6012] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 681.012365][T11405] tun0: tun_chr_ioctl cmd 1074025694 [ 682.023454][T11440] tun0: tun_chr_ioctl cmd 1074025694 [ 682.338025][T11442] FAULT_INJECTION: forcing a failure. [ 682.338025][T11442] name failslab, interval 1, probability 0, space 0, times 0 [ 682.351567][T11442] CPU: 1 PID: 11442 Comm: syz.3.2085 Not tainted 6.6.102-syzkaller #0 [ 682.359790][T11442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 682.369908][T11442] Call Trace: [ 682.373253][T11442] [ 682.376237][T11442] dump_stack_lvl+0x16c/0x230 [ 682.380991][T11442] ? trace_event_raw_event_lock+0x230/0x230 [ 682.386958][T11442] ? show_regs_print_info+0x20/0x20 [ 682.392215][T11442] ? load_image+0x3b0/0x3b0 [ 682.396898][T11442] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 682.402532][T11442] should_fail_ex+0x39d/0x4d0 [ 682.407284][T11442] should_failslab+0x9/0x20 [ 682.411858][T11442] slab_pre_alloc_hook+0x59/0x310 [ 682.416969][T11442] kmem_cache_alloc_node+0x60/0x330 [ 682.422227][T11442] ? __alloc_skb+0x108/0x2c0 [ 682.426881][T11442] __alloc_skb+0x108/0x2c0 [ 682.431372][T11442] skb_copy+0x13d/0x7a0 [ 682.435581][T11442] ? __rwlock_init+0x150/0x150 [ 682.440399][T11442] ? read_tsc+0x9/0x20 [ 682.444536][T11442] mac80211_hwsim_tx_frame_no_nl+0xc81/0x1170 [ 682.450694][T11442] ? mac80211_hwsim_tx_frame_nl+0xc90/0xc90 [ 682.456627][T11442] ? lockdep_hardirqs_on+0x98/0x150 [ 682.461933][T11442] mac80211_hwsim_tx+0x184a/0x2570 [ 682.467156][T11442] ieee80211_handle_wake_tx_queue+0x18c/0x2a0 [ 682.473291][T11442] ? ieee80211_ctstoself_duration+0x460/0x460 [ 682.479405][T11442] ? __local_bh_enable_ip+0x12e/0x1c0 [ 682.484825][T11442] ? _local_bh_enable+0xa0/0xa0 [ 682.489722][T11442] ? do_raw_spin_unlock+0x121/0x230 [ 682.494984][T11442] ieee80211_queue_skb+0x1a11/0x2140 [ 682.500392][T11442] ieee80211_tx+0x298/0x420 [ 682.504962][T11442] ? ieee80211_skb_resize+0x630/0x630 [ 682.510434][T11442] ? ieee80211_xmit+0x310/0x3f0 [ 682.515372][T11442] __ieee80211_subif_start_xmit+0xdd8/0x14c0 [ 682.521435][T11442] ? __ieee80211_subif_start_xmit+0x2b1/0x14c0 [ 682.527653][T11442] ? ieee80211_txq_schedule_start+0x310/0x310 [ 682.533778][T11442] ? packet_rcv+0x16b/0x13d0 [ 682.538418][T11442] ? kmem_cache_free+0xf8/0x280 [ 682.543324][T11442] ? ieee80211_multicast_to_unicast+0x19c/0x310 [ 682.549633][T11442] ieee80211_subif_start_xmit+0xe1/0x500 [ 682.555328][T11442] ? ieee80211_build_hdr+0x2610/0x2610 [ 682.560840][T11442] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 682.566011][T11442] ? __lock_acquire+0x7c80/0x7c80 [ 682.571078][T11442] ? dev_queue_xmit_nit+0xa84/0xbb0 [ 682.576360][T11442] dev_hard_start_xmit+0x246/0x740 [ 682.581555][T11442] __dev_queue_xmit+0x1a64/0x35a0 [ 682.586642][T11442] ? __might_fault+0xc6/0x120 [ 682.591378][T11442] ? __virt_addr_valid+0x18c/0x540 [ 682.596552][T11442] ? __dev_queue_xmit+0x245/0x35a0 [ 682.601709][T11442] ? sock_alloc_send_pskb+0x875/0x990 [ 682.607144][T11442] ? netdev_core_pick_tx+0x340/0x340 [ 682.612470][T11442] ? packet_parse_headers+0x7c8/0xad0 [ 682.617900][T11442] ? packet_parse_headers+0x868/0xad0 [ 682.623321][T11442] ? __virt_addr_valid+0x18c/0x540 [ 682.628502][T11442] ? __check_object_size+0x506/0xa30 [ 682.633849][T11442] ? skb_setup_tx_timestamp+0x1e0/0x1e0 [ 682.639456][T11442] ? skb_copy_datagram_from_iter+0x5f6/0x6e0 [ 682.645493][T11442] ? packet_xmit+0x66/0x330 [ 682.650041][T11442] ? packet_sendmsg+0x3a04/0x4d30 [ 682.655116][T11442] packet_sendmsg+0x3b47/0x4d30 [ 682.660081][T11442] ? __might_sleep+0xe0/0xe0 [ 682.664721][T11442] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 682.670521][T11442] ? perf_trace_lock+0x2ed/0x380 [ 682.675523][T11442] ? aa_sk_perm+0x7fc/0x930 [ 682.680079][T11442] ? packet_getsockopt+0xa20/0xa20 [ 682.685262][T11442] ? aa_sock_msg_perm+0x94/0x150 [ 682.690254][T11442] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 682.695603][T11442] ? security_socket_sendmsg+0x80/0xa0 [ 682.701105][T11442] ? packet_getsockopt+0xa20/0xa20 [ 682.706284][T11442] ____sys_sendmsg+0x5bf/0x950 [ 682.711121][T11442] ? __asan_memset+0x22/0x40 [ 682.715769][T11442] ? __sys_sendmsg_sock+0x30/0x30 [ 682.720842][T11442] ? __import_iovec+0x5f2/0x860 [ 682.725772][T11442] ? import_iovec+0x73/0xa0 [ 682.730344][T11442] ___sys_sendmsg+0x220/0x290 [ 682.735086][T11442] ? __sys_sendmsg+0x270/0x270 [ 682.739960][T11442] ? __lock_acquire+0x7c80/0x7c80 [ 682.745089][T11442] __se_sys_sendmsg+0x1a5/0x270 [ 682.750000][T11442] ? __x64_sys_sendmsg+0x80/0x80 [ 682.755032][T11442] ? trace_sys_enter+0x1f/0x80 [ 682.759848][T11442] do_syscall_64+0x55/0xb0 [ 682.764303][T11442] ? clear_bhb_loop+0x40/0x90 [ 682.769021][T11442] ? clear_bhb_loop+0x40/0x90 [ 682.773749][T11442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 682.779694][T11442] RIP: 0033:0x7f6d5938ebe9 [ 682.784159][T11442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.803813][T11442] RSP: 002b:00007f6d5a2e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.812288][T11442] RAX: ffffffffffffffda RBX: 00007f6d595b5fa0 RCX: 00007f6d5938ebe9 [ 682.820311][T11442] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 682.828319][T11442] RBP: 00007f6d5a2e6090 R08: 0000000000000000 R09: 0000000000000000 [ 682.836330][T11442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.844341][T11442] R13: 00007f6d595b6038 R14: 00007f6d595b5fa0 R15: 00007ffd2f3ba428 [ 682.852396][T11442] [ 683.020813][T11450] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2087'. [ 683.857036][T11475] netlink: 'syz.1.2097': attribute type 21 has an invalid length. [ 684.068276][T11483] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2098'. [ 684.088021][T11483] FAULT_INJECTION: forcing a failure. [ 684.088021][T11483] name failslab, interval 1, probability 0, space 0, times 0 [ 684.138987][T11483] CPU: 0 PID: 11483 Comm: syz.2.2098 Not tainted 6.6.102-syzkaller #0 [ 684.147248][T11483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 684.157379][T11483] Call Trace: [ 684.160721][T11483] [ 684.163732][T11483] dump_stack_lvl+0x16c/0x230 [ 684.168510][T11483] ? show_regs_print_info+0x20/0x20 [ 684.173787][T11483] ? load_image+0x3b0/0x3b0 [ 684.178428][T11483] ? __might_sleep+0xe0/0xe0 [ 684.183098][T11483] ? __lock_acquire+0x7c80/0x7c80 [ 684.188236][T11483] should_fail_ex+0x39d/0x4d0 [ 684.193041][T11483] should_failslab+0x9/0x20 [ 684.197626][T11483] slab_pre_alloc_hook+0x59/0x310 [ 684.202751][T11483] kmem_cache_alloc_node+0x60/0x330 [ 684.208047][T11483] ? __alloc_skb+0x108/0x2c0 [ 684.212708][T11483] __alloc_skb+0x108/0x2c0 [ 684.217193][T11483] netlink_ack+0x376/0x1110 [ 684.221751][T11483] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 684.227913][T11483] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 684.233792][T11483] ? netlink_dump+0xde0/0xde0 [ 684.238529][T11483] ? perf_trace_lock+0x2ed/0x380 [ 684.243539][T11483] ? __copy_skb_header+0xa7/0x550 [ 684.248661][T11483] netlink_rcv_skb+0x29a/0x480 [ 684.253503][T11483] ? rtnetlink_bind+0x80/0x80 [ 684.258246][T11483] ? netlink_ack+0x1110/0x1110 [ 684.263101][T11483] ? __lock_acquire+0x7c80/0x7c80 [ 684.268201][T11483] ? netlink_deliver_tap+0x2e/0x1b0 [ 684.273459][T11483] netlink_unicast+0x751/0x8d0 [ 684.278314][T11483] netlink_sendmsg+0x8c1/0xbe0 [ 684.283164][T11483] ? netlink_getsockopt+0x580/0x580 [ 684.288443][T11483] ? aa_sock_msg_perm+0x94/0x150 [ 684.293500][T11483] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 684.298837][T11483] ? security_socket_sendmsg+0x80/0xa0 [ 684.304339][T11483] ? netlink_getsockopt+0x580/0x580 [ 684.309607][T11483] ____sys_sendmsg+0x5bf/0x950 [ 684.314450][T11483] ? __asan_memset+0x22/0x40 [ 684.319103][T11483] ? __sys_sendmsg_sock+0x30/0x30 [ 684.324191][T11483] ? __import_iovec+0x5f2/0x860 [ 684.329141][T11483] ? import_iovec+0x73/0xa0 [ 684.333715][T11483] ___sys_sendmsg+0x220/0x290 [ 684.338466][T11483] ? __sys_sendmsg+0x270/0x270 [ 684.343380][T11483] ? __lock_acquire+0x7c80/0x7c80 [ 684.348532][T11483] __se_sys_sendmsg+0x1a5/0x270 [ 684.353441][T11483] ? __x64_sys_sendmsg+0x80/0x80 [ 684.358500][T11483] ? lockdep_hardirqs_on+0x98/0x150 [ 684.363794][T11483] do_syscall_64+0x55/0xb0 [ 684.368274][T11483] ? clear_bhb_loop+0x40/0x90 [ 684.372995][T11483] ? clear_bhb_loop+0x40/0x90 [ 684.377730][T11483] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 684.383701][T11483] RIP: 0033:0x7fdac818ebe9 [ 684.388173][T11483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.407839][T11483] RSP: 002b:00007fdac8f68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 684.416324][T11483] RAX: ffffffffffffffda RBX: 00007fdac83b5fa0 RCX: 00007fdac818ebe9 [ 684.424353][T11483] RDX: 0000000004040c04 RSI: 0000200000000080 RDI: 0000000000000003 [ 684.432426][T11483] RBP: 00007fdac8f68090 R08: 0000000000000000 R09: 0000000000000000 [ 684.440459][T11483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.448495][T11483] R13: 00007fdac83b6038 R14: 00007fdac83b5fa0 R15: 00007ffc55d04128 [ 684.456574][T11483] [ 686.036354][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.043713][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.207995][T11524] netlink: 'syz.1.2111': attribute type 40 has an invalid length. [ 688.608047][T11530] netlink: 'syz.3.2114': attribute type 21 has an invalid length. [ 689.055890][T11549] netlink: 'syz.1.2120': attribute type 29 has an invalid length. [ 689.095885][T11549] netlink: 'syz.1.2120': attribute type 29 has an invalid length. [ 689.117375][T11550] netlink: 'syz.1.2120': attribute type 29 has an invalid length. [ 690.913394][T11576] FAULT_INJECTION: forcing a failure. [ 690.913394][T11576] name failslab, interval 1, probability 0, space 0, times 0 [ 690.928287][T11576] CPU: 0 PID: 11576 Comm: syz.3.2131 Not tainted 6.6.102-syzkaller #0 [ 690.936535][T11576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 690.946643][T11576] Call Trace: [ 690.949955][T11576] [ 690.952916][T11576] dump_stack_lvl+0x16c/0x230 [ 690.957635][T11576] ? show_regs_print_info+0x20/0x20 [ 690.962872][T11576] ? load_image+0x3b0/0x3b0 [ 690.967432][T11576] ? __might_sleep+0xe0/0xe0 [ 690.972068][T11576] ? __lock_acquire+0x7c80/0x7c80 [ 690.977148][T11576] should_fail_ex+0x39d/0x4d0 [ 690.981879][T11576] should_failslab+0x9/0x20 [ 690.986438][T11576] slab_pre_alloc_hook+0x59/0x310 [ 690.991509][T11576] ? __lock_acquire+0x7c80/0x7c80 [ 690.996572][T11576] kmem_cache_alloc_node+0x60/0x330 [ 691.001901][T11576] ? __alloc_skb+0x108/0x2c0 [ 691.006560][T11576] __alloc_skb+0x108/0x2c0 [ 691.011031][T11576] netlink_sendmsg+0x65b/0xbe0 [ 691.015867][T11576] ? netlink_getsockopt+0x580/0x580 [ 691.021110][T11576] ? aa_sock_msg_perm+0x94/0x150 [ 691.026091][T11576] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 691.031415][T11576] ? security_socket_sendmsg+0x80/0xa0 [ 691.036910][T11576] ? netlink_getsockopt+0x580/0x580 [ 691.042146][T11576] ____sys_sendmsg+0x5bf/0x950 [ 691.046971][T11576] ? __asan_memset+0x22/0x40 [ 691.051597][T11576] ? __sys_sendmsg_sock+0x30/0x30 [ 691.056666][T11576] ? __import_iovec+0x5f2/0x860 [ 691.061573][T11576] ? import_iovec+0x73/0xa0 [ 691.066123][T11576] ___sys_sendmsg+0x220/0x290 [ 691.070843][T11576] ? __sys_sendmsg+0x270/0x270 [ 691.075722][T11576] ? __lock_acquire+0x7c80/0x7c80 [ 691.080850][T11576] __se_sys_sendmsg+0x1a5/0x270 [ 691.085837][T11576] ? __x64_sys_sendmsg+0x80/0x80 [ 691.090859][T11576] ? lockdep_hardirqs_on+0x98/0x150 [ 691.096109][T11576] do_syscall_64+0x55/0xb0 [ 691.100567][T11576] ? clear_bhb_loop+0x40/0x90 [ 691.105284][T11576] ? clear_bhb_loop+0x40/0x90 [ 691.109998][T11576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 691.115955][T11576] RIP: 0033:0x7f6d5938ebe9 [ 691.120472][T11576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.140310][T11576] RSP: 002b:00007f6d5a2e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 691.148792][T11576] RAX: ffffffffffffffda RBX: 00007f6d595b5fa0 RCX: 00007f6d5938ebe9 [ 691.156813][T11576] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 691.164838][T11576] RBP: 00007f6d5a2e6090 R08: 0000000000000000 R09: 0000000000000000 [ 691.172856][T11576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.180867][T11576] R13: 00007f6d595b6038 R14: 00007f6d595b5fa0 R15: 00007ffd2f3ba428 [ 691.188917][T11576] [ 693.192258][T11584] netlink: 'syz.1.2133': attribute type 21 has an invalid length. [ 693.515531][T11596] netlink: 'syz.4.2140': attribute type 29 has an invalid length. [ 693.525659][T11596] netlink: 'syz.4.2140': attribute type 29 has an invalid length. [ 693.545182][T11596] netlink: 'syz.4.2140': attribute type 29 has an invalid length. [ 693.756132][T11608] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2146'. [ 694.019256][T11622] FAULT_INJECTION: forcing a failure. [ 694.019256][T11622] name failslab, interval 1, probability 0, space 0, times 0 [ 694.044256][T11622] CPU: 1 PID: 11622 Comm: syz.3.2152 Not tainted 6.6.102-syzkaller #0 [ 694.052484][T11622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 694.062584][T11622] Call Trace: [ 694.065898][T11622] [ 694.068868][T11622] dump_stack_lvl+0x16c/0x230 [ 694.073662][T11622] ? show_regs_print_info+0x20/0x20 [ 694.078907][T11622] ? load_image+0x3b0/0x3b0 [ 694.083477][T11622] ? __might_sleep+0xe0/0xe0 [ 694.088139][T11622] ? __lock_acquire+0x7c80/0x7c80 [ 694.093210][T11622] should_fail_ex+0x39d/0x4d0 [ 694.097944][T11622] should_failslab+0x9/0x20 [ 694.102504][T11622] slab_pre_alloc_hook+0x59/0x310 [ 694.107575][T11622] ? genl_family_rcv_msg_doit+0x255/0x2f0 [ 694.113381][T11622] kmem_cache_alloc_node+0x60/0x330 [ 694.118652][T11622] ? __alloc_skb+0x108/0x2c0 [ 694.123294][T11622] __alloc_skb+0x108/0x2c0 [ 694.127772][T11622] netlink_ack+0x376/0x1110 [ 694.132339][T11622] ? genl_rcv_msg+0x60b/0x790 [ 694.137068][T11622] ? genl_bind+0x360/0x360 [ 694.141527][T11622] ? netlink_dump+0xde0/0xde0 [ 694.146253][T11622] ? ref_tracker_free+0x634/0x7d0 [ 694.151318][T11622] ? __copy_skb_header+0xa7/0x550 [ 694.156395][T11622] netlink_rcv_skb+0x29a/0x480 [ 694.161211][T11622] ? genl_bind+0x360/0x360 [ 694.165675][T11622] ? netlink_ack+0x1110/0x1110 [ 694.170536][T11622] ? __lock_acquire+0x7c80/0x7c80 [ 694.175607][T11622] ? down_read+0x1ac/0x2e0 [ 694.180080][T11622] genl_rcv+0x28/0x40 [ 694.184112][T11622] netlink_unicast+0x751/0x8d0 [ 694.188958][T11622] netlink_sendmsg+0x8c1/0xbe0 [ 694.193782][T11622] ? netlink_getsockopt+0x580/0x580 [ 694.199028][T11622] ? aa_sock_msg_perm+0x94/0x150 [ 694.204023][T11622] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 694.209350][T11622] ? security_socket_sendmsg+0x80/0xa0 [ 694.214861][T11622] ? netlink_getsockopt+0x580/0x580 [ 694.220113][T11622] ____sys_sendmsg+0x5bf/0x950 [ 694.224937][T11622] ? __asan_memset+0x22/0x40 [ 694.229569][T11622] ? __sys_sendmsg_sock+0x30/0x30 [ 694.234638][T11622] ? __import_iovec+0x5f2/0x860 [ 694.239543][T11622] ? import_iovec+0x73/0xa0 [ 694.244099][T11622] ___sys_sendmsg+0x220/0x290 [ 694.248837][T11622] ? __sys_sendmsg+0x270/0x270 [ 694.253673][T11622] ? __lock_acquire+0x7c80/0x7c80 [ 694.258787][T11622] __se_sys_sendmsg+0x1a5/0x270 [ 694.263687][T11622] ? __x64_sys_sendmsg+0x80/0x80 [ 694.268687][T11622] ? lockdep_hardirqs_on+0x98/0x150 [ 694.273925][T11622] do_syscall_64+0x55/0xb0 [ 694.278400][T11622] ? clear_bhb_loop+0x40/0x90 [ 694.283121][T11622] ? clear_bhb_loop+0x40/0x90 [ 694.287842][T11622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 694.293792][T11622] RIP: 0033:0x7f6d5938ebe9 [ 694.298252][T11622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.317925][T11622] RSP: 002b:00007f6d5a2e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.326389][T11622] RAX: ffffffffffffffda RBX: 00007f6d595b5fa0 RCX: 00007f6d5938ebe9 [ 694.334406][T11622] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 694.337218][T11624] FAULT_INJECTION: forcing a failure. [ 694.337218][T11624] name failslab, interval 1, probability 0, space 0, times 0 [ 694.342396][T11622] RBP: 00007f6d5a2e6090 R08: 0000000000000000 R09: 0000000000000000 [ 694.342438][T11622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.342451][T11622] R13: 00007f6d595b6038 R14: 00007f6d595b5fa0 R15: 00007ffd2f3ba428 [ 694.342483][T11622] [ 694.409691][T11624] CPU: 0 PID: 11624 Comm: syz.1.2153 Not tainted 6.6.102-syzkaller #0 [ 694.417942][T11624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 694.428070][T11624] Call Trace: [ 694.431387][T11624] [ 694.434351][T11624] dump_stack_lvl+0x16c/0x230 [ 694.439083][T11624] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 694.445293][T11624] ? show_regs_print_info+0x20/0x20 [ 694.450529][T11624] ? load_image+0x3b0/0x3b0 [ 694.455095][T11624] should_fail_ex+0x39d/0x4d0 [ 694.459843][T11624] should_failslab+0x9/0x20 [ 694.464387][T11624] slab_pre_alloc_hook+0x59/0x310 [ 694.469462][T11624] kmem_cache_alloc+0x5a/0x2e0 [ 694.474270][T11624] ? security_inode_alloc+0x34/0x110 [ 694.479602][T11624] security_inode_alloc+0x34/0x110 [ 694.484754][T11624] inode_init_always+0x8fc/0xc90 [ 694.489713][T11624] new_inode_pseudo+0x95/0x1d0 [ 694.494582][T11624] __sock_create+0x12d/0x940 [ 694.499200][T11624] __sys_socketpair+0x236/0x550 [ 694.504075][T11624] __x64_sys_socketpair+0x9b/0xb0 [ 694.509125][T11624] do_syscall_64+0x55/0xb0 [ 694.513554][T11624] ? clear_bhb_loop+0x40/0x90 [ 694.518240][T11624] ? clear_bhb_loop+0x40/0x90 [ 694.522929][T11624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 694.528839][T11624] RIP: 0033:0x7f183d18ebe9 [ 694.533271][T11624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.552891][T11624] RSP: 002b:00007f183b3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 694.561328][T11624] RAX: ffffffffffffffda RBX: 00007f183d3b5fa0 RCX: 00007f183d18ebe9 [ 694.569312][T11624] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 694.577287][T11624] RBP: 00007f183b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 694.585275][T11624] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.593252][T11624] R13: 00007f183d3b6038 R14: 00007f183d3b5fa0 R15: 00007ffd8a43b8c8 [ 694.601246][T11624] [ 694.614953][T11624] socket: no more sockets [ 695.175632][T11650] netlink: 'syz.4.2161': attribute type 21 has an invalid length. [ 696.068900][T11681] FAULT_INJECTION: forcing a failure. [ 696.068900][T11681] name failslab, interval 1, probability 0, space 0, times 0 [ 696.075026][T11682] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.2176'. [ 696.092521][T11681] CPU: 1 PID: 11681 Comm: syz.2.2175 Not tainted 6.6.102-syzkaller #0 [ 696.100746][T11681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 696.110842][T11681] Call Trace: [ 696.114186][T11681] [ 696.117153][T11681] dump_stack_lvl+0x16c/0x230 [ 696.121871][T11681] ? show_regs_print_info+0x20/0x20 [ 696.127115][T11681] ? load_image+0x3b0/0x3b0 [ 696.131682][T11681] ? __lock_acquire+0x7c80/0x7c80 [ 696.136762][T11681] should_fail_ex+0x39d/0x4d0 [ 696.141503][T11681] should_failslab+0x9/0x20 [ 696.146055][T11681] slab_pre_alloc_hook+0x59/0x310 [ 696.151130][T11681] ? ip6_setup_cork+0x50c/0xfe0 [ 696.156017][T11681] ? ip6_setup_cork+0x50c/0xfe0 [ 696.160903][T11681] __kmem_cache_alloc_node+0x53/0x260 [ 696.166332][T11681] ? ip6_setup_cork+0x50c/0xfe0 [ 696.171219][T11681] __kmalloc_node_track_caller+0xa2/0x230 [ 696.176988][T11681] kmemdup+0x2b/0x70 [ 696.180899][T11681] ip6_setup_cork+0x50c/0xfe0 [ 696.185602][T11681] ip6_append_data+0x220/0x350 [ 696.190403][T11681] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 696.195302][T11681] l2tp_ip6_sendmsg+0x12ac/0x1710 [ 696.200366][T11681] ? __might_sleep+0xe0/0xe0 [ 696.204980][T11681] ? l2tp_ip6_destroy_sock+0x60/0x60 [ 696.210299][T11681] ? aa_af_perm+0x2b0/0x2b0 [ 696.214828][T11681] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 696.221270][T11681] ? sock_rps_record_flow+0x19/0x400 [ 696.226569][T11681] ? inet_send_prepare+0x260/0x260 [ 696.231694][T11681] ? inet_sendmsg+0x7c/0x2f0 [ 696.236300][T11681] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 696.241605][T11681] ? security_socket_sendmsg+0x80/0xa0 [ 696.247098][T11681] ? inet_send_prepare+0x260/0x260 [ 696.252225][T11681] ____sys_sendmsg+0x5bf/0x950 [ 696.257011][T11681] ? __sys_sendmsg_sock+0x30/0x30 [ 696.262050][T11681] ? __import_iovec+0x3fa/0x860 [ 696.266926][T11681] ? import_iovec+0x73/0xa0 [ 696.271455][T11681] ___sys_sendmsg+0x220/0x290 [ 696.276149][T11681] ? __sys_sendmsg+0x270/0x270 [ 696.280944][T11681] ? __lock_acquire+0x7c80/0x7c80 [ 696.286011][T11681] __se_sys_sendmsg+0x1a5/0x270 [ 696.290896][T11681] ? __x64_sys_sendmsg+0x80/0x80 [ 696.295883][T11681] ? lockdep_hardirqs_on+0x98/0x150 [ 696.301212][T11681] do_syscall_64+0x55/0xb0 [ 696.305661][T11681] ? clear_bhb_loop+0x40/0x90 [ 696.310366][T11681] ? clear_bhb_loop+0x40/0x90 [ 696.315071][T11681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 696.321012][T11681] RIP: 0033:0x7fdac818ebe9 [ 696.325548][T11681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.345193][T11681] RSP: 002b:00007fdac8f68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.353643][T11681] RAX: ffffffffffffffda RBX: 00007fdac83b5fa0 RCX: 00007fdac818ebe9 [ 696.361657][T11681] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 696.369651][T11681] RBP: 00007fdac8f68090 R08: 0000000000000000 R09: 0000000000000000 [ 696.377644][T11681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.385639][T11681] R13: 00007fdac83b6038 R14: 00007fdac83b5fa0 R15: 00007ffc55d04128 [ 696.393650][T11681] [ 696.468786][T11688] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2179'. [ 696.521461][T11690] FAULT_INJECTION: forcing a failure. [ 696.521461][T11690] name failslab, interval 1, probability 0, space 0, times 0 [ 696.580144][T11690] CPU: 0 PID: 11690 Comm: syz.1.2178 Not tainted 6.6.102-syzkaller #0 [ 696.588407][T11690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 696.598528][T11690] Call Trace: [ 696.601868][T11690] [ 696.604856][T11690] dump_stack_lvl+0x16c/0x230 [ 696.609612][T11690] ? show_regs_print_info+0x20/0x20 [ 696.614979][T11690] ? load_image+0x3b0/0x3b0 [ 696.619584][T11690] ? __might_sleep+0xe0/0xe0 [ 696.624251][T11690] ? __lock_acquire+0x7c80/0x7c80 [ 696.629373][T11690] should_fail_ex+0x39d/0x4d0 [ 696.634144][T11690] should_failslab+0x9/0x20 [ 696.638710][T11690] slab_pre_alloc_hook+0x59/0x310 [ 696.643834][T11690] kmem_cache_alloc+0x5a/0x2e0 [ 696.648671][T11690] ? security_inode_alloc+0x34/0x110 [ 696.654083][T11690] security_inode_alloc+0x34/0x110 [ 696.659273][T11690] inode_init_always+0x8fc/0xc90 [ 696.664307][T11690] new_inode_pseudo+0x95/0x1d0 [ 696.669165][T11690] __sock_create+0x12d/0x940 [ 696.673842][T11690] udp_sock_create4+0xbf/0x4b0 [ 696.678653][T11690] ? erspan_exit_batch_net+0x30/0x30 [ 696.684035][T11690] rxrpc_lookup_local+0xccb/0x1550 [ 696.689232][T11690] ? rxrpc_local_dont_fragment+0x70/0x70 [ 696.694928][T11690] ? lockdep_hardirqs_on+0x98/0x150 [ 696.700192][T11690] ? _local_bh_enable+0xa0/0xa0 [ 696.705108][T11690] rxrpc_sendmsg+0x30a/0x5b0 [ 696.709782][T11690] ? rxrpc_getsockopt+0x150/0x150 [ 696.714864][T11690] ____sys_sendmsg+0x5bf/0x950 [ 696.719695][T11690] ? __sys_sendmsg_sock+0x30/0x30 [ 696.724790][T11690] ? __import_iovec+0x3fa/0x860 [ 696.729726][T11690] ? import_iovec+0x73/0xa0 [ 696.734300][T11690] ___sys_sendmsg+0x220/0x290 [ 696.739031][T11690] ? __sys_sendmsg+0x270/0x270 [ 696.743902][T11690] ? __lock_acquire+0x7c80/0x7c80 [ 696.749041][T11690] __se_sys_sendmsg+0x1a5/0x270 [ 696.753948][T11690] ? __x64_sys_sendmsg+0x80/0x80 [ 696.758977][T11690] ? lockdep_hardirqs_on+0x98/0x150 [ 696.764242][T11690] do_syscall_64+0x55/0xb0 [ 696.768696][T11690] ? clear_bhb_loop+0x40/0x90 [ 696.773408][T11690] ? clear_bhb_loop+0x40/0x90 [ 696.778127][T11690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 696.784061][T11690] RIP: 0033:0x7f183d18ebe9 [ 696.788512][T11690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.808167][T11690] RSP: 002b:00007f183b3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.816647][T11690] RAX: ffffffffffffffda RBX: 00007f183d3b5fa0 RCX: 00007f183d18ebe9 [ 696.824653][T11690] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 696.832661][T11690] RBP: 00007f183b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 696.840670][T11690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.848691][T11690] R13: 00007f183d3b6038 R14: 00007f183d3b5fa0 R15: 00007ffd8a43b8c8 [ 696.856743][T11690] [ 696.906649][T11690] socket: no more sockets [ 698.018049][T11728] FAULT_INJECTION: forcing a failure. [ 698.018049][T11728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.039697][T11728] CPU: 0 PID: 11728 Comm: syz.3.2194 Not tainted 6.6.102-syzkaller #0 [ 698.047924][T11728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 698.058097][T11728] Call Trace: [ 698.061406][T11728] [ 698.064360][T11728] dump_stack_lvl+0x16c/0x230 [ 698.069065][T11728] ? show_regs_print_info+0x20/0x20 [ 698.074290][T11728] ? load_image+0x3b0/0x3b0 [ 698.078866][T11728] ? __might_fault+0xaa/0x120 [ 698.083562][T11728] ? __lock_acquire+0x7c80/0x7c80 [ 698.088626][T11728] should_fail_ex+0x39d/0x4d0 [ 698.093333][T11728] _copy_to_user+0x2f/0xa0 [ 698.097767][T11728] finalize_log+0xe2/0x150 [ 698.102231][T11728] ? btf_parse_struct_metas+0xe10/0xe10 [ 698.107801][T11728] ? btf_check_type_tags+0x674/0x680 [ 698.113113][T11728] btf_new_fd+0x702/0x980 [ 698.117473][T11728] ? bpf_btf_show_fdinfo+0x80/0x80 [ 698.122600][T11728] ? capable+0x88/0xe0 [ 698.126692][T11728] __sys_bpf+0x60e/0x800 [ 698.130969][T11728] ? bpf_link_show_fdinfo+0x350/0x350 [ 698.136363][T11728] ? lock_chain_count+0x20/0x20 [ 698.141320][T11728] __x64_sys_bpf+0x7c/0x90 [ 698.145755][T11728] do_syscall_64+0x55/0xb0 [ 698.150190][T11728] ? clear_bhb_loop+0x40/0x90 [ 698.155053][T11728] ? clear_bhb_loop+0x40/0x90 [ 698.159760][T11728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 698.165701][T11728] RIP: 0033:0x7f6d5938ebe9 [ 698.170138][T11728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.189779][T11728] RSP: 002b:00007f6d5a2e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 698.199295][T11728] RAX: ffffffffffffffda RBX: 00007f6d595b5fa0 RCX: 00007f6d5938ebe9 [ 698.207295][T11728] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012 [ 698.215287][T11728] RBP: 00007f6d5a2e6090 R08: 0000000000000000 R09: 0000000000000000 [ 698.223287][T11728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 698.231278][T11728] R13: 00007f6d595b6038 R14: 00007f6d595b5fa0 R15: 00007ffd2f3ba428 [ 698.239288][T11728] [ 698.291314][T11730] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2197'. [ 698.434034][T11735] netlink: 'syz.3.2200': attribute type 21 has an invalid length. [ 698.442394][T11735] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2200'. [ 698.454108][T11735] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2200'. [ 698.509627][T11740] netlink: 'syz.4.2202': attribute type 10 has an invalid length. [ 698.723195][T11740] team0: Device batadv0 is already an upper device of the team interface [ 699.617388][T11771] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2215'. [ 699.741452][T11781] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2219'. [ 699.797902][T11782] FAULT_INJECTION: forcing a failure. [ 699.797902][T11782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.835557][T11782] CPU: 0 PID: 11782 Comm: syz.3.2220 Not tainted 6.6.102-syzkaller #0 [ 699.843797][T11782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 699.853899][T11782] Call Trace: [ 699.857315][T11782] [ 699.860289][T11782] dump_stack_lvl+0x16c/0x230 [ 699.865023][T11782] ? show_regs_print_info+0x20/0x20 [ 699.870267][T11782] ? load_image+0x3b0/0x3b0 [ 699.874837][T11782] ? __lock_acquire+0x7c80/0x7c80 [ 699.879918][T11782] ? snprintf+0xdb/0x120 [ 699.884211][T11782] should_fail_ex+0x39d/0x4d0 [ 699.888924][T11782] _copy_to_user+0x2f/0xa0 [ 699.893365][T11782] simple_read_from_buffer+0xe7/0x150 [ 699.898771][T11782] proc_fail_nth_read+0x1e3/0x250 [ 699.903832][T11782] ? proc_fault_inject_write+0x340/0x340 [ 699.909498][T11782] ? fsnotify_perm+0x271/0x5e0 [ 699.914296][T11782] ? proc_fault_inject_write+0x340/0x340 [ 699.919958][T11782] vfs_read+0x27e/0x920 [ 699.924143][T11782] ? kernel_read+0x1e0/0x1e0 [ 699.928760][T11782] ? __fget_files+0x28/0x4d0 [ 699.933370][T11782] ? __fget_files+0x44a/0x4d0 [ 699.938077][T11782] ? __fdget_pos+0x2a3/0x330 [ 699.942685][T11782] ? ksys_read+0x75/0x250 [ 699.947038][T11782] ksys_read+0x147/0x250 [ 699.951301][T11782] ? vfs_write+0x940/0x940 [ 699.955778][T11782] ? lockdep_hardirqs_on+0x98/0x150 [ 699.961007][T11782] do_syscall_64+0x55/0xb0 [ 699.965467][T11782] ? clear_bhb_loop+0x40/0x90 [ 699.970168][T11782] ? clear_bhb_loop+0x40/0x90 [ 699.974859][T11782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 699.980779][T11782] RIP: 0033:0x7f6d5938d5fc [ 699.985311][T11782] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 700.004968][T11782] RSP: 002b:00007f6d5a2e6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 700.013405][T11782] RAX: ffffffffffffffda RBX: 00007f6d595b5fa0 RCX: 00007f6d5938d5fc [ 700.021400][T11782] RDX: 000000000000000f RSI: 00007f6d5a2e60a0 RDI: 0000000000000005 [ 700.029394][T11782] RBP: 00007f6d5a2e6090 R08: 0000000000000000 R09: 0000000000000000 [ 700.037389][T11782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.045383][T11782] R13: 00007f6d595b6038 R14: 00007f6d595b5fa0 R15: 00007ffd2f3ba428 [ 700.053453][T11782] [ 700.243853][T11792] syzkaller0: entered promiscuous mode [ 700.249407][T11792] syzkaller0: entered allmulticast mode [ 700.543591][T11806] netlink: 'syz.3.2229': attribute type 10 has an invalid length. [ 700.647635][T11806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.675312][T11806] team0: Port device batadv0 added [ 701.119356][T11837] FAULT_INJECTION: forcing a failure. [ 701.119356][T11837] name failslab, interval 1, probability 0, space 0, times 0 [ 701.139109][T11837] CPU: 0 PID: 11837 Comm: syz.3.2242 Not tainted 6.6.102-syzkaller #0 [ 701.147338][T11837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 701.157431][T11837] Call Trace: [ 701.160740][T11837] [ 701.163695][T11837] dump_stack_lvl+0x16c/0x230 [ 701.168416][T11837] ? show_regs_print_info+0x20/0x20 [ 701.173652][T11837] ? load_image+0x3b0/0x3b0 [ 701.178217][T11837] should_fail_ex+0x39d/0x4d0 [ 701.182937][T11837] should_failslab+0x9/0x20 [ 701.187472][T11837] slab_pre_alloc_hook+0x59/0x310 [ 701.192536][T11837] ? ___neigh_create+0x6d2/0x2440 [ 701.197583][T11837] ? ___neigh_create+0x6d2/0x2440 [ 701.202635][T11837] __kmem_cache_alloc_node+0x53/0x260 [ 701.208040][T11837] ? lock_chain_count+0x20/0x20 [ 701.212926][T11837] ? ___neigh_create+0x6d2/0x2440 [ 701.217988][T11837] __kmalloc+0xa4/0x240 [ 701.222178][T11837] ___neigh_create+0x6d2/0x2440 [ 701.227073][T11837] ? __ipv6_neigh_lookup_noref+0x5b9/0x7d0 [ 701.232923][T11837] ip6_finish_output2+0x159e/0x1650 [ 701.238172][T11837] ? ip6_finish_output2+0x661/0x1650 [ 701.243503][T11837] ? ip6_mtu+0x7d/0x3f0 [ 701.247710][T11837] ? nf_hook+0x370/0x370 [ 701.251995][T11837] ? ip6_finish_output+0x57b/0x820 [ 701.257246][T11837] ? ip6_send_skb+0x10f/0x380 [ 701.261954][T11837] ip6_send_skb+0x1d5/0x380 [ 701.266507][T11837] ping_v6_sendmsg+0xdda/0x10a0 [ 701.271415][T11837] ? ping_v6_pre_connect+0x30/0x30 [ 701.276579][T11837] ? inet_sendmsg+0x14b/0x2f0 [ 701.281286][T11837] ? __local_bh_enable_ip+0x12e/0x1c0 [ 701.286696][T11837] ? lockdep_hardirqs_on+0x98/0x150 [ 701.291937][T11837] ? _local_bh_enable+0xa0/0xa0 [ 701.296828][T11837] ? do_raw_spin_unlock+0x121/0x230 [ 701.302094][T11837] ? inet_sendmsg+0x14b/0x2f0 [ 701.306825][T11837] ? inet_sendmsg+0x14b/0x2f0 [ 701.311527][T11837] ? inet_send_prepare+0x260/0x260 [ 701.316669][T11837] ____sys_sendmsg+0x5bf/0x950 [ 701.321477][T11837] ? __asan_memset+0x22/0x40 [ 701.326115][T11837] ? __sys_sendmsg_sock+0x30/0x30 [ 701.331187][T11837] ? __import_iovec+0x5f2/0x860 [ 701.336104][T11837] ? import_iovec+0x73/0xa0 [ 701.340655][T11837] ___sys_sendmsg+0x220/0x290 [ 701.345381][T11837] ? __sys_sendmsg+0x270/0x270 [ 701.350215][T11837] ? __lock_acquire+0x7c80/0x7c80 [ 701.355311][T11837] __se_sys_sendmsg+0x1a5/0x270 [ 701.360202][T11837] ? __x64_sys_sendmsg+0x80/0x80 [ 701.365224][T11837] ? lockdep_hardirqs_on+0x98/0x150 [ 701.370462][T11837] do_syscall_64+0x55/0xb0 [ 701.374906][T11837] ? clear_bhb_loop+0x40/0x90 [ 701.379607][T11837] ? clear_bhb_loop+0x40/0x90 [ 701.384314][T11837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 701.390260][T11837] RIP: 0033:0x7f6d5938ebe9 [ 701.394714][T11837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 701.414363][T11837] RSP: 002b:00007f6d5a2e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 701.422807][T11837] RAX: ffffffffffffffda RBX: 00007f6d595b5fa0 RCX: 00007f6d5938ebe9 [ 701.430801][T11837] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 701.438792][T11837] RBP: 00007f6d5a2e6090 R08: 0000000000000000 R09: 0000000000000000 [ 701.446786][T11837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.454782][T11837] R13: 00007f6d595b6038 R14: 00007f6d595b5fa0 R15: 00007ffd2f3ba428 [ 701.462803][T11837] [ 701.789334][T11846] netlink: 'syz.2.2246': attribute type 10 has an invalid length. [ 701.885099][T11846] team0: Device batadv0 is already an upper device of the team interface [ 702.078217][T11856] netlink: 'syz.3.2251': attribute type 1 has an invalid length. [ 702.086365][T11856] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2251'. [ 702.171586][T11859] netlink: 'syz.4.2252': attribute type 21 has an invalid length. [ 702.202654][T11859] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2252'. [ 702.793043][T11888] netlink: 'syz.1.2262': attribute type 1 has an invalid length. [ 702.820428][T11888] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2262'. [ 702.868313][T11888] netlink: 'syz.1.2262': attribute type 9 has an invalid length. [ 702.886099][T11888] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2262'. [ 708.595573][T11916] netlink: 'syz.3.2274': attribute type 10 has an invalid length. [ 708.806223][T11921] netlink: 'syz.3.2277': attribute type 6 has an invalid length. [ 708.827043][T11921] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2277'. [ 708.947913][T11925] netlink: 'syz.2.2278': attribute type 10 has an invalid length. [ 708.965142][T11925] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 709.340343][T11925] team0: Port device wlan1 added [ 709.724494][T11953] netlink: 'syz.2.2289': attribute type 6 has an invalid length. [ 709.742307][T11953] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2289'. [ 709.915067][T11962] FAULT_INJECTION: forcing a failure. [ 709.915067][T11962] name failslab, interval 1, probability 0, space 0, times 0 [ 709.933220][T11962] CPU: 0 PID: 11962 Comm: syz.2.2295 Not tainted 6.6.102-syzkaller #0 [ 709.941435][T11962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 709.951526][T11962] Call Trace: [ 709.954852][T11962] [ 709.957827][T11962] dump_stack_lvl+0x16c/0x230 [ 709.962553][T11962] ? show_regs_print_info+0x20/0x20 [ 709.967794][T11962] ? load_image+0x3b0/0x3b0 [ 709.972357][T11962] ? verify_lock_unused+0x140/0x140 [ 709.977604][T11962] should_fail_ex+0x39d/0x4d0 [ 709.982333][T11962] should_failslab+0x9/0x20 [ 709.986880][T11962] slab_pre_alloc_hook+0x59/0x310 [ 709.991958][T11962] kmem_cache_alloc+0x5a/0x2e0 [ 709.996756][T11962] ? skb_clone+0x1eb/0x370 [ 710.001205][T11962] skb_clone+0x1eb/0x370 [ 710.005657][T11962] __netlink_deliver_tap+0x41c/0x830 [ 710.010970][T11962] ? netlink_deliver_tap+0x2e/0x1b0 [ 710.016187][T11962] netlink_deliver_tap+0x19c/0x1b0 [ 710.021314][T11962] netlink_unicast+0x72c/0x8d0 [ 710.026103][T11962] netlink_sendmsg+0x8c1/0xbe0 [ 710.030921][T11962] ? netlink_getsockopt+0x580/0x580 [ 710.036136][T11962] ? aa_sock_msg_perm+0x94/0x150 [ 710.041093][T11962] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 710.046395][T11962] ? security_socket_sendmsg+0x80/0xa0 [ 710.051864][T11962] ? netlink_getsockopt+0x580/0x580 [ 710.057095][T11962] ____sys_sendmsg+0x5bf/0x950 [ 710.061893][T11962] ? __asan_memset+0x22/0x40 [ 710.066498][T11962] ? __sys_sendmsg_sock+0x30/0x30 [ 710.071534][T11962] ? __import_iovec+0x5f2/0x860 [ 710.076407][T11962] ? import_iovec+0x73/0xa0 [ 710.080943][T11962] ___sys_sendmsg+0x220/0x290 [ 710.085819][T11962] ? __sys_sendmsg+0x270/0x270 [ 710.090652][T11962] ? __lock_acquire+0x7c80/0x7c80 [ 710.095723][T11962] __se_sys_sendmsg+0x1a5/0x270 [ 710.100593][T11962] ? __x64_sys_sendmsg+0x80/0x80 [ 710.105559][T11962] ? lockdep_hardirqs_on+0x98/0x150 [ 710.110782][T11962] do_syscall_64+0x55/0xb0 [ 710.115215][T11962] ? clear_bhb_loop+0x40/0x90 [ 710.119904][T11962] ? clear_bhb_loop+0x40/0x90 [ 710.124609][T11962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 710.130523][T11962] RIP: 0033:0x7fdac818ebe9 [ 710.134954][T11962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.154573][T11962] RSP: 002b:00007fdac8f68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 710.163108][T11962] RAX: ffffffffffffffda RBX: 00007fdac83b5fa0 RCX: 00007fdac818ebe9 [ 710.171128][T11962] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 710.179122][T11962] RBP: 00007fdac8f68090 R08: 0000000000000000 R09: 0000000000000000 [ 710.187108][T11962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.195096][T11962] R13: 00007fdac83b6038 R14: 00007fdac83b5fa0 R15: 00007ffc55d04128 [ 710.203099][T11962] [ 710.400623][T11969] netlink: 'syz.3.2296': attribute type 10 has an invalid length. [ 710.565229][T11969] team0: Port device wlan1 added [ 710.830588][T11983] syz.4.2303: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 710.871146][T11983] CPU: 0 PID: 11983 Comm: syz.4.2303 Not tainted 6.6.102-syzkaller #0 [ 710.879460][T11983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 710.889725][T11983] Call Trace: [ 710.893154][T11983] [ 710.896199][T11983] dump_stack_lvl+0x16c/0x230 [ 710.901063][T11983] ? show_regs_print_info+0x20/0x20 [ 710.906541][T11983] ? load_image+0x3b0/0x3b0 [ 710.911211][T11983] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 710.917769][T11983] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 710.924426][T11983] warn_alloc+0x210/0x300 [ 710.928899][T11983] ? stack_trace_save+0x9c/0xe0 [ 710.933905][T11983] ? zone_watermark_ok_safe+0x230/0x230 [ 710.939673][T11983] ? kasan_set_track+0x5f/0x70 [ 710.944582][T11983] ? kasan_set_track+0x4e/0x70 [ 710.949461][T11983] ? __kasan_kmalloc+0x8f/0xa0 [ 710.954350][T11983] ? xsk_init_queue+0xb0/0x110 [ 710.959230][T11983] ? xsk_setsockopt+0x4db/0x6f0 [ 710.964205][T11983] ? do_sock_setsockopt+0x175/0x1a0 [ 710.969523][T11983] ? __x64_sys_setsockopt+0x184/0x200 [ 710.975051][T11983] __vmalloc_node_range+0x126/0x1320 [ 710.980682][T11983] ? free_vm_area+0x50/0x50 [ 710.985416][T11983] vmalloc_user+0x74/0x80 [ 710.989866][T11983] ? xskq_create+0xbf/0x170 [ 710.994488][T11983] xskq_create+0xbf/0x170 [ 710.998975][T11983] xsk_init_queue+0xb0/0x110 [ 711.003718][T11983] xsk_setsockopt+0x4db/0x6f0 [ 711.008561][T11983] ? xsk_poll+0x670/0x670 [ 711.013061][T11983] ? __fget_files+0x28/0x4d0 [ 711.017787][T11983] ? aa_sock_opt_perm+0x74/0x100 [ 711.022869][T11983] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 711.028529][T11983] ? security_socket_setsockopt+0x7e/0xa0 [ 711.034378][T11983] ? xsk_poll+0x670/0x670 [ 711.038868][T11983] do_sock_setsockopt+0x175/0x1a0 [ 711.044050][T11983] ? __fdget+0x180/0x210 [ 711.048542][T11983] __x64_sys_setsockopt+0x184/0x200 [ 711.053924][T11983] do_syscall_64+0x55/0xb0 [ 711.058490][T11983] ? clear_bhb_loop+0x40/0x90 [ 711.063291][T11983] ? clear_bhb_loop+0x40/0x90 [ 711.068125][T11983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 711.074158][T11983] RIP: 0033:0x7f6dcc58ebe9 [ 711.078721][T11983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.098462][T11983] RSP: 002b:00007f6dcd473038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 711.107029][T11983] RAX: ffffffffffffffda RBX: 00007f6dcc7b5fa0 RCX: 00007f6dcc58ebe9 [ 711.115129][T11983] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 711.123220][T11983] RBP: 00007f6dcc611e19 R08: 0000000000000004 R09: 0000000000000000 [ 711.131307][T11983] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 711.139394][T11983] R13: 00007f6dcc7b6038 R14: 00007f6dcc7b5fa0 R15: 00007ffd89467298 [ 711.147622][T11983] [ 711.204475][T11983] Mem-Info: [ 711.207751][T11983] active_anon:7391 inactive_anon:0 isolated_anon:0 [ 711.207751][T11983] active_file:16570 inactive_file:39940 isolated_file:0 [ 711.207751][T11983] unevictable:768 dirty:87 writeback:0 [ 711.207751][T11983] slab_reclaimable:10772 slab_unreclaimable:98664 [ 711.207751][T11983] mapped:22404 shmem:1373 pagetables:342 [ 711.207751][T11983] sec_pagetables:0 bounce:0 [ 711.207751][T11983] kernel_misc_reclaimable:0 [ 711.207751][T11983] free:1339342 free_pcp:12121 free_cma:0 [ 711.273976][T11983] Node 0 active_anon:29564kB inactive_anon:0kB active_file:66280kB inactive_file:159560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:89616kB dirty:344kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10444kB pagetables:1368kB sec_pagetables:0kB all_unreclaimable? no [ 711.375028][T11983] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 711.444284][T11983] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 711.483439][T11983] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 711.496793][T11983] Node 0 DMA32 free:1445640kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:29420kB inactive_anon:0kB active_file:66280kB inactive_file:158236kB unevictable:1536kB writepending:344kB present:3129332kB managed:2589596kB mlocked:0kB bounce:0kB free_pcp:26844kB local_pcp:10604kB free_cma:0kB [ 711.531142][T11983] lowmem_reserve[]: 0 0 1 1 1 [ 711.536446][T11983] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 711.577879][T11983] lowmem_reserve[]: 0 0 0 0 0 [ 711.578122][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 711.609158][T11983] Node 1 [ 711.609265][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 711.627881][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 711.645251][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.655978][T11983] Normal free:3891320kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20864kB local_pcp:12064kB free_cma:0kB [ 711.685742][T11983] lowmem_reserve[]: 0 0 0 0 0 [ 711.690804][T11983] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 711.705771][T11983] Node 0 DMA32: 1*4kB (E) 217*8kB (UM) 684*16kB (UME) 554*32kB (UM) 169*64kB (UM) 168*128kB (UME) 37*256kB (UM) 16*512kB (ME) 9*1024kB (ME) 2*2048kB (ME) 330*4096kB (M) = 1445388kB [ 711.724227][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 711.731495][T11983] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 711.744154][T11983] Node 1 Normal: 244*4kB (UME) 61*8kB (UME) 42*16kB (UME) 121*32kB (UME) 36*64kB (UME) 8*128kB (UME) 2*256kB (UM) 3*512kB (UE) 1*1024kB (E) 2*2048kB (UE) 946*4096kB (M) = 3891320kB [ 711.762746][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 711.770463][T11983] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 711.770537][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 711.796107][T11983] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 711.806007][T11983] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 711.815955][T11983] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 711.825765][T11983] 57883 total pagecache pages [ 711.830776][T11983] 0 pages in swap cache [ 711.836093][T11983] Free swap = 124996kB [ 711.840578][T11983] Total swap = 124996kB [ 711.844872][T11983] 2097051 pages RAM [ 711.848810][T11983] 0 pages HighMem/MovableOnly [ 711.853846][T11983] 416138 pages reserved [ 711.858041][T11983] 0 pages cma reserved [ 711.896124][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.057223][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.062332][T12006] netlink: 'syz.1.2312': attribute type 6 has an invalid length. [ 712.076216][T12006] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2312'. [ 712.173533][ T58] netdevsim netdevsim2 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.232936][T12010] FAULT_INJECTION: forcing a failure. [ 712.232936][T12010] name failslab, interval 1, probability 0, space 0, times 0 [ 712.253784][T12010] CPU: 0 PID: 12010 Comm: syz.1.2315 Not tainted 6.6.102-syzkaller #0 [ 712.262007][T12010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 712.272187][T12010] Call Trace: [ 712.275496][T12010] [ 712.278446][T12010] dump_stack_lvl+0x16c/0x230 [ 712.283166][T12010] ? show_regs_print_info+0x20/0x20 [ 712.288768][T12010] ? load_image+0x3b0/0x3b0 [ 712.293320][T12010] ? __lock_acquire+0x7c80/0x7c80 [ 712.298382][T12010] should_fail_ex+0x39d/0x4d0 [ 712.303093][T12010] should_failslab+0x9/0x20 [ 712.307612][T12010] slab_pre_alloc_hook+0x59/0x310 [ 712.312664][T12010] ? __mutex_lock+0x304/0xcc0 [ 712.317379][T12010] ? tracepoint_add_func+0x307/0x9a0 [ 712.322713][T12010] ? tracepoint_add_func+0x307/0x9a0 [ 712.328040][T12010] __kmem_cache_alloc_node+0x53/0x260 [ 712.333442][T12010] ? tracepoint_add_func+0x307/0x9a0 [ 712.338752][T12010] __kmalloc+0xa4/0x240 [ 712.342931][T12010] ? __bpf_trace_sys_enter+0x10/0x10 [ 712.348239][T12010] tracepoint_add_func+0x307/0x9a0 [ 712.353384][T12010] ? __bpf_trace_sys_enter+0x10/0x10 [ 712.358685][T12010] tracepoint_probe_register_prio_may_exist+0x60/0xa0 [ 712.365471][T12010] ? __bpf_trace_sys_enter+0x10/0x10 [ 712.370796][T12010] bpf_raw_tp_link_attach+0x3e9/0x560 [ 712.376185][T12010] ? bpf_insn_prepare_dump+0x840/0x840 [ 712.381685][T12010] bpf_raw_tracepoint_open+0x197/0x210 [ 712.387162][T12010] __sys_bpf+0x364/0x800 [ 712.391426][T12010] ? bpf_link_show_fdinfo+0x350/0x350 [ 712.396851][T12010] ? lock_chain_count+0x20/0x20 [ 712.401729][T12010] __x64_sys_bpf+0x7c/0x90 [ 712.406177][T12010] do_syscall_64+0x55/0xb0 [ 712.410619][T12010] ? clear_bhb_loop+0x40/0x90 [ 712.415347][T12010] ? clear_bhb_loop+0x40/0x90 [ 712.420061][T12010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 712.425996][T12010] RIP: 0033:0x7f183d18ebe9 [ 712.430430][T12010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.450064][T12010] RSP: 002b:00007f183b3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 712.458500][T12010] RAX: ffffffffffffffda RBX: 00007f183d3b5fa0 RCX: 00007f183d18ebe9 [ 712.466520][T12010] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000011 [ 712.474509][T12010] RBP: 00007f183b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 712.482496][T12010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.490481][T12010] R13: 00007f183d3b6038 R14: 00007f183d3b5fa0 R15: 00007ffd8a43b8c8 [ 712.498482][T12010] [ 712.897441][T11994] chnl_net:caif_netlink_parms(): no params data found [ 713.124799][T11994] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.132884][T11994] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.140708][T11994] bridge_slave_0: entered allmulticast mode [ 713.148641][T11994] bridge_slave_0: entered promiscuous mode [ 713.179318][T11994] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.191176][T11994] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.198430][T11994] bridge_slave_1: entered allmulticast mode [ 713.211598][T11994] bridge_slave_1: entered promiscuous mode [ 713.336777][T11994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.351590][T11994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.427711][T11994] team0: Port device team_slave_0 added [ 713.438663][T11994] team0: Port device team_slave_1 added [ 713.497921][T11994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.505314][T11994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.531982][T11994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.555261][T11994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.562589][T11994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.589339][T11994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.824436][T11994] hsr_slave_0: entered promiscuous mode [ 713.831578][T11994] hsr_slave_1: entered promiscuous mode [ 713.854051][T11994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 713.870111][ T5849] Bluetooth: hci1: command tx timeout [ 713.876302][T11994] Cannot create hsr debugfs directory [ 714.420916][ T58] [ 714.423346][ T58] ====================================================== [ 714.430414][ T58] WARNING: possible circular locking dependency detected [ 714.437465][ T58] 6.6.102-syzkaller #0 Not tainted [ 714.442581][ T58] ------------------------------------------------------ [ 714.449599][ T58] kworker/u4:4/58 is trying to acquire lock: [ 714.455580][ T58] ffff88807c3bcd00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 714.465171][ T58] [ 714.465171][ T58] but task is already holding lock: [ 714.472544][ T58] ffff888024858768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 714.482944][ T58] [ 714.482944][ T58] which lock already depends on the new lock. [ 714.482944][ T58] [ 714.493360][ T58] [ 714.493360][ T58] the existing dependency chain (in reverse order) is: [ 714.502388][ T58] [ 714.502388][ T58] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 714.510133][ T58] __mutex_lock+0x129/0xcc0 [ 714.515185][ T58] ieee80211_open+0x144/0x200 [ 714.520403][ T58] __dev_open+0x2bc/0x430 [ 714.525262][ T58] dev_open+0xab/0x170 [ 714.529867][ T58] team_add_slave+0xae7/0x2660 [ 714.535175][ T58] do_setlink+0xe14/0x3fb0 [ 714.540130][ T58] rtnl_newlink+0x175b/0x2020 [ 714.545364][ T58] rtnetlink_rcv_msg+0x7c7/0xf10 [ 714.550858][ T58] netlink_rcv_skb+0x216/0x480 [ 714.556150][ T58] netlink_unicast+0x751/0x8d0 [ 714.561443][ T58] netlink_sendmsg+0x8c1/0xbe0 [ 714.566733][ T58] ____sys_sendmsg+0x5bf/0x950 [ 714.572033][ T58] ___sys_sendmsg+0x220/0x290 [ 714.577270][ T58] __se_sys_sendmsg+0x1a5/0x270 [ 714.582653][ T58] do_syscall_64+0x55/0xb0 [ 714.587950][ T58] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.594387][ T58] [ 714.594387][ T58] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 714.602592][ T58] __lock_acquire+0x2ddb/0x7c80 [ 714.607996][ T58] lock_acquire+0x197/0x410 [ 714.613026][ T58] __mutex_lock+0x129/0xcc0 [ 714.618057][ T58] team_del_slave+0x32/0x1c0 [ 714.623177][ T58] team_device_event+0x28d/0xa20 [ 714.628651][ T58] notifier_call_chain+0x197/0x390 [ 714.634308][ T58] unregister_netdevice_many_notify+0xf36/0x1810 [ 714.641170][ T58] unregister_netdevice_queue+0x324/0x360 [ 714.647422][ T58] _cfg80211_unregister_wdev+0x16b/0x580 [ 714.653584][ T58] ieee80211_remove_interfaces+0x496/0x680 [ 714.659923][ T58] ieee80211_unregister_hw+0x5d/0x2a0 [ 714.665830][ T58] mac80211_hwsim_del_radio+0x274/0x450 [ 714.671900][ T58] hwsim_exit_net+0x585/0x640 [ 714.677115][ T58] cleanup_net+0x6f4/0xb90 [ 714.682063][ T58] process_scheduled_works+0xa45/0x15b0 [ 714.688136][ T58] worker_thread+0xa55/0xfc0 [ 714.693269][ T58] kthread+0x2fa/0x390 [ 714.697905][ T58] ret_from_fork+0x48/0x80 [ 714.702856][ T58] ret_from_fork_asm+0x11/0x20 [ 714.708233][ T58] [ 714.708233][ T58] other info that might help us debug this: [ 714.708233][ T58] [ 714.718478][ T58] Possible unsafe locking scenario: [ 714.718478][ T58] [ 714.725927][ T58] CPU0 CPU1 [ 714.731293][ T58] ---- ---- [ 714.736654][ T58] lock(&rdev->wiphy.mtx); [ 714.741158][ T58] lock(team->team_lock_key#2); [ 714.748623][ T58] lock(&rdev->wiphy.mtx); [ 714.755650][ T58] lock(team->team_lock_key#2); [ 714.760594][ T58] [ 714.760594][ T58] *** DEADLOCK *** [ 714.760594][ T58] [ 714.768751][ T58] 5 locks held by kworker/u4:4/58: [ 714.773865][ T58] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 714.784760][ T58] #1: ffffc90001597d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 714.795330][ T58] #2: ffffffff8dfaec50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 714.804755][ T58] #3: ffffffff8dfbba48 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 714.814601][ T58] #4: ffff888024858768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 714.825412][ T58] [ 714.825412][ T58] stack backtrace: [ 714.831309][ T58] CPU: 0 PID: 58 Comm: kworker/u4:4 Not tainted 6.6.102-syzkaller #0 [ 714.839384][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 714.849466][ T58] Workqueue: netns cleanup_net [ 714.854256][ T58] Call Trace: [ 714.857560][ T58] [ 714.860509][ T58] dump_stack_lvl+0x16c/0x230 [ 714.865196][ T58] ? load_image+0x3b0/0x3b0 [ 714.869729][ T58] ? show_regs_print_info+0x20/0x20 [ 714.874950][ T58] ? print_circular_bug+0x12b/0x1a0 [ 714.880163][ T58] check_noncircular+0x2bd/0x3c0 [ 714.885112][ T58] ? print_deadlock_bug+0x5d0/0x5d0 [ 714.890318][ T58] ? lockdep_lock+0xe0/0x220 [ 714.894920][ T58] ? __lock_acquire+0x1334/0x7c80 [ 714.899958][ T58] ? _find_first_zero_bit+0xd3/0x100 [ 714.905254][ T58] __lock_acquire+0x2ddb/0x7c80 [ 714.910118][ T58] ? verify_lock_unused+0x140/0x140 [ 714.915338][ T58] ? verify_lock_unused+0x140/0x140 [ 714.920557][ T58] lock_acquire+0x197/0x410 [ 714.925085][ T58] ? team_del_slave+0x32/0x1c0 [ 714.929868][ T58] ? __might_sleep+0xe0/0xe0 [ 714.934461][ T58] ? read_lock_is_recursive+0x20/0x20 [ 714.939854][ T58] __mutex_lock+0x129/0xcc0 [ 714.944371][ T58] ? team_del_slave+0x32/0x1c0 [ 714.949150][ T58] ? __lock_acquire+0x7c80/0x7c80 [ 714.954185][ T58] ? rcu_is_watching+0x15/0xb0 [ 714.958959][ T58] ? trace_contention_end+0x39/0xe0 [ 714.964166][ T58] ? __mutex_lock+0x304/0xcc0 [ 714.968851][ T58] ? team_del_slave+0x32/0x1c0 [ 714.973618][ T58] ? mutex_lock_nested+0x20/0x20 [ 714.978560][ T58] ? bond_netdev_event+0xe1/0xef0 [ 714.983623][ T58] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 714.989263][ T58] ? bond_ipsec_offload_ok+0x410/0x410 [ 714.994746][ T58] team_del_slave+0x32/0x1c0 [ 714.999341][ T58] team_device_event+0x28d/0xa20 [ 715.004314][ T58] notifier_call_chain+0x197/0x390 [ 715.009434][ T58] unregister_netdevice_many_notify+0xf36/0x1810 [ 715.015773][ T58] ? lock_chain_count+0x20/0x20 [ 715.020632][ T58] ? unregister_netdevice_many+0x20/0x20 [ 715.026270][ T58] ? kernfs_remove_by_name_ns+0x117/0x150 [ 715.032018][ T58] ? __lock_acquire+0x7c80/0x7c80 [ 715.037085][ T58] unregister_netdevice_queue+0x324/0x360 [ 715.042815][ T58] ? list_netdevice+0x730/0x730 [ 715.047691][ T58] ? kernfs_remove_by_name_ns+0x117/0x150 [ 715.053435][ T58] _cfg80211_unregister_wdev+0x16b/0x580 [ 715.059094][ T58] ieee80211_remove_interfaces+0x496/0x680 [ 715.064943][ T58] ? ieee80211_do_stop+0x1db0/0x1db0 [ 715.070277][ T58] ? rcu_is_watching+0x15/0xb0 [ 715.075055][ T58] ieee80211_unregister_hw+0x5d/0x2a0 [ 715.080441][ T58] mac80211_hwsim_del_radio+0x274/0x450 [ 715.085995][ T58] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 715.091549][ T58] hwsim_exit_net+0x585/0x640 [ 715.096257][ T58] ? hwsim_init_net+0x90/0x90 [ 715.100975][ T58] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 715.106831][ T58] cleanup_net+0x6f4/0xb90 [ 715.111270][ T58] ? ops_free_list+0x3b0/0x3b0 [ 715.116056][ T58] ? _raw_spin_unlock_irq+0x23/0x50 [ 715.121353][ T58] ? process_scheduled_works+0x957/0x15b0 [ 715.127093][ T58] ? process_scheduled_works+0x957/0x15b0 [ 715.132814][ T58] process_scheduled_works+0xa45/0x15b0 [ 715.138381][ T58] ? assign_work+0x400/0x400 [ 715.142980][ T58] ? assign_work+0x39e/0x400 [ 715.147585][ T58] worker_thread+0xa55/0xfc0 [ 715.152220][ T58] kthread+0x2fa/0x390 [ 715.156299][ T58] ? pr_cont_work+0x560/0x560 [ 715.161011][ T58] ? kthread_blkcg+0xd0/0xd0 [ 715.165617][ T58] ret_from_fork+0x48/0x80 [ 715.170068][ T58] ? kthread_blkcg+0xd0/0xd0 [ 715.174687][ T58] ret_from_fork_asm+0x11/0x20 [ 715.179473][ T58] [ 715.288268][T12064] can: request_module (can-proto-0) failed. [ 715.344570][ T58] team0: Port device wlan1 removed [ 715.495638][ T58] hsr_slave_0: left promiscuous mode [ 715.502240][ T58] hsr_slave_1: left promiscuous mode [ 715.508079][ T58] batman_adv: batadv0: Removing interface: team0 [ 715.518353][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.526545][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.534804][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.542346][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.550358][ T58] bridge_slave_1: left allmulticast mode [ 715.556073][ T58] bridge_slave_1: left promiscuous mode [ 715.561905][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.571966][ T58] bridge_slave_0: left allmulticast mode [ 715.577637][ T58] bridge_slave_0: left promiscuous mode [ 715.583552][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.594099][ T58] veth0_macvtap: left promiscuous mode [ 715.599983][ T58] veth0_vlan: left promiscuous mode [ 715.726867][ T58] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 715.737537][ T58] macvlan0 (unregistering): left promiscuous mode [ 715.874263][ T58] team0 (unregistering): Port device team_slave_1 removed [ 715.899196][ T58] team0 (unregistering): Port device team_slave_0 removed [ 715.925594][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.935959][ T58] bond_slave_1 (unregistering): left promiscuous mode [ 715.954880][ T5849] Bluetooth: hci1: command tx timeout [ 715.967760][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.976960][ T58] bond_slave_0 (unregistering): left promiscuous mode [ 716.250887][ T58] bond0 (unregistering): Released all slaves [ 716.574724][T11994] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 716.591834][T11994] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 716.601851][T11994] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 716.612194][T11994] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 716.682596][T11994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.701577][T11994] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.714438][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.721619][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.736086][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.743236][ T5923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.905559][T11994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.941535][T11994] veth0_vlan: entered promiscuous mode [ 716.954216][T11994] veth1_vlan: entered promiscuous mode [ 716.979694][T11994] veth0_macvtap: entered promiscuous mode [ 716.988674][T11994] veth1_macvtap: entered promiscuous mode [ 717.004035][T11994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.016231][T11994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.026469][T11994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.036961][T11994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.046831][T11994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.057427][T11994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.068607][T11994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.085237][T11994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.095815][T11994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.108978][T11994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.119458][T11994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.129441][T11994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.139979][T11994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.151382][T11994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.162511][T11994] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.171375][T11994] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.180121][T11994] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.188833][T11994] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.222359][T11994] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 717.243108][T11994] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 717.252839][T11994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.267517][ T5890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.269430][T11994] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 717.275618][ T5890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.304608][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.312755][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.030081][ T5849] Bluetooth: hci1: command tx timeout [ 718.830037][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 720.109914][ T50] Bluetooth: hci1: command tx timeout