last executing test programs: 3.598865104s ago: executing program 3 (id=3550): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0x8, 0x100000001}, 0x880, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1, 0x2, 0xab, 0x6, 0x0, 0x3, 0x60020, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0xa081, 0x7, 0xf, 0x7, 0x7ff, 0x400, 0x1, 0x0, 0x3, 0x0, 0x8}, 0xffffffffffffffff, 0xd, r2, 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000030250000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018400000fcffffff0000000000000000180000007f0000000000000004000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) sendmsg$kcm(r4, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180fffffffffffffff000002cd6", 0x28}, {&(0x7f0000000180)="d5298969a8", 0x5}], 0x2, 0x0, 0x0, 0x39c}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0xa, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x14, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x140) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 2.630275831s ago: executing program 3 (id=3554): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0x8, 0x100000001}, 0x880, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1, 0x2, 0xab, 0x6, 0x0, 0x3, 0x60020, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0xa081, 0x7, 0xf, 0x7, 0x7ff, 0x400, 0x1, 0x0, 0x3, 0x0, 0x8}, 0xffffffffffffffff, 0xd, r2, 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000030250000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018400000fcffffff0000000000000000180000007f0000000000000004000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) sendmsg$kcm(r4, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180fffffffffffffff000002cd6", 0x28}, {&(0x7f0000000180)="d5298969a8", 0x5}], 0x2, 0x0, 0x0, 0x39c}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0xa, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000002080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x140) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 2.155668374s ago: executing program 2 (id=3558): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000d"], 0x0, 0x66, 0x0, 0x8}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004200000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000080)="5490c67e3f8a2f0c3fc72996fff1d5a147f40646744c13c1b9f966cc4a5366eca2b0ed82cfca2e10075621e43d5866b7a1806392796ef5bd6907693b0cd1e4437896d4ce9a3b4820093fd946e9c47dc4c63ba2085b180e8187bb17b06cafd7ee3191691007ea4ffcb22649b2713fdc3aa639ecb0163fd7766d97b6898fca060a756ced3d3d859b34adba37a2633769382fc21222c2b9ff4517f56c7eb019b9741503711f52c0c919bbdd36ff5f8c", &(0x7f00000001c0)}, 0x20) 2.070040045s ago: executing program 3 (id=3559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000003607000000000000000000000000000006", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c9000000000000007910680000000000610400e50000000095000072"], &(0x7f00000003c0)='syzkaller\x00', 0xb9f, 0xba, &(0x7f000000cf3d)=""/186, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close(r7) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfffffdd1, 0x0}, 0x340040d1) r9 = perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0xf0, 0x0, 0x80, 0x0, 0x0, 0x480000000000000b, 0x14245, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000400), 0x2}, 0x13afe, 0x80000001, 0x98, 0x4, 0xfb, 0x7, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x10, 0xffffffffffffffff, 0xa) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r3, @ANYRESDEC=r2], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x3}, 0x11efa, 0x4, 0x98, 0x3, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r3) r11 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x80044944, &(0x7f0000000200)) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400064009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x4, 0xc}, 0x10986, 0x1, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000580)='rpm_return_int\x00', r12}, 0x18) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r13) r14 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r14, 0xc004743e, 0x110e22fff6) 1.897555936s ago: executing program 2 (id=3561): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r0) close(r1) 1.849553086s ago: executing program 1 (id=3562): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) 1.730961247s ago: executing program 0 (id=3563): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="fdffffff00"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000015cc00"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000015006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x400}, 0x100e64, 0xc78, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}, 0x21) setsockopt$sock_attach_bpf(r3, 0x84, 0xd, &(0x7f0000000000), 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000340)=0x1) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x1, 0x9, 0x7e, 0xf3, 0x0, 0x2, 0x826, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x7}, 0x400, 0x8001, 0xbf4, 0x4a3f0689f9cb4134, 0x7, 0x0, 0x5, 0x0, 0x9, 0x0, 0xb}, 0xffffffffffffffff, 0x5, r1, 0x5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7c2}) 1.646623078s ago: executing program 1 (id=3564): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r0) close(r1) 1.514256909s ago: executing program 3 (id=3565): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r0) close(r1) 1.4017071s ago: executing program 2 (id=3566): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0x8, 0x100000001}, 0x880, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1, 0x2, 0xab, 0x6, 0x0, 0x3, 0x60020, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0xa081, 0x7, 0xf, 0x7, 0x7ff, 0x400, 0x1, 0x0, 0x3, 0x0, 0x8}, 0xffffffffffffffff, 0xd, r2, 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000030250000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018400000fcffffff0000000000000000180000007f0000000000000004000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) sendmsg$kcm(r4, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180fffffffffffffff000002cd6", 0x28}, {&(0x7f0000000180)="d5298969a8", 0x5}], 0x2, 0x0, 0x0, 0x39c}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0xa, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000002080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x140) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 1.36827079s ago: executing program 1 (id=3567): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0xfffffff2, 0x9, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0xffffffffffffff82, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.222033201s ago: executing program 0 (id=3568): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0x8, 0x100000001}, 0x880, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1, 0x2, 0xab, 0x6, 0x0, 0x3, 0x60020, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0xa081, 0x7, 0xf, 0x7, 0x7ff, 0x400, 0x1, 0x0, 0x3, 0x0, 0x8}, 0xffffffffffffffff, 0xd, r2, 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000030250000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018400000fcffffff0000000000000000180000007f0000000000000004000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) sendmsg$kcm(r4, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180fffffffffffffff000002cd6", 0x28}, {&(0x7f0000000180)="d5298969a8", 0x5}], 0x2, 0x0, 0x0, 0x39c}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0xa, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000002080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x140) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 1.000891233s ago: executing program 2 (id=3569): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000d"], 0x0, 0x66, 0x0, 0x8}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004200000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000080)="5490c67e3f8a2f0c3fc72996fff1d5a147f40646744c13c1b9f966cc4a5366eca2b0ed82cfca2e10075621e43d5866b7a1806392796ef5bd6907693b0cd1e4437896d4ce9a3b4820093fd946e9c47dc4c63ba2085b180e8187bb17b06cafd7ee3191691007ea4ffcb22649b2713fdc3aa639ecb0163fd7766d97b6898fca060a756ced3d3d859b34adba37a2633769382fc21222c2b9ff4517f56c7eb019b9741503711f52c0c919bbdd36ff5f8c", &(0x7f00000001c0)}, 0x20) 898.921423ms ago: executing program 1 (id=3570): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket$kcm(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 831.628603ms ago: executing program 2 (id=3571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990500000a", @ANYRES64=0x0], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r0, 0x0, 0x1ba8847c99}, 0x38) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f00000002c0)=@nfc_llcp={0x27, 0x0, 0x0, 0x1, 0x1, 0x7, "062e37bc05a423199db679083a83fdc86d8a5e4c268b54278618db91b897a9bf3ebba4675755223149b7f8f5e10b987f8639cca3e17e4083d1b2774709d905"}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)="81611eb47a4895a05b2f1d93d86893cac15fb0dbda201ee5236ca7b808b40889c4850224030ffeb3abd475e0e2fcac8f5e5988e8546c2be1a7097d7beebaea3adfd4c2296d2b6b6f794dbe5fbe01890ce56b00e57cab09bdc23212d72df4b16113883d12d95a5f8a6376fa27ae2249c842b2d4d61ed8270412158030029fb5d4ad9391a5a5b7a25de2a1b618247cde37809340fb81317fda7434f317594ee07a2c73eb1b36843edf8e3374e163503be2710adcfa3f87dc5e8dad", 0xba}, {&(0x7f00000005c0)="3b7a43d635ef3d145995211dba6d1dddf39b6b804d21717d7fc9ff3af3aeea65d4b29cd5cb4b48273880b477f62529e97c2394906c68dbbdf54d1ad01d2435cf86c34154fd0d5a9e1e7b782c2ef2ec42836b5d3a64a925633f6825eb04e42634eec5ae5928920ebb57f0aec856717ec623eb27a7883a85ee86db26a992fad33f2472440434a59b186937592b8525a8f5a3fadf99b8956b097e4260bf907860c60334c81a2e42f9b45daafea5f597d520769eb0b6bfc07d0e", 0xb8}, {&(0x7f0000000680)="986ba35b3bb937443b12e7deff7e475e2a16c6279096def4f463de593e68637ef45996d34cc53aba7a73c0a66275fec288a4717f16e78f825e7ac0af943cd89ad81ff446d8d29bd93865aea5e12cd9bf55bc720489e4618ff6dff4f90007ff025d9c1f92f57d4af5675f6d024e50c1a1b71774ebec0b8730ad9045cd7f4d460e5555f9908bf07ee48c067b3b0a0ee02ed99c63d82ac8c243e2fe921c6ea44db33532d31506df39e56675e7a7eed0cac6721190384dba07a14011c03ccefa13941620ac93af0fdbe31d8993d30475bfa7ca8a103a5611d7e98b0e0dab6773553733eea20b", 0xe4}], 0x3, &(0x7f0000000780)=[{0x38, 0x118, 0x1000, "50c859cef628ca0a1d19d242cd6b4cad9f8a28ff6336b9e3c48d0c13ffb90d4b8657e848"}, {0x78, 0x112, 0x5, "a792b4e17bd0bec9b68d4c84a9d7dcccb3b954d5d6d11f257b583c526c32c1f59b7c9e74c849a30a9b8c990af4c73c11d347a368219bde8b0d3bcd7d0931ebd5d6ed74a33eb90e23878599b0a264e1a413b4440fd4b4cb88a75bee33cd2a36d6aa2ece3acc86b3"}, {0x70, 0x103, 0x0, "e0c6d2efee6801bac3e66c6edb0f441c13a50c9978d13ca77604c56b6da250b008a14bba3387e66527b7cf05b920fcf60dff56dd6d8b5ae7754eae8b8b3b499610d2a46b50866451c9518f8fc5efc0e0c11a522be79868abc9e3ec82"}], 0x120}, 0x4000) close(r5) 786.942354ms ago: executing program 0 (id=3572): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) close(r1) recvmsg$unix(r0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) 710.576495ms ago: executing program 3 (id=3573): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000040800000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x13, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x4a) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map=r4, r5, 0x2f, 0x2028, 0x4, @void, @void, @value=0xffffffffffffffff}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r2, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6e, &(0x7f0000000780)=[{}, {}], 0x10, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1c, 0x3, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, @ldst={0x2, 0x1, 0x1, 0x8, 0xb, 0x30, 0x4}], &(0x7f0000000280)='GPL\x00', 0x3, 0xf, &(0x7f00000002c0)=""/15, 0x41000, 0x1, '\x00', 0x0, @fallback=0x17, r4, 0x8, &(0x7f0000000300)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x4, 0x62c9cf9e, 0x6}, 0x10, r6, r3, 0x8, &(0x7f00000009c0)=[r0, r0], &(0x7f0000000a00)=[{0x3, 0x5, 0x5, 0x4}, {0x2, 0x2, 0xc, 0x8}, {0x4, 0x3, 0x10, 0xa}, {0x4, 0x2, 0x10, 0x4}, {0x3, 0x4, 0x1, 0x6}, {0x1, 0x4, 0xa}, {0x5, 0x2, 0x2, 0x9}, {0x0, 0x1, 0xf, 0x4}], 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r7 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000002000000080000004000000042", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x7b, &(0x7f00000001c0)=""/123}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x80, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000bc0)={'bond_slave_1\x00', 0x10}) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000100)='syzkaller\x00') 619.611216ms ago: executing program 1 (id=3574): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b85, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000280), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x258}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 494.555246ms ago: executing program 0 (id=3575): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r0) close(r1) 447.070297ms ago: executing program 1 (id=3576): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="fdffffff00"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000015cc00"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000015006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x400}, 0x100e64, 0xc78, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}, 0x21) setsockopt$sock_attach_bpf(r3, 0x84, 0xd, &(0x7f0000000000), 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000340)=0x1) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x1, 0x9, 0x7e, 0xf3, 0x0, 0x2, 0x826, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x7}, 0x400, 0x8001, 0xbf4, 0x4a3f0689f9cb4134, 0x7, 0x0, 0x5, 0x0, 0x9, 0x0, 0xb}, 0xffffffffffffffff, 0x5, r1, 0x5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7c2}) 397.464177ms ago: executing program 2 (id=3577): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket$kcm(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 2) 347.685977ms ago: executing program 3 (id=3578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990500000a", @ANYRES64=0x0], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r0, 0x0, 0x1ba8847c99}, 0x38) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)=@nfc_llcp={0x27, 0x0, 0x0, 0x1, 0x1, 0x7, "062e37bc05a423199db679083a83fdc86d8a5e4c268b54278618db91b897a9bf3ebba4675755223149b7f8f5e10b987f8639cca3e17e4083d1b2774709d905"}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)="81611eb47a4895a05b2f1d93d86893cac15fb0dbda201ee5236ca7b808b40889c4850224030ffeb3abd475e0e2fcac8f5e5988e8546c2be1a7097d7beebaea3adfd4c2296d2b6b6f794dbe5fbe01890ce56b00e57cab09bdc23212d72df4b16113883d12d95a5f8a6376fa27ae2249c842b2d4d61ed8270412158030029fb5d4ad9391a5a5b7a25de2a1b618247cde37809340fb81317fda7434f317594ee07a2c73eb1b36843edf8e3374e163503be2710adcfa3f87dc5e8dad", 0xba}, {&(0x7f00000005c0)="3b7a43d635ef3d145995211dba6d1dddf39b6b804d21717d7fc9ff3af3aeea65d4b29cd5cb4b48273880b477f62529e97c2394906c68dbbdf54d1ad01d2435cf86c34154fd0d5a9e1e7b782c2ef2ec42836b5d3a64a925633f6825eb04e42634eec5ae5928920ebb57f0aec856717ec623eb27a7883a85ee86db26a992fad33f2472440434a59b186937592b8525a8f5a3fadf99b8956b097e4260bf907860c60334c81a2e42f9b45daafea5f597d520769eb0b6bfc07d0e", 0xb8}, {&(0x7f0000000680)="986ba35b3bb937443b12e7deff7e475e2a16c6279096def4f463de593e68637ef45996d34cc53aba7a73c0a66275fec288a4717f16e78f825e7ac0af943cd89ad81ff446d8d29bd93865aea5e12cd9bf55bc720489e4618ff6dff4f90007ff025d9c1f92f57d4af5675f6d024e50c1a1b71774ebec0b8730ad9045cd7f4d460e5555f9908bf07ee48c067b3b0a0ee02ed99c63d82ac8c243e2fe921c6ea44db33532d31506df39e56675e7a7eed0cac6721190384dba07a14011c03ccefa13941620ac93af0fdbe31d8993d30475bfa7ca8a103a5611d7e98b0e0dab6773553733eea20b", 0xe4}], 0x3, &(0x7f0000000780)=[{0x38, 0x118, 0x1000, "50c859cef628ca0a1d19d242cd6b4cad9f8a28ff6336b9e3c48d0c13ffb90d4b8657e848"}, {0x78, 0x112, 0x5, "a792b4e17bd0bec9b68d4c84a9d7dcccb3b954d5d6d11f257b583c526c32c1f59b7c9e74c849a30a9b8c990af4c73c11d347a368219bde8b0d3bcd7d0931ebd5d6ed74a33eb90e23878599b0a264e1a413b4440fd4b4cb88a75bee33cd2a36d6aa2ece3acc86b3"}, {0x70, 0x103, 0x0, "e0c6d2efee6801bac3e66c6edb0f441c13a50c9978d13ca77604c56b6da250b008a14bba3387e66527b7cf05b920fcf60dff56dd6d8b5ae7754eae8b8b3b499610d2a46b50866451c9518f8fc5efc0e0c11a522be79868abc9e3ec82"}], 0x120}, 0x4000) close(r5) 101.138289ms ago: executing program 0 (id=3579): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000d"], 0x0, 0x66, 0x0, 0x8}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004200000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000080)="5490c67e3f8a2f0c3fc72996fff1d5a147f40646744c13c1b9f966cc4a5366eca2b0ed82cfca2e10075621e43d5866b7a1806392796ef5bd6907693b0cd1e4437896d4ce9a3b4820093fd946e9c47dc4c63ba2085b180e8187bb17b06cafd7ee3191691007ea4ffcb22649b2713fdc3aa639ecb0163fd7766d97b6898fca060a756ced3d3d859b34adba37a2633769382fc21222c2b9ff4517f56c7eb019b9741503711f52c0c919bbdd36ff5f8c", &(0x7f00000001c0)}, 0x20) 0s ago: executing program 0 (id=3580): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0xfffffff2, 0x9, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0xffffffffffffff82, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): etlink: 132 bytes leftover after parsing attributes in process `syz.2.2414'. [ 342.307647][T11743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.342353][T11743] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.363710][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.370873][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.386126][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.393547][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.706829][T11816] netlink: 'syz.2.2417': attribute type 10 has an invalid length. [ 342.747927][T11743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.882278][T11743] veth0_vlan: entered promiscuous mode [ 342.925099][T11743] veth1_vlan: entered promiscuous mode [ 343.017151][T11743] veth0_macvtap: entered promiscuous mode [ 343.036276][T11743] veth1_macvtap: entered promiscuous mode [ 343.110892][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.168563][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.189056][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.206678][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.217899][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.230361][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.240397][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.257418][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.267402][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.278593][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.329941][T11743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.372547][T11825] netlink: 'syz.1.2419': attribute type 10 has an invalid length. [ 343.404610][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.424934][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.435197][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.453197][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.465333][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.476179][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.486795][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.498195][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.516246][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.529126][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.547761][T11743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.608955][T11830] netlink: 'syz.3.2420': attribute type 10 has an invalid length. [ 343.646336][T11743] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.717535][T11743] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.735543][T11743] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.761634][ T5787] Bluetooth: hci0: command tx timeout [ 343.792105][T11743] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.935008][T11833] netlink: 'syz.1.2421': attribute type 3 has an invalid length. [ 343.988114][T11833] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2421'. [ 344.245936][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.272424][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.322097][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.331083][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.837586][T11847] netlink: 'syz.3.2426': attribute type 10 has an invalid length. [ 345.315787][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.326274][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.338498][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.348184][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.356956][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 345.371673][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.667459][ T3514] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.706012][T11854] netlink: 'syz.3.2428': attribute type 10 has an invalid length. [ 345.734081][T11862] netlink: 'syz.0.2429': attribute type 10 has an invalid length. [ 345.820615][T11862] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.839804][ T5787] Bluetooth: hci0: command tx timeout [ 345.845765][T11862] bond0: (slave team0): Enslaving as an active interface with an up link [ 345.877785][ T3514] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.917373][T11866] netlink: 'syz.2.2432': attribute type 3 has an invalid length. [ 345.926101][T11866] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.2432'. [ 346.017072][ T3514] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.115076][ T3514] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.689776][T11851] chnl_net:caif_netlink_parms(): no params data found [ 347.113512][T11897] validate_nla: 2 callbacks suppressed [ 347.113529][T11897] netlink: 'syz.3.2438': attribute type 10 has an invalid length. [ 347.396722][T11851] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.426209][T11851] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.439334][ T5787] Bluetooth: hci3: command tx timeout [ 347.460376][T11851] bridge_slave_0: entered allmulticast mode [ 347.492565][T11851] bridge_slave_0: entered promiscuous mode [ 347.523322][T11904] netlink: 'syz.2.2441': attribute type 10 has an invalid length. [ 347.584575][T11920] netlink: 'syz.3.2443': attribute type 3 has an invalid length. [ 347.592939][T11920] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.2443'. [ 347.593472][T11912] netlink: 'syz.0.2442': attribute type 10 has an invalid length. [ 347.774177][T11851] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.787737][T11851] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.797210][T11851] bridge_slave_1: entered allmulticast mode [ 347.805237][T11851] bridge_slave_1: entered promiscuous mode [ 347.958683][ T5787] Bluetooth: hci0: command tx timeout [ 348.143506][T11922] netlink: 'syz.3.2444': attribute type 3 has an invalid length. [ 348.162935][T11922] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.2444'. [ 348.272509][T11851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.311572][T11851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.459712][T11926] netlink: 'syz.2.2446': attribute type 3 has an invalid length. [ 348.467867][T11926] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.2446'. [ 348.654477][T11851] team0: Port device team_slave_0 added [ 348.722231][T11851] team0: Port device team_slave_1 added [ 348.775988][T11928] netlink: 'syz.0.2445': attribute type 10 has an invalid length. [ 348.907526][T11851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.924892][T11851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.081131][T11851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.104630][T11851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.119262][T11851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.168972][T11851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.192999][T11949] netlink: 'syz.2.2450': attribute type 10 has an invalid length. [ 349.519271][ T5787] Bluetooth: hci3: command tx timeout [ 349.602832][T11851] hsr_slave_0: entered promiscuous mode [ 349.615379][T11851] hsr_slave_1: entered promiscuous mode [ 349.625442][T11851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.646244][T11851] Cannot create hsr debugfs directory [ 349.738256][ T3514] hsr_slave_0: left promiscuous mode [ 349.754445][ T3514] hsr_slave_1: left promiscuous mode [ 349.778944][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.786404][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.800036][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.807550][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.822662][ T3514] dummy0: left allmulticast mode [ 349.833268][ T3514] bridge0: port 4(dummy0) entered disabled state [ 349.843090][ T3514] bridge_slave_1: left allmulticast mode [ 349.848899][ T3514] bridge_slave_1: left promiscuous mode [ 349.854773][ T3514] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.864165][ T3514] bridge_slave_0: left allmulticast mode [ 349.871561][ T3514] bridge_slave_0: left promiscuous mode [ 349.877380][ T3514] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.903352][ T3514] veth1_macvtap: left promiscuous mode [ 349.909334][ T3514] veth1_vlan: left promiscuous mode [ 349.915335][ T3514] veth0_vlan: left promiscuous mode [ 350.055559][ T3514] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 350.324374][ T3514] team0 (unregistering): Port device team_slave_1 removed [ 350.361062][ T3514] team0 (unregistering): Port device team_slave_0 removed [ 350.397439][ T3514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.654404][ T3514] bond0 (unregistering): (slave team0): Releasing backup interface [ 350.750758][ T3514] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 350.760617][ T3514] bond0 (unregistering): Released all slaves [ 351.575535][T11851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 351.586216][T11851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 351.596617][T11851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 351.598514][ T5787] Bluetooth: hci3: command tx timeout [ 351.612608][T11851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 351.734217][T11851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.768931][T11851] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.803076][ T2106] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.810291][ T2106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.869662][ T2106] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.876873][ T2106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.114837][T11851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.196098][T11990] netlink: 'syz.0.2452': attribute type 10 has an invalid length. [ 352.215947][T11988] netlink: 'syz.3.2454': attribute type 3 has an invalid length. [ 352.234359][T11988] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.2454'. [ 352.756311][T12007] netlink: 'syz.3.2456': attribute type 3 has an invalid length. [ 352.792391][T12007] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2456'. [ 352.844127][T12004] netlink: 'syz.0.2455': attribute type 10 has an invalid length. [ 352.993181][T11851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.150381][T11851] veth0_vlan: entered promiscuous mode [ 353.185251][T11851] veth1_vlan: entered promiscuous mode [ 353.281060][T11851] veth0_macvtap: entered promiscuous mode [ 353.352502][T11851] veth1_macvtap: entered promiscuous mode [ 353.382412][T12024] netlink: 'syz.0.2460': attribute type 19 has an invalid length. [ 353.400271][T12024] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2460'. [ 353.478001][T11851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.522893][T11851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.553927][T11851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.585245][T11851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.674986][T11851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.678656][ T5787] Bluetooth: hci3: command tx timeout [ 353.727187][T11851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.757784][T11851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.807568][T11851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.818036][T11851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.830820][T11851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.857988][T11851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.889187][T11851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.917509][T11851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.955179][T11851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.988092][T11851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.010446][T11851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.034964][T11851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.046172][T11851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.057177][T11851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.067923][T11851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.079655][T11851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.140466][T11851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.191050][T12024] netlink: 'syz.0.2460': attribute type 15 has an invalid length. [ 354.233394][T12024] netlink: 'syz.0.2460': attribute type 7 has an invalid length. [ 354.340411][T11851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.388645][T11851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.397404][T11851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.449444][T11851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.642832][T12042] netlink: 'syz.0.2463': attribute type 3 has an invalid length. [ 354.660022][T12042] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2463'. [ 355.206447][T12053] netlink: 'syz.0.2465': attribute type 3 has an invalid length. [ 355.234991][T12051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.252154][T12053] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2465'. [ 355.479078][T12065] netlink: 'syz.2.2467': attribute type 3 has an invalid length. [ 355.487282][T12065] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2467'. [ 355.512939][ T2106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.537651][ T2106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.711230][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.758668][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.980004][T12069] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2475'. [ 356.490645][T12084] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2425'. [ 356.607182][T12081] syzkaller0: entered promiscuous mode [ 356.613322][T12081] syzkaller0: entered allmulticast mode [ 356.656524][ T66] syzkaller0: tun_net_xmit 48 [ 357.278180][T12103] validate_nla: 2 callbacks suppressed [ 357.278224][T12103] netlink: 'syz.1.2473': attribute type 3 has an invalid length. [ 357.351249][T12103] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2473'. [ 357.716748][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.732331][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.748514][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.756810][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.765047][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 357.779802][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.897302][T12119] netlink: 'syz.1.2476': attribute type 3 has an invalid length. [ 357.912361][T12119] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2476'. [ 359.840872][ T5791] Bluetooth: hci1: command tx timeout [ 359.860482][T12092] netlink: 'syz.0.2470': attribute type 10 has an invalid length. [ 360.440080][T12149] netlink: 'syz.0.2479': attribute type 3 has an invalid length. [ 360.507613][T12149] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2479'. [ 360.568687][T12153] netlink: 'syz.1.2481': attribute type 10 has an invalid length. [ 360.750351][T12153] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.807852][T12153] bond0: (slave team0): Enslaving as an active interface with an up link [ 360.845273][T12115] chnl_net:caif_netlink_parms(): no params data found [ 361.117256][T12115] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.124800][T12115] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.133153][T12115] bridge_slave_0: entered allmulticast mode [ 361.140738][T12115] bridge_slave_0: entered promiscuous mode [ 361.150659][T12115] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.157899][T12115] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.165787][T12115] bridge_slave_1: entered allmulticast mode [ 361.175343][T12115] bridge_slave_1: entered promiscuous mode [ 361.223520][T12163] netlink: 'syz.0.2482': attribute type 3 has an invalid length. [ 361.245244][T12163] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2482'. [ 361.354688][T12115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.379820][T12115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.403691][T12168] netlink: 'syz.3.2485': attribute type 19 has an invalid length. [ 361.414551][T12168] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2485'. [ 361.479805][T12168] netlink: 'syz.3.2485': attribute type 15 has an invalid length. [ 361.487680][T12168] netlink: 'syz.3.2485': attribute type 7 has an invalid length. [ 361.507365][T12115] team0: Port device team_slave_0 added [ 361.531674][T12115] team0: Port device team_slave_1 added [ 361.672426][T12115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.688707][T12115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.736952][T12115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.771578][T12173] netlink: 'syz.0.2486': attribute type 10 has an invalid length. [ 361.804180][T12115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.828554][T12115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.868449][T12115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.918995][ T5791] Bluetooth: hci1: command tx timeout [ 362.071673][T12180] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2490'. [ 362.106942][T12115] hsr_slave_0: entered promiscuous mode [ 362.117135][T12115] hsr_slave_1: entered promiscuous mode [ 362.157066][T12115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.165247][T12115] Cannot create hsr debugfs directory [ 362.247405][T12187] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2493'. [ 362.432727][T12196] validate_nla: 2 callbacks suppressed [ 362.432743][T12196] netlink: 'syz.1.2495': attribute type 19 has an invalid length. [ 362.446758][T12196] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2495'. [ 362.504750][T12196] netlink: 'syz.1.2495': attribute type 15 has an invalid length. [ 362.515766][T12196] netlink: 'syz.1.2495': attribute type 7 has an invalid length. [ 362.682558][T12115] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.914438][T12115] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.957771][T12203] netlink: 'syz.1.2504': attribute type 19 has an invalid length. [ 362.977455][T12203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2504'. [ 363.019109][T12208] netlink: 'syz.1.2504': attribute type 15 has an invalid length. [ 363.059339][T12208] netlink: 'syz.1.2504': attribute type 7 has an invalid length. [ 363.167829][T12115] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.237198][T12212] netlink: 'syz.3.2499': attribute type 3 has an invalid length. [ 363.268147][T12212] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.2499'. [ 363.365756][T12115] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.582077][T12220] netlink: 'syz.3.2502': attribute type 3 has an invalid length. [ 363.598668][T12220] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2502'. [ 363.672132][T12222] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.2501'. [ 363.850141][T12115] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 363.862645][T12115] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 363.891900][T12115] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 363.974311][T12115] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 363.998833][ T5787] Bluetooth: hci1: command tx timeout [ 364.404664][T12115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.465075][T12115] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.513493][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.520707][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.563686][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.570879][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.600690][T12247] netlink: 'syz.3.2510': attribute type 19 has an invalid length. [ 364.617841][T12249] netlink: 'syz.1.2511': attribute type 3 has an invalid length. [ 364.628773][T12247] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2510'. [ 364.677802][T12249] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2511'. [ 365.020052][T12262] IPv6: pim6reg1: Disabled Multicast RS [ 365.057890][T12262] FAULT_INJECTION: forcing a failure. [ 365.057890][T12262] name failslab, interval 1, probability 0, space 0, times 0 [ 365.088500][T12262] CPU: 1 PID: 12262 Comm: syz.0.2515 Not tainted syzkaller #0 [ 365.096009][T12262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 365.106076][T12262] Call Trace: [ 365.109367][T12262] [ 365.112310][T12262] dump_stack_lvl+0x16c/0x230 [ 365.117018][T12262] ? show_regs_print_info+0x20/0x20 [ 365.122227][T12262] ? load_image+0x3b0/0x3b0 [ 365.126740][T12262] ? mark_lock+0x94/0x320 [ 365.131096][T12262] should_fail_ex+0x39d/0x4d0 [ 365.135807][T12262] should_failslab+0x9/0x20 [ 365.140326][T12262] slab_pre_alloc_hook+0x59/0x310 [ 365.145383][T12262] kmem_cache_alloc_node+0x60/0x330 [ 365.150616][T12262] ? __alloc_skb+0x108/0x2c0 [ 365.155244][T12262] __alloc_skb+0x108/0x2c0 [ 365.159691][T12262] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 365.165027][T12262] rtmsg_ifinfo+0x8c/0x1a0 [ 365.169473][T12262] __dev_notify_flags+0xf5/0x2e0 [ 365.174426][T12262] ? __dev_change_flags+0x6a0/0x6a0 [ 365.179647][T12262] ? __dev_change_flags+0x4bf/0x6a0 [ 365.184870][T12262] ? dev_get_flags+0x1c0/0x1c0 [ 365.189651][T12262] ? rcu_is_watching+0x15/0xb0 [ 365.194430][T12262] ? trace_contention_end+0x39/0xe0 [ 365.199664][T12262] ? __mutex_lock+0x304/0xcc0 [ 365.204367][T12262] dev_change_flags+0xe8/0x1a0 [ 365.209152][T12262] dev_ifsioc+0x6a7/0xe20 [ 365.213492][T12262] ? dev_ioctl+0x1170/0x1170 [ 365.218089][T12262] ? dev_load+0x21/0x1f0 [ 365.222346][T12262] ? dev_load+0x21/0x1f0 [ 365.226620][T12262] dev_ioctl+0x7e2/0x1170 [ 365.230976][T12262] sock_do_ioctl+0x226/0x2f0 [ 365.235596][T12262] ? sock_show_fdinfo+0xb0/0xb0 [ 365.240478][T12262] sock_ioctl+0x623/0x7a0 [ 365.244825][T12262] ? sock_poll+0x3d0/0x3d0 [ 365.249268][T12262] ? bpf_lsm_file_ioctl+0x9/0x10 [ 365.254209][T12262] ? security_file_ioctl+0x80/0xa0 [ 365.259335][T12262] ? sock_poll+0x3d0/0x3d0 [ 365.263763][T12262] __se_sys_ioctl+0xfd/0x170 [ 365.268375][T12262] do_syscall_64+0x55/0xb0 [ 365.272801][T12262] ? clear_bhb_loop+0x40/0x90 [ 365.277487][T12262] ? clear_bhb_loop+0x40/0x90 [ 365.282175][T12262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.288072][T12262] RIP: 0033:0x7f5f6238efc9 [ 365.292501][T12262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.312161][T12262] RSP: 002b:00007f5f63291038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.320590][T12262] RAX: ffffffffffffffda RBX: 00007f5f625e5fa0 RCX: 00007f5f6238efc9 [ 365.328567][T12262] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 0000000000000007 [ 365.336541][T12262] RBP: 00007f5f63291090 R08: 0000000000000000 R09: 0000000000000000 [ 365.344517][T12262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.352509][T12262] R13: 00007f5f625e6038 R14: 00007f5f625e5fa0 R15: 00007ffee2bbf018 [ 365.360523][T12262] [ 365.371480][T12270] FAULT_INJECTION: forcing a failure. [ 365.371480][T12270] name failslab, interval 1, probability 0, space 0, times 0 [ 365.391248][T12270] CPU: 0 PID: 12270 Comm: syz.1.2517 Not tainted syzkaller #0 [ 365.398742][T12270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 365.408820][T12270] Call Trace: [ 365.412140][T12270] [ 365.415099][T12270] dump_stack_lvl+0x16c/0x230 [ 365.419820][T12270] ? show_regs_print_info+0x20/0x20 [ 365.425054][T12270] ? load_image+0x3b0/0x3b0 [ 365.429599][T12270] ? __might_sleep+0xe0/0xe0 [ 365.434213][T12270] ? __lock_acquire+0x7c80/0x7c80 [ 365.439255][T12270] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 365.444843][T12270] should_fail_ex+0x39d/0x4d0 [ 365.449571][T12270] should_failslab+0x9/0x20 [ 365.454111][T12270] slab_pre_alloc_hook+0x59/0x310 [ 365.456125][T12115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.459153][T12270] kmem_cache_alloc_lru+0x4d/0x2e0 [ 365.459182][T12270] ? __d_alloc+0x31/0x730 [ 365.459213][T12270] __d_alloc+0x31/0x730 [ 365.459238][T12270] ? alloc_fd+0x58f/0x630 [ 365.483931][T12270] d_alloc_pseudo+0x1d/0x70 [ 365.488462][T12270] alloc_file_pseudo+0xcc/0x200 [ 365.493368][T12270] ? alloc_empty_backing_file+0xe0/0xe0 [ 365.498969][T12270] ? _raw_spin_unlock+0x28/0x40 [ 365.503846][T12270] ? alloc_fd+0x58f/0x630 [ 365.508204][T12270] sock_alloc_file+0xb7/0x280 [ 365.512917][T12270] __sys_socket+0x13d/0x1a0 [ 365.517462][T12270] __x64_sys_socket+0x7a/0x90 [ 365.522175][T12270] do_syscall_64+0x55/0xb0 [ 365.526618][T12270] ? clear_bhb_loop+0x40/0x90 [ 365.531324][T12270] ? clear_bhb_loop+0x40/0x90 [ 365.536047][T12270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.541969][T12270] RIP: 0033:0x7f26d4d8efc9 [ 365.546397][T12270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.566016][T12270] RSP: 002b:00007f26d5ce9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 365.574437][T12270] RAX: ffffffffffffffda RBX: 00007f26d4fe5fa0 RCX: 00007f26d4d8efc9 [ 365.582409][T12270] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000025 [ 365.590379][T12270] RBP: 00007f26d5ce9090 R08: 0000000000000000 R09: 0000000000000000 [ 365.598356][T12270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.606340][T12270] R13: 00007f26d4fe6038 R14: 00007f26d4fe5fa0 R15: 00007ffc7d897118 [ 365.614340][T12270] [ 365.676875][T12115] veth0_vlan: entered promiscuous mode [ 365.779725][T12115] veth1_vlan: entered promiscuous mode [ 365.815763][T12277] FAULT_INJECTION: forcing a failure. [ 365.815763][T12277] name failslab, interval 1, probability 0, space 0, times 0 [ 365.846725][T12277] CPU: 1 PID: 12277 Comm: syz.0.2520 Not tainted syzkaller #0 [ 365.854269][T12277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 365.864482][T12277] Call Trace: [ 365.867826][T12277] [ 365.870178][T12115] veth0_macvtap: entered promiscuous mode [ 365.870786][T12277] dump_stack_lvl+0x16c/0x230 [ 365.881288][T12277] ? show_regs_print_info+0x20/0x20 [ 365.886587][T12277] ? load_image+0x3b0/0x3b0 [ 365.891222][T12277] ? __might_sleep+0xe0/0xe0 [ 365.895923][T12277] ? __lock_acquire+0x7c80/0x7c80 [ 365.898197][T12115] veth1_macvtap: entered promiscuous mode [ 365.900987][T12277] ? perf_trace_lock+0x2ed/0x380 [ 365.901051][T12277] should_fail_ex+0x39d/0x4d0 [ 365.916553][T12277] should_failslab+0x9/0x20 [ 365.921137][T12277] slab_pre_alloc_hook+0x59/0x310 [ 365.926242][T12277] kmem_cache_alloc_lru+0x4d/0x2e0 [ 365.931394][T12277] ? __d_alloc+0x31/0x730 [ 365.935809][T12277] __d_alloc+0x31/0x730 [ 365.940012][T12277] ? alloc_fd+0x58f/0x630 [ 365.944391][T12277] d_alloc_pseudo+0x1d/0x70 [ 365.948941][T12277] alloc_file_pseudo+0xcc/0x200 [ 365.953847][T12277] ? alloc_empty_backing_file+0xe0/0xe0 [ 365.959455][T12277] ? _raw_spin_unlock+0x28/0x40 [ 365.964344][T12277] ? alloc_fd+0x58f/0x630 [ 365.968734][T12277] sock_alloc_file+0xb7/0x280 [ 365.973466][T12277] __sys_socket+0x13d/0x1a0 [ 365.978027][T12277] __x64_sys_socket+0x7a/0x90 [ 365.982757][T12277] do_syscall_64+0x55/0xb0 [ 365.987208][T12277] ? clear_bhb_loop+0x40/0x90 [ 365.991917][T12277] ? clear_bhb_loop+0x40/0x90 [ 365.996644][T12277] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.002593][T12277] RIP: 0033:0x7f5f6238efc9 [ 366.007052][T12277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.026702][T12277] RSP: 002b:00007f5f63291038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 366.035172][T12277] RAX: ffffffffffffffda RBX: 00007f5f625e5fa0 RCX: 00007f5f6238efc9 [ 366.043183][T12277] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 366.051189][T12277] RBP: 00007f5f63291090 R08: 0000000000000000 R09: 0000000000000000 [ 366.059200][T12277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.067202][T12277] R13: 00007f5f625e6038 R14: 00007f5f625e5fa0 R15: 00007ffee2bbf018 [ 366.075292][T12277] [ 366.126519][ T5787] Bluetooth: hci1: command tx timeout [ 366.146465][T12280] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2521'. [ 366.154581][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.167712][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.177638][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.188108][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.198180][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.211500][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.221580][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.232113][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.242462][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.253300][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.263204][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.273752][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.285537][T12115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.306234][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.317964][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.328891][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.348356][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.368616][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.385577][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.411312][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.432421][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.448350][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.460007][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.470168][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.482111][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.494006][T12115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.514698][T12115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.525229][T12115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.534051][T12115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.542816][T12115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.624955][T12285] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2523'. [ 366.783501][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.799931][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.854962][ T3546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.877409][ T3546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.026848][T12293] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2527'. [ 367.502440][T12306] validate_nla: 8 callbacks suppressed [ 367.502483][T12306] netlink: 'syz.3.2531': attribute type 3 has an invalid length. [ 367.585109][T12306] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2531'. [ 367.906202][T12314] netlink: 'syz.3.2533': attribute type 15 has an invalid length. [ 367.940151][T12314] netlink: 'syz.3.2533': attribute type 7 has an invalid length. [ 368.094336][T12315] netlink: 'syz.1.2534': attribute type 3 has an invalid length. [ 368.148559][T12315] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2534'. [ 368.356703][T12320] netlink: 'syz.0.2536': attribute type 3 has an invalid length. [ 368.386388][T12320] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2536'. [ 368.623768][T12330] netlink: 'syz.2.2541': attribute type 3 has an invalid length. [ 368.652589][T12330] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2541'. [ 368.699429][T12328] netlink: 'syz.1.2539': attribute type 10 has an invalid length. [ 368.788578][T12336] netlink: 'syz.0.2543': attribute type 10 has an invalid length. [ 369.204074][T12344] netlink: 'syz.1.2545': attribute type 15 has an invalid length. [ 369.222500][T12344] netlink: 'syz.1.2545': attribute type 7 has an invalid length. [ 369.585888][T12351] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2549'. [ 370.074185][T12359] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.2552'. [ 370.106477][T12365] FAULT_INJECTION: forcing a failure. [ 370.106477][T12365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.137252][T12365] CPU: 1 PID: 12365 Comm: syz.3.2556 Not tainted syzkaller #0 [ 370.144785][T12365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 370.154901][T12365] Call Trace: [ 370.158224][T12365] [ 370.161198][T12365] dump_stack_lvl+0x16c/0x230 [ 370.165941][T12365] ? show_regs_print_info+0x20/0x20 [ 370.171193][T12365] ? load_image+0x3b0/0x3b0 [ 370.175769][T12365] ? __might_fault+0xaa/0x120 [ 370.180535][T12365] ? __lock_acquire+0x7c80/0x7c80 [ 370.185640][T12365] should_fail_ex+0x39d/0x4d0 [ 370.190403][T12365] _copy_from_user+0x2f/0xe0 [ 370.195053][T12365] ____sys_sendmsg+0x30d/0x950 [ 370.199902][T12365] ? __sys_sendmsg_sock+0x30/0x30 [ 370.204981][T12365] ? __import_iovec+0x5f2/0x860 [ 370.209929][T12365] ? import_iovec+0x73/0xa0 [ 370.214500][T12365] ___sys_sendmsg+0x220/0x290 [ 370.219242][T12365] ? __sys_sendmsg+0x270/0x270 [ 370.224126][T12365] ? __lock_acquire+0x7c80/0x7c80 [ 370.229282][T12365] __se_sys_sendmsg+0x1a5/0x270 [ 370.234192][T12365] ? __x64_sys_sendmsg+0x80/0x80 [ 370.239234][T12365] ? lockdep_hardirqs_on+0x98/0x150 [ 370.244483][T12365] do_syscall_64+0x55/0xb0 [ 370.248942][T12365] ? clear_bhb_loop+0x40/0x90 [ 370.253665][T12365] ? clear_bhb_loop+0x40/0x90 [ 370.258400][T12365] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.264330][T12365] RIP: 0033:0x7fda08b8efc9 [ 370.268787][T12365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.288432][T12365] RSP: 002b:00007fda099f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.296903][T12365] RAX: ffffffffffffffda RBX: 00007fda08de5fa0 RCX: 00007fda08b8efc9 [ 370.304923][T12365] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000005 [ 370.312956][T12365] RBP: 00007fda099f7090 R08: 0000000000000000 R09: 0000000000000000 [ 370.320970][T12365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.329001][T12365] R13: 00007fda08de6038 R14: 00007fda08de5fa0 R15: 00007ffc2556ab48 [ 370.337066][T12365] [ 370.843141][T12374] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2559'. [ 370.918909][T12369] team0: Port device wlan1 added [ 371.070443][T12369] syz.0.2558 (12369) used greatest stack depth: 18408 bytes left [ 371.409039][T12387] -1: renamed from syzkaller0 [ 371.682734][T12388] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2564'. [ 372.306163][T12409] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.381320][T12409] bond0: (slave team0): Enslaving as an active interface with an up link [ 372.670789][T12422] tap0: tun_chr_ioctl cmd 1074812118 [ 372.686425][T12418] validate_nla: 9 callbacks suppressed [ 372.686439][T12418] netlink: 'syz.0.2574': attribute type 10 has an invalid length. [ 373.190829][T12439] netlink: 'syz.3.2584': attribute type 10 has an invalid length. [ 374.282506][T12439] team0: Port device wlan1 added [ 374.344791][T12448] netlink: 'syz.0.2585': attribute type 10 has an invalid length. [ 374.483995][T12459] netlink: 'syz.3.2589': attribute type 1 has an invalid length. [ 374.501367][T12459] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2589'. [ 374.524111][T12461] netlink: 'syz.2.2597': attribute type 15 has an invalid length. [ 374.534170][T12461] netlink: 'syz.2.2597': attribute type 7 has an invalid length. [ 374.708474][T12468] netlink: 'syz.0.2600': attribute type 15 has an invalid length. [ 374.748845][T12468] netlink: 'syz.0.2600': attribute type 7 has an invalid length. [ 375.078433][T12480] raw_sendmsg: syz.1.2598 forgot to set AF_INET. Fix it! [ 375.303565][T12489] netlink: 'syz.2.2599': attribute type 10 has an invalid length. [ 375.771199][T12496] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2603'. [ 375.802732][T12499] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2603'. [ 376.036715][T12502] netlink: 'syz.2.2604': attribute type 15 has an invalid length. [ 376.095295][T12505] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2605'. [ 377.298237][T12545] FAULT_INJECTION: forcing a failure. [ 377.298237][T12545] name failslab, interval 1, probability 0, space 0, times 0 [ 377.335235][T12545] CPU: 1 PID: 12545 Comm: syz.3.2622 Not tainted syzkaller #0 [ 377.342756][T12545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 377.352833][T12545] Call Trace: [ 377.356126][T12545] [ 377.359073][T12545] dump_stack_lvl+0x16c/0x230 [ 377.363781][T12545] ? show_regs_print_info+0x20/0x20 [ 377.369003][T12545] ? load_image+0x3b0/0x3b0 [ 377.373531][T12545] ? __lock_acquire+0x7c80/0x7c80 [ 377.378671][T12545] should_fail_ex+0x39d/0x4d0 [ 377.383477][T12545] should_failslab+0x9/0x20 [ 377.388009][T12545] slab_pre_alloc_hook+0x59/0x310 [ 377.393068][T12545] ? sk_prot_alloc+0xe7/0x210 [ 377.397767][T12545] ? sk_prot_alloc+0xe7/0x210 [ 377.402473][T12545] __kmem_cache_alloc_node+0x53/0x260 [ 377.407891][T12545] ? sk_prot_alloc+0xe7/0x210 [ 377.412597][T12545] __kmalloc+0xa4/0x240 [ 377.416798][T12545] sk_prot_alloc+0xe7/0x210 [ 377.421327][T12545] ? sk_alloc+0x24/0x360 [ 377.425602][T12545] sk_alloc+0x3a/0x360 [ 377.429699][T12545] ? bpf_ctx_init+0x163/0x1a0 [ 377.434393][T12545] ? bpf_prog_test_run_skb+0x268/0x11c0 [ 377.439966][T12545] bpf_prog_test_run_skb+0x39a/0x11c0 [ 377.445377][T12545] ? __fget_files+0x28/0x4d0 [ 377.450012][T12545] ? cpu_online+0x60/0x60 [ 377.454369][T12545] bpf_prog_test_run+0x321/0x390 [ 377.459334][T12545] __sys_bpf+0x440/0x800 [ 377.463607][T12545] ? bpf_link_show_fdinfo+0x350/0x350 [ 377.469012][T12545] ? lock_chain_count+0x20/0x20 [ 377.473893][T12545] __x64_sys_bpf+0x7c/0x90 [ 377.478329][T12545] do_syscall_64+0x55/0xb0 [ 377.482776][T12545] ? clear_bhb_loop+0x40/0x90 [ 377.487480][T12545] ? clear_bhb_loop+0x40/0x90 [ 377.492188][T12545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.498101][T12545] RIP: 0033:0x7fda08b8efc9 [ 377.502532][T12545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.522161][T12545] RSP: 002b:00007fda099f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.530597][T12545] RAX: ffffffffffffffda RBX: 00007fda08de5fa0 RCX: 00007fda08b8efc9 [ 377.538590][T12545] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 377.546572][T12545] RBP: 00007fda099f7090 R08: 0000000000000000 R09: 0000000000000000 [ 377.554574][T12545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.562567][T12545] R13: 00007fda08de6038 R14: 00007fda08de5fa0 R15: 00007ffc2556ab48 [ 377.570552][T12545] [ 377.688956][T12547] validate_nla: 9 callbacks suppressed [ 377.688970][T12547] netlink: 'syz.2.2623': attribute type 10 has an invalid length. [ 377.950650][T12552] netlink: 'syz.3.2624': attribute type 3 has an invalid length. [ 377.959924][T12552] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.2624'. [ 378.353663][T12557] netlink: 'syz.2.2625': attribute type 3 has an invalid length. [ 378.380342][T12557] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.2625'. [ 378.550901][ T66] hsr_slave_0: left promiscuous mode [ 378.564999][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.574397][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.613552][ T66] hsr_slave_1: left promiscuous mode [ 378.635679][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.674624][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.719177][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.799285][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.843351][ T66] dummy0: left allmulticast mode [ 378.858159][ T66] bridge0: port 4(dummy0) entered disabled state [ 378.882986][ T66] bridge_slave_1: left allmulticast mode [ 378.898355][ T66] bridge_slave_1: left promiscuous mode [ 378.904302][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.924763][ T66] bridge_slave_0: left allmulticast mode [ 378.934524][ T66] bridge_slave_0: left promiscuous mode [ 378.948492][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.981892][ T66] hsr_slave_0: left promiscuous mode [ 378.998872][ T66] hsr_slave_1: left promiscuous mode [ 379.017890][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.038044][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.055974][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.071685][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.083743][ T66] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 379.091853][ T66] batman_adv: batadv0: Removing interface: virt_wifi0 [ 379.099750][ T66] dummy0: left allmulticast mode [ 379.108879][ T66] bridge0: port 4(dummy0) entered disabled state [ 379.124833][ T66] bridge_slave_1: left allmulticast mode [ 379.131231][ T66] bridge_slave_1: left promiscuous mode [ 379.138019][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.151310][ T66] bridge_slave_0: left allmulticast mode [ 379.158979][ T66] bridge_slave_0: left promiscuous mode [ 379.166354][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.237327][ T66] veth1_macvtap: left promiscuous mode [ 379.244568][ T66] veth0_macvtap: left promiscuous mode [ 379.258597][ T66] veth1_vlan: left promiscuous mode [ 379.265267][ T66] veth0_vlan: left promiscuous mode [ 379.282321][ T66] veth1_macvtap: left promiscuous mode [ 379.298849][ T66] veth0_macvtap: left promiscuous mode [ 379.307131][ T66] veth1_vlan: left promiscuous mode [ 379.319229][ T66] veth0_vlan: left promiscuous mode [ 379.754867][ T66] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 380.101729][ T66] team0 (unregistering): Port device team_slave_1 removed [ 380.136960][ T66] team0 (unregistering): Port device team_slave_0 removed [ 380.173014][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.424552][ T66] bond0 (unregistering): (slave team0): Releasing backup interface [ 380.526043][ T66] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 380.536318][ T66] bond0 (unregistering): Released all slaves [ 380.631117][ T66] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 380.933849][ T66] team0 (unregistering): Port device team_slave_1 removed [ 380.972677][ T66] team0 (unregistering): Port device team_slave_0 removed [ 381.006225][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.266510][ T66] bond0 (unregistering): (slave team0): Releasing backup interface [ 381.376063][ T66] bond0 (unregistering): Released all slaves [ 381.448807][T12570] netlink: 'syz.1.2631': attribute type 15 has an invalid length. [ 381.456736][T12570] netlink: 'syz.1.2631': attribute type 7 has an invalid length. [ 381.468434][T12568] netlink: 'syz.3.2628': attribute type 10 has an invalid length. [ 381.636889][T12579] netlink: 'syz.1.2633': attribute type 10 has an invalid length. [ 381.925350][T12585] netlink: 'syz.2.2636': attribute type 3 has an invalid length. [ 381.948811][T12585] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.2636'. [ 382.370645][T12596] netlink: 'syz.0.2639': attribute type 3 has an invalid length. [ 382.406040][T12596] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2639'. [ 382.549582][T12601] netlink: 'syz.2.2641': attribute type 3 has an invalid length. [ 382.557911][T12601] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2641'. [ 382.714850][T12603] IPv6: Can't replace route, no match found [ 382.786615][T12603] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 382.821406][T12605] netlink: 'syz.3.2643': attribute type 10 has an invalid length. [ 382.883905][T12603] netlink: 'syz.1.2642': attribute type 10 has an invalid length. [ 382.952892][T12603] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 383.166761][T12617] netlink: 'syz.3.2647': attribute type 29 has an invalid length. [ 383.184672][T12613] netlink: 'syz.2.2646': attribute type 10 has an invalid length. [ 383.195287][T12617] netlink: 'syz.3.2647': attribute type 29 has an invalid length. [ 383.203996][T12612] netlink: 'syz.0.2653': attribute type 10 has an invalid length. [ 383.281164][T12619] netlink: 'syz.3.2647': attribute type 29 has an invalid length. [ 383.308651][T12617] netlink: 'syz.3.2647': attribute type 29 has an invalid length. [ 383.322454][T12617] netlink: 'syz.3.2647': attribute type 29 has an invalid length. [ 383.334922][T12617] FAULT_INJECTION: forcing a failure. [ 383.334922][T12617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.383362][T12623] netlink: 'syz.0.2649': attribute type 29 has an invalid length. [ 383.414847][T12617] CPU: 0 PID: 12617 Comm: syz.3.2647 Not tainted syzkaller #0 [ 383.422349][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 383.432420][T12617] Call Trace: [ 383.435731][T12617] [ 383.438683][T12617] dump_stack_lvl+0x16c/0x230 [ 383.443393][T12617] ? show_regs_print_info+0x20/0x20 [ 383.448620][T12617] ? load_image+0x3b0/0x3b0 [ 383.453161][T12617] ? __lock_acquire+0x7c80/0x7c80 [ 383.458219][T12617] ? snprintf+0xdb/0x120 [ 383.462491][T12617] should_fail_ex+0x39d/0x4d0 [ 383.467203][T12617] _copy_to_user+0x2f/0xa0 [ 383.471645][T12617] simple_read_from_buffer+0xe7/0x150 [ 383.477056][T12617] proc_fail_nth_read+0x1e3/0x250 [ 383.482113][T12617] ? proc_fault_inject_write+0x340/0x340 [ 383.487773][T12617] ? fsnotify_perm+0x271/0x5e0 [ 383.492564][T12617] ? proc_fault_inject_write+0x340/0x340 [ 383.498225][T12617] vfs_read+0x27e/0x920 [ 383.502409][T12617] ? kernel_read+0x1e0/0x1e0 [ 383.507027][T12617] ? __fget_files+0x28/0x4d0 [ 383.511642][T12617] ? __fget_files+0x44a/0x4d0 [ 383.516358][T12617] ? __fdget_pos+0x2a3/0x330 [ 383.520973][T12617] ? ksys_read+0x75/0x250 [ 383.525342][T12617] ksys_read+0x147/0x250 [ 383.529622][T12617] ? vfs_write+0x940/0x940 [ 383.534072][T12617] ? lockdep_hardirqs_on+0x98/0x150 [ 383.539297][T12617] do_syscall_64+0x55/0xb0 [ 383.543738][T12617] ? clear_bhb_loop+0x40/0x90 [ 383.548423][T12617] ? clear_bhb_loop+0x40/0x90 [ 383.553108][T12617] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.559009][T12617] RIP: 0033:0x7fda08b8d9dc [ 383.563430][T12617] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 383.583038][T12617] RSP: 002b:00007fda099f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 383.591457][T12617] RAX: ffffffffffffffda RBX: 00007fda08de5fa0 RCX: 00007fda08b8d9dc [ 383.599430][T12617] RDX: 000000000000000f RSI: 00007fda099f70a0 RDI: 0000000000000004 [ 383.607399][T12617] RBP: 00007fda099f7090 R08: 0000000000000000 R09: 0000000000000000 [ 383.615376][T12617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.623348][T12617] R13: 00007fda08de6038 R14: 00007fda08de5fa0 R15: 00007ffc2556ab48 [ 383.631340][T12617] [ 385.186044][T12648] IPv6: Can't replace route, no match found [ 385.229103][T12648] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 385.669712][T12648] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 386.720080][T12668] veth1_macvtap: left promiscuous mode [ 386.770191][T12670] veth1_macvtap: entered promiscuous mode [ 386.796926][T12670] macsec0: entered promiscuous mode [ 386.807206][T12670] macsec0: entered allmulticast mode [ 386.813131][T12670] veth1_macvtap: entered allmulticast mode [ 387.859364][T12706] validate_nla: 16 callbacks suppressed [ 387.859381][T12706] netlink: 'syz.3.2680': attribute type 10 has an invalid length. [ 388.023542][T12718] netlink: 'syz.2.2685': attribute type 15 has an invalid length. [ 388.040182][T12718] netlink: 'syz.2.2685': attribute type 7 has an invalid length. [ 388.061866][T12714] netlink: 'syz.1.2684': attribute type 10 has an invalid length. [ 388.202683][T12724] netlink: 'syz.0.2687': attribute type 15 has an invalid length. [ 388.211345][T12724] netlink: 'syz.0.2687': attribute type 7 has an invalid length. [ 388.249167][T12720] netlink: 'syz.3.2695': attribute type 10 has an invalid length. [ 388.714336][T12737] netlink: 'syz.1.2694': attribute type 29 has an invalid length. [ 388.728743][T12737] netlink: 'syz.1.2694': attribute type 29 has an invalid length. [ 388.866650][T12741] netlink: 'syz.1.2694': attribute type 29 has an invalid length. [ 390.157357][T12776] IPv6: Can't replace route, no match found [ 390.240063][T12776] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 390.599564][T12776] team0: Port device wlan1 removed [ 390.689542][T12776] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 390.876122][T12798] FAULT_INJECTION: forcing a failure. [ 390.876122][T12798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.909798][T12798] CPU: 0 PID: 12798 Comm: syz.3.2715 Not tainted syzkaller #0 [ 390.917301][T12798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 390.927371][T12798] Call Trace: [ 390.930666][T12798] [ 390.933623][T12798] dump_stack_lvl+0x16c/0x230 [ 390.938319][T12798] ? show_regs_print_info+0x20/0x20 [ 390.943525][T12798] ? load_image+0x3b0/0x3b0 [ 390.948027][T12798] ? __lock_acquire+0x7c80/0x7c80 [ 390.953053][T12798] ? snprintf+0xdb/0x120 [ 390.957299][T12798] should_fail_ex+0x39d/0x4d0 [ 390.961981][T12798] _copy_to_user+0x2f/0xa0 [ 390.966396][T12798] simple_read_from_buffer+0xe7/0x150 [ 390.971784][T12798] proc_fail_nth_read+0x1e3/0x250 [ 390.976816][T12798] ? proc_fault_inject_write+0x340/0x340 [ 390.982478][T12798] ? fsnotify_perm+0x271/0x5e0 [ 390.987251][T12798] ? proc_fault_inject_write+0x340/0x340 [ 390.992885][T12798] vfs_read+0x27e/0x920 [ 390.997054][T12798] ? kernel_read+0x1e0/0x1e0 [ 391.001648][T12798] ? __fget_files+0x28/0x4d0 [ 391.006239][T12798] ? __fget_files+0x44a/0x4d0 [ 391.010925][T12798] ? __fdget_pos+0x2a3/0x330 [ 391.015522][T12798] ? ksys_read+0x75/0x250 [ 391.019862][T12798] ksys_read+0x147/0x250 [ 391.024123][T12798] ? vfs_write+0x940/0x940 [ 391.028550][T12798] ? lockdep_hardirqs_on+0x98/0x150 [ 391.033758][T12798] do_syscall_64+0x55/0xb0 [ 391.038184][T12798] ? clear_bhb_loop+0x40/0x90 [ 391.042865][T12798] ? clear_bhb_loop+0x40/0x90 [ 391.047544][T12798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.053438][T12798] RIP: 0033:0x7fda08b8d9dc [ 391.057852][T12798] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 391.077456][T12798] RSP: 002b:00007fda099f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 391.085882][T12798] RAX: ffffffffffffffda RBX: 00007fda08de5fa0 RCX: 00007fda08b8d9dc [ 391.093877][T12798] RDX: 000000000000000f RSI: 00007fda099f70a0 RDI: 0000000000000005 [ 391.101859][T12798] RBP: 00007fda099f7090 R08: 0000000000000000 R09: 0000000000000000 [ 391.109826][T12798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.117799][T12798] R13: 00007fda08de6038 R14: 00007fda08de5fa0 R15: 00007ffc2556ab48 [ 391.125797][T12798] [ 391.453007][T12815] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2721'. [ 392.989970][T12870] validate_nla: 19 callbacks suppressed [ 392.989982][T12870] netlink: 'syz.3.2740': attribute type 15 has an invalid length. [ 393.008143][T12870] netlink: 'syz.3.2740': attribute type 7 has an invalid length. [ 393.948740][T12896] netlink: 'syz.0.2749': attribute type 15 has an invalid length. [ 393.956628][T12896] netlink: 'syz.0.2749': attribute type 7 has an invalid length. [ 394.218065][T12905] FAULT_INJECTION: forcing a failure. [ 394.218065][T12905] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 394.261079][T12905] CPU: 1 PID: 12905 Comm: syz.0.2753 Not tainted syzkaller #0 [ 394.268593][T12905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 394.278677][T12905] Call Trace: [ 394.281971][T12905] [ 394.284925][T12905] dump_stack_lvl+0x16c/0x230 [ 394.289646][T12905] ? show_regs_print_info+0x20/0x20 [ 394.294880][T12905] ? load_image+0x3b0/0x3b0 [ 394.299417][T12905] ? __lock_acquire+0x7c80/0x7c80 [ 394.304470][T12905] ? mark_lock+0x94/0x320 [ 394.308827][T12905] should_fail_ex+0x39d/0x4d0 [ 394.313543][T12905] prepare_alloc_pages+0x1e2/0x5f0 [ 394.318699][T12905] __alloc_pages+0x127/0x460 [ 394.323326][T12905] ? zone_statistics+0x170/0x170 [ 394.328304][T12905] ? do_wp_page+0x826/0x3630 [ 394.332931][T12905] ? do_wp_page+0x1024/0x3630 [ 394.337645][T12905] __folio_alloc+0x10/0x20 [ 394.342092][T12905] vma_alloc_folio+0x47a/0x8f0 [ 394.346916][T12905] do_wp_page+0x128e/0x3630 [ 394.351472][T12905] ? folio_put+0xd0/0xd0 [ 394.355760][T12905] ? do_raw_spin_lock+0x121/0x2c0 [ 394.360816][T12905] ? __rwlock_init+0x150/0x150 [ 394.365622][T12905] ? handle_mm_fault+0xd1/0x4920 [ 394.370599][T12905] handle_mm_fault+0x12d4/0x4920 [ 394.375578][T12905] ? handle_mm_fault+0xd1/0x4920 [ 394.380574][T12905] ? numa_migrate_prep+0x350/0x350 [ 394.385748][T12905] ? lock_mm_and_find_vma+0x9c/0x300 [ 394.391096][T12905] do_user_addr_fault+0x738/0x12e0 [ 394.396250][T12905] exc_page_fault+0x67/0x110 [ 394.400863][T12905] asm_exc_page_fault+0x26/0x30 [ 394.405740][T12905] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 394.411597][T12905] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 394.431230][T12905] RSP: 0018:ffffc900051af718 EFLAGS: 00050206 [ 394.437342][T12905] RAX: ffffffff841cb501 RBX: 1ffff92000a35fc7 RCX: 000000000000d5d0 [ 394.445357][T12905] RDX: 0000000000000000 RSI: ffff888060a82ce8 RDI: 0000200000003000 [ 394.453365][T12905] RBP: ffffc900051af878 R08: ffff888060a902b7 R09: 1ffff1100c152056 [ 394.461362][T12905] R10: dffffc0000000000 R11: ffffed100c152057 R12: ffff888060a800e8 [ 394.469378][T12905] R13: 00000000000101d0 R14: 00000000000101d0 R15: ffffc900051afe48 [ 394.477377][T12905] ? _copy_to_iter+0x131/0x10d0 [ 394.482267][T12905] _copy_to_iter+0x249/0x10d0 [ 394.486983][T12905] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 394.492906][T12905] ? iov_iter_init+0x1e0/0x1e0 [ 394.497701][T12905] ? __virt_addr_valid+0x18c/0x540 [ 394.502842][T12905] ? __virt_addr_valid+0x469/0x540 [ 394.507995][T12905] ? __phys_addr_symbol+0x2f/0x70 [ 394.513045][T12905] ? __check_object_size+0x506/0xa30 [ 394.518370][T12905] __skb_datagram_iter+0xdb/0x780 [ 394.523425][T12905] ? tsk_importance+0x150/0x150 [ 394.528301][T12905] ? skb_copy_datagram_iter+0x200/0x200 [ 394.533896][T12905] skb_copy_datagram_iter+0xb1/0x200 [ 394.539223][T12905] tipc_recvstream+0x72b/0xe70 [ 394.544051][T12905] ? tipc_sendstream+0x70/0x70 [ 394.548851][T12905] ____sys_recvmsg+0x29e/0x5b0 [ 394.553671][T12905] ? __sys_recvmsg_sock+0x50/0x50 [ 394.558755][T12905] ? import_iovec+0x73/0xa0 [ 394.563295][T12905] ___sys_recvmsg+0x1b6/0x510 [ 394.568022][T12905] ? __sys_recvmsg+0x270/0x270 [ 394.572822][T12905] ? ksys_write+0x1c1/0x250 [ 394.577365][T12905] ? __fget_files+0x44a/0x4d0 [ 394.582093][T12905] __x64_sys_recvmsg+0x1f2/0x2c0 [ 394.587065][T12905] ? ___sys_recvmsg+0x510/0x510 [ 394.591962][T12905] ? lockdep_hardirqs_on+0x98/0x150 [ 394.597188][T12905] do_syscall_64+0x55/0xb0 [ 394.601630][T12905] ? clear_bhb_loop+0x40/0x90 [ 394.606345][T12905] ? clear_bhb_loop+0x40/0x90 [ 394.611047][T12905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.616964][T12905] RIP: 0033:0x7f5f6238efc9 [ 394.621396][T12905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.641021][T12905] RSP: 002b:00007f5f63291038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 394.649465][T12905] RAX: ffffffffffffffda RBX: 00007f5f625e5fa0 RCX: 00007f5f6238efc9 [ 394.657455][T12905] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000004 [ 394.665448][T12905] RBP: 00007f5f63291090 R08: 0000000000000000 R09: 0000000000000000 [ 394.673447][T12905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.681438][T12905] R13: 00007f5f625e6038 R14: 00007f5f625e5fa0 R15: 00007ffee2bbf018 [ 394.689448][T12905] [ 394.756063][T12920] syzkaller0: entered promiscuous mode [ 394.761628][T12920] syzkaller0: entered allmulticast mode [ 394.840286][T12920] netlink: 'syz.1.2758': attribute type 29 has an invalid length. [ 394.964541][T12920] netlink: 'syz.1.2758': attribute type 29 has an invalid length. [ 395.008468][T12920] netlink: 'syz.1.2758': attribute type 29 has an invalid length. [ 395.239017][T12934] netlink: 'syz.2.2761': attribute type 15 has an invalid length. [ 395.298445][T12934] netlink: 'syz.2.2761': attribute type 7 has an invalid length. [ 395.546017][T12943] netlink: 'syz.2.2764': attribute type 3 has an invalid length. [ 395.555544][T12943] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.2764'. [ 395.696698][T12945] FAULT_INJECTION: forcing a failure. [ 395.696698][T12945] name failslab, interval 1, probability 0, space 0, times 0 [ 395.728411][T12945] CPU: 1 PID: 12945 Comm: syz.2.2765 Not tainted syzkaller #0 [ 395.735911][T12945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 395.745983][T12945] Call Trace: [ 395.749282][T12945] [ 395.752236][T12945] dump_stack_lvl+0x16c/0x230 [ 395.756950][T12945] ? show_regs_print_info+0x20/0x20 [ 395.762179][T12945] ? load_image+0x3b0/0x3b0 [ 395.766707][T12945] ? __might_sleep+0xe0/0xe0 [ 395.771328][T12945] ? __lock_acquire+0x7c80/0x7c80 [ 395.776376][T12945] ? perf_trace_lock+0xf7/0x380 [ 395.781263][T12945] should_fail_ex+0x39d/0x4d0 [ 395.785977][T12945] should_failslab+0x9/0x20 [ 395.790511][T12945] slab_pre_alloc_hook+0x59/0x310 [ 395.795555][T12945] ? __get_vm_area_node+0x125/0x370 [ 395.800766][T12945] __kmem_cache_alloc_node+0x53/0x260 [ 395.806145][T12945] ? __get_vm_area_node+0x125/0x370 [ 395.811353][T12945] kmalloc_node_trace+0x26/0xe0 [ 395.816233][T12945] __get_vm_area_node+0x125/0x370 [ 395.821271][T12945] __vmalloc_node_range+0x36e/0x1320 [ 395.826559][T12945] ? netlink_sendmsg+0x5f3/0xbe0 [ 395.831508][T12945] ? netlink_insert+0x106a/0x1370 [ 395.836547][T12945] ? netlink_insert+0x2b3/0x1370 [ 395.841489][T12945] ? netlink_data_ready+0x10/0x10 [ 395.846544][T12945] ? free_vm_area+0x50/0x50 [ 395.851060][T12945] ? netlink_sendmsg+0x5f3/0xbe0 [ 395.856003][T12945] vmalloc+0x79/0x90 [ 395.859902][T12945] ? netlink_sendmsg+0x5f3/0xbe0 [ 395.864846][T12945] netlink_sendmsg+0x5f3/0xbe0 [ 395.869635][T12945] ? netlink_getsockopt+0x580/0x580 [ 395.874845][T12945] ? aa_sock_msg_perm+0x94/0x150 [ 395.879797][T12945] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 395.885111][T12945] ? security_socket_sendmsg+0x80/0xa0 [ 395.890578][T12945] ? netlink_getsockopt+0x580/0x580 [ 395.895799][T12945] ____sys_sendmsg+0x5bf/0x950 [ 395.900579][T12945] ? __asan_memset+0x22/0x40 [ 395.905181][T12945] ? __sys_sendmsg_sock+0x30/0x30 [ 395.910218][T12945] ? __import_iovec+0x5f2/0x860 [ 395.915127][T12945] ? import_iovec+0x73/0xa0 [ 395.919648][T12945] ___sys_sendmsg+0x220/0x290 [ 395.924332][T12945] ? __sys_sendmsg+0x270/0x270 [ 395.929116][T12945] ? __lock_acquire+0x7c80/0x7c80 [ 395.934176][T12945] __se_sys_sendmsg+0x1a5/0x270 [ 395.939037][T12945] ? __x64_sys_sendmsg+0x80/0x80 [ 395.943993][T12945] ? lockdep_hardirqs_on+0x98/0x150 [ 395.949200][T12945] do_syscall_64+0x55/0xb0 [ 395.953639][T12945] ? clear_bhb_loop+0x40/0x90 [ 395.958318][T12945] ? clear_bhb_loop+0x40/0x90 [ 395.962994][T12945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.968888][T12945] RIP: 0033:0x7f7e0bb8efc9 [ 395.973306][T12945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.992915][T12945] RSP: 002b:00007f7e0c959038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.001336][T12945] RAX: ffffffffffffffda RBX: 00007f7e0bde5fa0 RCX: 00007f7e0bb8efc9 [ 396.009311][T12945] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 396.017283][T12945] RBP: 00007f7e0c959090 R08: 0000000000000000 R09: 0000000000000000 [ 396.025258][T12945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.033240][T12945] R13: 00007f7e0bde6038 R14: 00007f7e0bde5fa0 R15: 00007ffe01899418 [ 396.041245][T12945] [ 396.098716][T12945] syz.2.2765: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 396.128552][T12945] CPU: 1 PID: 12945 Comm: syz.2.2765 Not tainted syzkaller #0 [ 396.136046][T12945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 396.146117][T12945] Call Trace: [ 396.149413][T12945] [ 396.152372][T12945] dump_stack_lvl+0x16c/0x230 [ 396.157088][T12945] ? show_regs_print_info+0x20/0x20 [ 396.162331][T12945] ? load_image+0x3b0/0x3b0 [ 396.166889][T12945] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 396.173383][T12945] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 396.179943][T12945] warn_alloc+0x210/0x300 [ 396.184326][T12945] ? __get_vm_area_node+0x125/0x370 [ 396.189581][T12945] ? zone_watermark_ok_safe+0x230/0x230 [ 396.195186][T12945] ? rcu_is_watching+0x15/0xb0 [ 396.200017][T12945] ? __get_vm_area_node+0x356/0x370 [ 396.205276][T12945] __vmalloc_node_range+0x393/0x1320 [ 396.210607][T12945] ? netlink_insert+0x106a/0x1370 [ 396.215698][T12945] ? netlink_insert+0x2b3/0x1370 [ 396.220687][T12945] ? netlink_data_ready+0x10/0x10 [ 396.225764][T12945] ? free_vm_area+0x50/0x50 [ 396.230321][T12945] ? netlink_sendmsg+0x5f3/0xbe0 [ 396.235308][T12945] vmalloc+0x79/0x90 [ 396.239250][T12945] ? netlink_sendmsg+0x5f3/0xbe0 [ 396.244237][T12945] netlink_sendmsg+0x5f3/0xbe0 [ 396.249054][T12945] ? netlink_getsockopt+0x580/0x580 [ 396.254306][T12945] ? aa_sock_msg_perm+0x94/0x150 [ 396.259289][T12945] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 396.264622][T12945] ? security_socket_sendmsg+0x80/0xa0 [ 396.270119][T12945] ? netlink_getsockopt+0x580/0x580 [ 396.275364][T12945] ____sys_sendmsg+0x5bf/0x950 [ 396.280190][T12945] ? __asan_memset+0x22/0x40 [ 396.284832][T12945] ? __sys_sendmsg_sock+0x30/0x30 [ 396.289901][T12945] ? __import_iovec+0x5f2/0x860 [ 396.294805][T12945] ? import_iovec+0x73/0xa0 [ 396.299357][T12945] ___sys_sendmsg+0x220/0x290 [ 396.304084][T12945] ? __sys_sendmsg+0x270/0x270 [ 396.308919][T12945] ? __lock_acquire+0x7c80/0x7c80 [ 396.314029][T12945] __se_sys_sendmsg+0x1a5/0x270 [ 396.318939][T12945] ? __x64_sys_sendmsg+0x80/0x80 [ 396.323942][T12945] ? lockdep_hardirqs_on+0x98/0x150 [ 396.329178][T12945] do_syscall_64+0x55/0xb0 [ 396.333641][T12945] ? clear_bhb_loop+0x40/0x90 [ 396.338339][T12945] ? clear_bhb_loop+0x40/0x90 [ 396.343043][T12945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.348959][T12945] RIP: 0033:0x7f7e0bb8efc9 [ 396.353395][T12945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.373021][T12945] RSP: 002b:00007f7e0c959038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.381437][T12945] RAX: ffffffffffffffda RBX: 00007f7e0bde5fa0 RCX: 00007f7e0bb8efc9 [ 396.389431][T12945] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 396.397413][T12945] RBP: 00007f7e0c959090 R08: 0000000000000000 R09: 0000000000000000 [ 396.405394][T12945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.413367][T12945] R13: 00007f7e0bde6038 R14: 00007f7e0bde5fa0 R15: 00007ffe01899418 [ 396.421369][T12945] [ 396.428526][T12945] Mem-Info: [ 396.439884][T12945] active_anon:5476 inactive_anon:0 isolated_anon:0 [ 396.439884][T12945] active_file:18552 inactive_file:40010 isolated_file:0 [ 396.439884][T12945] unevictable:768 dirty:391 writeback:0 [ 396.439884][T12945] slab_reclaimable:10427 slab_unreclaimable:100162 [ 396.439884][T12945] mapped:25676 shmem:1361 pagetables:556 [ 396.439884][T12945] sec_pagetables:0 bounce:0 [ 396.439884][T12945] kernel_misc_reclaimable:0 [ 396.439884][T12945] free:1342428 free_pcp:7423 free_cma:0 [ 396.518568][T12945] Node 0 active_anon:22004kB inactive_anon:0kB active_file:74208kB inactive_file:159832kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102704kB dirty:1564kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11624kB pagetables:2224kB sec_pagetables:0kB all_unreclaimable? no [ 396.585214][T12945] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 396.615841][T12945] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 396.648494][T12945] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 396.655498][T12945] Node 0 DMA32 free:1455088kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:21956kB inactive_anon:0kB active_file:74208kB inactive_file:158516kB unevictable:1536kB writepending:1564kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:12964kB local_pcp:6300kB free_cma:0kB [ 396.686647][T12945] lowmem_reserve[]: 0 0 1 1 1 [ 396.691688][T12945] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 396.723796][T12945] lowmem_reserve[]: 0 0 0 0 0 [ 396.730342][T12945] Node 1 Normal free:3899020kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17320kB local_pcp:11016kB free_cma:0kB [ 396.767689][T12945] lowmem_reserve[]: 0 0 0 0 0 [ 396.772560][T12945] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 396.793527][T12945] Node 0 DMA32: 64*4kB (UE) 1094*8kB (UM) 860*16kB (UM) 472*32kB (ME) 338*64kB (UME) 125*128kB (UME) 29*256kB (UME) 16*512kB (UM) 10*1024kB (UME) 3*2048kB (UM) 329*4096kB (M) = 1455088kB [ 396.820894][T12945] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 396.838539][T12945] Node 1 Normal: 245*4kB (UME) 65*8kB (UME) 45*16kB (UME) 121*32kB (UME) 25*64kB (UE) 11*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3899020kB [ 396.856912][T12945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 396.866503][T12945] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 396.875903][T12945] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 396.885575][T12945] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 396.895190][T12945] 59923 total pagecache pages [ 396.905303][T12945] 0 pages in swap cache [ 396.909524][T12945] Free swap = 124996kB [ 396.914656][T12945] Total swap = 124996kB [ 396.932493][T12945] 2097051 pages RAM [ 396.936358][T12945] 0 pages HighMem/MovableOnly [ 396.946321][T12945] 416137 pages reserved [ 396.950769][T12945] 0 pages cma reserved [ 399.826038][T12975] netlink: 'syz.1.2773': attribute type 15 has an invalid length. [ 399.853899][T12975] netlink: 'syz.1.2773': attribute type 7 has an invalid length. [ 400.496213][T12994] netlink: 'syz.3.2781': attribute type 10 has an invalid length. [ 400.637500][T12998] netlink: 'syz.2.2783': attribute type 15 has an invalid length. [ 400.646299][T12998] netlink: 'syz.2.2783': attribute type 7 has an invalid length. [ 400.680114][T13000] FAULT_INJECTION: forcing a failure. [ 400.680114][T13000] name failslab, interval 1, probability 0, space 0, times 0 [ 400.693145][T13000] CPU: 1 PID: 13000 Comm: syz.3.2784 Not tainted syzkaller #0 [ 400.700617][T13000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 400.710675][T13000] Call Trace: [ 400.713969][T13000] [ 400.716903][T13000] dump_stack_lvl+0x16c/0x230 [ 400.721590][T13000] ? show_regs_print_info+0x20/0x20 [ 400.726791][T13000] ? load_image+0x3b0/0x3b0 [ 400.731328][T13000] should_fail_ex+0x39d/0x4d0 [ 400.736015][T13000] should_failslab+0x9/0x20 [ 400.740524][T13000] slab_pre_alloc_hook+0x59/0x310 [ 400.745564][T13000] kmem_cache_alloc+0x5a/0x2e0 [ 400.750345][T13000] ? radix_tree_node_alloc+0x7e/0x3a0 [ 400.755748][T13000] radix_tree_node_alloc+0x7e/0x3a0 [ 400.760977][T13000] idr_get_free+0x2b3/0xa60 [ 400.765500][T13000] idr_alloc_cyclic+0x1a2/0x530 [ 400.770374][T13000] ? idr_alloc+0x2c0/0x2c0 [ 400.774806][T13000] ? do_raw_spin_lock+0x121/0x2c0 [ 400.779845][T13000] ? __radix_tree_preload+0x82/0x880 [ 400.785145][T13000] ? bpf_link_prime+0x4c/0x1d0 [ 400.789916][T13000] bpf_link_prime+0x6b/0x1d0 [ 400.794514][T13000] bpf_raw_tp_link_attach+0x33c/0x560 [ 400.799895][T13000] ? bpf_insn_prepare_dump+0x840/0x840 [ 400.805379][T13000] bpf_raw_tracepoint_open+0x197/0x210 [ 400.810851][T13000] __sys_bpf+0x364/0x800 [ 400.815100][T13000] ? bpf_link_show_fdinfo+0x350/0x350 [ 400.820492][T13000] ? lock_chain_count+0x20/0x20 [ 400.825355][T13000] __x64_sys_bpf+0x7c/0x90 [ 400.829796][T13000] do_syscall_64+0x55/0xb0 [ 400.834227][T13000] ? clear_bhb_loop+0x40/0x90 [ 400.838903][T13000] ? clear_bhb_loop+0x40/0x90 [ 400.843578][T13000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.849470][T13000] RIP: 0033:0x7fda08b8efc9 [ 400.853887][T13000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.873582][T13000] RSP: 002b:00007fda099f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 400.881999][T13000] RAX: ffffffffffffffda RBX: 00007fda08de5fa0 RCX: 00007fda08b8efc9 [ 400.889974][T13000] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 400.897977][T13000] RBP: 00007fda099f7090 R08: 0000000000000000 R09: 0000000000000000 [ 400.905952][T13000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.913921][T13000] R13: 00007fda08de6038 R14: 00007fda08de5fa0 R15: 00007ffc2556ab48 [ 400.921905][T13000] [ 401.091415][T13004] netlink: 16142 bytes leftover after parsing attributes in process `syz.2.2785'. [ 401.216085][T13004] netlink: 'syz.2.2785': attribute type 29 has an invalid length. [ 401.227141][T13004] netlink: 'syz.2.2785': attribute type 29 has an invalid length. [ 401.257973][T13008] netlink: 'syz.2.2785': attribute type 29 has an invalid length. [ 401.296245][T13012] netlink: 'syz.2.2785': attribute type 29 has an invalid length. [ 401.316197][T13004] netlink: 'syz.2.2785': attribute type 29 has an invalid length. [ 401.716881][T13023] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2795'. [ 401.779757][T13034] FAULT_INJECTION: forcing a failure. [ 401.779757][T13034] name failslab, interval 1, probability 0, space 0, times 0 [ 401.802897][T13034] CPU: 1 PID: 13034 Comm: syz.3.2797 Not tainted syzkaller #0 [ 401.810405][T13034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 401.820483][T13034] Call Trace: [ 401.823786][T13034] [ 401.826736][T13034] dump_stack_lvl+0x16c/0x230 [ 401.831446][T13034] ? show_regs_print_info+0x20/0x20 [ 401.836673][T13034] ? load_image+0x3b0/0x3b0 [ 401.841207][T13034] ? __might_sleep+0xe0/0xe0 [ 401.845838][T13034] ? __lock_acquire+0x7c80/0x7c80 [ 401.850895][T13034] ? rcu_is_watching+0x15/0xb0 [ 401.855705][T13034] should_fail_ex+0x39d/0x4d0 [ 401.860432][T13034] should_failslab+0x9/0x20 [ 401.864968][T13034] slab_pre_alloc_hook+0x59/0x310 [ 401.870034][T13034] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 401.875965][T13034] __kmem_cache_alloc_node+0x53/0x260 [ 401.881370][T13034] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 401.887296][T13034] kmalloc_trace+0x2a/0xe0 [ 401.891743][T13034] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 401.897497][T13034] sctp_association_new+0x15d3/0x25c0 [ 401.902919][T13034] sctp_connect_new_asoc+0x2bf/0x690 [ 401.908247][T13034] ? __sctp_connect+0xd20/0xd20 [ 401.913132][T13034] ? __local_bh_enable_ip+0x12e/0x1c0 [ 401.918529][T13034] ? _local_bh_enable+0xa0/0xa0 [ 401.923414][T13034] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 401.929249][T13034] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 401.935070][T13034] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 401.940630][T13034] ? security_sctp_bind_connect+0x89/0xb0 [ 401.946357][T13034] sctp_sendmsg+0x155c/0x27e0 [ 401.951057][T13034] ? sctp_getsockopt+0xb60/0xb60 [ 401.956016][T13034] ? aa_sk_perm+0x7fc/0x930 [ 401.960535][T13034] ? aa_af_perm+0x2b0/0x2b0 [ 401.965069][T13034] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 401.971500][T13034] ? sock_rps_record_flow+0x19/0x400 [ 401.976789][T13034] ? inet_send_prepare+0x260/0x260 [ 401.981912][T13034] ? inet_sendmsg+0x7c/0x2f0 [ 401.986506][T13034] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 401.991793][T13034] ? security_socket_sendmsg+0x80/0xa0 [ 401.997248][T13034] ? inet_send_prepare+0x260/0x260 [ 402.002359][T13034] ____sys_sendmsg+0x5bf/0x950 [ 402.007139][T13034] ? __asan_memset+0x22/0x40 [ 402.011733][T13034] ? __sys_sendmsg_sock+0x30/0x30 [ 402.016760][T13034] ? __import_iovec+0x5f2/0x860 [ 402.021626][T13034] ? import_iovec+0x73/0xa0 [ 402.026152][T13034] ___sys_sendmsg+0x220/0x290 [ 402.030854][T13034] ? __sys_sendmsg+0x270/0x270 [ 402.035659][T13034] ? __lock_acquire+0x7c80/0x7c80 [ 402.040707][T13034] __se_sys_sendmsg+0x1a5/0x270 [ 402.045571][T13034] ? __x64_sys_sendmsg+0x80/0x80 [ 402.050539][T13034] ? lockdep_hardirqs_on+0x98/0x150 [ 402.055746][T13034] do_syscall_64+0x55/0xb0 [ 402.060192][T13034] ? clear_bhb_loop+0x40/0x90 [ 402.064877][T13034] ? clear_bhb_loop+0x40/0x90 [ 402.069562][T13034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.075458][T13034] RIP: 0033:0x7fda08b8efc9 [ 402.079879][T13034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.099488][T13034] RSP: 002b:00007fda099d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.107900][T13034] RAX: ffffffffffffffda RBX: 00007fda08de6090 RCX: 00007fda08b8efc9 [ 402.115881][T13034] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 402.123850][T13034] RBP: 00007fda099d6090 R08: 0000000000000000 R09: 0000000000000000 [ 402.131825][T13034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.139792][T13034] R13: 00007fda08de6128 R14: 00007fda08de6090 R15: 00007ffc2556ab48 [ 402.147774][T13034] [ 404.958899][T13110] validate_nla: 11 callbacks suppressed [ 404.958912][T13110] netlink: 'syz.2.2828': attribute type 15 has an invalid length. [ 405.001305][T13110] netlink: 'syz.2.2828': attribute type 7 has an invalid length. [ 405.021184][T13107] netlink: 'syz.3.2827': attribute type 10 has an invalid length. [ 405.232574][T13121] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2832'. [ 405.364397][T13126] netlink: 'syz.2.2837': attribute type 10 has an invalid length. [ 405.634760][T13134] netlink: 'syz.1.2848': attribute type 10 has an invalid length. [ 405.727974][T13140] netlink: 'syz.2.2841': attribute type 15 has an invalid length. [ 405.743702][T13140] netlink: 'syz.2.2841': attribute type 7 has an invalid length. [ 405.872534][T13142] netlink: 'syz.0.2842': attribute type 10 has an invalid length. [ 406.075307][T13153] FAULT_INJECTION: forcing a failure. [ 406.075307][T13153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.112145][T13153] CPU: 0 PID: 13153 Comm: syz.2.2847 Not tainted syzkaller #0 [ 406.119653][T13153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 406.129729][T13153] Call Trace: [ 406.133015][T13153] [ 406.135947][T13153] dump_stack_lvl+0x16c/0x230 [ 406.140639][T13153] ? show_regs_print_info+0x20/0x20 [ 406.145861][T13153] ? load_image+0x3b0/0x3b0 [ 406.150388][T13153] ? __might_fault+0xaa/0x120 [ 406.155080][T13153] ? __lock_acquire+0x7c80/0x7c80 [ 406.160120][T13153] should_fail_ex+0x39d/0x4d0 [ 406.164816][T13153] _copy_from_user+0x2f/0xe0 [ 406.169416][T13153] __sys_bpf+0x1e9/0x800 [ 406.173669][T13153] ? bpf_link_show_fdinfo+0x350/0x350 [ 406.179060][T13153] ? lock_chain_count+0x20/0x20 [ 406.183918][T13153] __x64_sys_bpf+0x7c/0x90 [ 406.188336][T13153] do_syscall_64+0x55/0xb0 [ 406.192754][T13153] ? clear_bhb_loop+0x40/0x90 [ 406.197430][T13153] ? clear_bhb_loop+0x40/0x90 [ 406.202118][T13153] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.208018][T13153] RIP: 0033:0x7f7e0bb8efc9 [ 406.212444][T13153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.232056][T13153] RSP: 002b:00007f7e0c959038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 406.240474][T13153] RAX: ffffffffffffffda RBX: 00007f7e0bde5fa0 RCX: 00007f7e0bb8efc9 [ 406.248454][T13153] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 406.256434][T13153] RBP: 00007f7e0c959090 R08: 0000000000000000 R09: 0000000000000000 [ 406.264406][T13153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.272375][T13153] R13: 00007f7e0bde6038 R14: 00007f7e0bde5fa0 R15: 00007ffe01899418 [ 406.280361][T13153] [ 406.316267][T13150] netlink: 'syz.3.2844': attribute type 8 has an invalid length. [ 406.389514][T13155] netlink: 'syz.3.2844': attribute type 10 has an invalid length. [ 406.397362][T13155] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2844'. [ 406.450894][T13147] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2844'. [ 406.468550][T13147] team0: entered promiscuous mode [ 406.474972][T13147] team_slave_0: entered promiscuous mode [ 406.496461][T13147] team_slave_1: entered promiscuous mode [ 406.503410][T13147] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 406.513519][T13147] team0: entered allmulticast mode [ 406.521591][T13147] team_slave_0: entered allmulticast mode [ 406.527627][T13147] team_slave_1: entered allmulticast mode [ 406.533853][T13147] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 406.545747][T13147] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.560797][T13147] bond0: (slave team0): Releasing backup interface [ 406.586631][T13147] bridge0: port 3(team0) entered blocking state [ 406.601862][T13147] bridge0: port 3(team0) entered disabled state [ 406.806850][T13175] FAULT_INJECTION: forcing a failure. [ 406.806850][T13175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.856823][T13175] CPU: 0 PID: 13175 Comm: syz.1.2856 Not tainted syzkaller #0 [ 406.864337][T13175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 406.874417][T13175] Call Trace: [ 406.877715][T13175] [ 406.880664][T13175] dump_stack_lvl+0x16c/0x230 [ 406.885376][T13175] ? show_regs_print_info+0x20/0x20 [ 406.890621][T13175] ? load_image+0x3b0/0x3b0 [ 406.895170][T13175] ? __might_fault+0xaa/0x120 [ 406.899880][T13175] ? __lock_acquire+0x7c80/0x7c80 [ 406.904942][T13175] should_fail_ex+0x39d/0x4d0 [ 406.909680][T13175] _copy_from_user+0x2f/0xe0 [ 406.914302][T13175] generic_map_update_batch+0x53f/0x810 [ 406.919895][T13175] ? rcu_read_unlock+0xa0/0xa0 [ 406.924702][T13175] ? __fdget+0x180/0x210 [ 406.928963][T13175] ? rcu_read_unlock+0xa0/0xa0 [ 406.933735][T13175] bpf_map_do_batch+0x3d7/0x610 [ 406.938599][T13175] __sys_bpf+0x31b/0x800 [ 406.942846][T13175] ? bpf_link_show_fdinfo+0x350/0x350 [ 406.948249][T13175] ? lock_chain_count+0x20/0x20 [ 406.953121][T13175] __x64_sys_bpf+0x7c/0x90 [ 406.957539][T13175] do_syscall_64+0x55/0xb0 [ 406.961964][T13175] ? clear_bhb_loop+0x40/0x90 [ 406.966646][T13175] ? clear_bhb_loop+0x40/0x90 [ 406.971328][T13175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.977225][T13175] RIP: 0033:0x7f26d4d8efc9 [ 406.981639][T13175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.001249][T13175] RSP: 002b:00007f26d5ce9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 407.009666][T13175] RAX: ffffffffffffffda RBX: 00007f26d4fe5fa0 RCX: 00007f26d4d8efc9 [ 407.017646][T13175] RDX: 0000000000000038 RSI: 0000200000000400 RDI: 000000000000001a [ 407.025618][T13175] RBP: 00007f26d5ce9090 R08: 0000000000000000 R09: 0000000000000000 [ 407.033606][T13175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.041581][T13175] R13: 00007f26d4fe6038 R14: 00007f26d4fe5fa0 R15: 00007ffc7d897118 [ 407.049566][T13175] [ 408.383304][T13208] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 408.623115][T13235] FAULT_INJECTION: forcing a failure. [ 408.623115][T13235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.636451][T13235] CPU: 1 PID: 13235 Comm: syz.3.2879 Not tainted syzkaller #0 [ 408.643937][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 408.653999][T13235] Call Trace: [ 408.657281][T13235] [ 408.660219][T13235] dump_stack_lvl+0x16c/0x230 [ 408.664936][T13235] ? show_regs_print_info+0x20/0x20 [ 408.670152][T13235] ? load_image+0x3b0/0x3b0 [ 408.674684][T13235] ? __might_fault+0xaa/0x120 [ 408.679366][T13235] ? __lock_acquire+0x7c80/0x7c80 [ 408.684398][T13235] should_fail_ex+0x39d/0x4d0 [ 408.689088][T13235] _copy_from_user+0x2f/0xe0 [ 408.693683][T13235] ____sys_sendmsg+0x30d/0x950 [ 408.698473][T13235] ? __sys_sendmsg_sock+0x30/0x30 [ 408.703518][T13235] ? __import_iovec+0x3fa/0x860 [ 408.708398][T13235] ? import_iovec+0x73/0xa0 [ 408.712921][T13235] ___sys_sendmsg+0x220/0x290 [ 408.717642][T13235] ? __sys_sendmsg+0x270/0x270 [ 408.722443][T13235] ? __lock_acquire+0x7c80/0x7c80 [ 408.727511][T13235] __se_sys_sendmsg+0x1a5/0x270 [ 408.732393][T13235] ? __x64_sys_sendmsg+0x80/0x80 [ 408.737371][T13235] ? lockdep_hardirqs_on+0x98/0x150 [ 408.742592][T13235] do_syscall_64+0x55/0xb0 [ 408.747017][T13235] ? clear_bhb_loop+0x40/0x90 [ 408.751698][T13235] ? clear_bhb_loop+0x40/0x90 [ 408.756381][T13235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.762273][T13235] RIP: 0033:0x7fda08b8efc9 [ 408.766689][T13235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.786304][T13235] RSP: 002b:00007fda099f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.794726][T13235] RAX: ffffffffffffffda RBX: 00007fda08de5fa0 RCX: 00007fda08b8efc9 [ 408.802710][T13235] RDX: 0000000000000000 RSI: 0000200000002780 RDI: 0000000000000003 [ 408.810685][T13235] RBP: 00007fda099f7090 R08: 0000000000000000 R09: 0000000000000000 [ 408.818667][T13235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.826639][T13235] R13: 00007fda08de6038 R14: 00007fda08de5fa0 R15: 00007ffc2556ab48 [ 408.834649][T13235] [ 409.343664][T13249] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2884'. [ 409.403809][T13249] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2884'. [ 409.445694][T13249] team0: entered promiscuous mode [ 409.451446][T13249] team_slave_0: entered promiscuous mode [ 409.460677][T13249] team_slave_1: entered promiscuous mode [ 409.472785][T13249] team0: entered allmulticast mode [ 409.478864][T13249] team_slave_0: entered allmulticast mode [ 409.485229][T13249] team_slave_1: entered allmulticast mode [ 409.503962][T13249] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.536812][T13249] bond0: (slave team0): Releasing backup interface [ 409.614398][T13249] bridge0: port 3(team0) entered blocking state [ 409.648038][T13249] bridge0: port 3(team0) entered disabled state [ 410.066382][T13268] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2889'. [ 410.093085][T13268] validate_nla: 24 callbacks suppressed [ 410.093130][T13268] netlink: 'syz.3.2889': attribute type 10 has an invalid length. [ 410.181897][T13268] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 410.200332][T13268] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 410.250255][T13268] team0: Port device wlan1 removed [ 410.298117][T13268] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 410.338447][T13290] netlink: 'syz.2.2894': attribute type 10 has an invalid length. [ 410.616649][T13299] netlink: 'syz.2.2898': attribute type 15 has an invalid length. [ 410.645314][T13299] netlink: 'syz.2.2898': attribute type 7 has an invalid length. [ 411.016805][T13303] netlink: 'syz.3.2900': attribute type 10 has an invalid length. [ 411.034789][T13303] team0: left allmulticast mode [ 411.040656][T13303] team_slave_0: left allmulticast mode [ 411.046285][T13303] team_slave_1: left allmulticast mode [ 411.056028][T13303] team0: left promiscuous mode [ 411.065003][T13303] team_slave_0: left promiscuous mode [ 411.077296][T13303] team_slave_1: left promiscuous mode [ 411.096567][T13303] bridge0: port 3(team0) entered disabled state [ 411.152121][T13303] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.174713][T13303] bond0: (slave team0): Enslaving as an active interface with an up link [ 411.234977][T13315] netlink: 'syz.2.2903': attribute type 10 has an invalid length. [ 411.442435][T13323] FAULT_INJECTION: forcing a failure. [ 411.442435][T13323] name failslab, interval 1, probability 0, space 0, times 0 [ 411.456172][T13323] CPU: 1 PID: 13323 Comm: syz.3.2906 Not tainted syzkaller #0 [ 411.463650][T13323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 411.473728][T13323] Call Trace: [ 411.477010][T13323] [ 411.479940][T13323] dump_stack_lvl+0x16c/0x230 [ 411.484646][T13323] ? show_regs_print_info+0x20/0x20 [ 411.489857][T13323] ? load_image+0x3b0/0x3b0 [ 411.494369][T13323] ? __might_sleep+0xe0/0xe0 [ 411.498960][T13323] ? __lock_acquire+0x7c80/0x7c80 [ 411.504007][T13323] ? mark_lock+0x94/0x320 [ 411.508359][T13323] should_fail_ex+0x39d/0x4d0 [ 411.513061][T13323] should_failslab+0x9/0x20 [ 411.517574][T13323] slab_pre_alloc_hook+0x59/0x310 [ 411.522617][T13323] ? __get_vm_area_node+0x125/0x370 [ 411.527837][T13323] __kmem_cache_alloc_node+0x53/0x260 [ 411.533218][T13323] ? __get_vm_area_node+0x125/0x370 [ 411.538424][T13323] kmalloc_node_trace+0x26/0xe0 [ 411.543283][T13323] __get_vm_area_node+0x125/0x370 [ 411.548320][T13323] __vmalloc_node_range+0x36e/0x1320 [ 411.553631][T13323] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 411.559615][T13323] ? mark_lock+0x94/0x320 [ 411.563946][T13323] ? __lock_acquire+0x1334/0x7c80 [ 411.568972][T13323] ? verify_lock_unused+0x140/0x140 [ 411.574184][T13323] ? free_vm_area+0x50/0x50 [ 411.578692][T13323] ? end_current_label_crit_section+0x170/0x170 [ 411.584942][T13323] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 411.590505][T13323] __vmalloc+0x7a/0x90 [ 411.594578][T13323] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 411.600123][T13323] bpf_prog_alloc_no_stats+0x47/0x440 [ 411.605507][T13323] ? bpf_prog_alloc+0x2b/0x1b0 [ 411.610285][T13323] bpf_prog_alloc+0x3d/0x1b0 [ 411.614901][T13323] bpf_prog_load+0x6b8/0x16d0 [ 411.619600][T13323] ? map_freeze+0x420/0x420 [ 411.624107][T13323] ? __might_fault+0xaa/0x120 [ 411.628780][T13323] ? __lock_acquire+0x7c80/0x7c80 [ 411.633803][T13323] ? file_end_write+0x159/0x250 [ 411.638655][T13323] ? __might_fault+0xaa/0x120 [ 411.643360][T13323] ? __might_fault+0xc6/0x120 [ 411.648036][T13323] ? __might_fault+0xaa/0x120 [ 411.652711][T13323] ? bpf_lsm_bpf+0x9/0x10 [ 411.657041][T13323] ? security_bpf+0x7e/0xa0 [ 411.661552][T13323] __sys_bpf+0x55a/0x800 [ 411.665804][T13323] ? bpf_link_show_fdinfo+0x350/0x350 [ 411.671290][T13323] ? lock_chain_count+0x20/0x20 [ 411.676156][T13323] __x64_sys_bpf+0x7c/0x90 [ 411.680577][T13323] do_syscall_64+0x55/0xb0 [ 411.685000][T13323] ? clear_bhb_loop+0x40/0x90 [ 411.689686][T13323] ? clear_bhb_loop+0x40/0x90 [ 411.694372][T13323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.700268][T13323] RIP: 0033:0x7fda08b8efc9 [ 411.704690][T13323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.724300][T13323] RSP: 002b:00007fda099f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 411.732721][T13323] RAX: ffffffffffffffda RBX: 00007fda08de5fa0 RCX: 00007fda08b8efc9 [ 411.740697][T13323] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 411.748671][T13323] RBP: 00007fda099f7090 R08: 0000000000000000 R09: 0000000000000000 [ 411.756644][T13323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.764616][T13323] R13: 00007fda08de6038 R14: 00007fda08de5fa0 R15: 00007ffc2556ab48 [ 411.772623][T13323] [ 411.829309][T13323] warn_alloc: 1 callbacks suppressed [ 411.829322][T13323] syz.3.2906: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 411.896352][T13323] CPU: 1 PID: 13323 Comm: syz.3.2906 Not tainted syzkaller #0 [ 411.903945][T13323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 411.914023][T13323] Call Trace: [ 411.917322][T13323] [ 411.920257][T13323] dump_stack_lvl+0x16c/0x230 [ 411.924952][T13323] ? show_regs_print_info+0x20/0x20 [ 411.930167][T13323] ? load_image+0x3b0/0x3b0 [ 411.934687][T13323] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 411.941107][T13323] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 411.947610][T13323] warn_alloc+0x210/0x300 [ 411.951948][T13323] ? __get_vm_area_node+0x125/0x370 [ 411.957154][T13323] ? zone_watermark_ok_safe+0x230/0x230 [ 411.962706][T13323] ? rcu_is_watching+0x15/0xb0 [ 411.967485][T13323] ? __get_vm_area_node+0x356/0x370 [ 411.972693][T13323] __vmalloc_node_range+0x393/0x1320 [ 411.977987][T13323] ? mark_lock+0x94/0x320 [ 411.982325][T13323] ? __lock_acquire+0x1334/0x7c80 [ 411.987362][T13323] ? verify_lock_unused+0x140/0x140 [ 411.992577][T13323] ? free_vm_area+0x50/0x50 [ 411.997105][T13323] ? end_current_label_crit_section+0x170/0x170 [ 412.003362][T13323] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 412.008914][T13323] __vmalloc+0x7a/0x90 [ 412.012989][T13323] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 412.018554][T13323] bpf_prog_alloc_no_stats+0x47/0x440 [ 412.023927][T13323] ? bpf_prog_alloc+0x2b/0x1b0 [ 412.028692][T13323] bpf_prog_alloc+0x3d/0x1b0 [ 412.033289][T13323] bpf_prog_load+0x6b8/0x16d0 [ 412.037988][T13323] ? map_freeze+0x420/0x420 [ 412.042506][T13323] ? __might_fault+0xaa/0x120 [ 412.047186][T13323] ? __lock_acquire+0x7c80/0x7c80 [ 412.052214][T13323] ? file_end_write+0x159/0x250 [ 412.057072][T13323] ? __might_fault+0xaa/0x120 [ 412.061759][T13323] ? __might_fault+0xc6/0x120 [ 412.066435][T13323] ? __might_fault+0xaa/0x120 [ 412.071118][T13323] ? bpf_lsm_bpf+0x9/0x10 [ 412.075456][T13323] ? security_bpf+0x7e/0xa0 [ 412.079972][T13323] __sys_bpf+0x55a/0x800 [ 412.084225][T13323] ? bpf_link_show_fdinfo+0x350/0x350 [ 412.089625][T13323] ? lock_chain_count+0x20/0x20 [ 412.094497][T13323] __x64_sys_bpf+0x7c/0x90 [ 412.098925][T13323] do_syscall_64+0x55/0xb0 [ 412.103352][T13323] ? clear_bhb_loop+0x40/0x90 [ 412.108034][T13323] ? clear_bhb_loop+0x40/0x90 [ 412.112740][T13323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.118642][T13323] RIP: 0033:0x7fda08b8efc9 [ 412.123067][T13323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.142682][T13323] RSP: 002b:00007fda099f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 412.151103][T13323] RAX: ffffffffffffffda RBX: 00007fda08de5fa0 RCX: 00007fda08b8efc9 [ 412.159077][T13323] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 412.167046][T13323] RBP: 00007fda099f7090 R08: 0000000000000000 R09: 0000000000000000 [ 412.175018][T13323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.182992][T13323] R13: 00007fda08de6038 R14: 00007fda08de5fa0 R15: 00007ffc2556ab48 [ 412.190981][T13323] [ 412.208443][T13323] Mem-Info: [ 412.211659][T13323] active_anon:5404 inactive_anon:0 isolated_anon:0 [ 412.211659][T13323] active_file:18627 inactive_file:40016 isolated_file:0 [ 412.211659][T13323] unevictable:768 dirty:360 writeback:0 [ 412.211659][T13323] slab_reclaimable:10470 slab_unreclaimable:96625 [ 412.211659][T13323] mapped:24583 shmem:1361 pagetables:519 [ 412.211659][T13323] sec_pagetables:0 bounce:0 [ 412.211659][T13323] kernel_misc_reclaimable:0 [ 412.211659][T13323] free:1345333 free_pcp:8149 free_cma:0 [ 412.262359][T13323] Node 0 active_anon:21616kB inactive_anon:0kB active_file:74508kB inactive_file:159856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98332kB dirty:1440kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11428kB pagetables:2076kB sec_pagetables:0kB all_unreclaimable? no [ 412.335573][T13323] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 412.366244][T13323] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 412.394222][T13323] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 412.400356][T13323] Node 0 DMA32 free:1466228kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:21668kB inactive_anon:0kB active_file:74508kB inactive_file:158540kB unevictable:1536kB writepending:1440kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:15744kB local_pcp:3752kB free_cma:0kB [ 412.431222][T13329] netlink: 'syz.0.2909': attribute type 15 has an invalid length. [ 412.449964][T13329] netlink: 'syz.0.2909': attribute type 7 has an invalid length. [ 412.484204][T13323] lowmem_reserve[]: 0 0 1 1 1 [ 412.494349][T13323] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 412.546602][T13323] lowmem_reserve[]: 0 0 0 0 0 [ 412.559351][T13323] Node 1 Normal free:3899276kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17068kB local_pcp:11020kB free_cma:0kB [ 412.590193][T13323] lowmem_reserve[]: 0 0 0 0 0 [ 412.595050][T13323] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 412.612930][T13323] Node 0 DMA32: 1407*4kB (UME) 807*8kB (UM) 898*16kB (UME) 761*32kB (UME) 396*64kB (UME) 160*128kB (UME) 60*256kB (UME) 35*512kB (UM) 27*1024kB (UME) 9*2048kB (UM) 315*4096kB (UM) = 1466228kB [ 412.639339][T13323] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 412.662696][T13323] Node 1 Normal: 245*4kB (UME) 65*8kB (UME) 45*16kB (UME) 125*32kB (UME) 25*64kB (UE) 12*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3899276kB [ 412.681956][T13323] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 412.691775][T13323] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 412.704055][T13323] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 412.713801][T13323] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 412.723611][T13323] 60004 total pagecache pages [ 412.739881][T13323] 0 pages in swap cache [ 412.744279][T13323] Free swap = 124996kB [ 412.754316][T13323] Total swap = 124996kB [ 412.762424][T13339] FAULT_INJECTION: forcing a failure. [ 412.762424][T13339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.762885][T13323] 2097051 pages RAM [ 412.796001][T13323] 0 pages HighMem/MovableOnly [ 412.817676][T13339] CPU: 1 PID: 13339 Comm: syz.2.2913 Not tainted syzkaller #0 [ 412.818342][T13323] 416137 pages reserved [ 412.825150][T13339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 412.839380][T13339] Call Trace: [ 412.842032][T13323] 0 pages cma reserved [ 412.842656][T13339] [ 412.849675][T13339] dump_stack_lvl+0x16c/0x230 [ 412.854394][T13339] ? show_regs_print_info+0x20/0x20 [ 412.859622][T13339] ? load_image+0x3b0/0x3b0 [ 412.864148][T13339] ? __lock_acquire+0x7c80/0x7c80 [ 412.869196][T13339] should_fail_ex+0x39d/0x4d0 [ 412.873901][T13339] _copy_from_user+0x2f/0xe0 [ 412.878498][T13339] __copy_msghdr+0x3bb/0x580 [ 412.883098][T13339] ___sys_sendmsg+0x1a6/0x290 [ 412.887786][T13339] ? __sys_sendmsg+0x270/0x270 [ 412.892579][T13339] ? seqcount_lockdep_reader_access+0x160/0x1c0 [ 412.898837][T13339] __se_sys_sendmsg+0x1a5/0x270 [ 412.903822][T13339] ? perf_trace_preemptirq_template+0x281/0x340 [ 412.910072][T13339] ? __x64_sys_sendmsg+0x80/0x80 [ 412.915036][T13339] ? lockdep_hardirqs_on+0x98/0x150 [ 412.920245][T13339] do_syscall_64+0x55/0xb0 [ 412.924673][T13339] ? clear_bhb_loop+0x40/0x90 [ 412.929366][T13339] ? clear_bhb_loop+0x40/0x90 [ 412.934047][T13339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.940035][T13339] RIP: 0033:0x7f7e0bb8efc9 [ 412.944447][T13339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.964051][T13339] RSP: 002b:00007f7e0c959038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.972466][T13339] RAX: ffffffffffffffda RBX: 00007f7e0bde5fa0 RCX: 00007f7e0bb8efc9 [ 412.980522][T13339] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000009 [ 412.988489][T13339] RBP: 00007f7e0c959090 R08: 0000000000000000 R09: 0000000000000000 [ 412.996457][T13339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.004515][T13339] R13: 00007f7e0bde6038 R14: 00007f7e0bde5fa0 R15: 00007ffe01899418 [ 413.012502][T13339] [ 413.193867][T13345] netlink: 'syz.0.2915': attribute type 10 has an invalid length. [ 413.275871][T13343] netlink: 'syz.1.2914': attribute type 3 has an invalid length. [ 413.300309][T13343] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2914'. [ 414.831803][T13399] team0: left allmulticast mode [ 414.843251][T13399] team_slave_0: left allmulticast mode [ 414.860628][T13399] team_slave_1: left allmulticast mode [ 414.871896][T13399] team0: left promiscuous mode [ 414.884676][T13399] team_slave_0: left promiscuous mode [ 414.906287][T13399] team_slave_1: left promiscuous mode [ 414.914740][T13399] bridge0: port 3(team0) entered disabled state [ 414.938054][T13399] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.964140][T13399] bond0: (slave team0): Enslaving as an active interface with an up link [ 415.264779][T13411] netlink: 178584 bytes leftover after parsing attributes in process `syz.3.2939'. [ 415.305218][T13411] netlink: zone id is out of range [ 415.321022][T13411] netlink: zone id is out of range [ 415.329805][T13411] netlink: zone id is out of range [ 415.336379][T13411] netlink: zone id is out of range [ 415.344190][T13411] netlink: zone id is out of range [ 415.351233][T13411] netlink: zone id is out of range [ 415.359237][T13411] netlink: zone id is out of range [ 415.369708][T13411] netlink: zone id is out of range [ 415.375505][T13411] netlink: zone id is out of range [ 415.384601][T13411] netlink: zone id is out of range [ 415.500845][T13418] validate_nla: 7 callbacks suppressed [ 415.500858][T13418] netlink: 'syz.0.2941': attribute type 10 has an invalid length. [ 415.646055][T13420] netlink: 'syz.2.2942': attribute type 10 has an invalid length. [ 415.903715][T13434] FAULT_INJECTION: forcing a failure. [ 415.903715][T13434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.918031][T13434] CPU: 0 PID: 13434 Comm: syz.1.2949 Not tainted syzkaller #0 [ 415.925533][T13434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 415.935613][T13434] Call Trace: [ 415.938918][T13434] [ 415.941867][T13434] dump_stack_lvl+0x16c/0x230 [ 415.942172][T13430] syzkaller0: entered promiscuous mode [ 415.946556][T13434] ? show_regs_print_info+0x20/0x20 [ 415.957237][T13434] ? load_image+0x3b0/0x3b0 [ 415.961762][T13434] ? __lock_acquire+0x7c80/0x7c80 [ 415.966797][T13434] ? snprintf+0xdb/0x120 [ 415.971045][T13434] should_fail_ex+0x39d/0x4d0 [ 415.975740][T13434] _copy_to_user+0x2f/0xa0 [ 415.980170][T13434] simple_read_from_buffer+0xe7/0x150 [ 415.985562][T13434] proc_fail_nth_read+0x1e3/0x250 [ 415.990602][T13434] ? proc_fault_inject_write+0x340/0x340 [ 415.996245][T13434] ? fsnotify_perm+0x271/0x5e0 [ 416.001020][T13434] ? proc_fault_inject_write+0x340/0x340 [ 416.006655][T13434] vfs_read+0x27e/0x920 [ 416.010828][T13434] ? kernel_read+0x1e0/0x1e0 [ 416.015424][T13434] ? __fget_files+0x28/0x4d0 [ 416.020019][T13434] ? __fget_files+0x44a/0x4d0 [ 416.024716][T13434] ? __fdget_pos+0x2a3/0x330 [ 416.029322][T13434] ? ksys_read+0x75/0x250 [ 416.033663][T13434] ksys_read+0x147/0x250 [ 416.037911][T13434] ? vfs_write+0x940/0x940 [ 416.042344][T13434] ? lockdep_hardirqs_on+0x98/0x150 [ 416.047557][T13434] do_syscall_64+0x55/0xb0 [ 416.051979][T13434] ? clear_bhb_loop+0x40/0x90 [ 416.056655][T13434] ? clear_bhb_loop+0x40/0x90 [ 416.061335][T13434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.067229][T13434] RIP: 0033:0x7f26d4d8d9dc [ 416.071649][T13434] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 416.091260][T13434] RSP: 002b:00007f26d5ce9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 416.099673][T13434] RAX: ffffffffffffffda RBX: 00007f26d4fe5fa0 RCX: 00007f26d4d8d9dc [ 416.107642][T13434] RDX: 000000000000000f RSI: 00007f26d5ce90a0 RDI: 0000000000000004 [ 416.115612][T13434] RBP: 00007f26d5ce9090 R08: 0000000000000000 R09: 0000000000000000 [ 416.123586][T13434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.131557][T13434] R13: 00007f26d4fe6038 R14: 00007f26d4fe5fa0 R15: 00007ffc7d897118 [ 416.139541][T13434] [ 416.142816][T13430] syzkaller0: entered allmulticast mode [ 416.215196][T13433] netlink: 'syz.0.2948': attribute type 10 has an invalid length. [ 418.031837][T13459] netlink: 'syz.2.2955': attribute type 10 has an invalid length. [ 418.167403][T13463] netlink: 'syz.3.2957': attribute type 10 has an invalid length. [ 418.350962][T13472] FAULT_INJECTION: forcing a failure. [ 418.350962][T13472] name failslab, interval 1, probability 0, space 0, times 0 [ 418.367528][T13472] CPU: 0 PID: 13472 Comm: syz.3.2962 Not tainted syzkaller #0 [ 418.375108][T13472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 418.385176][T13472] Call Trace: [ 418.388466][T13472] [ 418.391397][T13472] dump_stack_lvl+0x16c/0x230 [ 418.396086][T13472] ? show_regs_print_info+0x20/0x20 [ 418.401291][T13472] ? load_image+0x3b0/0x3b0 [ 418.405811][T13472] ? __might_sleep+0xe0/0xe0 [ 418.410431][T13472] ? __lock_acquire+0x7c80/0x7c80 [ 418.415461][T13472] ? mark_lock+0x94/0x320 [ 418.419798][T13472] should_fail_ex+0x39d/0x4d0 [ 418.424485][T13472] should_failslab+0x9/0x20 [ 418.429000][T13472] slab_pre_alloc_hook+0x59/0x310 [ 418.434047][T13472] ? __get_vm_area_node+0x125/0x370 [ 418.439259][T13472] __kmem_cache_alloc_node+0x53/0x260 [ 418.444658][T13472] ? __get_vm_area_node+0x125/0x370 [ 418.449866][T13472] kmalloc_node_trace+0x26/0xe0 [ 418.454741][T13472] __get_vm_area_node+0x125/0x370 [ 418.459778][T13472] __vmalloc_node_range+0x36e/0x1320 [ 418.465073][T13472] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 418.470628][T13472] ? mark_lock+0x94/0x320 [ 418.474967][T13472] ? __lock_acquire+0x1334/0x7c80 [ 418.480001][T13472] ? verify_lock_unused+0x140/0x140 [ 418.485213][T13472] ? free_vm_area+0x50/0x50 [ 418.489739][T13472] ? end_current_label_crit_section+0x170/0x170 [ 418.495991][T13472] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 418.501558][T13472] __vmalloc+0x7a/0x90 [ 418.505641][T13472] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 418.511281][T13472] bpf_prog_alloc_no_stats+0x47/0x440 [ 418.516649][T13472] ? bpf_prog_alloc+0x2b/0x1b0 [ 418.521416][T13472] bpf_prog_alloc+0x3d/0x1b0 [ 418.526007][T13472] bpf_prog_load+0x6b8/0x16d0 [ 418.530694][T13472] ? map_freeze+0x420/0x420 [ 418.535201][T13472] ? __might_fault+0xaa/0x120 [ 418.539882][T13472] ? __lock_acquire+0x7c80/0x7c80 [ 418.544909][T13472] ? file_end_write+0x159/0x250 [ 418.549769][T13472] ? __might_fault+0xaa/0x120 [ 418.554443][T13472] ? __might_fault+0xc6/0x120 [ 418.559119][T13472] ? __might_fault+0xaa/0x120 [ 418.563800][T13472] ? bpf_lsm_bpf+0x9/0x10 [ 418.568130][T13472] ? security_bpf+0x7e/0xa0 [ 418.572638][T13472] __sys_bpf+0x55a/0x800 [ 418.576881][T13472] ? bpf_link_show_fdinfo+0x350/0x350 [ 418.582260][T13472] ? lock_chain_count+0x20/0x20 [ 418.587118][T13472] __x64_sys_bpf+0x7c/0x90 [ 418.591539][T13472] do_syscall_64+0x55/0xb0 [ 418.595955][T13472] ? clear_bhb_loop+0x40/0x90 [ 418.600631][T13472] ? clear_bhb_loop+0x40/0x90 [ 418.605313][T13472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.611214][T13472] RIP: 0033:0x7fda08b8efc9 [ 418.615631][T13472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.635264][T13472] RSP: 002b:00007fda099f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 418.643691][T13472] RAX: ffffffffffffffda RBX: 00007fda08de5fa0 RCX: 00007fda08b8efc9 [ 418.651663][T13472] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 418.659635][T13472] RBP: 00007fda099f7090 R08: 0000000000000000 R09: 0000000000000000 [ 418.667604][T13472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.675574][T13472] R13: 00007fda08de6038 R14: 00007fda08de5fa0 R15: 00007ffc2556ab48 [ 418.683559][T13472] [ 418.907170][T13475] netlink: 'syz.1.2963': attribute type 3 has an invalid length. [ 418.928825][T13475] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2963'. [ 419.089669][T13480] netlink: 'syz.3.2964': attribute type 10 has an invalid length. [ 419.350377][T13489] FAULT_INJECTION: forcing a failure. [ 419.350377][T13489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.376417][T13489] CPU: 1 PID: 13489 Comm: syz.2.2969 Not tainted syzkaller #0 [ 419.383933][T13489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 419.394018][T13489] Call Trace: [ 419.397322][T13489] [ 419.400275][T13489] dump_stack_lvl+0x16c/0x230 [ 419.404988][T13489] ? show_regs_print_info+0x20/0x20 [ 419.410220][T13489] ? load_image+0x3b0/0x3b0 [ 419.414759][T13489] ? __lock_acquire+0x7c80/0x7c80 [ 419.419828][T13489] should_fail_ex+0x39d/0x4d0 [ 419.424535][T13489] _copy_from_user+0x2f/0xe0 [ 419.429155][T13489] __copy_msghdr+0x3bb/0x580 [ 419.433800][T13489] ___sys_sendmsg+0x1a6/0x290 [ 419.438508][T13489] ? __sys_sendmsg+0x270/0x270 [ 419.443309][T13489] ? __lock_acquire+0x7c80/0x7c80 [ 419.448355][T13489] __se_sys_sendmsg+0x1a5/0x270 [ 419.453217][T13489] ? __x64_sys_sendmsg+0x80/0x80 [ 419.458189][T13489] ? lockdep_hardirqs_on+0x98/0x150 [ 419.463386][T13489] do_syscall_64+0x55/0xb0 [ 419.467801][T13489] ? clear_bhb_loop+0x40/0x90 [ 419.472486][T13489] ? clear_bhb_loop+0x40/0x90 [ 419.477179][T13489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.483071][T13489] RIP: 0033:0x7f7e0bb8efc9 [ 419.487489][T13489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.507097][T13489] RSP: 002b:00007f7e0c959038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.515515][T13489] RAX: ffffffffffffffda RBX: 00007f7e0bde5fa0 RCX: 00007f7e0bb8efc9 [ 419.523490][T13489] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 419.531463][T13489] RBP: 00007f7e0c959090 R08: 0000000000000000 R09: 0000000000000000 [ 419.539452][T13489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.547421][T13489] R13: 00007f7e0bde6038 R14: 00007f7e0bde5fa0 R15: 00007ffe01899418 [ 419.555406][T13489] [ 419.616219][T13493] FAULT_INJECTION: forcing a failure. [ 419.616219][T13493] name failslab, interval 1, probability 0, space 0, times 0 [ 419.648414][T13493] CPU: 0 PID: 13493 Comm: syz.0.2970 Not tainted syzkaller #0 [ 419.655917][T13493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 419.665991][T13493] Call Trace: [ 419.669287][T13493] [ 419.672244][T13493] dump_stack_lvl+0x16c/0x230 [ 419.676956][T13493] ? show_regs_print_info+0x20/0x20 [ 419.682185][T13493] ? load_image+0x3b0/0x3b0 [ 419.686718][T13493] ? __lock_acquire+0x7c80/0x7c80 [ 419.691765][T13493] should_fail_ex+0x39d/0x4d0 [ 419.696470][T13493] should_failslab+0x9/0x20 [ 419.700999][T13493] slab_pre_alloc_hook+0x59/0x310 [ 419.706045][T13493] ? vmemdup_user+0x49/0x1e0 [ 419.710652][T13493] ? vmemdup_user+0x49/0x1e0 [ 419.715263][T13493] __kmem_cache_alloc_node+0x53/0x260 [ 419.720666][T13493] ? vmemdup_user+0x49/0x1e0 [ 419.725280][T13493] __kmalloc_node+0xa4/0x230 [ 419.729904][T13493] vmemdup_user+0x49/0x1e0 [ 419.734343][T13493] map_lookup_elem+0x276/0x7c0 [ 419.739120][T13493] ? __might_fault+0xaa/0x120 [ 419.743815][T13493] ? security_bpf+0x7e/0xa0 [ 419.748343][T13493] __sys_bpf+0x3dc/0x800 [ 419.752595][T13493] ? bpf_link_show_fdinfo+0x350/0x350 [ 419.757995][T13493] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 419.764177][T13493] __x64_sys_bpf+0x7c/0x90 [ 419.768613][T13493] do_syscall_64+0x55/0xb0 [ 419.773049][T13493] ? clear_bhb_loop+0x40/0x90 [ 419.777739][T13493] ? clear_bhb_loop+0x40/0x90 [ 419.782443][T13493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.788363][T13493] RIP: 0033:0x7f5f6238efc9 [ 419.792789][T13493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.812412][T13493] RSP: 002b:00007f5f63291038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 419.820868][T13493] RAX: ffffffffffffffda RBX: 00007f5f625e5fa0 RCX: 00007f5f6238efc9 [ 419.828864][T13493] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 0000000000000001 [ 419.836868][T13493] RBP: 00007f5f63291090 R08: 0000000000000000 R09: 0000000000000000 [ 419.844854][T13493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.852851][T13493] R13: 00007f5f625e6038 R14: 00007f5f625e5fa0 R15: 00007ffee2bbf018 [ 419.860863][T13493] [ 419.980532][T13490] netlink: 'syz.3.2968': attribute type 10 has an invalid length. [ 420.022989][T13498] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2972'. [ 420.087595][T13495] netlink: 'syz.2.2971': attribute type 10 has an invalid length. [ 420.476042][T13504] netlink: 'syz.1.2975': attribute type 3 has an invalid length. [ 420.499180][T13504] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2975'. [ 420.796435][T13513] netlink: 'syz.0.2979': attribute type 21 has an invalid length. [ 420.828482][T13513] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2979'. [ 420.855078][T13515] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2979'. [ 420.890273][T13513] netlink: 'syz.0.2979': attribute type 4 has an invalid length. [ 420.918121][T13513] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2979'. [ 421.530559][T13522] netlink: 'syz.3.2982': attribute type 39 has an invalid length. [ 421.606770][T13525] netlink: 'syz.1.2984': attribute type 10 has an invalid length. [ 421.769328][T13529] FAULT_INJECTION: forcing a failure. [ 421.769328][T13529] name failslab, interval 1, probability 0, space 0, times 0 [ 421.792733][T13529] CPU: 0 PID: 13529 Comm: syz.3.2985 Not tainted syzkaller #0 [ 421.800323][T13529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 421.810395][T13529] Call Trace: [ 421.813697][T13529] [ 421.816647][T13529] dump_stack_lvl+0x16c/0x230 [ 421.821364][T13529] ? show_regs_print_info+0x20/0x20 [ 421.826597][T13529] ? load_image+0x3b0/0x3b0 [ 421.831142][T13529] ? __might_sleep+0xe0/0xe0 [ 421.835759][T13529] ? __lock_acquire+0x7c80/0x7c80 [ 421.840822][T13529] should_fail_ex+0x39d/0x4d0 [ 421.845533][T13529] should_failslab+0x9/0x20 [ 421.850063][T13529] slab_pre_alloc_hook+0x59/0x310 [ 421.855100][T13529] ? bpf_prog_test_run_flow_dissector+0x231/0x600 [ 421.861536][T13529] ? bpf_prog_test_run_flow_dissector+0x231/0x600 [ 421.867951][T13529] __kmem_cache_alloc_node+0x53/0x260 [ 421.873332][T13529] ? bpf_prog_test_run_flow_dissector+0x231/0x600 [ 421.879750][T13529] __kmalloc+0xa4/0x240 [ 421.883911][T13529] bpf_prog_test_run_flow_dissector+0x231/0x600 [ 421.890166][T13529] ? xdp_convert_buff_to_md+0x200/0x200 [ 421.895726][T13529] ? __fget_files+0x28/0x4d0 [ 421.900326][T13529] ? __fget_files+0x44a/0x4d0 [ 421.905034][T13529] ? xdp_convert_buff_to_md+0x200/0x200 [ 421.910594][T13529] bpf_prog_test_run+0x321/0x390 [ 421.915568][T13529] __sys_bpf+0x440/0x800 [ 421.919845][T13529] ? bpf_link_show_fdinfo+0x350/0x350 [ 421.925232][T13529] ? lock_chain_count+0x20/0x20 [ 421.930103][T13529] __x64_sys_bpf+0x7c/0x90 [ 421.934531][T13529] do_syscall_64+0x55/0xb0 [ 421.938958][T13529] ? clear_bhb_loop+0x40/0x90 [ 421.943640][T13529] ? clear_bhb_loop+0x40/0x90 [ 421.948330][T13529] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.954234][T13529] RIP: 0033:0x7fda08b8efc9 [ 421.958648][T13529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.978259][T13529] RSP: 002b:00007fda099f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 421.986684][T13529] RAX: ffffffffffffffda RBX: 00007fda08de5fa0 RCX: 00007fda08b8efc9 [ 421.994678][T13529] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 422.002666][T13529] RBP: 00007fda099f7090 R08: 0000000000000000 R09: 0000000000000000 [ 422.010643][T13529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.018614][T13529] R13: 00007fda08de6038 R14: 00007fda08de5fa0 R15: 00007ffc2556ab48 [ 422.026603][T13529] [ 422.305510][T13531] netlink: 'syz.0.2986': attribute type 3 has an invalid length. [ 422.328553][T13531] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2986'. [ 422.415320][T13535] netlink: 'syz.3.2988': attribute type 3 has an invalid length. [ 422.426323][T13535] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.2988'. [ 422.848225][T13539] netlink: 'syz.1.2990': attribute type 10 has an invalid length. [ 422.957459][T13546] netlink: 'syz.0.2993': attribute type 10 has an invalid length. [ 423.013082][T13546] team0: Port device dummy0 added [ 423.026853][T13547] netlink: 'syz.0.2993': attribute type 21 has an invalid length. [ 423.230018][T13553] netlink: 'syz.3.2996': attribute type 10 has an invalid length. [ 423.347331][T13561] FAULT_INJECTION: forcing a failure. [ 423.347331][T13561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.371652][T13561] CPU: 1 PID: 13561 Comm: syz.1.2999 Not tainted syzkaller #0 [ 423.379177][T13561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 423.389257][T13561] Call Trace: [ 423.392551][T13561] [ 423.395511][T13561] dump_stack_lvl+0x16c/0x230 [ 423.400236][T13561] ? show_regs_print_info+0x20/0x20 [ 423.405470][T13561] ? load_image+0x3b0/0x3b0 [ 423.410011][T13561] ? __might_fault+0xaa/0x120 [ 423.414724][T13561] should_fail_ex+0x39d/0x4d0 [ 423.419446][T13561] copyout+0x1a/0x90 [ 423.423373][T13561] _copy_to_iter+0x432/0x10d0 [ 423.428081][T13561] ? iov_iter_init+0x1e0/0x1e0 [ 423.432865][T13561] ? __virt_addr_valid+0x18c/0x540 [ 423.437980][T13561] ? __virt_addr_valid+0x469/0x540 [ 423.443103][T13561] ? __phys_addr_symbol+0x2f/0x70 [ 423.448144][T13561] __skb_datagram_iter+0xdb/0x780 [ 423.453190][T13561] ? skb_copy_datagram_iter+0x200/0x200 [ 423.458762][T13561] skb_copy_datagram_iter+0xb1/0x200 [ 423.464062][T13561] netlink_recvmsg+0x2c5/0xdf0 [ 423.468846][T13561] ? netlink_sendmsg+0xbe0/0xbe0 [ 423.473804][T13561] ? aa_sk_perm+0x7fc/0x930 [ 423.478318][T13561] ? aa_af_perm+0x2b0/0x2b0 [ 423.482824][T13561] ? __lock_acquire+0x1260/0x7c80 [ 423.487858][T13561] ? verify_lock_unused+0x140/0x140 [ 423.493064][T13561] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 423.498350][T13561] ? security_socket_recvmsg+0x89/0xb0 [ 423.503809][T13561] ? netlink_sendmsg+0xbe0/0xbe0 [ 423.508752][T13561] ____sys_recvmsg+0x29e/0x5b0 [ 423.513533][T13561] ? __sys_recvmsg_sock+0x50/0x50 [ 423.518573][T13561] ? import_iovec+0x73/0xa0 [ 423.523175][T13561] ___sys_recvmsg+0x1b6/0x510 [ 423.527863][T13561] ? __sys_recvmsg+0x270/0x270 [ 423.532638][T13561] ? ksys_write+0x1c1/0x250 [ 423.537150][T13561] ? __fget_files+0x44a/0x4d0 [ 423.541924][T13561] __x64_sys_recvmsg+0x1f2/0x2c0 [ 423.546875][T13561] ? ___sys_recvmsg+0x510/0x510 [ 423.551752][T13561] ? lockdep_hardirqs_on+0x98/0x150 [ 423.556952][T13561] do_syscall_64+0x55/0xb0 [ 423.561370][T13561] ? clear_bhb_loop+0x40/0x90 [ 423.566051][T13561] ? clear_bhb_loop+0x40/0x90 [ 423.570735][T13561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.576629][T13561] RIP: 0033:0x7f26d4d8efc9 [ 423.581061][T13561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.600670][T13561] RSP: 002b:00007f26d5ce9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 423.609084][T13561] RAX: ffffffffffffffda RBX: 00007f26d4fe5fa0 RCX: 00007f26d4d8efc9 [ 423.617056][T13561] RDX: 0000000000012002 RSI: 0000200000000080 RDI: 0000000000000003 [ 423.625032][T13561] RBP: 00007f26d5ce9090 R08: 0000000000000000 R09: 0000000000000000 [ 423.633007][T13561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.640975][T13561] R13: 00007f26d4fe6038 R14: 00007f26d4fe5fa0 R15: 00007ffc7d897118 [ 423.648958][T13561] [ 424.692505][T13583] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3007'. [ 425.506654][T13604] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.3013'. [ 425.882538][T13618] FAULT_INJECTION: forcing a failure. [ 425.882538][T13618] name failslab, interval 1, probability 0, space 0, times 0 [ 425.920614][T13618] CPU: 1 PID: 13618 Comm: syz.1.3019 Not tainted syzkaller #0 [ 425.928125][T13618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 425.938198][T13618] Call Trace: [ 425.941484][T13618] [ 425.944423][T13618] dump_stack_lvl+0x16c/0x230 [ 425.949119][T13618] ? show_regs_print_info+0x20/0x20 [ 425.954326][T13618] ? load_image+0x3b0/0x3b0 [ 425.958841][T13618] ? __might_sleep+0xe0/0xe0 [ 425.963448][T13618] ? __lock_acquire+0x7c80/0x7c80 [ 425.968505][T13618] should_fail_ex+0x39d/0x4d0 [ 425.973200][T13618] should_failslab+0x9/0x20 [ 425.977712][T13618] slab_pre_alloc_hook+0x59/0x310 [ 425.982759][T13618] ? genl_start+0x1c9/0x6b0 [ 425.987278][T13618] __kmem_cache_alloc_node+0x53/0x260 [ 425.992670][T13618] ? genl_start+0x1c9/0x6b0 [ 425.997191][T13618] kmalloc_trace+0x2a/0xe0 [ 426.001624][T13618] genl_start+0x1c9/0x6b0 [ 426.005968][T13618] ? netlink_lookup+0x30/0x200 [ 426.010761][T13618] __netlink_dump_start+0x4a9/0x810 [ 426.015987][T13618] genl_family_rcv_msg_dumpit+0x1e8/0x2c0 [ 426.021733][T13618] ? genl_rcv_msg+0x790/0x790 [ 426.026435][T13618] ? genl_get_cmd+0x7d6/0x910 [ 426.031141][T13618] ? genl_family_rcv_msg_doit+0x2f0/0x2f0 [ 426.036879][T13618] ? genl_start+0x6b0/0x6b0 [ 426.041393][T13618] ? genl_dumpit+0x1a0/0x1a0 [ 426.046018][T13618] genl_rcv_msg+0x5d7/0x790 [ 426.050543][T13618] ? genl_bind+0x360/0x360 [ 426.054975][T13618] ? tipc_nametbl_stop+0x10a0/0x10a0 [ 426.060275][T13618] ? perf_trace_lock+0x2ed/0x380 [ 426.065226][T13618] ? __copy_skb_header+0xa7/0x550 [ 426.070278][T13618] netlink_rcv_skb+0x216/0x480 [ 426.075059][T13618] ? genl_bind+0x360/0x360 [ 426.079504][T13618] ? netlink_ack+0x1110/0x1110 [ 426.084301][T13618] ? __lock_acquire+0x7c80/0x7c80 [ 426.089353][T13618] ? down_read+0x1ac/0x2e0 [ 426.093799][T13618] genl_rcv+0x28/0x40 [ 426.097797][T13618] netlink_unicast+0x751/0x8d0 [ 426.102595][T13618] netlink_sendmsg+0x8c1/0xbe0 [ 426.107384][T13618] ? netlink_getsockopt+0x580/0x580 [ 426.112598][T13618] ? aa_sock_msg_perm+0x94/0x150 [ 426.117546][T13618] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 426.122838][T13618] ? security_socket_sendmsg+0x80/0xa0 [ 426.128315][T13618] ? netlink_getsockopt+0x580/0x580 [ 426.133531][T13618] ____sys_sendmsg+0x5bf/0x950 [ 426.138318][T13618] ? __asan_memset+0x22/0x40 [ 426.142917][T13618] ? __sys_sendmsg_sock+0x30/0x30 [ 426.147970][T13618] ? __import_iovec+0x5f2/0x860 [ 426.152861][T13618] ? import_iovec+0x73/0xa0 [ 426.157389][T13618] ___sys_sendmsg+0x220/0x290 [ 426.162093][T13618] ? __sys_sendmsg+0x270/0x270 [ 426.166919][T13618] ? __lock_acquire+0x7c80/0x7c80 [ 426.171993][T13618] __se_sys_sendmsg+0x1a5/0x270 [ 426.176863][T13618] ? __x64_sys_sendmsg+0x80/0x80 [ 426.181841][T13618] ? lockdep_hardirqs_on+0x98/0x150 [ 426.187050][T13618] do_syscall_64+0x55/0xb0 [ 426.191491][T13618] ? clear_bhb_loop+0x40/0x90 [ 426.196175][T13618] ? clear_bhb_loop+0x40/0x90 [ 426.200882][T13618] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.206793][T13618] RIP: 0033:0x7f26d4d8efc9 [ 426.211214][T13618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.230829][T13618] RSP: 002b:00007f26d5ce9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.239256][T13618] RAX: ffffffffffffffda RBX: 00007f26d4fe5fa0 RCX: 00007f26d4d8efc9 [ 426.247235][T13618] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 426.255220][T13618] RBP: 00007f26d5ce9090 R08: 0000000000000000 R09: 0000000000000000 [ 426.263205][T13618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.271181][T13618] R13: 00007f26d4fe6038 R14: 00007f26d4fe5fa0 R15: 00007ffc7d897118 [ 426.279183][T13618] [ 426.323199][T13620] validate_nla: 5 callbacks suppressed [ 426.323213][T13620] netlink: 'syz.2.3020': attribute type 10 has an invalid length. [ 426.636224][T13632] netlink: 'syz.2.3024': attribute type 3 has an invalid length. [ 426.705879][T13632] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.3024'. [ 426.797895][T13636] FAULT_INJECTION: forcing a failure. [ 426.797895][T13636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.819757][T13636] CPU: 0 PID: 13636 Comm: syz.0.3027 Not tainted syzkaller #0 [ 426.827272][T13636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 426.837366][T13636] Call Trace: [ 426.840683][T13636] [ 426.843664][T13636] dump_stack_lvl+0x16c/0x230 [ 426.848418][T13636] ? show_regs_print_info+0x20/0x20 [ 426.853693][T13636] ? load_image+0x3b0/0x3b0 [ 426.858236][T13636] ? __might_fault+0xaa/0x120 [ 426.862941][T13636] ? __lock_acquire+0x7c80/0x7c80 [ 426.867995][T13636] should_fail_ex+0x39d/0x4d0 [ 426.872709][T13636] _copy_from_user+0x2f/0xe0 [ 426.877322][T13636] __sys_bpf+0x1e9/0x800 [ 426.881593][T13636] ? bpf_link_show_fdinfo+0x350/0x350 [ 426.887016][T13636] ? lock_chain_count+0x20/0x20 [ 426.891908][T13636] __x64_sys_bpf+0x7c/0x90 [ 426.896343][T13636] do_syscall_64+0x55/0xb0 [ 426.900780][T13636] ? clear_bhb_loop+0x40/0x90 [ 426.905474][T13636] ? clear_bhb_loop+0x40/0x90 [ 426.910178][T13636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.916087][T13636] RIP: 0033:0x7f5f6238efc9 [ 426.920515][T13636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.940139][T13636] RSP: 002b:00007f5f63291038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 426.948576][T13636] RAX: ffffffffffffffda RBX: 00007f5f625e5fa0 RCX: 00007f5f6238efc9 [ 426.956563][T13636] RDX: 0000000000000020 RSI: 0000200000000780 RDI: 0000000000000002 [ 426.964545][T13636] RBP: 00007f5f63291090 R08: 0000000000000000 R09: 0000000000000000 [ 426.972532][T13636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.980516][T13636] R13: 00007f5f625e6038 R14: 00007f5f625e5fa0 R15: 00007ffee2bbf018 [ 426.988544][T13636] [ 427.381438][T13649] netlink: 'syz.2.3032': attribute type 10 has an invalid length. [ 427.404376][T13641] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.3029'. [ 428.221995][T13675] netlink: 'syz.2.3042': attribute type 10 has an invalid length. [ 428.295254][T13678] netlink: 'syz.0.3044': attribute type 10 has an invalid length. [ 428.485455][T13687] netlink: 'syz.1.3055': attribute type 10 has an invalid length. [ 428.835203][T13685] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.3047'. [ 428.999194][T13700] FAULT_INJECTION: forcing a failure. [ 428.999194][T13700] name failslab, interval 1, probability 0, space 0, times 0 [ 429.012316][T13700] CPU: 0 PID: 13700 Comm: syz.3.3051 Not tainted syzkaller #0 [ 429.019811][T13700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 429.029896][T13700] Call Trace: [ 429.033202][T13700] [ 429.036165][T13700] dump_stack_lvl+0x16c/0x230 [ 429.040886][T13700] ? show_regs_print_info+0x20/0x20 [ 429.046121][T13700] ? load_image+0x3b0/0x3b0 [ 429.050664][T13700] ? __might_sleep+0xe0/0xe0 [ 429.055299][T13700] ? __lock_acquire+0x7c80/0x7c80 [ 429.060376][T13700] should_fail_ex+0x39d/0x4d0 [ 429.065112][T13700] should_failslab+0x9/0x20 [ 429.069663][T13700] slab_pre_alloc_hook+0x59/0x310 [ 429.074740][T13700] kmem_cache_alloc+0x5a/0x2e0 [ 429.079546][T13700] ? alloc_empty_file+0x9e/0x1d0 [ 429.084553][T13700] alloc_empty_file+0x9e/0x1d0 [ 429.089373][T13700] dentry_open+0x4b/0x100 [ 429.093751][T13700] ns_ioctl+0x3b8/0x4c0 [ 429.097949][T13700] ? ns_match+0xe0/0xe0 [ 429.102156][T13700] ? bpf_lsm_file_ioctl+0x9/0x10 [ 429.107121][T13700] ? security_file_ioctl+0x80/0xa0 [ 429.112274][T13700] ? ns_match+0xe0/0xe0 [ 429.116460][T13700] __se_sys_ioctl+0xfd/0x170 [ 429.121093][T13700] do_syscall_64+0x55/0xb0 [ 429.125547][T13700] ? clear_bhb_loop+0x40/0x90 [ 429.130267][T13700] ? clear_bhb_loop+0x40/0x90 [ 429.134987][T13700] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.140916][T13700] RIP: 0033:0x7fda08b8efc9 [ 429.145372][T13700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.165025][T13700] RSP: 002b:00007fda099f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.173483][T13700] RAX: ffffffffffffffda RBX: 00007fda08de5fa0 RCX: 00007fda08b8efc9 [ 429.181490][T13700] RDX: 0000000000000000 RSI: 000000000000b701 RDI: 0000000000000003 [ 429.189519][T13700] RBP: 00007fda099f7090 R08: 0000000000000000 R09: 0000000000000000 [ 429.197534][T13700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.205549][T13700] R13: 00007fda08de6038 R14: 00007fda08de5fa0 R15: 00007ffc2556ab48 [ 429.213599][T13700] [ 429.860193][T13712] netlink: 'syz.1.3057': attribute type 10 has an invalid length. [ 430.077405][T13725] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3060'. [ 430.116293][T13725] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3060'. [ 430.152784][T13721] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3060'. [ 430.195151][T13729] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3060'. [ 430.260377][T13725] netlink: 'syz.3.3060': attribute type 19 has an invalid length. [ 430.268721][T13725] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3060'. [ 430.280676][T13727] netlink: 'syz.1.3071': attribute type 10 has an invalid length. [ 430.680981][T13742] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3068'. [ 430.838014][T13738] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.3063'. [ 430.960362][T13749] netlink: 'syz.3.3070': attribute type 10 has an invalid length. [ 431.577421][T13772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3078'. [ 431.766691][T13777] validate_nla: 1 callbacks suppressed [ 431.766708][T13777] netlink: 'syz.3.3079': attribute type 3 has an invalid length. [ 431.808567][T13777] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.3079'. [ 431.856692][T13781] netlink: 'syz.2.3082': attribute type 10 has an invalid length. [ 431.907868][T13782] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3081'. [ 432.048223][T13782] netlink: 'syz.0.3081': attribute type 19 has an invalid length. [ 432.670741][T13806] netlink: 'syz.2.3093': attribute type 10 has an invalid length. [ 432.988279][T13810] netlink: 'syz.1.3094': attribute type 3 has an invalid length. [ 433.611328][T13826] netlink: 'syz.0.3101': attribute type 10 has an invalid length. [ 433.776672][T13839] netlink: 'syz.0.3105': attribute type 10 has an invalid length. [ 433.796507][T13837] netlink: 'syz.2.3103': attribute type 19 has an invalid length. [ 433.961943][T13849] netlink: 'syz.0.3108': attribute type 3 has an invalid length. [ 434.376641][T13864] net_ratelimit: 46 callbacks suppressed [ 434.376657][T13864] netlink: get zone limit has 4 unknown bytes [ 434.501122][T13870] netlink: 'syz.3.3116': attribute type 10 has an invalid length. [ 435.138600][T13899] __nla_validate_parse: 16 callbacks suppressed [ 435.138618][T13899] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3127'. [ 435.172111][T13899] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3127'. [ 435.192930][T13894] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3127'. [ 435.229203][T13901] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3128'. [ 435.287649][T13901] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3128'. [ 435.849463][T13922] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3135'. [ 435.878399][T13922] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3135'. [ 435.917467][T13917] FAULT_INJECTION: forcing a failure. [ 435.917467][T13917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.937735][T13917] CPU: 1 PID: 13917 Comm: syz.0.3135 Not tainted syzkaller #0 [ 435.945246][T13917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 435.955329][T13917] Call Trace: [ 435.958634][T13917] [ 435.961594][T13917] dump_stack_lvl+0x16c/0x230 [ 435.966310][T13917] ? show_regs_print_info+0x20/0x20 [ 435.971541][T13917] ? load_image+0x3b0/0x3b0 [ 435.976076][T13917] ? __might_fault+0xaa/0x120 [ 435.980779][T13917] should_fail_ex+0x39d/0x4d0 [ 435.985488][T13917] copyout+0x1a/0x90 [ 435.989416][T13917] _copy_to_iter+0x432/0x10d0 [ 435.994138][T13917] ? iov_iter_init+0x1e0/0x1e0 [ 435.998929][T13917] ? __virt_addr_valid+0x18c/0x540 [ 436.004073][T13917] ? __virt_addr_valid+0x469/0x540 [ 436.009208][T13917] ? __phys_addr_symbol+0x2f/0x70 [ 436.014264][T13917] __skb_datagram_iter+0xdb/0x780 [ 436.019315][T13917] ? skb_copy_datagram_iter+0x200/0x200 [ 436.024899][T13917] skb_copy_datagram_iter+0xb1/0x200 [ 436.030221][T13917] netlink_recvmsg+0x2c5/0xdf0 [ 436.035027][T13917] ? netlink_sendmsg+0xbe0/0xbe0 [ 436.040001][T13917] ? aa_sk_perm+0x7fc/0x930 [ 436.044531][T13917] ? aa_af_perm+0x2b0/0x2b0 [ 436.049070][T13917] ? __lock_acquire+0x1260/0x7c80 [ 436.054117][T13917] ? verify_lock_unused+0x140/0x140 [ 436.059340][T13917] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 436.064674][T13917] ? security_socket_recvmsg+0x89/0xb0 [ 436.070167][T13917] ? netlink_sendmsg+0xbe0/0xbe0 [ 436.075141][T13917] ____sys_recvmsg+0x29e/0x5b0 [ 436.079954][T13917] ? __sys_recvmsg_sock+0x50/0x50 [ 436.085024][T13917] ? import_iovec+0x73/0xa0 [ 436.089588][T13917] ___sys_recvmsg+0x1b6/0x510 [ 436.094304][T13917] ? __sys_recvmsg+0x270/0x270 [ 436.099103][T13917] ? ksys_write+0x1c1/0x250 [ 436.103647][T13917] ? __fget_files+0x44a/0x4d0 [ 436.108367][T13917] __x64_sys_recvmsg+0x1f2/0x2c0 [ 436.113339][T13917] ? ___sys_recvmsg+0x510/0x510 [ 436.118230][T13917] ? lockdep_hardirqs_on+0x98/0x150 [ 436.123451][T13917] do_syscall_64+0x55/0xb0 [ 436.127914][T13917] ? clear_bhb_loop+0x40/0x90 [ 436.132613][T13917] ? clear_bhb_loop+0x40/0x90 [ 436.137308][T13917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 436.143221][T13917] RIP: 0033:0x7f5f6238efc9 [ 436.147651][T13917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.167293][T13917] RSP: 002b:00007f5f63291038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 436.175736][T13917] RAX: ffffffffffffffda RBX: 00007f5f625e5fa0 RCX: 00007f5f6238efc9 [ 436.183731][T13917] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000003 [ 436.191719][T13917] RBP: 00007f5f63291090 R08: 0000000000000000 R09: 0000000000000000 [ 436.199712][T13917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.207703][T13917] R13: 00007f5f625e6038 R14: 00007f5f625e5fa0 R15: 00007ffee2bbf018 [ 436.215721][T13917] [ 436.268449][T13917] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3135'. [ 436.619413][T13931] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.3141'. [ 437.156456][T13958] validate_nla: 5 callbacks suppressed [ 437.156470][T13958] netlink: 'syz.3.3152': attribute type 10 has an invalid length. [ 437.197164][T13961] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3151'. [ 437.662547][T13979] netlink: 'syz.0.3158': attribute type 1 has an invalid length. [ 437.913284][T13985] netlink: 'syz.1.3159': attribute type 10 has an invalid length. [ 439.614277][T14059] netlink: 'syz.2.3171': attribute type 10 has an invalid length. [ 440.030358][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.038201][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.952281][T14096] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.3181'. [ 440.975264][T14096] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 441.132692][T14097] netlink: 'syz.0.3183': attribute type 10 has an invalid length. [ 441.425457][T14101] netlink: 'syz.2.3185': attribute type 3 has an invalid length. [ 441.434328][T14101] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.3185'. [ 441.580814][T14105] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 441.597311][T14103] netlink: 'syz.1.3186': attribute type 27 has an invalid length. [ 441.629269][T14103] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3186'. [ 442.474618][T14127] netlink: 'syz.3.3195': attribute type 10 has an invalid length. [ 442.725875][T14135] netlink: 'syz.1.3207': attribute type 10 has an invalid length. [ 443.293691][T14140] netlink: 'syz.1.3199': attribute type 3 has an invalid length. [ 443.305340][T14140] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.3199'. [ 443.984411][T14161] netlink: 'syz.0.3206': attribute type 10 has an invalid length. [ 444.690348][T14177] netlink: 'syz.2.3215': attribute type 3 has an invalid length. [ 444.715776][T14177] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.3215'. [ 445.067443][T14179] netlink: 'syz.0.3214': attribute type 3 has an invalid length. [ 445.088862][T14179] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.3214'. [ 445.490941][T14191] netlink: 'syz.2.3220': attribute type 10 has an invalid length. [ 445.695746][T14204] netlink: 'syz.0.3225': attribute type 4 has an invalid length. [ 445.989644][T14208] netlink: 'syz.1.3226': attribute type 3 has an invalid length. [ 446.000677][T14208] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.3226'. [ 446.375860][T14223] netlink: 'syz.1.3232': attribute type 10 has an invalid length. [ 446.979456][T14239] FAULT_INJECTION: forcing a failure. [ 446.979456][T14239] name failslab, interval 1, probability 0, space 0, times 0 [ 447.020648][T14239] CPU: 1 PID: 14239 Comm: syz.0.3238 Not tainted syzkaller #0 [ 447.028185][T14239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 447.038291][T14239] Call Trace: [ 447.041610][T14239] [ 447.044578][T14239] dump_stack_lvl+0x16c/0x230 [ 447.049332][T14239] ? show_regs_print_info+0x20/0x20 [ 447.054578][T14239] ? load_image+0x3b0/0x3b0 [ 447.059152][T14239] ? __asan_memset+0x22/0x40 [ 447.063802][T14239] should_fail_ex+0x39d/0x4d0 [ 447.068545][T14239] should_failslab+0x9/0x20 [ 447.073091][T14239] slab_pre_alloc_hook+0x59/0x310 [ 447.078158][T14239] ? __debug_object_init+0xe8/0x430 [ 447.083435][T14239] kmem_cache_alloc+0x5a/0x2e0 [ 447.088249][T14239] ? slab_build_skb+0x2b/0x3f0 [ 447.093084][T14239] slab_build_skb+0x2b/0x3f0 [ 447.097736][T14239] bpf_prog_test_run_skb+0x3ba/0x11c0 [ 447.103142][T14239] ? __fget_files+0x28/0x4d0 [ 447.107847][T14239] ? cpu_online+0x60/0x60 [ 447.112251][T14239] bpf_prog_test_run+0x321/0x390 [ 447.117254][T14239] __sys_bpf+0x440/0x800 [ 447.121564][T14239] ? bpf_link_show_fdinfo+0x350/0x350 [ 447.127034][T14239] ? lock_chain_count+0x20/0x20 [ 447.131922][T14239] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 447.137975][T14239] __x64_sys_bpf+0x7c/0x90 [ 447.142435][T14239] do_syscall_64+0x55/0xb0 [ 447.146893][T14239] ? clear_bhb_loop+0x40/0x90 [ 447.151613][T14239] ? clear_bhb_loop+0x40/0x90 [ 447.156341][T14239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.162275][T14239] RIP: 0033:0x7f5f6238efc9 [ 447.166728][T14239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.186380][T14239] RSP: 002b:00007f5f63291038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 447.194852][T14239] RAX: ffffffffffffffda RBX: 00007f5f625e5fa0 RCX: 00007f5f6238efc9 [ 447.202876][T14239] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 447.210905][T14239] RBP: 00007f5f63291090 R08: 0000000000000000 R09: 0000000000000000 [ 447.218929][T14239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.226952][T14239] R13: 00007f5f625e6038 R14: 00007f5f625e5fa0 R15: 00007ffee2bbf018 [ 447.235031][T14239] [ 447.508132][T14242] validate_nla: 2 callbacks suppressed [ 447.536154][T14242] netlink: 'syz.2.3241': attribute type 3 has an invalid length. [ 447.578016][T14242] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.3241'. [ 447.877106][T14252] netlink: 'syz.1.3245': attribute type 10 has an invalid length. [ 447.977927][T14256] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 448.743779][T14277] netlink: 'syz.0.3254': attribute type 3 has an invalid length. [ 448.764183][T14277] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.3254'. [ 449.252286][T14288] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 450.696015][T14290] netlink: 'syz.3.3257': attribute type 10 has an invalid length. [ 451.107277][T14303] netlink: 'syz.2.3265': attribute type 3 has an invalid length. [ 451.131032][T14303] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.3265'. [ 451.372519][T14314] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 451.864783][T14326] FAULT_INJECTION: forcing a failure. [ 451.864783][T14326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.892971][T14326] CPU: 1 PID: 14326 Comm: syz.1.3271 Not tainted syzkaller #0 [ 451.900478][T14326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 451.910553][T14326] Call Trace: [ 451.913850][T14326] [ 451.916811][T14326] dump_stack_lvl+0x16c/0x230 [ 451.921523][T14326] ? show_regs_print_info+0x20/0x20 [ 451.926754][T14326] ? load_image+0x3b0/0x3b0 [ 451.931284][T14326] ? __lock_acquire+0x7c80/0x7c80 [ 451.936319][T14326] ? snprintf+0xdb/0x120 [ 451.940570][T14326] should_fail_ex+0x39d/0x4d0 [ 451.945268][T14326] _copy_to_user+0x2f/0xa0 [ 451.949697][T14326] simple_read_from_buffer+0xe7/0x150 [ 451.955086][T14326] proc_fail_nth_read+0x1e3/0x250 [ 451.960159][T14326] ? proc_fault_inject_write+0x340/0x340 [ 451.965801][T14326] ? fsnotify_perm+0x271/0x5e0 [ 451.970609][T14326] ? proc_fault_inject_write+0x340/0x340 [ 451.976243][T14326] vfs_read+0x27e/0x920 [ 451.980520][T14326] ? kernel_read+0x1e0/0x1e0 [ 451.985117][T14326] ? __fget_files+0x28/0x4d0 [ 451.989717][T14326] ? __fget_files+0x44a/0x4d0 [ 451.994402][T14326] ? __fdget_pos+0x2a3/0x330 [ 451.998995][T14326] ? ksys_read+0x75/0x250 [ 452.003333][T14326] ksys_read+0x147/0x250 [ 452.007579][T14326] ? vfs_write+0x940/0x940 [ 452.012008][T14326] ? lockdep_hardirqs_on+0x98/0x150 [ 452.017220][T14326] do_syscall_64+0x55/0xb0 [ 452.021644][T14326] ? clear_bhb_loop+0x40/0x90 [ 452.026325][T14326] ? clear_bhb_loop+0x40/0x90 [ 452.031027][T14326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.036922][T14326] RIP: 0033:0x7f26d4d8d9dc [ 452.041356][T14326] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 452.060962][T14326] RSP: 002b:00007f26d5ce9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 452.069378][T14326] RAX: ffffffffffffffda RBX: 00007f26d4fe5fa0 RCX: 00007f26d4d8d9dc [ 452.077357][T14326] RDX: 000000000000000f RSI: 00007f26d5ce90a0 RDI: 0000000000000004 [ 452.085336][T14326] RBP: 00007f26d5ce9090 R08: 0000000000000000 R09: 0000000000000000 [ 452.093312][T14326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.101281][T14326] R13: 00007f26d4fe6038 R14: 00007f26d4fe5fa0 R15: 00007ffc7d897118 [ 452.109283][T14326] [ 453.963018][T14336] netlink: 'syz.1.3273': attribute type 10 has an invalid length. [ 454.356511][T14348] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3279'. [ 455.022338][T14363] netlink: 'syz.2.3285': attribute type 10 has an invalid length. [ 456.010787][T14394] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3295'. [ 457.440554][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 457.572659][T14411] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3302'. [ 457.650277][T14409] netlink: 'syz.3.3300': attribute type 10 has an invalid length. [ 457.824194][T14420] FAULT_INJECTION: forcing a failure. [ 457.824194][T14420] name failslab, interval 1, probability 0, space 0, times 0 [ 457.848645][T14420] CPU: 0 PID: 14420 Comm: syz.2.3304 Not tainted syzkaller #0 [ 457.856142][T14420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 457.866214][T14420] Call Trace: [ 457.869523][T14420] [ 457.872483][T14420] dump_stack_lvl+0x16c/0x230 [ 457.877198][T14420] ? show_regs_print_info+0x20/0x20 [ 457.882426][T14420] ? load_image+0x3b0/0x3b0 [ 457.886964][T14420] ? __lock_acquire+0x7c80/0x7c80 [ 457.892035][T14420] should_fail_ex+0x39d/0x4d0 [ 457.896751][T14420] should_failslab+0x9/0x20 [ 457.901293][T14420] slab_pre_alloc_hook+0x59/0x310 [ 457.906350][T14420] ? vmemdup_user+0x49/0x1e0 [ 457.910967][T14420] ? vmemdup_user+0x49/0x1e0 [ 457.915627][T14420] __kmem_cache_alloc_node+0x53/0x260 [ 457.921064][T14420] ? vmemdup_user+0x49/0x1e0 [ 457.925682][T14420] __kmalloc_node+0xa4/0x230 [ 457.930318][T14420] vmemdup_user+0x49/0x1e0 [ 457.934812][T14420] map_lookup_elem+0x276/0x7c0 [ 457.939601][T14420] ? __might_fault+0xaa/0x120 [ 457.944297][T14420] ? security_bpf+0x7e/0xa0 [ 457.948831][T14420] __sys_bpf+0x3dc/0x800 [ 457.953103][T14420] ? bpf_link_show_fdinfo+0x350/0x350 [ 457.958528][T14420] ? lock_chain_count+0x20/0x20 [ 457.963413][T14420] __x64_sys_bpf+0x7c/0x90 [ 457.967850][T14420] do_syscall_64+0x55/0xb0 [ 457.972342][T14420] ? clear_bhb_loop+0x40/0x90 [ 457.977031][T14420] ? clear_bhb_loop+0x40/0x90 [ 457.981716][T14420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.987611][T14420] RIP: 0033:0x7f7e0bb8efc9 [ 457.992032][T14420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.011646][T14420] RSP: 002b:00007f7e0c959038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 458.020069][T14420] RAX: ffffffffffffffda RBX: 00007f7e0bde5fa0 RCX: 00007f7e0bb8efc9 [ 458.028048][T14420] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 0000000000000001 [ 458.036026][T14420] RBP: 00007f7e0c959090 R08: 0000000000000000 R09: 0000000000000000 [ 458.044002][T14420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.051972][T14420] R13: 00007f7e0bde6038 R14: 00007f7e0bde5fa0 R15: 00007ffe01899418 [ 458.059964][T14420] [ 458.118040][T14425] FAULT_INJECTION: forcing a failure. [ 458.118040][T14425] name failslab, interval 1, probability 0, space 0, times 0 [ 458.144178][T14425] CPU: 1 PID: 14425 Comm: syz.3.3307 Not tainted syzkaller #0 [ 458.151676][T14425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 458.161751][T14425] Call Trace: [ 458.165051][T14425] [ 458.168009][T14425] dump_stack_lvl+0x16c/0x230 [ 458.172721][T14425] ? show_regs_print_info+0x20/0x20 [ 458.177947][T14425] ? load_image+0x3b0/0x3b0 [ 458.182477][T14425] ? __might_sleep+0xe0/0xe0 [ 458.187098][T14425] ? __lock_acquire+0x7c80/0x7c80 [ 458.192157][T14425] should_fail_ex+0x39d/0x4d0 [ 458.196871][T14425] should_failslab+0x9/0x20 [ 458.201397][T14425] slab_pre_alloc_hook+0x59/0x310 [ 458.206432][T14425] ? sctp_association_new+0x89/0x25c0 [ 458.211835][T14425] __kmem_cache_alloc_node+0x53/0x260 [ 458.217236][T14425] ? sctp_association_new+0x89/0x25c0 [ 458.222620][T14425] kmalloc_trace+0x2a/0xe0 [ 458.227056][T14425] sctp_association_new+0x89/0x25c0 [ 458.232279][T14425] ? sctp_do_bind+0x6bb/0x9a0 [ 458.236982][T14425] sctp_connect_new_asoc+0x2bf/0x690 [ 458.242280][T14425] ? __sctp_connect+0xd20/0xd20 [ 458.247140][T14425] ? __local_bh_enable_ip+0x12e/0x1c0 [ 458.252544][T14425] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 458.258112][T14425] ? security_sctp_bind_connect+0x89/0xb0 [ 458.263857][T14425] sctp_sendmsg+0x155c/0x27e0 [ 458.268569][T14425] ? sctp_getsockopt+0xb60/0xb60 [ 458.273538][T14425] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 458.279100][T14425] ? aa_sk_perm+0x7fc/0x930 [ 458.283619][T14425] ? aa_af_perm+0x2b0/0x2b0 [ 458.288148][T14425] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 458.294617][T14425] ? sock_rps_record_flow+0x19/0x400 [ 458.299944][T14425] ? inet_send_prepare+0x260/0x260 [ 458.305060][T14425] ? inet_sendmsg+0xe9/0x2f0 [ 458.309663][T14425] ? inet_send_prepare+0x260/0x260 [ 458.314789][T14425] ____sys_sendmsg+0x5bf/0x950 [ 458.319589][T14425] ? __asan_memset+0x22/0x40 [ 458.324188][T14425] ? __sys_sendmsg_sock+0x30/0x30 [ 458.329223][T14425] ? __import_iovec+0x5f2/0x860 [ 458.334102][T14425] ? import_iovec+0x73/0xa0 [ 458.338632][T14425] ___sys_sendmsg+0x220/0x290 [ 458.343334][T14425] ? __sys_sendmsg+0x270/0x270 [ 458.348130][T14425] ? __lock_acquire+0x7c80/0x7c80 [ 458.353186][T14425] __se_sys_sendmsg+0x1a5/0x270 [ 458.358094][T14425] ? __x64_sys_sendmsg+0x80/0x80 [ 458.363059][T14425] ? lockdep_hardirqs_on+0x98/0x150 [ 458.368281][T14425] do_syscall_64+0x55/0xb0 [ 458.372709][T14425] ? clear_bhb_loop+0x40/0x90 [ 458.377388][T14425] ? clear_bhb_loop+0x40/0x90 [ 458.382071][T14425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 458.387986][T14425] RIP: 0033:0x7fda08b8efc9 [ 458.392409][T14425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.412020][T14425] RSP: 002b:00007fda099f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.420439][T14425] RAX: ffffffffffffffda RBX: 00007fda08de5fa0 RCX: 00007fda08b8efc9 [ 458.428411][T14425] RDX: 0000000000000040 RSI: 0000200000000e40 RDI: 0000000000000003 [ 458.436383][T14425] RBP: 00007fda099f7090 R08: 0000000000000000 R09: 0000000000000000 [ 458.444361][T14425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.452337][T14425] R13: 00007fda08de6038 R14: 00007fda08de5fa0 R15: 00007ffc2556ab48 [ 458.460334][T14425] [ 459.903824][T14457] netlink: 'syz.0.3318': attribute type 3 has an invalid length. [ 459.924572][T14457] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.3318'. [ 461.371874][T14470] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3324'. [ 461.382035][T14471] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3324'. [ 461.929387][T14478] netlink: 'syz.1.3326': attribute type 3 has an invalid length. [ 461.938409][T14478] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.3326'. [ 462.273128][T14494] FAULT_INJECTION: forcing a failure. [ 462.273128][T14494] name failslab, interval 1, probability 0, space 0, times 0 [ 462.294193][T14494] CPU: 0 PID: 14494 Comm: syz.3.3332 Not tainted syzkaller #0 [ 462.301718][T14494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 462.311824][T14494] Call Trace: [ 462.315129][T14494] [ 462.318082][T14494] dump_stack_lvl+0x16c/0x230 [ 462.322790][T14494] ? show_regs_print_info+0x20/0x20 [ 462.328020][T14494] ? load_image+0x3b0/0x3b0 [ 462.332551][T14494] ? __lock_acquire+0x7c80/0x7c80 [ 462.337618][T14494] should_fail_ex+0x39d/0x4d0 [ 462.342334][T14494] should_failslab+0x9/0x20 [ 462.346868][T14494] slab_pre_alloc_hook+0x59/0x310 [ 462.351927][T14494] ? __lock_acquire+0x7c80/0x7c80 [ 462.356982][T14494] kmem_cache_alloc+0x5a/0x2e0 [ 462.361896][T14494] ? security_file_alloc+0x34/0x120 [ 462.367131][T14494] security_file_alloc+0x34/0x120 [ 462.372191][T14494] init_file+0x94/0x1f0 [ 462.376388][T14494] alloc_empty_file+0xb7/0x1d0 [ 462.381249][T14494] alloc_file+0x5c/0x600 [ 462.385547][T14494] alloc_file_pseudo+0x17e/0x200 [ 462.390537][T14494] ? alloc_empty_backing_file+0xe0/0xe0 [ 462.396165][T14494] anon_inode_getfile+0xc5/0x1a0 [ 462.401190][T14494] __se_sys_perf_event_open+0xeb5/0x1c20 [ 462.406870][T14494] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 462.412555][T14494] ? lock_chain_count+0x20/0x20 [ 462.417429][T14494] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 462.423444][T14494] ? lockdep_hardirqs_on+0x98/0x150 [ 462.428655][T14494] ? __x64_sys_perf_event_open+0x20/0xc0 [ 462.434307][T14494] do_syscall_64+0x55/0xb0 [ 462.438725][T14494] ? clear_bhb_loop+0x40/0x90 [ 462.443402][T14494] ? clear_bhb_loop+0x40/0x90 [ 462.448089][T14494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.453994][T14494] RIP: 0033:0x7fda08b8efc9 [ 462.454213][T14500] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3334'. [ 462.458501][T14494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.458546][T14494] RSP: 002b:00007fda099f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 462.458567][T14494] RAX: ffffffffffffffda RBX: 00007fda08de5fa0 RCX: 00007fda08b8efc9 [ 462.503541][T14494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 462.511511][T14494] RBP: 00007fda099f7090 R08: 0000000000000000 R09: 0000000000000000 [ 462.519495][T14494] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 462.527497][T14494] R13: 00007fda08de6038 R14: 00007fda08de5fa0 R15: 00007ffc2556ab48 [ 462.535498][T14494] [ 462.568542][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 462.587502][T14500] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3334'. [ 462.597334][T14498] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3334'. [ 462.658039][T14501] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3334'. [ 462.826629][T14509] netlink: 'syz.0.3337': attribute type 10 has an invalid length. [ 463.023640][T14515] netlink: 'syz.0.3340': attribute type 3 has an invalid length. [ 463.076986][T14515] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.3340'. [ 463.751561][T14531] netlink: 'syz.3.3348': attribute type 10 has an invalid length. [ 464.020188][T14544] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3354'. [ 464.133444][T14540] netlink: 'syz.1.3352': attribute type 3 has an invalid length. [ 464.142080][T14540] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.3352'. [ 464.760389][T14563] netlink: 'syz.1.3361': attribute type 2 has an invalid length. [ 464.768475][T14563] netlink: 'syz.1.3361': attribute type 8 has an invalid length. [ 464.776695][T14563] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3361'. [ 465.018061][T14566] netlink: 'syz.2.3362': attribute type 10 has an invalid length. [ 465.170901][T14572] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3367'. [ 465.511476][T14573] netlink: 'syz.0.3366': attribute type 3 has an invalid length. [ 465.527097][T14575] netlink: 'syz.3.3365': attribute type 4 has an invalid length. [ 465.538919][T14573] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.3366'. [ 465.630809][T14575] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3365'. [ 465.708007][T14575] wlan1: mtu less than device minimum [ 466.000385][T14588] netlink: 'syz.0.3372': attribute type 29 has an invalid length. [ 466.018762][T14588] netlink: 'syz.0.3372': attribute type 29 has an invalid length. [ 466.789378][T14608] netlink: 'syz.2.3379': attribute type 29 has an invalid length. [ 466.886268][T14608] netlink: 'syz.2.3379': attribute type 29 has an invalid length. [ 466.931917][T14609] netlink: 'syz.2.3379': attribute type 29 has an invalid length. [ 467.680853][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 467.962938][T14633] netlink: 'syz.2.3387': attribute type 2 has an invalid length. [ 467.981069][T14633] netlink: 'syz.2.3387': attribute type 8 has an invalid length. [ 468.008478][T14633] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3387'. [ 468.400205][T14017] hsr_slave_1: left promiscuous mode [ 468.903755][T14017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.913835][T14017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.199931][T14017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.238537][T14017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.181340][T14017] dummy0: left allmulticast mode [ 471.186640][T14017] bridge0: port 3(dummy0) entered disabled state [ 471.197641][T14017] bridge_slave_1: left allmulticast mode [ 471.203674][T14017] bridge_slave_1: left promiscuous mode [ 471.210302][T14017] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.220446][T14017] bridge_slave_0: left allmulticast mode [ 471.226226][T14017] bridge_slave_0: left promiscuous mode [ 471.232712][T14017] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.260367][T14017] veth1_macvtap: left promiscuous mode [ 471.265931][T14017] veth0_macvtap: left promiscuous mode [ 471.273412][T14017] veth1_vlan: left promiscuous mode [ 471.280445][T14017] veth0_vlan: left promiscuous mode [ 471.457127][T14017] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 471.814912][T14017] team0 (unregistering): Port device team_slave_1 removed [ 471.852806][T14017] team0 (unregistering): Port device team_slave_0 removed [ 471.886891][T14017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.150164][T14017] bond0 (unregistering): (slave team0): Releasing backup interface [ 472.249305][T14017] bond0 (unregistering): Released all slaves [ 472.329635][T14645] netlink: 'syz.0.3391': attribute type 10 has an invalid length. [ 472.514534][T14654] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3394'. [ 472.688157][T14652] netlink: 'syz.0.3393': attribute type 3 has an invalid length. [ 472.728545][T14652] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.3393'. [ 473.008720][T14664] netlink: 'syz.2.3398': attribute type 2 has an invalid length. [ 473.561302][T14674] netlink: 'syz.0.3402': attribute type 10 has an invalid length. [ 473.896889][T14689] FAULT_INJECTION: forcing a failure. [ 473.896889][T14689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.941434][T14689] CPU: 1 PID: 14689 Comm: syz.1.3408 Not tainted syzkaller #0 [ 473.948972][T14689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 473.959071][T14689] Call Trace: [ 473.962424][T14689] [ 473.965403][T14689] dump_stack_lvl+0x16c/0x230 [ 473.970150][T14689] ? show_regs_print_info+0x20/0x20 [ 473.975406][T14689] ? load_image+0x3b0/0x3b0 [ 473.979973][T14689] ? __lock_acquire+0x7c80/0x7c80 [ 473.985071][T14689] should_fail_ex+0x39d/0x4d0 [ 473.989815][T14689] _copy_to_user+0x2f/0xa0 [ 473.994280][T14689] simple_read_from_buffer+0xe7/0x150 [ 473.999726][T14689] proc_fail_nth_read+0x1e3/0x250 [ 474.004822][T14689] ? proc_fault_inject_write+0x340/0x340 [ 474.010524][T14689] ? fsnotify_perm+0x271/0x5e0 [ 474.015362][T14689] ? proc_fault_inject_write+0x340/0x340 [ 474.021068][T14689] vfs_read+0x27e/0x920 [ 474.025358][T14689] ? kernel_read+0x1e0/0x1e0 [ 474.030018][T14689] ? __fget_files+0x28/0x4d0 [ 474.034678][T14689] ? __fget_files+0x44a/0x4d0 [ 474.039456][T14689] ? __fdget_pos+0x2a3/0x330 [ 474.044098][T14689] ? ksys_read+0x75/0x250 [ 474.048531][T14689] ksys_read+0x147/0x250 [ 474.052844][T14689] ? vfs_write+0x940/0x940 [ 474.057326][T14689] ? lockdep_hardirqs_on+0x98/0x150 [ 474.062592][T14689] do_syscall_64+0x55/0xb0 [ 474.067057][T14689] ? clear_bhb_loop+0x40/0x90 [ 474.071770][T14689] ? clear_bhb_loop+0x40/0x90 [ 474.076515][T14689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 474.082469][T14689] RIP: 0033:0x7f26d4d8d9dc [ 474.086947][T14689] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 474.106707][T14689] RSP: 002b:00007f26d5ce9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 474.115200][T14689] RAX: ffffffffffffffda RBX: 00007f26d4fe5fa0 RCX: 00007f26d4d8d9dc [ 474.123211][T14689] RDX: 000000000000000f RSI: 00007f26d5ce90a0 RDI: 0000000000000009 [ 474.131236][T14689] RBP: 00007f26d5ce9090 R08: 0000000000000000 R09: 0000000000000000 [ 474.139247][T14689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.147346][T14689] R13: 00007f26d4fe6038 R14: 00007f26d4fe5fa0 R15: 00007ffc7d897118 [ 474.155431][T14689] [ 474.295043][T14692] netlink: 'syz.3.3407': attribute type 3 has an invalid length. [ 474.322329][T14692] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.3407'. [ 475.004370][T14710] netlink: 'syz.2.3414': attribute type 10 has an invalid length. [ 476.032982][T14764] netlink: 'syz.1.3426': attribute type 10 has an invalid length. [ 476.156009][T14773] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.3430'. [ 476.461502][T14786] netlink: 'syz.0.3436': attribute type 29 has an invalid length. [ 476.469901][T14786] netlink: 'syz.0.3436': attribute type 29 has an invalid length. [ 476.488478][T14786] netlink: 'syz.0.3436': attribute type 29 has an invalid length. [ 476.529141][T14790] FAULT_INJECTION: forcing a failure. [ 476.529141][T14790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.588982][T14790] CPU: 0 PID: 14790 Comm: syz.1.3445 Not tainted syzkaller #0 [ 476.596486][T14790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 476.606561][T14790] Call Trace: [ 476.609871][T14790] [ 476.612825][T14790] dump_stack_lvl+0x16c/0x230 [ 476.617535][T14790] ? show_regs_print_info+0x20/0x20 [ 476.622759][T14790] ? load_image+0x3b0/0x3b0 [ 476.627287][T14790] ? __might_fault+0xaa/0x120 [ 476.631971][T14790] ? __lock_acquire+0x7c80/0x7c80 [ 476.636995][T14790] ? btf_check_sec_info+0x27e/0x330 [ 476.642224][T14790] should_fail_ex+0x39d/0x4d0 [ 476.646918][T14790] _copy_to_user+0x2f/0xa0 [ 476.651340][T14790] btf_new_fd+0x572/0x980 [ 476.655686][T14790] ? bpf_btf_show_fdinfo+0x80/0x80 [ 476.660809][T14790] ? capable+0x88/0xe0 [ 476.664886][T14790] __sys_bpf+0x60e/0x800 [ 476.669140][T14790] ? bpf_link_show_fdinfo+0x350/0x350 [ 476.674519][T14790] ? lock_chain_count+0x20/0x20 [ 476.679375][T14790] __x64_sys_bpf+0x7c/0x90 [ 476.683793][T14790] do_syscall_64+0x55/0xb0 [ 476.688222][T14790] ? clear_bhb_loop+0x40/0x90 [ 476.692925][T14790] ? clear_bhb_loop+0x40/0x90 [ 476.697601][T14790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 476.703496][T14790] RIP: 0033:0x7f26d4d8efc9 [ 476.707910][T14790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.727518][T14790] RSP: 002b:00007f26d5ce9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 476.735933][T14790] RAX: ffffffffffffffda RBX: 00007f26d4fe5fa0 RCX: 00007f26d4d8efc9 [ 476.743906][T14790] RDX: 0000000000000028 RSI: 0000200000000640 RDI: 0000000000000012 [ 476.751878][T14790] RBP: 00007f26d5ce9090 R08: 0000000000000000 R09: 0000000000000000 [ 476.759845][T14790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.767815][T14790] R13: 00007f26d4fe6038 R14: 00007f26d4fe5fa0 R15: 00007ffc7d897118 [ 476.775826][T14790] [ 477.274103][T14799] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.3442'. [ 477.344575][T14804] validate_nla: 6 callbacks suppressed [ 477.344591][T14804] netlink: 'syz.0.3443': attribute type 29 has an invalid length. [ 477.390387][T14804] netlink: 'syz.0.3443': attribute type 29 has an invalid length. [ 477.399832][T14808] netlink: 'syz.0.3443': attribute type 29 has an invalid length. [ 477.408208][T14807] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3446'. [ 477.420381][T14804] netlink: 'syz.0.3443': attribute type 29 has an invalid length. [ 477.431870][T14806] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3446'. [ 477.447322][T14804] netlink: 'syz.0.3443': attribute type 29 has an invalid length. [ 477.465308][T14804] netlink: 'syz.0.3443': attribute type 29 has an invalid length. [ 478.002128][T14826] netlink: 'syz.3.3454': attribute type 10 has an invalid length. [ 478.104177][T14832] netlink: 'syz.2.3457': attribute type 9 has an invalid length. [ 478.123032][T14832] netlink: 399 bytes leftover after parsing attributes in process `syz.2.3457'. [ 478.209630][T14832] wg2: entered promiscuous mode [ 478.220206][T14832] wg2: entered allmulticast mode [ 478.409798][T14836] netlink: 'syz.1.3458': attribute type 3 has an invalid length. [ 478.420377][T14836] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.3458'. [ 478.486459][T14840] delete_channel: no stack [ 478.585401][T14847] FAULT_INJECTION: forcing a failure. [ 478.585401][T14847] name failslab, interval 1, probability 0, space 0, times 0 [ 478.602215][T14847] CPU: 1 PID: 14847 Comm: syz.3.3463 Not tainted syzkaller #0 [ 478.609713][T14847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 478.619792][T14847] Call Trace: [ 478.623095][T14847] [ 478.626052][T14847] dump_stack_lvl+0x16c/0x230 [ 478.630770][T14847] ? show_regs_print_info+0x20/0x20 [ 478.636007][T14847] ? load_image+0x3b0/0x3b0 [ 478.640533][T14847] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 478.646570][T14847] ? __asan_memset+0x22/0x40 [ 478.651194][T14847] should_fail_ex+0x39d/0x4d0 [ 478.655915][T14847] should_failslab+0x9/0x20 [ 478.660441][T14847] slab_pre_alloc_hook+0x59/0x310 [ 478.665535][T14847] ? __debug_object_init+0xe8/0x430 [ 478.670805][T14847] kmem_cache_alloc+0x5a/0x2e0 [ 478.675593][T14847] ? slab_build_skb+0x2b/0x3f0 [ 478.680402][T14847] slab_build_skb+0x2b/0x3f0 [ 478.685034][T14847] bpf_prog_test_run_skb+0x3ba/0x11c0 [ 478.690428][T14847] ? __fget_files+0x28/0x4d0 [ 478.695050][T14847] ? cpu_online+0x60/0x60 [ 478.699398][T14847] bpf_prog_test_run+0x321/0x390 [ 478.704362][T14847] __sys_bpf+0x440/0x800 [ 478.708623][T14847] ? bpf_link_show_fdinfo+0x350/0x350 [ 478.714019][T14847] ? lock_chain_count+0x20/0x20 [ 478.718891][T14847] __x64_sys_bpf+0x7c/0x90 [ 478.723319][T14847] do_syscall_64+0x55/0xb0 [ 478.727768][T14847] ? clear_bhb_loop+0x40/0x90 [ 478.732469][T14847] ? clear_bhb_loop+0x40/0x90 [ 478.737177][T14847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.743088][T14847] RIP: 0033:0x7fda08b8efc9 [ 478.747516][T14847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.767141][T14847] RSP: 002b:00007fda099f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 478.775661][T14847] RAX: ffffffffffffffda RBX: 00007fda08de5fa0 RCX: 00007fda08b8efc9 [ 478.783749][T14847] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 478.791820][T14847] RBP: 00007fda099f7090 R08: 0000000000000000 R09: 0000000000000000 [ 478.799803][T14847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.807781][T14847] R13: 00007fda08de6038 R14: 00007fda08de5fa0 R15: 00007ffc2556ab48 [ 478.815787][T14847] [ 478.820535][T14845] wg2: left promiscuous mode [ 478.825173][T14845] wg2: left allmulticast mode [ 479.265485][T14859] netlink: 'syz.3.3467': attribute type 10 has an invalid length. [ 480.376408][T14880] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3474'. [ 481.484748][T14914] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.3484'. [ 481.958006][T14923] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3486'. [ 482.324299][T14944] FAULT_INJECTION: forcing a failure. [ 482.324299][T14944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.347891][T14944] CPU: 1 PID: 14944 Comm: syz.2.3492 Not tainted syzkaller #0 [ 482.355401][T14944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 482.365487][T14944] Call Trace: [ 482.368793][T14944] [ 482.371745][T14944] dump_stack_lvl+0x16c/0x230 [ 482.376465][T14944] ? show_regs_print_info+0x20/0x20 [ 482.381699][T14944] ? load_image+0x3b0/0x3b0 [ 482.386236][T14944] ? __lock_acquire+0x7c80/0x7c80 [ 482.391291][T14944] ? snprintf+0xdb/0x120 [ 482.395656][T14944] should_fail_ex+0x39d/0x4d0 [ 482.400491][T14944] _copy_to_user+0x2f/0xa0 [ 482.404944][T14944] simple_read_from_buffer+0xe7/0x150 [ 482.410375][T14944] proc_fail_nth_read+0x1e3/0x250 [ 482.415443][T14944] ? proc_fault_inject_write+0x340/0x340 [ 482.421131][T14944] ? fsnotify_perm+0x271/0x5e0 [ 482.425929][T14944] ? proc_fault_inject_write+0x340/0x340 [ 482.431597][T14944] vfs_read+0x27e/0x920 [ 482.435796][T14944] ? kernel_read+0x1e0/0x1e0 [ 482.440453][T14944] ? __fget_files+0x28/0x4d0 [ 482.445109][T14944] ? __fget_files+0x44a/0x4d0 [ 482.449839][T14944] ? __fdget_pos+0x2a3/0x330 [ 482.454454][T14944] ? ksys_read+0x75/0x250 [ 482.458790][T14944] ksys_read+0x147/0x250 [ 482.463042][T14944] ? vfs_write+0x940/0x940 [ 482.467470][T14944] ? lockdep_hardirqs_on+0x98/0x150 [ 482.472681][T14944] do_syscall_64+0x55/0xb0 [ 482.477104][T14944] ? clear_bhb_loop+0x40/0x90 [ 482.481815][T14944] ? clear_bhb_loop+0x40/0x90 [ 482.486495][T14944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.492393][T14944] RIP: 0033:0x7f7e0bb8d9dc [ 482.496849][T14944] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 482.516459][T14944] RSP: 002b:00007f7e0c959030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 482.524900][T14944] RAX: ffffffffffffffda RBX: 00007f7e0bde5fa0 RCX: 00007f7e0bb8d9dc [ 482.532894][T14944] RDX: 000000000000000f RSI: 00007f7e0c9590a0 RDI: 000000000000000e [ 482.540876][T14944] RBP: 00007f7e0c959090 R08: 0000000000000000 R09: 0000000000000000 [ 482.548872][T14944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.556881][T14944] R13: 00007f7e0bde6038 R14: 00007f7e0bde5fa0 R15: 00007ffe01899418 [ 482.564871][T14944] Stopping sshd: [ 483.043660][ T5787] Bluetooth: hci1: command 0x0406 tx timeout stopped /usr/sbin/sshd (pid 5548) [ 483.221327][T14949] validate_nla: 3 callbacks suppressed [ 483.221767][T14949] netlink: 'syz.2.3495': attribute type 3 has an invalid length. OK [ 483.353562][T14949] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.3495'. Stopping crond: stopped /usr/sbin/crond (pid 5530) OK [ 483.743198][T14967] netlink: 'syz.3.3499': attribute type 2 has an invalid length. [ 484.136624][T14973] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3502'. [ 484.183008][T14976] netlink: 'syz.1.3501': attribute type 10 has an invalid length. Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5452) [ 484.590968][T14997] netlink: 'syz.0.3504': attribute type 41 has an invalid length. [ 484.606700][T14997] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3504'. Stopping network: [ 484.916555][T15007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.090949][T15009] netlink: 'syz.2.3509': attribute type 3 has an invalid length. [ 485.112021][T15009] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.3509'. [ 485.752940][T15029] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3514'. [ 485.842385][T15024] netlink: 'syz.2.3513': attribute type 10 has an invalid length. OK Stopping iptables: OK Stopping system message bus: done [ 487.129361][T15055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.204887][T15085] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3526'. [ 488.590458][T15096] FAULT_INJECTION: forcing a failure. [ 488.590458][T15096] name failslab, interval 1, probability 0, space 0, times 0 [ 488.632567][T15096] CPU: 0 PID: 15096 Comm: syz.3.3530 Not tainted syzkaller #0 [ 488.640168][T15096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 488.650241][T15096] Call Trace: [ 488.653589][T15096] [ 488.656545][T15096] dump_stack_lvl+0x16c/0x230 [ 488.661259][T15096] ? show_regs_print_info+0x20/0x20 [ 488.666493][T15096] ? load_image+0x3b0/0x3b0 [ 488.671029][T15096] ? __might_sleep+0xe0/0xe0 [ 488.675654][T15096] ? __lock_acquire+0x7c80/0x7c80 [ 488.680718][T15096] should_fail_ex+0x39d/0x4d0 [ 488.685442][T15096] should_failslab+0x9/0x20 [ 488.689988][T15096] slab_pre_alloc_hook+0x59/0x310 [ 488.695051][T15096] ? netdevice_event+0x3a2/0x890 [ 488.700031][T15096] __kmem_cache_alloc_node+0x53/0x260 [ 488.705444][T15096] ? netdevice_event+0x3a2/0x890 [ 488.710419][T15096] kmalloc_trace+0x2a/0xe0 [ 488.714870][T15096] netdevice_event+0x3a2/0x890 [ 488.719697][T15096] ? __up_read+0x280/0x670 [ 488.724141][T15096] ? inet6addr_event+0xd0/0xd0 Stopping klogd: [ 488.728946][T15096] ? netdevice_event+0x890/0x890 [ 488.735262][T15096] ? add_default_gids+0xe0/0xe0 [ 488.740152][T15096] ? is_ndev_for_default_gid_filter+0x2f0/0x2f0 [ 488.746436][T15096] ? enum_all_gids_of_dev_cb+0x260/0x260 [ 488.752097][T15096] ? netdev_upper_walk+0x210/0x210 [ 488.757241][T15096] ? add_default_gids+0xe0/0xe0 [ 488.762137][T15096] notifier_call_chain+0x197/0x390 [ 488.767291][T15096] dev_set_mac_address+0x377/0x4b0 [ 488.772452][T15096] ? dev_pre_changeaddr_notify+0x100/0x100 [ 488.778296][T15096] ? down_write+0x162/0x1f0 [ 488.782832][T15096] ? __mutex_lock+0x95d/0xcc0 [ 488.787537][T15096] ? __mutex_lock+0x4e8/0xcc0 [ 488.792257][T15096] dev_set_mac_address_user+0x31/0x50 [ 488.797660][T15096] dev_ifsioc+0xb57/0xe20 [ 488.802019][T15096] ? dev_ioctl+0x1170/0x1170 [ 488.806646][T15096] ? dev_load+0x21/0x1f0 [ 488.810913][T15096] ? dev_load+0x21/0x1f0 [ 488.815196][T15096] dev_ioctl+0x7e2/0x1170 [ 488.819562][T15096] sock_do_ioctl+0x226/0x2f0 [ 488.824176][T15096] ? sock_show_fdinfo+0xb0/0xb0 [ 488.829068][T15096] sock_ioctl+0x623/0x7a0 [ 488.833423][T15096] ? sock_poll+0x3d0/0x3d0 [ 488.837913][T15096] ? bpf_lsm_file_ioctl+0x9/0x10 [ 488.842916][T15096] ? security_file_ioctl+0x80/0xa0 [ 488.848065][T15096] ? sock_poll+0x3d0/0x3d0 [ 488.852506][T15096] __se_sys_ioctl+0xfd/0x170 [ 488.857131][T15096] do_syscall_64+0x55/0xb0 [ 488.861579][T15096] ? clear_bhb_loop+0x40/0x90 [ 488.866295][T15096] ? clear_bhb_loop+0x40/0x90 [ 488.871000][T15096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.876919][T15096] RIP: 0033:0x7fda08b8efc9 [ 488.881360][T15096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.900987][T15096] RSP: 002b:00007fda099f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.909424][T15096] RAX: ffffffffffffffda RBX: 00007fda08de5fa0 RCX: 00007fda08b8efc9 [ 488.917419][T15096] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000004 [ 488.925418][T15096] RBP: 00007fda099f7090 R08: 0000000000000000 R09: 0000000000000000 [ 488.933427][T15096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.941416][T15096] R13: 00007fda08de6038 R14: 00007fda08de5fa0 R15: 00007ffc2556ab48 [ 488.949426][T15096] [ 489.070748][T15105] netlink: 'syz.1.3532': attribute type 3 has an invalid length. [ 489.080556][T15105] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.3532'. OK Stopping acpid: [ 489.851819][T15115] netlink: 'syz.1.3543': attribute type 3 has an invalid length. [ 489.879002][T15115] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.3543'. [ 490.273413][T15129] netlink: 'syz.0.3538': attribute type 10 has an invalid length. [ 490.435917][T15127] netlink: 'syz.3.3537': attribute type 3 has an invalid length. [ 490.444905][T15127] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.3537'. [ 490.573835][T15134] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3540'. OK Stopping syslogd: [ 490.857470][T15142] netlink: 'syz.0.3541': attribute type 10 has an invalid length. stopped /sbin/syslogd (pid 5140) OK [ 491.149372][T15147] netlink: 'syz.3.3546': attribute type 3 has an invalid length. [ 491.157883][T15147] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.3546'. umount: can't remount debugfs read-only [ 492.278396][T15167] netlink: 'syz.2.3551': attribute type 10 has an invalid length. [ 492.770133][T15178] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3556'. [ 492.802817][T15180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.261346][T15187] netlink: 'syz.3.3559': attribute type 21 has an invalid length. [ 493.413279][T15186] delete_channel: no stack [ 494.328171][T15223] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3571'. [ 494.556428][T15227] netlink: 'syz.3.3573': attribute type 10 has an invalid length. [ 494.803381][T15236] FAULT_INJECTION: forcing a failure. [ 494.803381][T15236] name failslab, interval 1, probability 0, space 0, times 0 umount: sysfs bu[ 494.823513][T15236] CPU: 1 PID: 15236 Comm: syz.2.3577 Not tainted syzkaller #0 [ 494.832101][T15236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 494.842178][T15236] Call Trace: [ 494.845485][T15236] [ 494.848443][T15236] dump_stack_lvl+0x16c/0x230 [ 494.853164][T15236] ? show_regs_print_info+0x20/0x20 [ 494.858396][T15236] ? load_image+0x3b0/0x3b0 [ 494.862927][T15236] ? __might_sleep+0xe0/0xe0 [ 494.867551][T15236] ? __lock_acquire+0x7c80/0x7c80 [ 494.872619][T15236] should_fail_ex+0x39d/0x4d0 [ 494.877334][T15236] should_failslab+0x9/0x20 [ 494.881873][T15236] slab_pre_alloc_hook+0x59/0x310 [ 494.886932][T15236] ? mutex_lock_nested+0x20/0x20 [ 494.891935][T15236] ? bpf_xdp_link_attach+0x175/0x6d0 [ 494.897256][T15236] __kmem_cache_alloc_node+0x53/0x260 [ 494.902665][T15236] ? bpf_xdp_link_attach+0x175/0x6d0 [ 494.907983][T15236] kmalloc_trace+0x2a/0xe0 [ 494.912447][T15236] bpf_xdp_link_attach+0x175/0x6d0 [ 494.917644][T15236] ? dev_xdp_prog+0x100/0x100 [ 494.922387][T15236] ? __lock_acquire+0x7c80/0x7c80 [ 494.927474][T15236] ? __fget_files+0x44a/0x4d0 [ 494.932238][T15236] ? attach_type_to_prog_type+0x330/0x3a0 [ 494.937987][T15236] ? bpf_prog_attach_check_attach_type+0x2d8/0x440 [ 494.944529][T15236] link_create+0x3ff/0x720 [ 494.948983][T15236] __sys_bpf+0x479/0x800 [ 494.953278][T15236] ? bpf_link_show_fdinfo+0x350/0x350 [ 494.958702][T15236] ? lock_chain_count+0x20/0x20 [ 494.963592][T15236] __x64_sys_bpf+0x7c/0x90 [ 494.968039][T15236] do_syscall_64+0x55/0xb0 [ 494.972501][T15236] ? clear_bhb_loop+0x40/0x90 [ 494.977251][T15236] ? clear_bhb_loop+0x40/0x90 [ 494.981981][T15236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.987903][T15236] RIP: 0033:0x7f7e0bb8efc9 [ 494.992345][T15236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.011985][T15236] RSP: 002b:00007f7e0c959038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 495.020424][T15236] RAX: ffffffffffffffda RBX: 00007f7e0bde5fa0 RCX: 00007f7e0bb8efc9 [ 495.028421][T15236] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c [ 495.036425][T15236] RBP: 00007f7e0c959090 R08: 0000000000000000 R09: 0000000000000000 [ 495.044438][T15236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.052435][T15236] R13: 00007f7e0bde6038 R14: 00007f7e0bde5fa0 R15: 00007ffe01899418 [ 495.060461][T15236] sy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.184 closed by remote host. [ 495.222043][T15238] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3578'. [ 496.073557][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.172044][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.230643][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.350709][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 497.086982][ T12] bond0: (slave wlan1): Releasing backup interface [ 497.213663][ T12] hsr_slave_0: left promiscuous mode [ 497.219789][ T12] hsr_slave_1: left promiscuous mode [ 497.225728][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.235192][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.243173][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.250685][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.261565][ T12] bridge_slave_1: left allmulticast mode [ 497.267225][ T12] bridge_slave_1: left promiscuous mode [ 497.272979][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.284012][ T12] bridge_slave_0: left allmulticast mode [ 497.290623][ T12] bridge_slave_0: left promiscuous mode [ 497.296298][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.316674][ T12] veth1_macvtap: left promiscuous mode [ 497.322228][ T12] veth0_macvtap: left promiscuous mode [ 497.327784][ T12] veth1_vlan: left promiscuous mode [ 497.333145][ T12] veth0_vlan: left promiscuous mode [ 497.393500][T15243] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 497.405037][T15243] ACPI: PM: Preparing to enter system sleep state S5 [ 497.416989][T15243] kvm: exiting hardware virtualization [ 497.423200][T15243] reboot: Power down serialport: VM disconnected.